Curated collection of open-source intelligence frameworks, databases, and reference materials for investigators.
The definitive collection of OSINT tools organized by category — a comprehensive visual map of free tools for gathering information from open sources.
osintframework.com →A curated list of amazingly awesome OSINT tools, blogs, and resources maintained by the open-source community on GitHub.
github.com/jivoi/awesome-osint →Michael Bazzell's comprehensive OSINT resource hub with tools, workbooks, and methodology guides for professional investigators.
inteltechniques.com →Educational platform for learning OSINT techniques with practical exercises, challenges, and structured learning paths.
yourdigitalshadow.com →Search engine for internet-connected devices. Discover exposed servers, webcams, industrial control systems, and infrastructure vulnerabilities.
shodan.io →Internet-wide scanning platform for discovering and monitoring hosts, websites, and certificates across the public internet.
censys.io →Chinese cyberspace search engine for discovering internet-connected devices and web services worldwide.
zoomeye.org →Search across half a million public Git repositories. Find code patterns, leaked credentials, and API key exposures.
grep.app →Internet Archive's digital time machine. Access historical snapshots of websites and track changes over time.
web.archive.org →Historical DNS data, domain intelligence, and IP address exploration for infrastructure mapping and reconnaissance.
securitytrails.com →Check if your email or phone has been involved in a data breach. The largest repository of breached credential data.
haveibeenpwned.com →Multi-engine malware scanning and threat intelligence platform. Analyze files, URLs, IPs, and domains for threats.
virustotal.com →Open Threat Exchange — community-driven threat intelligence sharing platform with IOCs, pulses, and threat reports.
otx.alienvault.com →National Vulnerability Database — comprehensive repository of vulnerability data including CVE entries, CVSS scores, and technical details.
nvd.nist.gov →Check username availability across hundreds of social networks and domains simultaneously.
namechk.com →Web-based username enumeration tool that checks for the existence of accounts across numerous platforms.
whatsmyname.app →Find and verify professional email addresses associated with any domain for corporate intelligence gathering.
hunter.io →Advanced international phone number information gathering framework with carrier and location intelligence.
github.com/sundowndev/phoneinfoga →Satellite and aerial imagery platform for geospatial analysis, location verification, and environmental reconnaissance.
earth.google.com →Collaborative, open-source mapping platform with detailed geographic data contributed by a global community.
openstreetmap.org →Real-time global flight tracking with historical data, aircraft information, and airport intelligence.
flightradar24.com →Real-time AIS vessel tracking covering ports, shipping routes, and maritime intelligence worldwide.
marinetraffic.com →Globally-accessible knowledge base of adversary tactics and techniques based on real-world observations.
attack.mitre.org →SANS Institute's collection of OSINT training materials, webcasts, and certification paths for intelligence analysts.
sans.org →Independent investigative journalism collective specializing in open-source investigation techniques and fact-checking.
bellingcat.com →Open Web Application Security Project — free resources for improving software security including testing guides and cheat sheets.
owasp.org →