Web_Hacking/OSINT.md

88 lines
4.1 KiB
Markdown
Raw Normal View History

2023-09-16 16:11:03 +03:00
# OSINT
A curated list of awesome open source intelligence tools and resources. [Open-source intelligence (OSINT)](https://en.wikipedia.org/wiki/Open-source_intelligence) is intelligence collected from publicly available sources. In the intelligence community (IC), the term "open" refers to overt, publicly available sources (as opposed to covert or clandestine sources)
## File Search
* [File Listing](https://filelisting.com/)
* [file pursuit](https://filepursuit.com/)
* [de🔸digger](https://www.dedigger.com/)
* [cl1p](https://cl1p.net/) - Find information that has been uploaded
* [controlc](https://controlc.com/) - Find information that has been uploaded
* [doxbin](https://doxbin.net/) - A dox style pastebin ran by hackers
## Code Search
* [AnalyzeID](https://analyzeid.com/) - Find Other Websites Owned By The Same Person
* [NerdyData](https://www.nerdydata.com/) - Search engine for source code
* [SearchCode](https://searchcode.com/) - Help find real world examples of functions, API's and libraries across 10+ sources
* [SourceGraph](https://sourcegraph.com/) - Search code from millions of open source repositories
* [grep.app](https://grep.app/) - Searches code from the entire github public repositories for a given specific string or using regular expression
* [Reposearch](https://codefinder.org/) - Source code search engine that helps you find implementation details, example usages or just analyze code
* [PublicWWW](https://publicwww.com/) - Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code
## Specialty Search Engines
* [BeVigil](https://bevigil.com/) - Search for assets like Subdomains, URLs, Parameters in mobile applications
* [Criminal IP](https://www.criminalip.io/) - Cyber Threat Intelligence Search Engine and Attack Surface Management(ASM) platform
* [Internet Archive](https://archive.org/)
* [Intelligence X](https://intelx.io/)
* [OCCRP Aleph](https://aleph.occrp.org/) - The global archive of research material for investigative reporting
* [Shodan](https://www.shodan.io/) - search engine for the IOT(Internet of Things) that allows you to search variety of servers that are connected to the internet using various searching filters
* [GrayhatWarfare](https://grayhatwarfare.com/)
* [Netlas.io](https://app.netlas.io/)
* [Carrot2](https://search.carrot2.org/) - Organizes your search results into topics
## Username Check
* [IDCrawl](https://www.idcrawl.com/username) - Search for a username in popular social networks
* [NexFil](https://github.com/thewhiteh4t/nexfil) - checks username from almost all social network sites
* [Sherlock ](https://github.com/sherlock-project/sherlock) - Search for a username in multiple platforms/websites
* [Snoop](https://github.com/snooppr/snoop/blob/master/README.en.md) - Search for a nickname on the web (OSINT world)
* [WhatsMyName](https://whatsmyname.app/)
* [Maigret ](https://github.com/soxoj/maigret) - Collect a dossier on a person by username
* [Blackbird](https://github.com/p1ngul1n0/blackbird) - Search a username across over 500+ websites
## E-mail Search / E-mail Check
* [DeHashed](https://dehashed.com/) - DeHashed helps prevent ATO with our extensive data set & breach notification solution. Match employee and consumer logins against the worlds largest repository of aggregated publicly available assets leaked from third-party breaches. Secure passwords before criminals can abuse stolen information, and protect your enterprise
2023-09-16 16:50:51 +03:00
* [leak lookup](https://leak-lookup.com/account/login)
2023-09-16 16:11:03 +03:00
* [Holehe](https://github.com/megadose/holehe)
* [Hunter](https://hunter.io/) - Hunter lets you find email addresses in seconds and connect with the people that matter for your business
* [Snov.io](https://snov.io/email-finder) - Find email addresses on any website
2023-09-16 16:50:51 +03:00
* [minelead](https://minelead.io/)
2023-09-16 16:11:03 +03:00
## Domain and IP Research
* [DNSDumpster](https://dnsdumpster.com/) - is a website that will help you discover hosts related to a specific domain
* [DNSViz](https://dnsviz.net/)
* [Pentest-Tools.com ](https://pentest-tools.com/information-gathering/google-hacking)
* [viewdns](https://viewdns.info/)
* [urlscan](https://urlscan.io/)
* [wigle](https://wigle.net/)