Web_Hacking/OSINT.md
2023-09-16 17:20:51 +03:30

4.1 KiB
Raw Blame History

OSINT

A curated list of awesome open source intelligence tools and resources. Open-source intelligence (OSINT) is intelligence collected from publicly available sources. In the intelligence community (IC), the term "open" refers to overt, publicly available sources (as opposed to covert or clandestine sources)

  • AnalyzeID - Find Other Websites Owned By The Same Person
  • NerdyData - Search engine for source code
  • SearchCode - Help find real world examples of functions, API's and libraries across 10+ sources
  • SourceGraph - Search code from millions of open source repositories
  • grep.app - Searches code from the entire github public repositories for a given specific string or using regular expression
  • Reposearch - Source code search engine that helps you find implementation details, example usages or just analyze code
  • PublicWWW - Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code

Specialty Search Engines

  • BeVigil - Search for assets like Subdomains, URLs, Parameters in mobile applications
  • Criminal IP - Cyber Threat Intelligence Search Engine and Attack Surface Management(ASM) platform
  • Internet Archive
  • Intelligence X
  • OCCRP Aleph - The global archive of research material for investigative reporting
  • Shodan - search engine for the IOT(Internet of Things) that allows you to search variety of servers that are connected to the internet using various searching filters
  • GrayhatWarfare
  • Netlas.io
  • Carrot2 - Organizes your search results into topics

Username Check

  • IDCrawl - Search for a username in popular social networks
  • NexFil - checks username from almost all social network sites
  • Sherlock - Search for a username in multiple platforms/websites
  • Snoop - Search for a nickname on the web (OSINT world)
  • WhatsMyName
  • Maigret - Collect a dossier on a person by username
  • Blackbird - Search a username across over 500+ websites

E-mail Search / E-mail Check

  • DeHashed - DeHashed helps prevent ATO with our extensive data set & breach notification solution. Match employee and consumer logins against the worlds largest repository of aggregated publicly available assets leaked from third-party breaches. Secure passwords before criminals can abuse stolen information, and protect your enterprise
  • leak lookup
  • Holehe
  • Hunter - Hunter lets you find email addresses in seconds and connect with the people that matter for your business
  • Snov.io - Find email addresses on any website
  • minelead

Domain and IP Research