Web_Hacking/OSINT.md
2023-09-16 17:35:51 +03:30

89 lines
4.2 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# OSINT
A curated list of awesome open source intelligence tools and resources. [Open-source intelligence (OSINT)](https://en.wikipedia.org/wiki/Open-source_intelligence) is intelligence collected from publicly available sources. In the intelligence community (IC), the term "open" refers to overt, publicly available sources (as opposed to covert or clandestine sources)
## File Search
* [File Listing](https://filelisting.com/)
* [file pursuit](https://filepursuit.com/)
* [de🔸digger](https://www.dedigger.com/)
* [cl1p](https://cl1p.net/) - Find information that has been uploaded
* [controlc](https://controlc.com/) - Find information that has been uploaded
* [doxbin](https://doxbin.net/) - A dox style pastebin ran by hackers
## Code Search
* [AnalyzeID](https://analyzeid.com/) - Find Other Websites Owned By The Same Person
* [NerdyData](https://www.nerdydata.com/) - Search engine for source code
* [SearchCode](https://searchcode.com/) - Help find real world examples of functions, API's and libraries across 10+ sources
* [SourceGraph](https://sourcegraph.com/) - Search code from millions of open source repositories
* [grep.app](https://grep.app/) - Searches code from the entire github public repositories for a given specific string or using regular expression
* [Reposearch](https://codefinder.org/) - Source code search engine that helps you find implementation details, example usages or just analyze code
* [PublicWWW](https://publicwww.com/) - Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code
## Specialty Search Engines
* [BeVigil](https://bevigil.com/) - Search for assets like Subdomains, URLs, Parameters in mobile applications
* [Criminal IP](https://www.criminalip.io/) - Cyber Threat Intelligence Search Engine and Attack Surface Management(ASM) platform
* [Internet Archive](https://archive.org/)
* [Intelligence X](https://intelx.io/)
* [OCCRP Aleph](https://aleph.occrp.org/) - The global archive of research material for investigative reporting
* [Shodan](https://www.shodan.io/) - search engine for the IOT(Internet of Things) that allows you to search variety of servers that are connected to the internet using various searching filters
* [GrayhatWarfare](https://grayhatwarfare.com/)
* [Netlas.io](https://app.netlas.io/)
* [Carrot2](https://search.carrot2.org/) - Organizes your search results into topics
## Username Check
* [IDCrawl](https://www.idcrawl.com/username) - Search for a username in popular social networks
* [NexFil](https://github.com/thewhiteh4t/nexfil) - checks username from almost all social network sites
* [Sherlock ](https://github.com/sherlock-project/sherlock) - Search for a username in multiple platforms/websites
* [Snoop](https://github.com/snooppr/snoop/blob/master/README.en.md) - Search for a nickname on the web (OSINT world)
* [WhatsMyName](https://whatsmyname.app/)
* [Maigret ](https://github.com/soxoj/maigret) - Collect a dossier on a person by username
* [Blackbird](https://github.com/p1ngul1n0/blackbird) - Search a username across over 500+ websites
## E-mail Search / E-mail Check
* [DeHashed](https://dehashed.com/) - DeHashed helps prevent ATO with our extensive data set & breach notification solution. Match employee and consumer logins against the worlds largest repository of aggregated publicly available assets leaked from third-party breaches. Secure passwords before criminals can abuse stolen information, and protect your enterprise
* [leak lookup](https://leak-lookup.com/account/login)
* [Holehe](https://github.com/megadose/holehe)
* [Hunter](https://hunter.io/) - Hunter lets you find email addresses in seconds and connect with the people that matter for your business
* [Snov.io](https://snov.io/email-finder) - Find email addresses on any website
* [minelead](https://minelead.io/)
## Domain and IP Research
* [Subdomain Center](https://www.subdomain.center/)
* [DNSDumpster](https://dnsdumpster.com/) - is a website that will help you discover hosts related to a specific domain
* [DNSViz](https://dnsviz.net/)
* [Pentest-Tools.com ](https://pentest-tools.com/information-gathering/google-hacking)
* [viewdns](https://viewdns.info/)
* [urlscan](https://urlscan.io/)
* [wigle](https://wigle.net/)