🕵️ OSINT Tools for gathering information and actions forensics 🕵️
This page lists names, links and short descriptions. The original list on GitHub is the source and belongs to its authors.
Gather real-time intelligence from Social media, Cameras, Internet of Things or Crimes and Amber Alerts In addition search for Wifi networks and look for planes, vessels, trains and city traffic
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous mon
All-in-one OSINT tool for analysing any website.
Self-hosted web app (one minute Docker installation) for gathering information about IPs, Domains, URLs, Emails, Hashes, CVEs and more.
Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to…
The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.
A collection of most useful osint tools for SOCINT.
Self-hosted web app (one minute Docker installation) for gathering information about IPs, Domains, URLs, Emails, Hashes, CVEs and more.
Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension
Validate ProtonMail email address, Gather info about ProtonMail user email or PGP Key, Search on the dark web target digital footprints, Check IP to belong to ProtonVPN
A unified command line interface and python library for using BeVigil OSINT API to search for assets such as subdomains, URLs, applications indexed from mobile applications.
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
Perform different kinds of acquisitions on iOS devices
a software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
LinkedIn enumeration to extract employee names for email generation.
Toolkit of 51 modules (for collecting domain/IP information - cookie_brute, wappalyzer, sslcert, leakix, urlscan, wayback (full list in the picture)
Perform different kinds of acquisitions on iOS devices
A simple script to read and delete metadata from images and ACVH videos.
- Search username across 200+ sites; - API username check (Protonmail, PlayerDB, Hackthebox etc); - Check archived Twitter accounts.
Tool to scrape names and usernames from large friend lists on Facebook, without being rate limited.
Offensive Google framework to extract information from Google accounts.
Quick #go tool to automate work with EXIF data
Moriarty Project is a powerful web based phone number investigation tool. It has 6 features and it allows you to choose either all features, or the features you like
Enumerate directories, files, subdomains or parameters without leaving evidence on the target's serve
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Hayabusa is a Windows event log fast forensics timeline generator and threat hunting tool created by the Yamato Security group in Japan.
a collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices
IRIS is a web collaborative platform for incident response analysts allowing to share investigations at a technical level.
A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power
#OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API
Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask
Repository with information related to Cloud Osint
A runtime security and forensics tool for Linux which uses eBPF technology to trace the system and applications at runtime, and analyze collected events to detect suspicious behavioral patterns.
OSINT tool with multiple modules and a telegram scraper.
Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
a tool that allows you to extract information from instagrams accounts such as s, phone numbers and more
A research-grade suite of tools for intelligence gathering & target mapping with both active and passive(100+ modules) intelligence gathering capabilities.
osint toolkit for gathering information about domains, phone numbers and social media accounts
Universal Osint Toolkit
Open source tool that searches newly registered domain feeds to find typosquatting, IDN homograph, doppelganger and bitsquatting domains impersonating a given brand or keyword.
Webapp based on OpenStreetMap and the official Telegram library to find the position of nearby users.
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
Collect information about twitter and Instagram accounts
Extracts and interprets forensic artifacts from disk images of Docker Host systems
Dump the contents of the StateModel#.archive files located in /private/var/mobile/Library/Caches/com.apple.routined/
“A collection of several hundred online tools for OSINT”: domain, IP, email, username and social-network lookups useful for unmasking fraud and abuse.
Infoga - Email OSINT.
Information gathering tool - OSINT.
RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of compromise.
IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by p
Turbinia is an open-source framework for deploying, managing, and running forensic workloads on cloud platforms
Retrieve IP Geolocation information.
Tool and library to remotely hack RTSP streams from surveillance cameras.
All in one PowerShell-based platform to perform live hard disk forensic analysis.
Face recognition library that recognizes and manipulates faces from Python or from the command line.
awesome-selfhosted/awesome-selfhosted
A list of Free Software network services and web applications which can be hosted on your own servers
edoardottt/awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
lissy93/awesome-privacy
🦄 A curated list of privacy & security-focused software and services
vavkamil/awesome-bugbounty-tools
A curated list of various bug bounty tools
ashishb/android-security-awesome
A collection of android security related resources
qazbnm456/awesome-web-security
🐶 A curated list of Web Security materials and resources.