OSINT

A research site showing DNS records, sites sharing an IP, mail/whois data and history for a domain, IP or autonomous-system number. in Networking & Sysadmin →

A toolbox of dozens of DNS and domain queries in one place: reverse IP lookup, DNS history, whois, a port scanner, domain-to-IP mapping. in Networking & Sysadmin →

Country-by-country URL lists used to measure censorship — the sites to test for blocking. in Privacy & Personal Security →

A guide gathering OSINT techniques the usual tool lists skip — blockchain tracing, metadata, unconventional sources. in Offence, Defence & OSINT →

A list of asset discovery tools and methods — subdomain enumeration, certificate transparency, ASN lookups. in Offence, Defence & OSINT →

A category-by-category list of open-source intelligence tools and resources (people, domains, social media, geolocation). in Offence, Defence & OSINT →

A profiler that identifies the CMS, analytics, hosting and JavaScript technologies a site uses from its address. in Offence, Defence & OSINT →

Passive reconnaissance for a domain: subdomains, DNS records and a host map, with no scan of the target itself. in Offence, Defence & OSINT →

A service enumeration script automating the command sequence you would otherwise run by hand during reconnaissance. in Offence, Defence & OSINT →

A GitBook site gathering OSINT web-resource and tool lists plus blog posts, with a separate page of newly added resources per year. in Offence, Defence & OSINT →

An OSINT guide of 450+ tools, methods and ethics/legal notes across 35 sections, which also publishes a link-audit report. in Offence, Defence & OSINT →

A list that sorts OSINT resources by 193 countries and territories. in Offence, Defence & OSINT →

A tree of open-source intelligence tools organised by target — email, username, domain, image. in Offence, Defence & OSINT →

An AI-assisted tool that expands queries and summarises results in dark web research. in Offence, Defence & OSINT →

A hand-curated guide to links and resources split by topic for SOC, pentesting, DFIR, threat intelligence and AppSec. in Offence, Defence & OSINT →

A search engine for internet-facing devices, servers and services, indexed by their service banners. in Offence, Defence & OSINT →

A username hunter that searches one handle across hundreds of sites. in Offence, Defence & OSINT →

A broad categorised OSINT link board, updated more frequently than the framework so fewer of its tools are dead. in Offence, Defence & OSINT →

A reverse image search that finds where an image appears online and which copy is oldest. in Offence, Defence & OSINT →

A live IOC feed that collects malicious URLs, domains, IPs and hashes shared by the infosec community on Twitter/X, served as CSV/JSON/RSS/API. in Offence, Defence & OSINT →

A scanning service that opens a URL in a real browser and records every request the page makes, the domains it contacts, a screenshot and the DOM. in Offence, Defence & OSINT →

Map and search interface for volunteer-collected worldwide Wi-Fi, Bluetooth and cell-tower observations. in Offence, Defence & OSINT →

A hand-sorted dump of one person’s GitHub stars — about 320 repositories filed under wikis, digital gardens… in Lists, Directories & Discovery →