Kirchner.io
AI and systems / 41 min read

OSINT

Open Source Intelligence (OSINT) is the collection and analysis of information that is gathered from public or open sources.

reading surface

Technology

words
8,089
sections
56
references
856
compendium links
24
Opens in a new tab.

First try OSINT Framework for a nice tree of tools.

Awesome OSINT

OSINT is not just searching harder. It is the disciplined collection, preservation, comparison, and interpretation of public or openly accessible evidence. Good OSINT work keeps the source, timestamp, query path, screenshot or archive state, uncertainty, and inference separate. A tool list is only useful when it supports that chain of custody.

For this compendium, OSINT connects data sources, maps, domains, graphs, history, language, anomalies, overlanding, and data visualization: identities, places, organizations, artifacts, routes, and claims all become more reliable when they can be traced through independent public records.

An OSINT note should keep public evidence separate from private inference. Record source URL, archive URL, query, timestamp, observed text, media hash when available, language, translation, geospatial context, and confidence. That structure lets semantic web style identifiers and graph edges help without turning a lead into a conclusion.

The overlap with hacker culture is methodological rather than permissive: precise commands, reproducible collection, careful logs, and explicit authorization boundaries make public evidence more useful without normalizing intrusion.

For overlanding, OSINT discipline is useful when a trip report depends on public closure notices, route discussions, weather records, satellite imagery, or geotagged photos. The field note should preserve the public source path without turning private locations or fragile places into a public target.

The practical graph layer should connect each OSINT artifact to data storage, standards, photography, blogs, GitHub, Python, libraries, rules of thumb, SEO, symbols, and human-machine interaction when those links explain collection, preservation, search visibility, tooling, visual evidence, interface behavior, or interpretive caution.

Please read the upstream Awesome OSINT contributing guide if you wish to add tools or resources to that source list.

This list was taken partially taken from i-inteligence's OSINT Tools and Resources Handbook.

Thanks to our main contributors jivoi EK_ & spmedia

The main search engines used by users.

  • Ask - Ask something and get a answer.
  • Bing - Microsoft´s search engine.
  • Brave - a private, independent, and transparent search engine.
  • DuckDuckGo - an Internet search engine that emphasizes protecting searchers' privacy.
  • Goodsearch - a search engine for shopping deals online.
  • Google Search - Most popular search engine.
  • Instya - You can searching shopping sites, dictionaries, answer sites, news, images, videos and much more.
  • Impersonal.me
  • Lycos - A search engine for pictures, videos, news and products.
  • Mojeek - A growing independent search engine which does not track you.
  • Search.com - Search the Web by searching the best engines from one place.
  • Wolfram Alpha - Wolfram Alpha is a computational knowledge engine (answer engine) developed by Wolfram Alpha. It will compute expert-level answers using Wolfram’s breakthrough algorithms, knowledgebase and AI technology.
  • Yahoo! Search - The search engine that helps you find exactly what you're looking for.
  • YOU - AI search engine.

Main National Search Engines

Permalink to Main National Search Engines

Localized search engines by country.

Lesser known and used search engines.

Search engines for specific information or topics.

Visual Search and Clustering Search Engines

Permalink to Visual Search and Clustering Search Engines

Search engines that scrape multiple sites (Google, Yahoo, Bing, Goo, etc) at the same time and return results.

Find websites that are similar. Good for business competition research.

Search for data located on PDFs, Word documents, presentation slides, and more.

Search for all kind of files.

  • de digger - is a website that allows you to find any types of files that are publicly avilable in a Google Drive.
  • File Search Engine
  • FileChef
  • FilePursuit
  • NAPALM FTP Indexer
  • SearchFiles.de

Find information that has been uploaded to Pastebin & alternative pastebin-type sites

Search by website source code

  • AnalyzeID - Find Other Websites Owned By The Same Person
  • Code Finder - The ultimate search engine for finding GitHub repositories
  • grep.app - Searches code from the entire github public repositories for a given specific string or using regular expression.
  • NerdyData - Search engine for source code.
  • PublicWWW
  • Reposearch
  • SearchCode - Help find real world examples of functions, API's and libraries across 10+ sources.
  • SourceGraph - Search code from millions of open source repositories.

Real-Time Search, Social Media Search, and General Social Media Tools

Permalink to Real-Time Search, Social Media Search, and General Social Media Tools
  • Facebook Friend List Scraper - Tool for scraping large Facebook friend lists without being rate-limited.
  • Facebook Search
  • Fanpage Karma
  • Fb-sleep-stats - Use Facebook to track your friends’ sleeping habits.
  • Find my Facebook ID - To find your Facebook personal numeric ID for facebook graph API operations, fb:admins, social plugins.
  • haveibeenzuckered - A large dataset containing 533 million Facebook accounts was made available for download. The data was obtained by exploiting a vulnerability that was, according to Facebook, corrected in August 2019. Check if a telephone number is present within the Facebook data breach.
  • Lookup-ID.com - Looking for your Facebook profile ID / Group ID / Page ID.
  • SearchIsBack
  • Wolfram Alpha Facebook Report
  • Iconosquare
  • Osintgram - Osintgram offers an interactive shell to perform analysis on Instagram account of any users by its nickname.
  • Picodash - Find Instagram Target Audience and Influencers
  • Sterra - Instagram OSINT tool to export and analyse followers | following with their details
  • Toutatis - a tool that allows you to extract information from instagrams accounts such as s, phone numbers and more

Tools to help discover more about a reddit user or subreddit.

  • Imgur - The most popular image hosting website used by redditors.
  • Mostly Harmless - Mostly Harmless looks up the page you are currently viewing to see if it has been submitted to reddit.
  • Reddit Archive - Historical archives of reddit posts.
  • Reddit Suite - Enhances your reddit experience.
  • Reddit User Analyser - reddit user account analyzer.
  • Subreddits - Discover new subreddits.
  • Reddit Comment Search - Analyze a reddit users by comment history.
  • Universal Scammer List - This acts as the website-portion for the subreddit /r/universalscammerlist. That subreddit, in conjuction with this website and a reddit bot, manages a list of malicious reddit accounts and minimizes the damage they can deal. This list is referred to as the "USL" for short.
  • Reddit Comment Lookup - Search for reddit comments by reddit username.

Perform various OSINT on Russian social media site VKontakte.

  • Дезертир
  • Barkov.net
  • Report Tree
  • VK5
  • VK Community Search
  • VK Parser - A tool to search for a target audience and potential customers.
  • VK People Search
  • VK.watch
  • Tumblr Search
  • FTL - Browser plugin that finds emails of people's profiles in LinkedIn.
  • Telegago - A Google Advanced Search specifically for finding public and private Telegram Channels and Chatrooms.
  • Telegram Nearby Map - Webapp based on OpenStreetMap and the official Telegram library to find the position of nearby users.
  • BlogSearchEngine
  • Notey - Blog post search engine.
  • Sphere
  • Twingly
Permalink to Forums and Discussion Boards Search
  • Blackbird - Search a username across over 500+ websites.
  • CheckUser - search username across social networks
  • Digital Footprint Check - Check for registered username on 100s of sites for free.
  • IDCrawl - Search for a username in popular social networks.
  • Maigret - Collect a dossier on a person by username.
  • Name Chk - Check over 30 domains and more than 90 social media account platforms.
  • Name Checkr - checks a domain and username across many platforms.
  • Name Checkup - is a search tool that allows you to check the avilability of a givrn username from all over the social media. Inaddition it also sllows you to check the avilability of a given domain name.
  • NameKetchup - checks domain name and username in popular social media sites and platforms.
  • NexFil - checks username from almost all social network sites.
  • Seekr A multi-purpose all in one toolkit for gathering and managing OSINT-Data with a neat web-interface. Can be used for note taking and username checking.
  • Sherlock - Search for a username in multiple platforms/websites.
  • Snoop - Search for a nickname on the web (OSINT world)
  • User Search - Find someone by username, email, phone number or picture across Social Networks, Dating Sites, Forums, Crypto Forums, Chat Sites and Blogs, 3000+ sites Supported!
  • User Searcher - User-Searcher is a powerful and free tool to help you search username in 2000+ websites.
  • WhatsMyName - check for usernames across many different platforms.
  • 192 (UK) - Search by person, business, address. Limited free info, premium data upsell.
  • 411 (US) - Search by person, phone number, address, and business. Limited free info, premium data upsell.
  • Ancestry - Premium data, free trial with credit card.
  • BeenVerified
  • Black Book Online - Free. Nationwide directory of public record lookups.
  • Canada411 - Search by person, phone number, and business. Free.
  • Internet Archive Yearbooks - Digitized yearbooks and school publications for historical people research.
  • CrunchBase - Business information database, with a focus on investment, acquisition, and executive data. Ancillary focus on market research and connecting founders and investors.
  • FaceCheck.ID - Search the internet by face.
  • Family Search - Popular genealogy site. Free, but registration requried. Funded by The Church Of Jesus Christ of Latter-day Saints.
  • FamilyTreeNow - Research family and geneology, no registration required, can search addresses, phone numbers, and email addresses as well as associations.
  • Federal Bureau of Prisons - Inmate Locator (US) - Search federal inmates incarcerated from 1982 to the present.
  • Fold3 (US Military Records) - Search military records. Search filters limited with free access. Premium access requires subscription.
  • Genealogy Bank - Premium data, free trial with credit card.
  • Genealogy Links - Genealogy directory with over 50K links.
  • Homemetry - Reverse address search and allows searching for properties for sale/rent.
  • JailBase - is an information site that allows you to search for arrested persons you might know, and even get notified if someone you know gets arrested.
  • Judyrecords - Free. Nationwide search of 400 million+ United States court cases.
  • Kompass - Business directory and search.
  • OpenSanctions - Information on sanctions and public office holders.
  • Reunion - People search. Limited free info, premium data upsell.
  • SearchBug - People search. Limited free info, premium data upsell.
  • Spokeo - People search. Limited free info, premium data upsell.
  • The National Archives (UK) - Search UK national archives.
  • UniCourt - Limited free searches, premium data upsell. Nationwide search of 100 million+ United States court cases.
  • VineLink - Inmate search and notification service for victims of crime, linked to multiple correctional facilities' booking systems in the U.S.
  • Voter Records - Free political research tool to study more than 100 Million US voter records.
  • White Pages (US) - People search. Limited free info, premium data upsell.
  • ZabaSearch
  • DeHashed - DeHashed helps prevent ATO with our extensive data set & breach notification solution. Match employee and consumer logins against the world’s largest repository of aggregated publicly available assets leaked from third-party breaches. Secure passwords before criminals can abuse stolen information, and protect your enterprise.
  • Email Address Validator - Improve deliverability, reduce bounce rates, prevent fraud and minimize funnel leaks.
  • Email Format - is a website that allows you to find email address formats used by different companies.
  • Email Permutator - a powerful tool designed to aid professionals in generating a range of potential email addresses for a specific contact.
  • EmailHippo - is an email address verification platform that will check whether a given email address exist or not.
  • Ghunt - Investigate Google emails and documents.
  • Gitrecon - Node.js tool to scan GitHub repositories for exposed email addresses and names.
  • h8mail - Password Breach Hunting and Email OSINT, locally or using premium services. Supports chasing down related email.
  • Have I Been Pwned - Search across multiple data breaches to see if your email address has been compromised.
  • Holehe - allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
  • Hunter - Hunter lets you find email addresses in seconds and connect with the people that matter for your business.
  • LeakCheck - Data Breach Search Engine with 7.5B+ entries collected from more than 3000 databases. Search by e-mail, username, keyword, password or corporate domain name.
  • MailTester - hunt for emails and improve your email deliverability
  • mxtoolbox - Free online tools to investigate/troubleshoot email server issues.
  • Peepmail - is a tool that allows you to discover business email addresses for users, even if their email address may not be publicly available or shared.
  • Pipl - a provider of identity solutions.
  • Reacher - Real-time email verification API, written in Rust, 100% open-source.
  • Snov.io - Find email addresses on any website.
  • ThatsThem - Reverse Email Lookup.
  • Toofr - Find Anyone’s Email Address in Seconds.
  • Verify Email - The fastest and most accurate email verification tool.
  • VoilaNorbert - Find anyone's contact information for lead research or talent acquisition.
  • CallerID Test - Get caller ID and telco carrier information back from a phone number.
  • EmobileTracker.com - a service specifically designed to Track Mobile Number, Location on Google Map including information such as the owner's Name,Location,Country,Telecom provider.
  • Numverify - Phone number validation and carrier-style lookup API.
  • Infobel - Search 164+ million records across 73 countries for companies and individuals. Find places, local service providers, their contact details, reviews, opening hours and more.
  • Phone Validator - Pretty accurate phone lookup service, particularly good against Google Voice numbers.
  • PhoneInfoga - Advanced information gathering & OSINT framework for phone numbers.
  • Reverse Phone Check - Look up names, addresses, phone numbers, or emails and anonymously discover information about yourself, family, friends, or old schoolmates. Powered by infotracer.com
  • Reverse Phone Lookup - Detailed information about phone carrier, region, service provider, and switch information.
  • Spy Dialer - Get the voicemail of a cell phone & owner name lookup.
  • Sync.ME - a caller ID and spam blocker app.
  • Truecaller - Global reverse phone number search.
  • Twilio - Look up a phone numbers carrier type, location, etc. Twilio offers free accounts that come with credits you can use with their API. Each lookup is only ~$0.01-$0.02 typically on US and CAN numbers.

Vehicle / Automobile Research

Permalink to Vehicle / Automobile Research
  • FaxVIN - Vehicle History Reports. A license plate lookup tool that returns info like VIN, make & model of vehicle, age, and numerous other details.
  • EpicVIN - Vehicle reports are compiled from various data sources, including historical accident records from state agencies and other entities like NMVTIS. License plate lookup that returns VIN and car millage.
  • Accuranker
  • ahrefs - A tool for backlink research, organic traffic research, keyword research, content marketing & more.
  • Azure Tenant Resolution by PingCastle - Search for Azure Tenant using its domain name or its ID
  • Bing Webmaster Tools
  • BuiltWith - is a website that will help you find out all the technologies used to build a particular websites.
  • Central Ops
  • Dedicated or Not
  • DNS History
  • DNSDumpster - is a website that will help you discover hosts related to a specific domain.
  • DNSStuff
  • DNSViz
  • Domain Crawler
  • Domain Dossier
  • Domain Tools - Whois lookup and domain/ip historical data.
  • Easy whois
  • Exonera Tor - A database of IP addresses that have been part of the Tor network. It answers the question whether there was a Tor relay running on a given IP address on a given date.
  • Follow.net
  • GraphyStories
  • Hudson Rock - is a free cybercrime intelligence toolkit to check exposure in Infostealer malware infection.
  • HypeStat
  • Infosniper
  • intoDNS
  • IP 2 Geolocation
  • IP 2 Location
  • IP Checking
  • IP Location - is used for mapping of an IP address or MAC address to the real-world geographic location of an Internet-connected computing or a mobile device.
  • IPFingerprints - is used to find the approximate geographic location of an IP address along with some other useful information including ISP, TimeZone, Area Code, State.
  • IPVoid - IP address toolset.
  • Kloth
  • Majestic - Find out who links to your website.
  • MaxMind
  • Netcraft Site Report - is an online database that will provide you a report with detail information about a particular website and the history associated with it.
  • NetworkTools
  • Open Site Explorer
  • OpenLinkProfiler
  • PageGlimpse
  • Pentest-Tools.com - uses advanced search operators (Google Dorks) to find juicy information about target websites.
  • PhishStats
  • Pulsedive
  • Quantcast
  • Quick Sprout
  • RedirectDetective
  • Remote DNS Lookup
  • Robtex - is an IP address and domain name based researching websites that offers multiple services such as Reverse DNS Lookup, Whois, and AS Macros.
  • SameID
  • SecurityTrails - API to search current and historical DNS records, current and historical WHOIS, technologies used by sites and whois search for phone, email, address, IPs etc.
  • SEMrush
  • SEO Chat Tools
  • SEOTools for Excel
  • Similar Web - Compare any website traffic statistics & analytics.
  • SmallSEOTools
  • Squatm3gator - Enumerate available domains generated modifying the original domain name through different cybersquatting techniques
  • StatsCrop
  • Threat Jammer - Risk scoring service from curated threat intelligence data.
  • TinyScan - Another powerful URL scan tool that provides comprehensive information about any given URL. Get insights into IP address, location, screenshots, technology stack, performance metrics, and more.
  • urlDNA - Unleash website insights! urldna.io analyzes url, monitors brands and track phishing sites.
  • urlQuery
  • urlscan - is a free service to scan and analyse websites.
  • URLVoid - Analyzes a website through multiple blacklist engines and online reputation tools to facilitate the detection of fraudulent and malicious websites.
  • Validin - Website and API to search current and historical DNS records for free
  • Verisign
  • ViewDNS.info
  • Virus Total - Analyse suspicious domains, IPs URLs and files to detect malware and other breaches
  • w3snoop - is a website that gives you a free and comprehensive report about a specific website.
  • Web-Check - All-in-one tool for viewing website and server meta data.
  • WebMeUp - is the Web's freshest and fastest growing backlink index, and the primary source of backlink data for SEO PowerSuite.
  • Website Informer
  • WebsiteTechMiner.py - automates gathering website profiling data into a CSV from the "BuiltWith" or "Wappalyzer" API for tech stack information, technographic data, website reports, website tech lookups, website architecture lookups, etc.
  • IPVoid
  • Who.is - Domain whois information.
  • ARIN RDAP Search - official lookup for registration data in ARIN's database.
  • WhoIsHostingThis
  • WhoisMind
  • Whoisology
  • WhoIsRequest
  • WiGLE - Wi-fi "wardriving" database. Contains a global map containing crowdsourced information on the location, name, and other properties of wi-fi networks. Software available to download to contribute data to the public infoset.
  • You Get Signal

Keywords Discovery and Research

Permalink to Keywords Discovery and Research

Web History and Website Capture

Permalink to Web History and Website Capture
  • Archive.is - is a website that allows you to archive a snapshot of you websites that will always remains online evenif the original page disappears.
  • BlackWidow
  • CashedPages
  • CachedView
  • stored.website
  • Wayback Machine - Explore the history of a website.
  • Wayback Machine Archiver
  • waybackpy - Python package & CLI tool that interfaces the Wayback Machine APIs.

Language work in OSINT should preserve the original text, the translation path, and any uncertain names or transliterations. Use machine translation for triage, then keep screenshots or archived text beside the translated interpretation so later review can distinguish source wording from analyst inference.

  • Baidu Images
  • Betaface
  • Bing Images
  • Clarify
  • Dupli Checker - You can search for an image by uploading + with URL or typing the keyword or any word you want to explore related to images.
  • FaceCheck.ID - Facial recognition search engine.
  • Flickr
  • GeoSpyer - Python tool using Graylark's AI-powered geo-location service to uncover the location where photos were taken.
  • Google Image
  • Google Lens
  • Image Identification Project
  • Image Raider - is our reverse image search tool for completing individual searches. When you upload an image to this page, we'll scour the internet to find its source and all of the other pages where it has been posted.
  • Lycos Image Search
  • PhotoBucket
  • PicTriev - a face search engine.
  • PimEyes - an online face search engine that goes through the Internet to find pictures containing given faces.
  • Pixsy - Take back control of your images. See where & how your images are being used online!
  • Search4faces - a service for searching people on the Internet by photo.
  • TinEye - Reverse image search engine.
  • Yandex Images

Video Search and Other Video Tools

Permalink to Video Search and Other Video Tools
  • Bing Videos
  • Clarify
  • Clip Blast
  • DailyMotion
  • Deturl - Download a YouTube video from any web page.
  • DownloadHealper - Download any video from any websites, it just works!
  • Earthcam - EarthCam is the leading network of live streaming webcams for tourism and entertainment.
  • Filmot - Search within YouTube subtitles. Indexing over 573 million captions across 528 million videos and 45 million channels.
  • Find YouTube Video - Searches currently 5 YouTube archives for specific videos by ID, which is really useful for finding deleted or private YouTube videos.
  • Frame by Frame - Browser plugin that allows you to watch YouTube videos frame by frame.
  • Geosearch
  • Insecam - Live cameras directory
  • Internet Archive: Open Source Videos
  • Metacafe
  • Metatube
  • Tubuep - Downloads online videos via yt-dlp, then reuploads them to the Internet Archive for preservation. Note: if you would like to archive comments too, you need to install version 0.0.33 and use the --get-comments flag, however you will still have the new yt-dlp fixes and features, but existing tubeup bugs cannot be fixed, unless you do manual work.
  • Veoh
  • Video Stabilization Methods
  • Vimeo
  • YouTube Data Viewer
  • YouTube Geofind
  • YouTube Metadata
  • YouTube
  • yt-dlp - Downloads videos from almost any online platform, along with information, thumbnails, subtitles, descriptions, and comments (comments only on a select few sites like Youtube and a few small sites). If a site is not supported, or a useful or crucial piece of metadata, including comments, is missing, create an issue.

Academic Resources and Grey Literature

Permalink to Academic Resources and Grey Literature

Geospatial Research and Mapping Tools

Permalink to Geospatial Research and Mapping Tools

News Digest and Discovery Tools

Permalink to News Digest and Discovery Tools

When a public page needs preservation as evidence, use a scoped capture and keep the retrieval log beside the notes. wget is useful here when the question is simple enough for a command-line mirror and the capture can respect rate limits, terms, robots directives, and privacy boundaries.

Infographics and Data Visualization

Permalink to Infographics and Data Visualization

Privacy and Encryption Tools

Permalink to Privacy and Encryption Tools
  • Amass - The amass tool searches Internet data sources, performs brute force subdomain enumeration, searches web archives, and uses machine learning to generate additional subdomain name guesses. DNS name resolution is performed across many public servers so the authoritative server will see the traffic coming from different locations. Written in Go.
  • Columbus Project - Columbus Project is an advanced subdomain discovery service with fast, powerful and easy to use API.
  • findsubdomains - Automatically scans different sources to collect as many subdomains as can. Validate all the data through various tools and services to provide correct results without waiting.
  • VesselFinder - a FREE AIS vessel tracking web site. VesselFinder displays real time ship positions and marine traffic detected by global AIS network.
  • Barcode Reader - Decode barcodes in C#, VB, Java, C\C++, Delphi, PHP and other languages.
  • Belati - Belati - The Traditional Swiss Army Knife For OSINT. Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose.
  • BeVigil-CLI - A unified command line interface and python library for using BeVigil OSINT API to search for assets such as subdomains, URLs, applications indexed from mobile applications.
  • CantHide - CantHide finds previous locations by looking at a given social media account.
  • CrowdSec - An open source, free, and collaborative IPS/IDS software written in Go, able to analyze visitor behavior & provide an adapted response to all kinds of attacks.
  • Datasploit - Tool to perform various OSINT techniques on usernames, emails addresses, and domains.
  • Discoshell - A simple discovery script that uses popular tools like subfinder, amass, puredns, alterx, massdns and others
  • DNSservices - Discover embedded services in a domain's DNS records within seconds
  • DuckDuckGo URL scraper - A simple DuckDuckGo URL scraper.
  • eScraper - Grab product descriptions, prices, image
  • FOCA - Tool to find metadata and hidden information in the documents.
  • Glit - Retrieve all mails of users related to a git repository, a git user or a git organization.
  • Greynoise - "Anti-Threat Intelligence" Greynoise characterizes the background noise of the internet, so the user can focus on what is actually important.
  • Hunchly - Hunchly is a web capture tool designed specifically for online investigations.
  • Intrigue Core - Framework for attack surface discovery.
  • LinkScope Client - LinkScope Client Github repository.
  • LinkScope - LinkScope is an open source intelligence (OSINT) graphical link analysis tool and automation platform for gathering and connecting information for investigative tasks.
  • Maltego - Maltego is an open source intelligence (OSINT) and graphical link analysis tool for gathering and connecting information for investigative tasks.
  • OpenRefine - Free & open source power tool for working with messy data and improving it.
  • Orbit - Draws relationships between crypto wallets with recursive crawling of transaction history.
  • OSINT Framework - Web based framework for OSINT.
  • OSINT-Tool - A browser extension that gives you access to a suite of OSINT utilities (Dehashed, Epieos, Domaintools, Exif data, Reverse image search, etc) directly on any webpage you visit.
  • OSINT.SH - Information Gathering Toolset.
  • OsintStalker - Python script for Facebook and geolocation OSINT.
  • Outwit - Find, grab and organize all kinds of data and media from online sources.
  • Photon - Crawler designed for OSINT
  • Pown Recon - Target reconnaissance framework powered by graph theory.
  • pygreynoise - Greynoise Python Library
  • QuickCode - Python and R data analysis environment.
  • SecApps Recon - Information gathering and target reconnaissance tool and UI.
  • SerpApi - Scrapes Google search and 25+ search engines with ease and retruns a raw JSON. Supports 10 API wrappers.
  • SerpScan - Powerful PHP script designed to allow you to leverage the power of dorking straight from the comfort of your command line. Analyzes data from Google, Bing, Yahoo, Yandex, and Badiu.
  • Sintelix - Sintelix is an open source intelligence (OSINT) and graphical link analysis tool for gathering and connecting information for investigative tasks.
  • sn0int - Semi-automatic OSINT framework and package manager.
  • SpiderFoot - SpiderFoot Github repository.
  • SpiderFoot - SpiderFoot is an open source intelligence (OSINT) automation platform with over 200 modules for threat intelligence, attack surface monitoring, security assessments and asset discovery.
  • SpiderSuite - An advance, cross-platform, GUI web security crawler.
  • Sub3 Suite - A research-grade suite of tools for intelligence gathering & target mapping with both active and passive(100+ modules) intelligence gathering capabilities.
  • The Harvester - Gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database.
  • Zen - Find email addresses of Github users urls and other data effortlessly
  • GitGuardian - Public GitHub Monitoring - Monitor public GitHub repositories in real time. Detect secrets and sensitive information to prevent hackers from using GitHub as a backdoor to your business.
  • OnionScan - Free and open source tool for investigating the Dark Web. Its main goal is to help researchers and investigators monitor and track Dark Web sites.
  • OTX AlienVault - Open Threat Exchange is the neighborhood watch of the global intelligence community. It enables private companies, independent security researchers, and government agencies to openly collaborate and share the latest information about emerging threats, attack methods, and malicious actors, promoting greater security across the entire community.
  • REScure Threat Intel Feed - REScure is an independent threat intelligence project which we undertook to enhance our understanding of distributed systems, their integration, the nature of threat intelligence and how to efficiently collect, store, consume, distribute it.

Core source anchors should preserve source URL, capture date, collection method, authorization boundary, confidence, and redaction status. Treat tools as aids to evidence handling, not proof by themselves.

entry coordinates

sections
65
article structure
claims
20
indexed statements
edges
1012
typed relationships
aliases
8
entry names

knowledge graph

1013 nodes / 1012 edges / relationships

nodes
1013
edges
1012
claims
20
sections
65

warming graph renderer

3D map
OSINT10 links / 11 nodes

kg:compendium_article:osint

neighboring notes

Related entries, backlinks, and linked topics around OSINT.

Full network

entry dossier

OSINT

nodes
1013
edges
1012
claims
20
sections
65

statements

20
name
OSINT
description
Open Source Intelligence (OSINT) is the collection and analysis of information that is gathered from public or open sources.
content world
Technology
node kind
compendium_article
published
Dec 1, 2024
modified
Jul 14, 2026
reading time
41 min read

typed edges

14