{"id":139585,"url":"https://github.com/rawfilejson/awesome-osint-arsenal","name":"awesome-osint-arsenal","description":"OSINT \u0026 recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics \u0026 more.","projects_count":837,"last_synced_at":"2026-10-14T16:00:19.423Z","repository":{"id":350936599,"uuid":"1208852221","full_name":"rawfilejson/awesome-osint-arsenal","owner":"rawfilejson","description":"OSINT \u0026 recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics \u0026 more.","archived":false,"fork":false,"pushed_at":"2026-08-29T03:14:19.000Z","size":745,"stargazers_count":3123,"open_issues_count":8,"forks_count":459,"subscribers_count":25,"default_branch":"main","last_synced_at":"2026-10-04T09:36:03.905Z","etag":null,"topics":["cybersecurity","data-breach","ethical-hacking","goverment-data","hacking","information-gathering","infosec","intelligence","investigation","kali-linux","open-data","osint","osint-tool","osint-tools","penetration-testing","public-records","recon","reconnaissance","security-tools"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rawfilejson.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2026-04-12T20:32:23.000Z","updated_at":"2026-10-04T08:50:21.000Z","dependencies_parsed_at":"2026-08-16T08:32:41.228Z","dependency_job_id":"fa3d0f15-11ae-4415-a7b1-ad9efa4cb463","html_url":"https://github.com/rawfilejson/awesome-osint-arsenal","commit_stats":null,"previous_names":["rawfilejson/awesome-osint-arsenal"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/rawfilejson/awesome-osint-arsenal","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rawfilejson%2Fawesome-osint-arsenal","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rawfilejson%2Fawesome-osint-arsenal/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rawfilejson%2Fawesome-osint-arsenal/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rawfilejson%2Fawesome-osint-arsenal/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rawfilejson","download_url":"https://codeload.github.com/rawfilejson/awesome-osint-arsenal/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rawfilejson%2Fawesome-osint-arsenal/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344794859,"owners_count":38319471,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-14T02:00:06.392Z","response_time":82,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"created_at":"2026-08-16T08:31:36.111Z","updated_at":"2026-10-14T16:00:19.423Z","primary_language":null,"list_of_lists":false,"displayable":true,"categories":["48. 📚 Learning Resources","35. OSINT Operating Systems","13. Anonymous \u0026 Privacy Tools","50. 🇬🇪 Georgian OSINT Arsenal (500+ resources)","5. Geolocation \u0026 Maps OSINT","10. WikiLeaks, DDoSecrets \u0026 Whistleblower Platforms","4. Domain \u0026 IP OSINT","16. Vulnerability Scanning \u0026 Exploitation","3. Phone Number OSINT","41. Top 50 Must-Have Tools (Quick Reference)","6. Image \u0026 Video OSINT","7. Facial Recognition \u0026 People Search","38. OSINT Learning Resources","20. Financial \u0026 Corporate Intelligence","2. Email OSINT Tools","49. ✨ Extra Tools (curated additions)","1. Username \u0026 Social Media OSINT","9. Data Breach \u0026 Leak Search Engines","12. Dark Web Search Engines \u0026 Tools","8. Social Media Monitoring","47. 🎯 Bug Bounty Platforms","29. Social Media Searcher Platforms","46. 🎓 Training, Labs \u0026 CTF","19. AI-Powered OSINT \u0026 Free AI Tools","36. OSINT APIs \u0026 Developer Tools","11. Password Cracking \u0026 Credential Tools","15. Social Engineering \u0026 Phishing","33. Wordlist Generation \u0026 Brute Force","14. Web Application OSINT \u0026 Scanning","24. Google Dorking Bible","21. Vehicle, Property \u0026 Public Records","26. IP Tracking \u0026 Geolocation Links","39. Awesome OSINT GitHub Repos","18. Mobile Hacking \u0026 Phone Exploitation","27. Telegram OSINT Bots \u0026 Channels","28. Russian OSINT \u0026 Person Lookup Services","42. ⚔️ Red Team \u0026 Offensive Security","44. 🛰️ Threat Intel Platforms","45. 🔬 Digital Forensics \u0026 Reverse Engineering","⚖️ Legal Disclaimer","43. 🛡️ Blue Team \u0026 Defensive Security"],"sub_categories":["🔧 Manual Kali Snippet","Quick Kali Setup (additional tools)","After install — add tools to your PATH","Georgian Mapping Services","Free AI Tools for OSINT Research","VK (VKontakte) OSINT","Dork Generator Tools","50.16 Domain \u0026 IP \u0026 Network Intelligence","Email \u0026 Username OSINT","📺 YouTube Channels","Platform-Specific Tools","Breach Search Tools (Check Georgian Data)","AI-Powered OSINT Tools","Open Data Portals","OSINT Channels","Telegram Scraping Tools","Core Government Portals","Public Registries \u0026 Databases","Phone Number \u0026 Identity Lookup","Primary Business Registries","Financial \u0026 Investment Data","Court Databases","Key Legal Resources","Property Registries","Real Estate Portals (OSINT Gold Mines)","Vehicle Databases","Transport Authority Data","National Bank \u0026 Financial Regulators","Banks \u0026 Financial Institutions","Central Election Commission (CEC)","Political Data Sources","GIS Data Sources","Major Georgian News Sources","Television \u0026 Radio","Investigative Journalism","Georgian Mobile Operators","National Statistics","Procurement Platforms","Budget Transparency","Georgian ASN \u0026 Network Data","Education Portals","Universities (Major)","Academic Search","Health Authorities","Key Georgian NGOs (OSINT Resources)","Fact-Checking Organizations","Disinformation Monitoring","National Archives \u0026 Libraries","Historical \u0026 Cultural Databases","Government Auction Platforms","Job Portals","Classifieds (Multi-Category)","Public Official Asset Declarations","OSINT Frameworks with Georgian Coverage","Investigative Communities","ICIJ Databases (Georgian Entries)","Appendix C: Key URLs Quick Reference"],"readme":"\u003cdiv align=\"center\"\u003e\n\n\u003cimg src=\"assets/osint_arsenal_logo.png\" width=\"1200\" alt=\"OSINT Arsenal\"/\u003e\n\n\u003cbr/\u003e\n\n# 🔍 AWESOME OSINT ARSENAL\n\n### The Ultimate Open-Source Intelligence + Security Toolkit\n\n\u003cbr/\u003e\n\n[![Tools](https://img.shields.io/badge/Tools-753%2B-FF4444?style=for-the-badge\u0026logo=target\u0026logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal)\n[![Categories](https://img.shields.io/badge/Categories-50-0066CC?style=for-the-badge\u0026logo=buffer\u0026logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal)\n[![Version](https://img.shields.io/badge/Version-2.1-00CC66?style=for-the-badge\u0026logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal)\n[![Updated](https://img.shields.io/badge/Updated-2026--05--10-FF8800?style=for-the-badge\u0026logoColor=white)](https://github.com/rawfilejson/awesome-osint-arsenal)\n[![Stars](https://img.shields.io/github/stars/rawfilejson/awesome-osint-arsenal?style=for-the-badge\u0026color=gold\u0026logo=github)](https://github.com/rawfilejson/awesome-osint-arsenal/stargazers)\n\n\u003cbr/\u003e\n\n\u003e **753+ tools · 50 categories · Multi-distro installers · Georgian OSINT · Termux support**\n\u003e\n\u003e *The most comprehensive OSINT and security toolkit on the internet — every tool with installation instructions or a verified link.*\n\n\u003ca href=\"https://www.buymeacoffee.com/rawfilejson\" target=\"_blank\"\u003e\u003cimg src=\"https://cdn.buymeacoffee.com/buttons/v2/default-yellow.png\" alt=\"Buy Me a Coffee\" style=\"height: 60px !important;width: 217px !important;\" \u003e\u003c/a\u003e\n\n\u003cbr/\u003e\n\n### ⚡ Get everything in one command\n\n```bash\ngit clone https://github.com/rawfilejson/awesome-osint-arsenal \u0026\u0026 cd awesome-osint-arsenal \u0026\u0026 sudo bash install.sh\n```\n\n### 🎯 Or pick just what you need\n\n```bash\nsudo bash osint.sh        # 🔍 OSINT only (Sherlock, Maigret, Amass, …)\n```\n\n```bash\nsudo bash redteam.sh      # ⚔️  Red team (Sliver, BloodHound, Mimikatz, Nuclei, …)\n```\n\n```bash\nsudo bash blueteam.sh     # 🛡️  Blue team (Wazuh, Sigma, Suricata, Velociraptor, …)\n```\n\n```bash\nsudo bash forensics.sh    # 🔬 DFIR + RE (Volatility, Ghidra, radare2, …)\n```\n\n```bash\nsudo bash hardware.sh     # 🔌 Hardware + SDR (binwalk, hackrf, openocd, …)\n```\n\n```bash\nsudo bash labs.sh         # 🎓 Vulnerable apps for practice (DVWA, Juice Shop, …)\n```\n\n```bash\nbash termux.sh            # 📱 Android (Termux subset, no sudo needed)\n```\n\n\u003e Works on **Kali, Debian, Ubuntu, Parrot, Mint, Pop!_OS** (best — `apt`)\n\u003e Partial on **Arch / Manjaro / Fedora / RHEL** (auto-detected, falls back to git/pip/go)\n\u003e Termux subset on **Android**\n\n\u003cbr/\u003e\n\n\u003c/div\u003e\n\n---\n\n\u003e [!IMPORTANT]\n\u003e ## 🙏 A note before you fork\n\u003e\n\u003e This repo has **753 tools across 50 categories**. Keeping that current — links, install commands, new tools every week — is a *lot* for one person.\n\u003e\n\u003e **If nobody helps, parts of this list will go stale.** That's just real talk.\n\u003e\n\u003e **How you can help in 30 seconds:**\n\u003e - ⭐ **Star** the repo (more stars = more contributors find it)\n\u003e - 🐛 **Spotted a dead link?** Open an issue, takes 1 minute\n\u003e - 🧩 **Adding a tool?** Skim [CONTRIBUTING.md](CONTRIBUTING.md) first — keeps your PR from getting closed\n\u003e - ☕ [**Buy me a coffee**](https://www.buymeacoffee.com/rawfilejson) so weekends keep going to this\n\u003e - 📢 **Share it** — tweet, Discord, wherever the security crowd hangs out\n\u003e\n\u003e If something's broken: **don't just complain — open an issue or PR. That's how this stays useful.**\n\n---\n\n\u003e [!WARNING]\n\u003e **DISCLAIMER:** This repository is for **educational and authorized security research only**.\n\u003e Always obtain written permission before testing systems you do not own.\n\u003e The authors are **not responsible** for any misuse of the tools or techniques listed here.\n\u003e See the full [Legal Disclaimer](#%EF%B8%8F-legal-disclaimer) at the bottom.\n\n\n---\n\n## 📋 Table of Contents\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e🔭 Reconnaissance \u0026 Discovery\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n1. [Username \u0026 Social Media OSINT](#1-username--social-media-osint)\n2. [Email OSINT Tools](#2-email-osint-tools)\n3. [Phone Number OSINT](#3-phone-number-osint)\n4. [Domain \u0026 IP OSINT](#4-domain--ip-osint)\n5. [Geolocation \u0026 Maps OSINT](#5-geolocation--maps-osint)\n6. [Image \u0026 Video OSINT](#6-image--video-osint)\n7. [Facial Recognition \u0026 People Search](#7-facial-recognition--people-search)\n8. [Social Media Monitoring](#8-social-media-monitoring)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💥 Data Breaches \u0026 Leaks\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n9. [Data Breach \u0026 Leak Search Engines](#9-data-breach--leak-search-engines)\n10. [WikiLeaks, DDoSecrets \u0026 Whistleblower Platforms](#10-wikileaks-ddosecrets--whistleblower-platforms)\n11. [Password Cracking \u0026 Credential Tools](#11-password-cracking--credential-tools)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e🕶️ Dark Web \u0026 Privacy\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n12. [Dark Web Search Engines \u0026 Tools](#12-dark-web-search-engines--tools)\n13. [Anonymous \u0026 Privacy Tools](#13-anonymous--privacy-tools)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e⚔️ Offensive Security\u003c/b\u003e (Authorized Testing Only) — click to expand\u003c/summary\u003e\n\n14. [Web Application OSINT \u0026 Scanning](#14-web-application-osint--scanning)\n15. [Social Engineering \u0026 Phishing](#15-social-engineering--phishing)\n16. [Vulnerability Scanning \u0026 Exploitation](#16-vulnerability-scanning--exploitation)\n17. [Network \u0026 Wireless Tools](#17-network--wireless-tools)\n18. [Mobile Hacking \u0026 Phone Exploitation](#18-mobile-hacking--phone-exploitation)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e🧠 Intelligence \u0026 Analysis\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n19. [AI-Powered OSINT \u0026 Free AI Tools](#19-ai-powered-osint--free-ai-tools)\n20. [Financial \u0026 Corporate Intelligence](#20-financial--corporate-intelligence)\n21. [Vehicle, Property \u0026 Public Records](#21-vehicle-property--public-records)\n22. [Metadata \u0026 Digital Forensics](#22-metadata--digital-forensics)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e👁️ Surveillance \u0026 Dorking\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n23. [IP Camera \u0026 Webcam OSINT](#23-ip-camera--webcam-osint)\n24. [Google Dorking Bible](#24-google-dorking-bible)\n25. [Credential \u0026 Data Dorking](#25-credential--data-dorking)\n26. [IP Tracking \u0026 Geolocation Links](#26-ip-tracking--geolocation-links)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e🌐 Community \u0026 Platforms\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n27. [Telegram OSINT Bots \u0026 Channels](#27-telegram-osint-bots--channels)\n28. [Russian OSINT \u0026 Person Lookup Services](#28-russian-osint--person-lookup-services)\n29. [Social Media Searcher Platforms](#29-social-media-searcher-platforms)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e🧰 Toolkits \u0026 Frameworks\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n30. [Termux Hacking Toolkit (Complete)](#30-termux-hacking-toolkit-complete)\n31. [Kali Linux OSINT Toolkit](#31-kali-linux-osint-toolkit)\n32. [All-in-One Hacking Frameworks](#32-all-in-one-hacking-frameworks)\n33. [Wordlist Generation \u0026 Brute Force](#33-wordlist-generation--brute-force)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e🖥️ Hardware \u0026 Operating Systems\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n34. [Hardware Hacking Tools](#34-hardware-hacking-tools)\n35. [OSINT Operating Systems](#35-osint-operating-systems)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e👨‍💻 Developer \u0026 Learning\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n36. [OSINT APIs \u0026 Developer Tools](#36-osint-apis--developer-tools)\n37. [Browser Extensions for OSINT](#37-browser-extensions-for-osint)\n38. [OSINT Learning Resources](#38-osint-learning-resources)\n39. [Awesome OSINT GitHub Repos](#39-awesome-osint-github-repos)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e⚡ Quick Reference\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n40. [One-Click Install Scripts](#40-one-click-install-scripts)\n41. [Top 50 Must-Have Tools](#41-top-50-must-have-tools-quick-reference)\n\n\u003c/details\u003e\n\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e⚔️ Red Team \u0026 Blue Team\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n42. [Red Team \u0026 Offensive Security](#42--red-team--offensive-security)\n43. [Blue Team \u0026 Defensive Security](#43--blue-team--defensive-security)\n44. [Threat Intel Platforms](#44--threat-intel-platforms)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e🔬 Forensics, Hardware \u0026 Training\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n45. [Digital Forensics \u0026 Reverse Engineering](#45--digital-forensics--reverse-engineering)\n46. [Training, Labs \u0026 CTF](#46--training-labs--ctf)\n47. [Bug Bounty Platforms](#47--bug-bounty-platforms)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e📚 Knowledge \u0026 Curated Additions\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n48. [Learning Resources](#48--learning-resources)\n49. [Extra Tools (curated additions)](#49--extra-tools-curated-additions)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e🇬🇪 Country-Specific OSINT\u003c/b\u003e — click to expand\u003c/summary\u003e\n\n50. [Georgian OSINT Arsenal](#50--georgian-osint-arsenal-500-resources)\n\n\u003c/details\u003e\n\n---\n\n## ⚙️ Installation Guide\n\n### Quick install — Kali / Debian / Ubuntu / Parrot\n\n```bash\ngit clone https://github.com/rawfilejson/awesome-osint-arsenal\n```\n\n```bash\ncd awesome-osint-arsenal\n```\n\n```bash\nsudo bash install.sh\n```\n\n### Pick a single stack\n\n| Script | What it installs | Use when |\n|---|---|---|\n| `osint.sh` | OSINT tools (Sherlock, Maigret, Amass, theHarvester, …) | You only do recon / investigations |\n| `redteam.sh` | Sliver, BloodHound, Impacket, NetExec, Mimikatz, Nuclei, … | Authorized pentesting / red team |\n| `blueteam.sh` | Wazuh, Sigma, Suricata, Velociraptor, Atomic Red Team, MITRE CALDERA | SOC / detection engineering |\n| `forensics.sh` | Volatility 3, Ghidra, radare2, Plaso, CyberChef, … | DFIR / malware analysis |\n| `hardware.sh` | binwalk, hackrf, openocd, GNU Radio, gqrx, … | RF / IoT / firmware research |\n| `labs.sh` | DVWA, Juice Shop, WebGoat (Docker) | Local practice labs |\n| `termux.sh` | Android-compatible subset | Phone-based recon |\n\n### Other Linux distros\n\nThe installers auto-detect your package manager:\n\n| Distro | Manager | Status |\n|---|---|---|\n| Kali / Debian / Ubuntu / Parrot / Mint / Pop!_OS | `apt` | ✅ Best — primary target |\n| Arch / Manjaro / EndeavourOS | `pacman` | 🟡 Partial (apt-only tools skip cleanly) |\n| Fedora / RHEL / Rocky / Alma | `dnf` | 🟡 Partial (apt-only tools skip cleanly) |\n| Termux (Android) | `pkg` | ✅ Subset only — use `bash termux.sh` |\n| macOS / Windows | — | ❌ Use a Kali VM or WSL2 |\n\n### What every installer does\n\n- Detects your distro and uses the right package manager\n- Skips what's already installed (idempotent — safe to re-run)\n- Color output: 🟢 installed · 🟡 skipped · 🔴 failed\n- Logs failures to `~/osint-install-errors.log`\n- Prints a summary at the end\n- Tools cloned via git go to `/opt/osint-arsenal/` (or `$HOME/osint-arsenal/` on Termux)\n\n### After install — add tools to your PATH\n\n```bash\necho 'export PATH=\"$PATH:/opt/osint-arsenal\"' \u003e\u003e ~/.bashrc\n```\n\n```bash\nsource ~/.bashrc\n```\n\nTools installed via `apt`/`pip`/`go install` are already on your `$PATH`.\n\n\n---\n## 📊 Stats at a Glance\n\n\u003cdiv align=\"center\"\u003e\n\n| 🛠️ Total Tools | 💻 CLI Tools | 📁 GitHub Repos | 🌐 Online Platforms | 🤖 AI Tools |\n|:-:|:-:|:-:|:-:|:-:|\n| **753+** | **167+** | **117+** | **461+** | **25+** |\n\n| 🕶️ Dark Web | 🇬🇪 Georgian OSINT | 💥 Breach Engines | ⚔️ Red Team | 🛡️ Blue Team |\n|:-:|:-:|:-:|:-:|:-:|\n| **15+** | **500+** | **39+** | **35+** | **24+** |\n\n| 🔬 Forensics | 🔌 Hardware | 🎓 Training | 🎯 Bug Bounty | 📂 Total Categories |\n|:-:|:-:|:-:|:-:|:-:|\n| **16+** | **16+** | **21+** | **12+** | **50** |\n\n\u003ca href=\"https://www.buymeacoffee.com/rawfilejson\" target=\"_blank\"\u003e\u003cimg src=\"https://cdn.buymeacoffee.com/buttons/v2/default-yellow.png\" alt=\"Buy Me a Coffee\" style=\"height: 60px !important;width: 217px !important;\" \u003e\u003c/a\u003e\n\n\u003c/div\u003e\n\n\n---\n## 1. Username \u0026 Social Media OSINT\n\n\u003e 🎯 Find accounts, profiles, and digital footprints across hundreds of platforms.\n\u003e\n\u003e **Pro tip:** Start with Sherlock for a quick sweep, then use Maigret for depth — it covers 3000+ sites.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **Sherlock** | Find usernames across 400+ social networks | `pip install sherlock-project` |\n| **Maigret** | Advanced Sherlock fork — 3000+ sites | `pip install maigret` |\n| **Namechk** | Username \u0026 domain availability checker | [namechk.com](https://namechk.com/) |\n| **WhatsMyName** | Web-based username enumeration | [whatsmyname.app](https://whatsmyname.app/) |\n| **Snoop** | Username search (Russian-focused) | `pip install snoop` |\n| **UserRecon** | Bash-based username finder | `git clone https://github.com/wishihab/userrecon.git` |\n| **Blackbird** | Fast username search tool | `pip install blackbird-osint` |\n| **Social Analyzer** | API-based social media profiler | `pip install social-analyzer` |\n| **NExfil** | Find profiles by username | `pip install nexfil` |\n| **Socid-extractor** | Extract info from web pages | `pip install socid-extractor` |\n| **Gitrecon** | GitHub OSINT reconnaissance | `pip install gitrecon` |\n| **OSRFramework** | Username research framework | `pip install osrframework` |\n| **Holehe** | Check if email is registered on 120+ sites | `pip install holehe` |\n| **socialscan** | Check email/username availability | `pip install socialscan` |\n| **Investigo** | Username checker (Go-based) | `go install github.com/tdh8316/investigo@latest` |\n| **OSINT Framework** | Visual map of all OSINT tools | [osintframework.com](https://osintframework.com/) |\n| **CheckUserNames** | Check username across multiple platforms | [checkusernames.com](https://checkusernames.com/) |\n| **KnowEm** | Username search on 500+ sites | [knowem.com](https://knowem.com/) |\n| **Instant Username Search** | Real-time username checker | [instantusername.com](https://instantusername.com/) |\n| **Usersearch.org** | Free social network search | [usersearch.org](https://usersearch.org/) |\n| **Lullar** | Free people search by email, username, or name across 175+ sites | [com.lullar.com](https://com.lullar.com/) |\n| **tookie-osint** | Username to social accounts across many sites | `git clone https://github.com/Alfredredbird/tookie-osint` |\n| **GitFive** | GitHub account OSINT — emails, keys, activity | `git clone https://github.com/mxrch/GitFive` |\n| **Marple** | Username search across search-engine results | `git clone https://github.com/soxoj/marple` |\n| **yesitsme** | Find Instagram accounts by email or phone | `git clone https://github.com/0x0be/yesitsme` |\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 Sherlock — Install \u0026 Usage\u003c/b\u003e\u003c/summary\u003e\n\n```bash\n# Kali Linux / Ubuntu\npip install sherlock-project\nsherlock \"username\"\n\n# From GitHub source (always latest)\ngit clone https://github.com/sherlock-project/sherlock.git\ncd sherlock\npip install -r requirements.txt\npython3 sherlock \"username\"\n\n# Search multiple usernames at once\nsherlock user1 user2 user3\n```\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 Maigret — Install \u0026 Usage\u003c/b\u003e\u003c/summary\u003e\n\n```bash\npip install maigret\nmaigret \"username\"\n\n# From source\ngit clone https://github.com/soxoj/maigret.git\ncd maigret\npip install -r requirements.txt\npython3 -m maigret \"username\"\n\n# Generate HTML report\nmaigret \"username\" --html\n```\n\u003c/details\u003e\n\n---\n\n## 2. Email OSINT Tools\n\n\u003e 📧 Verify emails, find linked accounts, check breach exposure, and analyze headers.\n\u003e\n\u003e **Pro tip:** Holehe is free and fast. h8mail is best for breach correlation when API keys are configured.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **h8mail** | Email OSINT \u0026 breach hunting | `pip install h8mail` |\n| **Holehe** | Check email on 120+ sites | `pip install holehe` |\n| **theHarvester** | Email \u0026 domain harvester | `pip install theHarvester` |\n| **EmailAnalyzer** | Analyze suspicious .eml files | `git clone https://github.com/keraattin/EmailAnalyzer` |\n| **Prowl** | Email \u0026 domain reconnaissance | `git clone https://github.com/nettitude/Prowl` |\n| **EmailHeader-Analyzer** | CLI email header parser + OSINT | `git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python` |\n| **MailHeaderDetective** | Email header forensics | `git clone https://github.com/akajhon/MailHeaderDetective` |\n| **WhatMail** | Email header analysis CLI | `git clone https://github.com/z0m31en7/WhatMail` |\n| **mailto_analyzer** | Email exposure analysis | `pip install mailto-analyzer` |\n| **Infoga** | Email OSINT gathering | `git clone https://github.com/m4ll0k/Infoga` |\n| **Hunter.io** | Find professional emails | [hunter.io](https://hunter.io/) |\n| **Phonebook.cz** | Email, domain \u0026 URL search | [phonebook.cz](https://phonebook.cz/) |\n| **EmailRep** | Email reputation lookup | [emailrep.io](https://emailrep.io/) |\n| **Epieos** | Get info linked to email | [epieos.com](https://epieos.com/) |\n| **GetNotify** | Email open tracking + geolocation | [getnotify.com](https://getnotify.com/) |\n| **Snov.io** | Email finder \u0026 verifier | [snov.io](https://snov.io/) |\n| **MXToolbox** | Email header analysis \u0026 DNS checks | [mxtoolbox.com](https://mxtoolbox.com/) |\n| **SimpleLogin** | Email alias service for OSINT | [simplelogin.io](https://simplelogin.io/) |\n| **Email-Checker** | Email validation tool | [email-checker.net](https://email-checker.net/) |\n| **Voila Norbert** | Find anyone's email | [voilanorbert.com](https://voilanorbert.com/) |\n| **Mosint** | Automated email OSINT (breaches, social, DNS) | `git clone https://github.com/alpkeskin/mosint` |\n| **pwnedOrNot** | Check email breaches and dump exposed passwords | `git clone https://github.com/thewhiteh4t/pwnedOrNot` |\n| **Mailcat** | Find registered accounts from an email address | `git clone https://github.com/sharsil/mailcat` |\n| **check-if-email-exists** | Verify email deliverability without sending | `git clone https://github.com/reacherhq/check-if-email-exists` |\n| **EXPERTE Email Finder** | Free email permutation generator + SMTP validation | [experte.com/email-finder](https://www.experte.com/email-finder) |\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 h8mail — Install \u0026 Usage\u003c/b\u003e\u003c/summary\u003e\n\n```bash\npip install h8mail\n\n# Basic scan\nh8mail -t \"target@email.com\"\n\n# With API keys (unlocks more breach sources)\n# Create config.ini with your API keys from HIBP, BreachDirectory, etc.\nh8mail -t \"target@email.com\" -k config.ini\n\n# Scan a list of emails\nh8mail -t emails.txt\n```\n\u003c/details\u003e\n\n---\n\n## 3. Phone Number OSINT\n\n\u003e 📱 Identify carriers, locations, registrations, and linked accounts from phone numbers.\n\u003e\n\u003e **Pro tip:** PhoneInfoga is the gold standard CLI tool. GetContact reveals how a number is saved by others.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **PhoneInfoga** | Advanced phone number scanner | `pip install phoneinfoga` |\n| **Ignorant** | Check phone registrations on sites | `pip install ignorant` |\n| **GetContact** | See how number is saved by others | [getcontact.com](https://getcontact.com/) |\n| **NumVerify** | Phone number validation API | [numverify.com](https://numverify.com/) |\n| **Truecaller** | Caller ID \u0026 spam lookup | [truecaller.com](https://truecaller.com/) |\n| **Sync.me** | Phone number lookup | [sync.me](https://sync.me/) |\n| **CallerIDTest** | Reverse phone lookup | [calleridtest.com](https://calleridtest.com/) |\n| **SpyDialer** | Free reverse phone lookup | [spydialer.com](https://spydialer.com/) |\n| **National Cellular Directory** | Phone owner lookup | [nationalcellulardirectory.com](https://www.nationalcellulardirectory.com/) |\n| **TelPoisk** | Russian phone directory | [telpoisk.com](https://telpoisk.com/) |\n| **NumLookup** | Free reverse phone lookup | [numlookup.com](https://www.numlookup.com/) |\n| **Hlr-Lookups** | HLR phone number lookup | [hlr-lookups.com](https://www.hlr-lookups.com/) |\n| **email2phonenumber** | Deduce a phone number from an email via reset hints | `git clone https://github.com/martinvigo/email2phonenumber` |\n| **PhoneSploit** | ADB-based phone exploitation | `git clone https://github.com/aerosol-can/PhoneSploit` |\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 PhoneInfoga — Install \u0026 Usage\u003c/b\u003e\u003c/summary\u003e\n\n```bash\n# Binary install (Kali Linux)\ncurl -sSL https://raw.githubusercontent.com/sundowndev/phoneinfoga/master/support/scripts/install | bash\n\n# Open web UI at localhost:8080\nphoneinfoga serve -p 8080\n\n# Scan from CLI\nphoneinfoga scan -n \"+1234567890\"\n\n# pip install (alternative)\npip install phoneinfoga\n```\n\u003c/details\u003e\n\n---\n\n## 4. Domain \u0026 IP OSINT\n\n\u003e 🌐 Enumerate subdomains, query DNS records, discover IP ranges, and map attack surfaces.\n\u003e\n\u003e **Pro tip:** Run amass + subfinder together for maximum subdomain coverage, then pipe into httpx to check which hosts are live.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **Amass** | In-depth DNS enumeration | `go install github.com/owasp-amass/amass/v4/...@master` |\n| **Subfinder** | Fast passive subdomain discovery | `go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest` |\n| **dnsrecon** | DNS enumeration | `pip install dnsrecon` |\n| **Sublist3r** | Subdomain enumeration | `pip install sublist3r` |\n| **crt.sh** | Certificate transparency search | [crt.sh](https://crt.sh/) |\n| **Shodan** | Internet-connected device search | [shodan.io](https://shodan.io/) |\n| **Censys** | Internet-wide scan search | [censys.io](https://censys.io/) |\n| **Criminal IP** | AI-powered cyber threat intelligence | [criminalip.io](https://www.criminalip.io/) |\n| **VirusTotal** | Domain/IP/file analysis | [virustotal.com](https://virustotal.com/) |\n| **SecurityTrails** | DNS \u0026 domain intelligence | [securitytrails.com](https://securitytrails.com/) |\n| **IPGeoLocation** | IP address geolocation | `git clone https://github.com/maldevel/IPGeoLocation` |\n| **Nmap** | Network scanner \u0026 mapper | `apt install nmap` |\n| **Masscan** | Fastest internet port scanner | `apt install masscan` |\n| **WHOIS.com** | WHOIS domain lookup | [whois.com](https://www.whois.com/) |\n| **ViewDNS** | Multiple DNS tools | [viewdns.info](https://viewdns.info/) |\n| **DNSDumpster** | DNS reconnaissance \u0026 mapping | [dnsdumpster.com](https://dnsdumpster.com/) |\n| **Robtex** | DNS lookup visualization | [robtex.com](https://robtex.com/) |\n| **ARIN WHOIS** | IP registration database | [whois.arin.net](https://whois.arin.net/) |\n| **BGP Toolkit** | BGP/ASN/IP intelligence | [bgp.he.net](https://bgp.he.net/) |\n| **urlscan.io** | URL/domain analysis \u0026 screenshots | [urlscan.io](https://urlscan.io/) |\n| **AbuseIPDB** | IP address reputation database | [abuseipdb.com](https://www.abuseipdb.com/) |\n| **Web-Check** | All-in-one website analysis | [web-check.xyz](https://web-check.xyz/) |\n| **IPinfo** | IP address data \u0026 geolocation | [ipinfo.io](https://ipinfo.io/) |\n| **DB-IP** | IP geolocation database | [db-ip.com](https://db-ip.com/) |\n| **LeakIX** | Search engine for exposed services \u0026 leaks | [leakix.net](https://leakix.net/) |\n| **dnsx** | Fast multipurpose DNS toolkit | `go install github.com/projectdiscovery/dnsx/cmd/dnsx@latest` |\n| **tlsx** | TLS certificate collection \u0026 analysis | `go install github.com/projectdiscovery/tlsx/cmd/tlsx@latest` |\n| **shuffledns** | massdns wrapper for subdomain brute/resolve | `go install github.com/projectdiscovery/shuffledns/cmd/shuffledns@latest` |\n| **puredns** | Fast accurate DNS bruteforcing \u0026 resolving | `git clone https://github.com/d3mondev/puredns` |\n| **cloud_enum** | Enumerate public AWS/Azure/GCP assets | `git clone https://github.com/initstring/cloud_enum` |\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 Amass + Subfinder + HTTPx — Most effective recon combo\u003c/b\u003e\u003c/summary\u003e\n\n```bash\n# Step 1: Enumerate subdomains passively (fast)\nsubfinder -d example.com -o subs.txt\n\n# Step 2: Deep active enumeration (slower but more complete)\namass enum -d example.com -o amass_subs.txt\n\n# Step 3: Combine and deduplicate\ncat subs.txt amass_subs.txt | sort -u \u003e all_subs.txt\n\n# Step 4: Check which subdomains are live\ncat all_subs.txt | httpx -status-code -title -o live_subs.txt\n\n# Step 5: Screenshot all live hosts\ncat live_subs.txt | eyewitness --web -d screenshots/\n```\n\u003c/details\u003e\n\n---\n\n## 5. Geolocation \u0026 Maps OSINT\n\n\u003e 🗺️ Geolocate images, analyze satellite data, and verify photo locations.\n\u003e\n\u003e **Pro tip:** Combine SunCalc (shadow analysis) + ShadowMap + Mapillary for precision image geolocation.\n\n| Tool | Description | Link |\n|------|-------------|------|\n| **Google Earth Pro** | Advanced satellite imagery | [earth.google.com](https://earth.google.com/) |\n| **Overpass Turbo** | OpenStreetMap data query | [overpass-turbo.eu](https://overpass-turbo.eu/) |\n| **SunCalc** | Sun position/time calculator from photos | [suncalc.org](https://suncalc.org/) |\n| **GeoGuessr** | Geolocation training game | [geoguessr.com](https://geoguessr.com/) |\n| **Sentinel Hub** | Satellite imagery access | [sentinel-hub.com](https://sentinel-hub.com/) |\n| **FIRMS** | NASA fire/thermal hotspots | [firms.modaps.eosdis.nasa.gov](https://firms.modaps.eosdis.nasa.gov/) |\n| **Wikimapia** | Collaborative world map | [wikimapia.org](https://wikimapia.org/) |\n| **OpenStreetMap** | Free world map | [openstreetmap.org](https://openstreetmap.org/) |\n| **GeoSpy** | AI-powered image geolocation | [geospy.ai](https://geospy.ai/) |\n| **Mapillary** | Street-level imagery | [mapillary.com](https://mapillary.com/) |\n| **Maxar** | Commercial satellite imagery | [maxar.com](https://maxar.com/) |\n| **F4map** | 3D interactive world map | [demo.f4map.com](https://demo.f4map.com/) |\n| **Zoom Earth** | Real-time satellite \u0026 weather | [zoom.earth](https://zoom.earth/) |\n| **KartaView** | Street-level imagery (OpenStreetCam) | [kartaview.org](https://kartaview.org/) |\n| **ShadowMap** | Shadow analysis for time estimation | [shadowmap.org](https://shadowmap.org/) |\n| **Crime Brasil** | Brazil crime + accidents open data by neighborhood (bairro-level RS; municipal MG/RJ; PRF accidents) | [crimebrasil.com.br](https://crimebrasil.com.br) |\n\n---\n\n## 6. Image \u0026 Video OSINT\n\n\u003e 🖼️ Extract metadata, reverse search images, verify authenticity, and detect AI-generated content.\n\u003e\n\u003e **Pro tip:** Yandex reverse image search consistently outperforms Google for finding faces and locations.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **TinEye** | Reverse image search | [tineye.com](https://tineye.com/) |\n| **Google Reverse Image** | Google image search | [images.google.com](https://images.google.com/) |\n| **Yandex Images** | Best reverse image search for faces/places | [yandex.com/images](https://yandex.com/images) |\n| **ExifTool** | Image/document metadata extraction | `apt install libimage-exiftool-perl` |\n| **FOCA** | Metadata extraction from documents | [github.com/ElevenPaths/FOCA](https://github.com/ElevenPaths/FOCA) |\n| **InVID** | Video verification toolkit | [invid-project.eu](https://www.invid-project.eu/) |\n| **FotoForensics** | Image forensic analysis (ELA) | [fotoforensics.com](https://fotoforensics.com/) |\n| **Fake Image Detector** | AI-based fake image detection | [fakeimagedetector.com](https://www.fakeimagedetector.com/) |\n| **Search by Image** | Multi-engine reverse image (browser ext) | Chrome / Firefox extension |\n| **Depix** | Recover pixelated text from screenshots | `git clone https://github.com/beurtschipper/Depix` |\n| **Forensically** | Online image forensics suite | [29a.ch/photo-forensics](https://29a.ch/photo-forensics) |\n| **AI or Not** | Detect AI-generated images | [aiornot.com](https://aiornot.com/) |\n| **Hive Moderation** | AI content detection | [hivemoderation.com](https://hivemoderation.com/) |\n| **Illuminarty** | AI image detection | [illuminarty.ai](https://illuminarty.ai/) |\n| **yt-dlp** | Download video/audio from 1000+ sites | `pip install yt-dlp` |\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 ExifTool — Install \u0026 Usage\u003c/b\u003e\u003c/summary\u003e\n\n```bash\n# Install\napt-get install libimage-exiftool-perl\n\n# Basic metadata read\nexiftool image.jpg\n\n# Extract GPS coordinates specifically\nexiftool -GPSLatitude -GPSLongitude image.jpg\n\n# Strip ALL metadata (for privacy)\nexiftool -all= image.jpg\n\n# Show all metadata groups\nexiftool -a -u -g1 image.jpg\n\n# Batch process a whole folder\nexiftool /path/to/images/\n```\n\u003c/details\u003e\n\n---\n\n## 7. Facial Recognition \u0026 People Search\n\n\u003e 👤 Find people across the web using photos, names, or usernames.\n\u003e\n\u003e ⚠️ **Warning:** Facial recognition has serious privacy and legal implications. Use only with explicit authorization.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **FaceSeek** | AI-powered reverse face search | [faceseek.online](https://faceseek.online/) |\n| **FaceCheck.ID** | Face recognition search engine | [facecheck.id](https://facecheck.id/) |\n| **PimEyes** | Face search engine from photos | [pimeyes.com](https://pimeyes.com/) |\n| **Search4faces** | Face search in VK/OK social networks | [search4faces.com](https://search4faces.com/) |\n| **face_recognition** | Python face recognition library | `pip install face_recognition` |\n| **DeepFace** | AI face analysis (age, gender, emotion) | `pip install deepface` |\n| **ThatsThem** | Free people search | [thatsthem.com](https://thatsthem.com/) |\n| **Pipl** | Deep people search engine | [pipl.com](https://pipl.com/) |\n| **BeenVerified** | People search \u0026 background check | [beenverified.com](https://beenverified.com/) |\n| **Spokeo** | People search aggregator | [spokeo.com](https://spokeo.com/) |\n| **FastPeopleSearch** | Free people finder | [fastpeoplesearch.com](https://fastpeoplesearch.com/) |\n| **WebMii** | People search engine | [webmii.com](https://webmii.com/) |\n| **OSINT Industries** | People search + social media lookup | [osint.industries](https://www.osint.industries/) |\n| **IDCrawl** | Free people search engine | [idcrawl.com](https://www.idcrawl.com/) |\n\n---\n\n## 8. Social Media Monitoring\n\n\u003e 📡 Monitor, scrape, and investigate social media accounts and communities.\n\u003e\n\u003e **Pro tip:** Combine Osintgram (Instagram) + Telepathy (Telegram) + snscrape (Twitter/X) for full platform coverage.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **Osintgram** | Instagram OSINT tool | `git clone https://github.com/Datalux/Osintgram` |\n| **Instaloader** | Instagram data downloader | `pip install instaloader` |\n| **insta-dl** | Async Instagram downloader with HikerAPI and optional aiograpi backends | `pip install instagram-dl` |\n| **insto** | Interactive Instagram OSINT CLI with REPL, snapshots, diffs, and Maltego exports | `pip install insto` |\n| **Twint** | Twitter OSINT (no API needed) | `pip install twint` |\n| **snscrape** | Social media scraper (Twitter, Reddit, etc.) | `pip install snscrape` |\n| **Toutatis** | Instagram OSINT by phone/email | `pip install toutatis` |\n| **TikTok Scraper** | TikTok data extraction | `npm install -g tiktok-scraper` |\n| **Reddit Investigator** | Reddit user analysis | [reddit-user-analyser.netlify.app](https://reddit-user-analyser.netlify.app/) |\n| **socialscan** | Social media presence checker | `pip install socialscan` |\n| **Telepathy** | Telegram OSINT analysis | `pip install telepathy` |\n| **Twayback** | Find deleted tweets | `pip install twayback` |\n| **Xquik** | X/Twitter data API \u0026 MCP skill | [github.com](https://github.com/Xquik-dev/x-twitter-scraper) |\n| **SocialBlade** | Social media analytics | [socialblade.com](https://socialblade.com/) |\n| **Social-Searcher** | Free social media search engine | [social-searcher.com](https://www.social-searcher.com/) |\n| **Mention** | Social media monitoring | [mention.com](https://mention.com/) |\n| **BrandWatch** | Social listening platform | [brandwatch.com](https://www.brandwatch.com/) |\n\n---\n\n## 9. Data Breach \u0026 Leak Search Engines\n\n\u003e 💥 Check if credentials, emails, or phones have been exposed in data breaches.\n\u003e\n\u003e **Pro tip:** HIBP is free and safe. DeHashed and LeakCheck offer the most data for paid tiers.\n\n| Tool | Description | Type | Link |\n|------|-------------|:----:|------|\n| **Have I Been Pwned** | Check email/phone in breaches | 🟢 Free | [haveibeenpwned.com](https://haveibeenpwned.com/) |\n| **DeHashed** | Breach search engine | 💰 Paid | [dehashed.com](https://dehashed.com/) |\n| **LeakCheck** | Email/username/phone breach search | 🟡 Freemium | [leakcheck.net](https://leakcheck.net/) |\n| **Intelligence X** | Search breaches, darknet, leaks | 💰 Paid | [intelx.io](https://intelx.io/) |\n| **BreachDirectory** | Free breach search | 🟢 Free | [breachdirectory.org](https://breachdirectory.org/) |\n| **LeakPeek** | Search leaked databases | 🟡 Freemium | [leakpeek.com](https://leakpeek.com/) |\n| **Snusbase** | Breach data search engine | 💰 Paid | [snusbase.com](https://snusbase.com/) |\n| **CheckLeaked** | Leak search engine (15B+ accounts) | 🟡 Freemium | [checkleaked.cc](https://checkleaked.cc/) |\n| **DataBreach.com** | Data breach lookup | 🟢 Free | [databreach.com](https://databreach.com/) |\n| **Hudson Rock Cavalier** | Infostealer intelligence \u0026 breach data | 🟡 Freemium | [hudsonrock.com](https://www.hudsonrock.com/free-report) |\n| **h8mail** | Automated breach hunting CLI | 🟢 Free | `pip install h8mail` |\n| **XposedOrNot** | Breach exposure check | 🟢 Free | [xposedornot.com](https://xposedornot.com/) |\n| **ScatteredSecrets** | Breach notification service | 🟡 Freemium | [scatteredsecrets.com](https://scatteredsecrets.com/) |\n| **The OSINT Rack** | Ransomware \u0026 data leak monitoring | 🟢 Free | [osintrack.com](https://osintrack.com/) |\n| **Pwndb** | Dark web breach database (Tor) | 🟢 Free | Requires Tor Browser |\n| **OsintCat** | Email, username \u0026 phone breach lookup — fast results with real data | 🟡 Freemium | [osintcat.net](https://www.osintcat.net/) |\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 Pwndb — Dark Web Breach Search (requires Tor)\u003c/b\u003e\u003c/summary\u003e\n\n```bash\n# Start Tor service first\nsudo systemctl start tor\n\n# Clone pwndb\ngit clone https://github.com/coj337/pwndb.git\ncd pwndb\n\n# Install requirements\npip install -r requirements.txt\n\n# Search by email\npython3 pwndb.py --target email@example.com\n\n# The .onion address (open in Tor Browser)\n# pwndb2am33lno4bq.onion\n```\n\u003c/details\u003e\n\n---\n\n## 10. WikiLeaks, DDoSecrets \u0026 Whistleblower Platforms\n\n\u003e 📁 Archives of leaked government, corporate, and classified documents.\n\n| Platform | Description | Link |\n|----------|-------------|------|\n| **WikiLeaks** | Leaked government \u0026 corporate documents | [wikileaks.org](https://wikileaks.org/) |\n| **DDoSecrets** | Distributed Denial of Secrets | [ddosecrets.com](https://ddosecrets.com/) |\n| **Cryptome** | Documents archive since 1996 | [cryptome.org](https://cryptome.org/) |\n| **The Intercept** | Investigative journalism | [theintercept.com](https://theintercept.com/) |\n| **SecureDrop** | Whistleblower submission system | [securedrop.org](https://securedrop.org/) |\n| **ICIJ Offshore Leaks** | Panama Papers, Pandora Papers | [offshoreleaks.icij.org](https://offshoreleaks.icij.org/) |\n| **DocumentCloud** | Public document research | [documentcloud.org](https://documentcloud.org/) |\n| **Wayback Machine** | Web archive | [web.archive.org](https://web.archive.org/) |\n| **FBI Vault** | FBI electronic reading room | [vault.fbi.gov](https://vault.fbi.gov/) |\n| **CIA Reading Room** | Declassified CIA documents | [cia.gov/readingroom](https://www.cia.gov/readingroom) |\n| **NSA Declassified** | NSA declassified records | [nsa.gov](https://nsa.gov/) |\n| **PACER** | US federal court records | [pacer.uscourts.gov](https://pacer.uscourts.gov/) |\n\n---\n\n## 11. Password Cracking \u0026 Credential Tools\n\n\u003e 🔑 Tools for authorized password auditing and credential recovery on systems you own.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **Hashcat** | Advanced password recovery (GPU-accelerated) | `apt install hashcat` |\n| **John the Ripper** | Classic password cracker | `apt install john` |\n| **Hydra** | Network login brute-forcer | `apt install hydra` |\n| **Medusa** | Parallel brute-force tool | `apt install medusa` |\n| **CeWL** | Custom wordlist generator from website | `apt install cewl` |\n| **Crunch** | Pattern-based wordlist generator | `apt install crunch` |\n| **RainbowCrack** | Rainbow table cracker | [project-rainbowcrack.com](https://project-rainbowcrack.com/) |\n| **Ophcrack** | Windows password cracker (rainbow tables) | [ophcrack.sourceforge.io](https://ophcrack.sourceforge.io/) |\n| **LaZagne** | Credentials recovery tool (post-exploit) | `git clone https://github.com/AlessandroZ/LaZagne` |\n| **Mimikatz** | Windows credential dumper | `git clone https://github.com/gentilkiwi/mimikatz` |\n| **Responder** | LLMNR/NBT-NS/MDNS poisoner | `git clone https://github.com/lgandx/Responder` |\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 Hashcat — Quick Reference\u003c/b\u003e\u003c/summary\u003e\n\n```bash\n# Install\napt install hashcat\n\n# Crack MD5 hash with wordlist\nhashcat -m 0 hash.txt /usr/share/wordlists/rockyou.txt\n\n# Crack SHA-256 with rules\nhashcat -m 1400 hash.txt wordlist.txt -r rules/best64.rule\n\n# Common hash types:\n# -m 0    = MD5\n# -m 100  = SHA-1\n# -m 1400 = SHA-256\n# -m 1800 = SHA-512crypt (Linux)\n# -m 1000 = NTLM (Windows)\n# -m 2500 = WPA/WPA2 (Wi-Fi)\n```\n\u003c/details\u003e\n\n---\n\n## 12. Dark Web Search Engines \u0026 Tools\n\n\u003e 🕶️ Search .onion sites, darknet markets, and hidden services.\n\u003e\n\u003e **Requires:** Tor Browser or Tor service running on port 9050.\n\n| Tool | Description | Link / Onion Address |\n|------|-------------|----------------------|\n| **Torch** | Oldest \u0026 largest dark web search engine | `xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion` |\n| **Haystak** | Dark web search with filtering | `haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion` |\n| **Ahmia** | Clearnet dark web search | [ahmia.fi](https://ahmia.fi/) |\n| **DuckDuckGo Onion** | Private search on Tor | `duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion` |\n| **Phobos** | Dark web search engine | `phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion` |\n| **DarkSearch** | Dark web search API (clearnet) | [darksearch.io](https://darksearch.io/) |\n| **OnionScan** | Scan \u0026 analyze .onion sites | `go install github.com/s-rah/onionscan@latest` |\n| **Dark.fail** | Verified dark web links directory | [dark.fail](https://dark.fail/) |\n| **OSINT-SPY** | OSINT tool with Tor support | `git clone https://github.com/SharadKumar97/OSINT-SPY` |\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 Setting up Tor for dark web tools\u003c/b\u003e\u003c/summary\u003e\n\n```bash\n# Install Tor\nsudo apt install tor proxychains4\n\n# Start Tor service\nsudo systemctl start tor\nsudo systemctl enable tor\n\n# Test Tor is working\ncurl --socks5 127.0.0.1:9050 https://check.torproject.org/api/ip\n\n# Use proxychains with any tool\nproxychains4 nmap -sT target.onion\nproxychains4 curl http://example.onion\n\n# Edit /etc/proxychains4.conf if needed\n# Make sure this line is present: socks5 127.0.0.1 9050\n```\n\u003c/details\u003e\n\n---\n\n## 13. Anonymous \u0026 Privacy Tools\n\n\u003e 🔒 Maintain anonymity during OSINT investigations and protect your identity.\n\u003e\n\u003e **Pro tip:** Use Tails OS for investigations requiring full anonymity — it leaves zero trace on disk.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **Tor Browser** | Anonymous web browsing | [torproject.org](https://torproject.org/) |\n| **Tails OS** | Amnesic live OS (no trace) | [tails.boum.org](https://tails.boum.org/) |\n| **Whonix** | Anonymous OS via Tor (VM-based) | [whonix.org](https://whonix.org/) |\n| **ProtonVPN** | Free encrypted VPN | [protonvpn.com](https://protonvpn.com/) |\n| **ProtonMail** | Encrypted email | [proton.me](https://proton.me/) |\n| **Signal** | Encrypted messaging | [signal.org](https://signal.org/) |\n| **OnionShare** | Anonymous file sharing via Tor | [onionshare.org](https://onionshare.org/) |\n| **Anonsurf** | Anonymize entire OS traffic | `git clone https://github.com/Und3rf10w/kali-anonsurf` |\n| **MAC Changer** | Change/spoof MAC address | `apt install macchanger` |\n| **BleachBit** | Digital footprint cleaner | [bleachbit.org](https://bleachbit.org/) |\n| **VeraCrypt** | Disk encryption | [veracrypt.fr](https://veracrypt.fr/) |\n| **KeePassXC** | Offline password manager | [keepassxc.org](https://keepassxc.org/) |\n| **Mullvad VPN** | Privacy VPN (no email needed) | [mullvad.net](https://mullvad.net/) |\n| **Anon-SMS** | Anonymous SMS sending | `git clone https://github.com/HACK3RY2J/Anon-SMS.git` |\n| **Cryptomator** | Client-side encryption for cloud-stored files | [cryptomator.org](https://cryptomator.org/) |\n| **Vaultwarden** | Self-hosted Bitwarden-compatible password server | `docker pull vaultwarden/server` |\n| **Syncthing** | Peer-to-peer file sync with no cloud middleman | [syncthing.net](https://syncthing.net/) |\n\n---\n\n## 14. Web Application OSINT \u0026 Scanning\n\n\u003e 🕸️ Fingerprint web technologies, discover hidden directories, and crawl for endpoints.\n\u003e\n\u003e **Pro tip:** Run Whatweb first to fingerprint, then Nikto for quick vulns, then Nuclei for deep scanning.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **Nikto** | Web server vulnerability scanner | `apt install nikto` |\n| **WPScan** | WordPress vulnerability scanner | `gem install wpscan` |\n| **Wappalyzer** | Technology profiler (browser ext) | Browser Extension |\n| **Whatweb** | Web technology identifier | `apt install whatweb` |\n| **Dirb** | Web directory brute-forcer | `apt install dirb` |\n| **Gobuster** | URI/DNS brute-forcer (Go) | `go install github.com/OJ/gobuster/v3@latest` |\n| **Feroxbuster** | Fast recursive content discovery | `apt install feroxbuster` |\n| **HTTPx** | Fast HTTP toolkit / probing | `go install github.com/projectdiscovery/httpx/cmd/httpx@latest` |\n| **Katana** | Web crawler | `go install github.com/projectdiscovery/katana/cmd/katana@latest` |\n| **LinkFinder** | Discover endpoints in JavaScript | `git clone https://github.com/GerbenJavado/LinkFinder` |\n| **Photon** | Web crawler for OSINT data | `git clone https://github.com/s0md3v/Photon` |\n| **Wfuzz** | Web fuzzer | `pip install wfuzz` |\n| **ParamSpider** | Parameter discovery from web archives | `pip install paramspider` |\n| **WebHack** | Web hacking toolkit | `git clone https://github.com/yan4ikyt/webhack` |\n| **Qualys SSL Labs** | Deep SSL/TLS configuration analysis | [ssllabs.com/ssltest](https://www.ssllabs.com/ssltest/) |\n| **ImmuniWeb Security Test** | Free web security \u0026 privacy test | [immuniweb.com/websec](https://www.immuniweb.com/websec/) |\n| **Pentest-Tools.com** | Hosted web vulnerability scanners | [pentest-tools.com](https://pentest-tools.com/) |\n\n---\n\n## 15. Social Engineering \u0026 Phishing\n\n\u003e 🎭 Phishing simulation frameworks for authorized red team engagements.\n\u003e\n\u003e ⚠️ **For authorized penetration testing and security awareness training ONLY.**\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **SET (Social Engineering Toolkit)** | Complete SE framework | `apt install set` |\n| **Gophish** | Enterprise phishing simulation platform | [getgophish.com](https://getgophish.com/) |\n| **Zphisher** | 30+ phishing templates | `git clone https://github.com/htr-tech/zphisher` |\n| **NexPhisher** | Multi-platform phishing tool | `git clone https://github.com/htr-tech/nexphisher` |\n| **Storm-Breaker** | Access webcam/mic/location (SE) | `git clone https://github.com/ultrasecurity/Storm-Breaker` |\n| **Evilginx2** | Man-in-the-middle reverse proxy | `go install github.com/kgretzky/evilginx2@latest` |\n| **Modlishka** | Reverse proxy phishing framework | `go install github.com/drk1wi/Modlishka@latest` |\n| **King Phisher** | Phishing campaign toolkit | [github.com/rsmusllp/king-phisher](https://github.com/rsmusllp/king-phisher) |\n| **SocialFish** | Social media phishing | `git clone https://github.com/UndeadSec/SocialFish` |\n| **AdvPhishing** | Advanced phishing tool | `git clone https://github.com/Ignitetch/AdvPhishing` |\n| **URLCADIZ** | URL masking tool | `git clone https://github.com/PerezMascato/URLCADIZ` |\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 Zphisher — Install \u0026 Usage\u003c/b\u003e\u003c/summary\u003e\n\n```bash\ngit clone https://github.com/htr-tech/zphisher.git\ncd zphisher\nchmod +x zphisher.sh\nbash zphisher.sh\n\n# Select template from menu (Facebook, Google, Instagram, etc.)\n# Tool generates a phishing URL with Cloudflare/Serveo tunnel\n# Captured credentials are saved locally\n```\n\u003c/details\u003e\n\n---\n\n## 16. Vulnerability Scanning \u0026 Exploitation\n\n\u003e 💣 Frameworks for finding and verifying vulnerabilities on authorized targets.\n\u003e\n\u003e ⚠️ **Always have written permission before running any of these tools.**\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **Metasploit** | Industry-standard pen testing framework | `apt install metasploit-framework` |\n| **Nuclei** | Template-based fast vulnerability scanner | `go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest` |\n| **SQLMap** | Automated SQL injection tool | `apt install sqlmap` |\n| **Burp Suite** | Web app security testing proxy | [portswigger.net/burp](https://portswigger.net/burp) |\n| **OWASP ZAP** | Open-source web app scanner | [zaproxy.org](https://zaproxy.org/) |\n| **OpenVAS** | Open-source vulnerability scanner | `apt install openvas` |\n| **Commix** | Command injection exploiter | `git clone https://github.com/commixproject/commix` |\n| **GoldenEye** | HTTP DoS tool (authorized load testing) | `git clone https://github.com/jseidl/GoldenEye` |\n| **ExploitDB** | Exploit database (searchsploit) | [exploit-db.com](https://www.exploit-db.com/) |\n| **Criminal IP** | Vulnerability \u0026 CVE search | [criminalip.io](https://www.criminalip.io/) |\n| **Darkmoon** | Autonomous AI pentest engine with real exploit execution | `git clone https://github.com/ASCIT31/Dark-Moon` |\n\n---\n\n## 17. Network \u0026 Wireless Tools\n\n\u003e 📶 Analyze traffic, audit Wi-Fi networks, and perform MITM on authorized targets.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **Wireshark** | Network protocol analyzer | `apt install wireshark` |\n| **Aircrack-ng** | Wi-Fi security auditing suite | `apt install aircrack-ng` |\n| **Kismet** | Wireless network detector \u0026 sniffer | `apt install kismet` |\n| **Bettercap** | MITM framework (ARP, DNS, HTTP) | `apt install bettercap` |\n| **Ettercap** | MITM attack suite | `apt install ettercap-common` |\n| **Wifite** | Automated Wi-Fi auditing tool | `apt install wifite` |\n| **Reaver** | WPS brute force tool | `apt install reaver` |\n| **Fern Wifi Cracker** | GUI-based Wi-Fi audit tool | `apt install fern-wifi-cracker` |\n| **Fluxion** | Wi-Fi social engineering (evil twin) | `git clone https://github.com/FluxionNetwork/fluxion` |\n| **hcxtools** | Wi-Fi packet capture conversion | `apt install hcxtools` |\n| **Netcat** | The TCP/IP swiss army knife | `apt install netcat-openbsd` |\n| **tcpdump** | Command-line packet analyzer | `apt install tcpdump` |\n| **mitmproxy** | Interactive HTTPS intercepting proxy | `pip install mitmproxy` |\n\n---\n\n## 18. Mobile Hacking \u0026 Phone Exploitation\n\n\u003e 📲 Android/iOS security testing for authorized assessments.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **PhoneSploit** | ADB-based phone exploitation | `git clone https://github.com/aerosol-can/PhoneSploit` |\n| **AhMyth Android RAT** | Android remote access tool | `git clone https://github.com/AhMyth/AhMyth-Android-RAT` |\n| **Apktool** | Android APK decompiler/rebuilder | `apt install apktool` |\n| **jadx** | Android APK decompiler (GUI) | `apt install jadx` |\n| **Frida** | Dynamic instrumentation toolkit | `pip install frida-tools` |\n| **Objection** | Runtime mobile exploration | `pip install objection` |\n| **MobSF** | Mobile Security Framework (static+dynamic) | [github.com/MobSF/Mobile-Security-Framework-MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF) |\n| **MSFPC** | MSF payload creator | `git clone https://github.com/g0tmi1k/msfpc` |\n\n---\n\n## 19. AI-Powered OSINT \u0026 Free AI Tools\n\n\u003e 🤖 AI tools for automating research, analyzing images, and accelerating investigations.\n\u003e\n\u003e **Pro tip:** Perplexity AI is excellent for OSINT research — it cites sources so you can verify everything.\n\n### AI-Powered OSINT Tools\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **GeoSpy** | AI geolocation from images | [geospy.ai](https://geospy.ai/) |\n| **DeepFace** | Face analysis (age, gender, emotion) | `pip install deepface` |\n| **face_recognition** | Python face recognition library | `pip install face_recognition` |\n| **OpenCV** | Computer vision library | `pip install opencv-python` |\n| **ReconAIzer** | AI-enhanced Burp Suite extension | [github.com/hisxo/ReconAIzer](https://github.com/hisxo/ReconAIzer) |\n| **AI or Not** | Detect AI-generated content | [aiornot.com](https://aiornot.com/) |\n| **HARPA AI** | AI browser agent for OSINT | [harpa.ai](https://harpa.ai/) |\n\n### Free AI Tools for OSINT Research\n\n| Tool | Description | Free Tier | Link |\n|------|-------------|:---------:|------|\n| **Claude** | Best for reasoning \u0026 analysis | ✅ Free tier | [claude.ai](https://claude.ai/) |\n| **ChatGPT** | OpenAI's AI assistant | ✅ GPT-4o mini | [chat.openai.com](https://chat.openai.com/) |\n| **Perplexity AI** | AI search with cited sources | ✅ 5 Pro/day | [perplexity.ai](https://perplexity.ai/) |\n| **Google Gemini** | Google AI with web search | ✅ Free | [gemini.google.com](https://gemini.google.com/) |\n| **DeepSeek** | Open-source, strong reasoning | ✅ Free | [chat.deepseek.com](https://chat.deepseek.com/) |\n| **Grok** | Real-time X/Twitter data | ✅ Free on X | [x.com/grok](https://x.com/grok) |\n| **Microsoft Copilot** | AI with Bing search integration | ✅ Free | [copilot.microsoft.com](https://copilot.microsoft.com/) |\n| **NotebookLM** | Google's document analysis AI | ✅ Free | [notebooklm.google.com](https://notebooklm.google.com/) |\n| **Phind** | AI search for developers | ✅ Free | [phind.com](https://www.phind.com/) |\n| **HuggingChat** | Open-source AI chat | ✅ Free | [huggingface.co/chat](https://huggingface.co/chat/) |\n\n---\n\n## 20. Financial \u0026 Corporate Intelligence\n\n\u003e 💰 Research companies, track crypto, and uncover financial relationships.\n\n| Tool | Description | Link |\n|------|-------------|------|\n| **OpenCorporates** | Global corporate database | [opencorporates.com](https://opencorporates.com/) |\n| **ICIJ Offshore Leaks** | Panama/Pandora/Paradise Papers | [offshoreleaks.icij.org](https://offshoreleaks.icij.org/) |\n| **SEC EDGAR** | US company filings | [sec.gov/edgar](https://sec.gov/edgar) |\n| **Companies House (UK)** | UK company register | [beta.companieshouse.gov.uk](https://beta.companieshouse.gov.uk/) |\n| **Aleph (OCCRP)** | Global corporate \u0026 public records | [aleph.occrp.org](https://aleph.occrp.org/) |\n| **Orbit** | Bitcoin address investigator | `git clone https://github.com/s0md3v/Orbit` |\n| **Blockchain.com** | Bitcoin explorer | [blockchain.com/explorer](https://blockchain.com/explorer) |\n| **Etherscan** | Ethereum blockchain explorer | [etherscan.io](https://etherscan.io/) |\n| **BinCheck** | Bank card BIN lookup | [bincheck.io](https://bincheck.io/) |\n| **Crunchbase** | Company/startup database | [crunchbase.com](https://crunchbase.com/) |\n| **LEI Search** | Legal Entity Identifier lookup | [search.gleif.org](https://search.gleif.org/) |\n\n---\n\n## 21. Vehicle, Property \u0026 Public Records\n\n\u003e 🚗 Access public records, vehicle history, property data, and court documents.\n\n| Tool/Service | Description | Link |\n|-------------|-------------|------|\n| **FAXVIN** | Free VIN decoder | [faxvin.com](https://faxvin.com/) |\n| **AutoCheck** | Vehicle history reports | [autocheck.com](https://autocheck.com/) |\n| **NICB VINCheck** | Stolen vehicle check | [nicb.org/vincheck](https://www.nicb.org/vincheck) |\n| **PACER** | US federal court records | [pacer.uscourts.gov](https://pacer.uscourts.gov/) |\n| **Zillow** | Property records \u0026 estimates | [zillow.com](https://zillow.com/) |\n| **Who Owns What** | NYC landlord portfolio lookup | [whoownswhat.justfix.org](https://whoownswhat.justfix.org/en/) |\n| **FOIA.gov** | Freedom of Information Act portal | [foia.gov](https://foia.gov/) |\n| **Court Listener** | Free US court opinion search | [courtlistener.com](https://courtlistener.com/) |\n\n---\n\n## 22. Metadata \u0026 Digital Forensics\n\n\u003e 🔬 Extract hidden data, recover deleted files, and analyze digital evidence.\n\u003e\n\u003e **Pro tip:** CyberChef is a must-bookmark — it handles encoding, encryption, and data manipulation all in-browser.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **Autopsy** | Full digital forensics platform | [autopsy.com](https://autopsy.com/) |\n| **Volatility** | Memory forensics framework | `pip install volatility3` |\n| **Wireshark** | Network packet analysis | `apt install wireshark` |\n| **Binwalk** | Firmware analysis \u0026 extraction | `apt install binwalk` |\n| **Foremost** | File carving (recover deleted files) | `apt install foremost` |\n| **Bulk Extractor** | Extract features from disk images | `apt install bulk-extractor` |\n| **ExifTool** | Complete metadata extraction | `apt install libimage-exiftool-perl` |\n| **Metagoofil** | Document metadata harvester | `pip install metagoofil` |\n| **CyberChef** | Data analysis swiss army knife | [gchq.github.io/CyberChef](https://gchq.github.io/CyberChef) |\n| **Scalpel** | File carving tool | `apt install scalpel` |\n\n---\n\n## 23. IP Camera \u0026 Webcam OSINT\n\n\u003e ⚠️ **WARNING:** Accessing cameras without authorization is **illegal everywhere**. This section is for educational awareness only — to understand how exposed devices are found so you can **protect them**.\n\n### Shodan Searches for Exposed Cameras\n\n| Search Query | What It Finds |\n|-------------|---------------|\n| `screenshot.label:webcam` | Webcams indexed by Shodan |\n| `port:554 has_screenshot:true` | RTSP cameras with screenshots |\n| `Server: yawcam` | Yawcam webcams |\n| `webcamXP` | WebcamXP servers |\n| `port:8080 title:\"Blue Iris\"` | Blue Iris CCTV |\n| `port:37777 \"DVR\"` | Dahua DVR systems |\n| `port:80 title:\"DVR\"` | Web-accessible DVR |\n\n### Google Dorks for Camera Discovery\n\n| Google Dork | Target |\n|------------|--------|\n| `inurl:\"viewerframe?mode=\"` | Axis network cameras |\n| `intitle:\"webcamXP 5\"` | WebcamXP 5 servers |\n| `inurl:\"videostream.cgi\"` | CGI video streams |\n| `intitle:\"Live View / - AXIS\"` | AXIS cameras |\n| `inurl:/view/view.shtml` | Mobotix cameras |\n\n---\n\n## 24. Google Dorking Bible\n\n\u003e 🔍 Advanced search operators for finding information that isn't easily discoverable.\n\u003e\n\u003e **Pro tip:** Combine multiple operators for maximum precision. Always test in a private/incognito window.\n\n### Core Operators\n\n| Operator | Description | Example |\n|----------|-------------|---------|\n| `site:` | Search within a domain | `site:example.com admin` |\n| `inurl:` | Search in URL path | `inurl:admin login` |\n| `intitle:` | Search in page title | `intitle:\"index of\" passwords` |\n| `intext:` | Search in page body | `intext:\"username\" \"password\"` |\n| `filetype:` | Search by file type | `filetype:pdf \"confidential\"` |\n| `ext:` | Search by extension | `ext:sql \"dump\"` |\n| `cache:` | View Google's cached version | `cache:example.com` |\n| `allintext:` | All terms in page body | `allintext:username password email` |\n\n### High-Value OSINT Dorks\n\n| Purpose | Google Dork |\n|---------|-------------|\n| **Exposed passwords** | `intitle:\"index of\" \"passwords.txt\"` |\n| **SQL database dumps** | `filetype:sql \"CREATE TABLE\" \"INSERT INTO\"` |\n| **Config files** | `ext:conf OR ext:cnf \"password\"` |\n| **Exposed .env files** | `intitle:\"index of\" \".env\"` |\n| **Open FTP servers** | `intitle:\"index of\" inurl:ftp` |\n| **Exposed git repos** | `intitle:\"index of\" \".git\"` |\n| **SSH private keys** | `filetype:pem \"PRIVATE KEY\"` |\n| **phpinfo pages** | `ext:php intitle:phpinfo` |\n| **Exposed log files** | `filetype:log \"password\" OR \"username\"` |\n\n### Dork Generator Tools\n\n| Tool | Link |\n|------|------|\n| **DorkSearch** | [dorksearch.com](https://dorksearch.com/) |\n| **Google Hacking DB (GHDB)** | [exploit-db.com/google-hacking-database](https://exploit-db.com/google-hacking-database) |\n| **Pagodo** | `git clone https://github.com/opsdisk/pagodo` |\n| **GooFuzz** | `git clone https://github.com/m3n0sd0n4ld/GooFuzz` |\n\n---\n\n## 25. Credential \u0026 Data Dorking\n\n\u003e 🗄️ Advanced dorks for finding inadvertently exposed sensitive data on the web.\n\n| Purpose | Google Dork |\n|---------|-------------|\n| **Gmail in spreadsheets** | `allintext:\"@gmail.com\" \"password\" filetype:xlsx` |\n| **Exposed credentials in CSV** | `filetype:csv \"email\" \"password\"` |\n| **Pastebin credential dumps** | `filetype:txt \"username\" \"password\" site:pastebin.com` |\n| **Database dumps** | `filetype:sql \"INSERT INTO\" \"password\" \"email\"` |\n| **Config files with API keys** | `filetype:env \"DB_PASSWORD\" OR \"API_KEY\" OR \"SECRET\"` |\n| **Exposed .htpasswd** | `filetype:htpasswd htpasswd` |\n| **phpMyAdmin without auth** | `inurl:phpmyadmin/index.php intitle:\"phpMyAdmin\"` |\n| **Exposed Jenkins** | `intitle:\"Dashboard [Jenkins]\" inurl:\"/login\"` |\n| **AWS keys exposed** | `filetype:pem \"AKIA\" OR \"ASIA\"` |\n| **GitHub secrets** | `site:github.com \"API_KEY\" OR \"api_secret\" filetype:env` |\n\n---\n\n## 26. IP Tracking \u0026 Geolocation Links\n\n\u003e 📍 Tools for tracking IP addresses through crafted links.\n\u003e\n\u003e ⚠️ **For authorized use only** — e.g., tracking your own email campaigns or authorized phishing simulations.\n\n| Tool | Description | Link |\n|------|-------------|------|\n| **Grabify** | IP grabber \u0026 URL shortener | [grabify.link](https://grabify.link/) |\n| **IPLogger** | IP logging URL shortener | [iplogger.org](https://iplogger.org/) |\n| **Canary Tokens** | Tracking tokens (URL, email, DNS, files) | [canarytokens.org](https://canarytokens.org/) |\n| **GetNotify** | Email open tracking + geolocation | [getnotify.com](https://getnotify.com/) |\n| **IPinfo** | IP address data API | [ipinfo.io](https://ipinfo.io/) |\n| **IP-API** | IP geolocation API | [ip-api.com](http://ip-api.com/) |\n| **MaxMind GeoIP** | IP geolocation database | [maxmind.com](https://maxmind.com/) |\n\n\u003e 💡 **Trick:** Mask a logger URL using the VK redirect:\n\u003e `https://vk.com/away.php?to=YOUR_LOGGER_URL`\n\n---\n\n## 27. Telegram OSINT Bots \u0026 Channels\n\n\u003e 💬 Telegram-based OSINT tools, bots, and intelligence communities.\n\n### OSINT Bots\n\n| Bot | Description | Handle |\n|-----|-------------|--------|\n| **Eye of God (Glaz Boga)** | Person lookup by phone/email/photo/VK | @glazzz_rus_bot |\n| **@No_BlackMail_bot** | Search email by phone number | @No_BlackMail_bot |\n| **@OverSerchBot** | Multi-search OSINT bot | @OverSerchBot |\n| **GetContact Bot** | Phone number caller ID | @getcontact_real_bot |\n| **Quick OSINT** | Fast person lookup | @Quick_OSINT_bot |\n| **@CreationDateBot** | Check Telegram account creation date | @creationdatebot |\n| **@SangMataBot** | Check username history of TG accounts | @SangMataInfo_bot |\n\n### OSINT Channels\n\n| Channel | Content | Link |\n|---------|---------|------|\n| **@overbafer1** | Hacking \u0026 cybersecurity | [t.me/overbafer1](https://t.me/overbafer1) |\n| **@Social_engineering** | Social engineering techniques | [t.me/Social_engineering](https://t.me/Social_engineering) |\n| **@cyberbezopasno** | Cybersecurity news \u0026 tools | [t.me/cyberbezopasno](https://t.me/cyberbezopasno) |\n| **@OSINT_group** | OSINT community | [t.me/OSINT_group](https://t.me/OSINT_group) |\n\n### Telegram Scraping Tools\n\n| Tool | Description | Install |\n|------|-------------|---------|\n| **Telepathy** | Telegram OSINT analysis | `pip install telepathy` |\n| **Telethon** | Python Telegram API library | `pip install telethon` |\n| **TeleGram-OSINTer** | Telegram profile investigation | `git clone https://github.com/Alb-310/TeleGram-OSINTer` |\n\n---\n\n## 28. Russian OSINT \u0026 Person Lookup Services\n\n\u003e 🇷🇺 Services widely used in Russian-speaking OSINT communities.\n\n| # | Service | Description | Link |\n|:-:|---------|-------------|------|\n| 1 | **FNS (Tax Service)** | Get INN number, check tax debts | [service.nalog.ru](https://service.nalog.ru/) |\n| 2 | **TelPoisk** | Phone directory — address by name | [telpoisk.com](https://telpoisk.com/) |\n| 3 | **GetContact** | See how number is saved by others | [getcontact.com](https://getcontact.com/) |\n| 4 | **Eye of God** | Person lookup by phone/email/photo | @glazzz_rus_bot |\n| 5 | **Search4faces** | Face search in VK \u0026 OK | [search4faces.com](https://search4faces.com/) |\n| 6 | **GetNotify** | Email tracking + geolocation | [getnotify.com](https://getnotify.com/) |\n| 7 | **BinCheck** | Card BIN lookup (bank, region) | [bincheck.io](https://bincheck.io/) |\n\n### VK (VKontakte) OSINT\n\n| Purpose | Tool/URL |\n|---------|----------|\n| **Registration data** | [regvk.com](https://regvk.com/) |\n| **FOAF data** | `https://vk.com/foaf.php?id=USER_ID` |\n| **VK page archive** | [vk.watch/ID/profile](https://vk.watch/ID/profile) |\n| **Activity tracking** | [nebaz.ru](https://nebaz.ru/) |\n| **VK tools** | [220vk.com](https://220vk.com/) |\n\n---\n\n## 29. Social Media Searcher Platforms\n\n| Tool | Description | Free? | Link |\n|------|-------------|:-----:|------|\n| **Social Searcher** | Real-time social media search | ✅ Yes | [social-searcher.com](https://www.social-searcher.com/) |\n| **Social Mention** | Social media aggregator | ✅ Yes | [socialmention.com](http://socialmention.com/) |\n| **Google Alerts** | Free web monitoring | ✅ Free | [google.com/alerts](https://www.google.com/alerts) |\n| **Who Posted What** | Facebook keyword search | ✅ Free | [whopostedwhat.com](https://whopostedwhat.com/) |\n| **Mention** | Social media \u0026 web monitoring | 🟡 Freemium | [mention.com](https://mention.com/) |\n| **Talkwalker** | Social listening \u0026 analytics | 💰 Paid | [talkwalker.com](https://www.talkwalker.com/) |\n| **BrandWatch** | Social intelligence platform | 💰 Paid | [brandwatch.com](https://www.brandwatch.com/) |\n| **Hootsuite** | Social media management | 🟡 Freemium | [hootsuite.com](https://www.hootsuite.com/) |\n\n---\n\n## 30. Termux Hacking Toolkit (Complete)\n\n\u003e 📱 Full OSINT \u0026 security toolkit setup for Android via Termux.\n\n### Initial Setup\n\n```bash\n# First-time Termux setup\npkg update -y \u0026\u0026 pkg upgrade -y\npkg install python python2 git wget curl nmap\npip install requests colorama\ntermux-setup-storage\n```\n\n### Tool List\n\n| # | Tool | Purpose | Install |\n|:-:|------|---------|---------| \n| 1 | **Sherlock** | Username OSINT | `pip install sherlock-project` |\n| 2 | **Maigret** | Username OSINT (3000+ sites) | `pip install maigret` |\n| 3 | **h8mail** | Email breach hunting | `pip install h8mail` |\n| 4 | **Zphisher** | Phishing (30+ templates) | `git clone https://github.com/htr-tech/zphisher` |\n| 5 | **NexPhisher** | Advanced phishing | `git clone https://github.com/htr-tech/nexphisher` |\n| 6 | **Storm-Breaker** | Camera/Mic/Location SE | `git clone https://github.com/ultrasecurity/Storm-Breaker` |\n| 7 | **UserRecon** | Username search | `git clone https://github.com/wishihab/userrecon` |\n| 8 | **IPGeoLocation** | IP geolocation | `git clone https://github.com/maldevel/IPGeoLocation` |\n| 9 | **Orbit** | Bitcoin address search | `git clone https://github.com/s0md3v/Orbit` |\n| 10 | **Nmap** | Network scanner | `pkg install nmap` |\n| 11 | **Hydra** | Login brute force | `pkg install hydra` |\n| 12 | **PhoneSploit** | Phone exploitation via ADB | `git clone https://github.com/aerosol-can/PhoneSploit` |\n| 13 | **fsociety** | All-in-one hacking pack | `git clone https://github.com/Manisso/fsociety` |\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 One-command Termux installer\u003c/b\u003e\u003c/summary\u003e\n\n```bash\npkg update -y \u0026\u0026 pkg upgrade -y \u0026\u0026 \\\npkg install -y python git wget curl nmap hydra perl openssh php clang make openssl \u0026\u0026 \\\npip install requests colorama sherlock-project maigret holehe h8mail \u0026\u0026 \\\ncd ~ \u0026\u0026 \\\ngit clone https://github.com/htr-tech/zphisher \u0026\u0026 \\\ngit clone https://github.com/Manisso/fsociety \u0026\u0026 \\\ngit clone https://github.com/ultrasecurity/Storm-Breaker \u0026\u0026 \\\ngit clone https://github.com/wishihab/userrecon \u0026\u0026 \\\necho \"Done! All tools installed.\"\n```\n\u003c/details\u003e\n\n---\n\n## 31. Kali Linux OSINT Toolkit\n\n\u003e 🐉 Tools pre-installed on Kali, plus recommended additions.\n\n### Pre-installed on Kali\n\n| Tool | Category | Command |\n|------|----------|---------|\n| **Nmap** | Network scanning | `nmap` |\n| **Wireshark** | Packet analysis | `wireshark` |\n| **Metasploit** | Exploitation | `msfconsole` |\n| **SQLMap** | SQL injection | `sqlmap` |\n| **Hydra** | Brute force | `hydra` |\n| **John the Ripper** | Password cracking | `john` |\n| **Hashcat** | GPU password cracking | `hashcat` |\n| **Aircrack-ng** | Wi-Fi cracking | `aircrack-ng` |\n| **Nikto** | Web scanner | `nikto` |\n| **Dirb** | Directory brute force | `dirb` |\n| **WPScan** | WordPress scanner | `wpscan` |\n| **theHarvester** | Email/subdomain OSINT | `theHarvester` |\n| **Maltego** | Visual link analysis | `maltego` |\n| **Recon-ng** | Web recon framework | `recon-ng` |\n| **SET** | Social engineering toolkit | `setoolkit` |\n| **Burp Suite** | Web proxy | `burpsuite` |\n\n### Quick Kali Setup (additional tools)\n\n```bash\n# From this repo's installer (recommended — installs everything)\nsudo bash install.sh\n\n# Or add specific tools manually:\nsudo apt update \u0026\u0026 sudo apt install -y \\\n  amass subfinder httpx nuclei gobuster feroxbuster \\\n  spiderfoot eyewitness phoneinfoga metagoofil\n\npip install maigret holehe h8mail socialscan social-analyzer \\\n  deepface face_recognition volatility3 telepathy\n```\n\n---\n\n## 32. All-in-One Hacking Frameworks\n\n\u003e 🧰 Comprehensive frameworks that bundle dozens of tools under one roof.\n\n| Framework | Description | Install |\n|-----------|-------------|---------|\n| **fsociety** | Mr. Robot-inspired hacking pack | `git clone https://github.com/Manisso/fsociety` |\n| **Hackingtool** | All-in-one tool (100+ categories) | `git clone https://github.com/Z4nzu/hackingtool` |\n| **SpiderFoot** | OSINT automation platform | `pip install spiderfoot` |\n| **Maltego** | Visual OSINT \u0026 link analysis | Pre-installed in Kali |\n| **Recon-ng** | Module-based recon framework | `pip install recon-ng` |\n| **Lazy Script** | Automated pentest helper | `git clone https://github.com/arismelachroinos/lscript` |\n| **osmedeus** | Full automated recon workflow | `git clone https://github.com/j3ssie/osmedeus` |\n\n---\n\n## 33. Wordlist Generation \u0026 Brute Force\n\n\u003e 📖 Build custom wordlists or use proven collections.\n\u003e\n\u003e **Pro tip:** CeWL is great for targeted attacks — it generates wordlists from the target's own website.\n\n| Tool | Description | Install |\n|------|-------------|---------|\n| **Crunch** | Pattern-based wordlist generator | `apt install crunch` |\n| **CeWL** | Custom wordlist from any website | `apt install cewl` |\n| **Cupp** | Profile-based wordlist generator | `git clone https://github.com/Mebus/cupp` |\n| **SecLists** | The ultimate security wordlist collection | `git clone https://github.com/danielmiessler/SecLists` |\n| **RockYou** | Classic leaked password list | Pre-installed in Kali (`/usr/share/wordlists/`) |\n| **Weakpass** | Massive wordlist collection | [weakpass.com](https://weakpass.com/) |\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e💻 Wordlist Quick Reference\u003c/b\u003e\u003c/summary\u003e\n\n```bash\n# Use RockYou (already in Kali)\n/usr/share/wordlists/rockyou.txt.gz\ngunzip /usr/share/wordlists/rockyou.txt.gz\n\n# Generate a pattern-based wordlist with Crunch\n# Format: crunch \u003cmin\u003e \u003cmax\u003e \u003ccharset\u003e\ncrunch 8 10 abcdefghijklmnopqrstuvwxyz0123456789 -o wordlist.txt\n\n# Generate custom wordlist from a target website\ncewl https://example.com -m 6 -w cewl_wordlist.txt\n\n# Profile-based wordlist (interview the target)\npython3 cupp.py -i\n```\n\u003c/details\u003e\n\n---\n\n## 34. Hardware Hacking Tools\n\n\u003e 🔧 Physical devices for authorized penetration testing and hardware security research.\n\n| Device | Description | Price |\n|--------|-------------|:-----:|\n| **Flipper Zero** | Multi-tool: RFID, NFC, IR, Sub-GHz, BadUSB | ~$170 |\n| **HackRF One** | Software-defined radio (1MHz–6GHz) | ~$300 |\n| **Proxmark3** | RFID/NFC research \u0026 cloning tool | ~$60–300 |\n| **WiFi Pineapple** | Wi-Fi auditing \u0026 rogue AP platform | ~$100–300 |\n| **USB Rubber Ducky** | USB keystroke injection device | ~$80 |\n| **Bash Bunny** | Multi-function USB attack platform | ~$120 |\n| **LAN Turtle** | Covert network access \u0026 MITM | ~$60 |\n| **RTL-SDR** | Budget software-defined radio dongle | ~$25 |\n| **Alfa AWUS036ACH** | Long-range dual-band Wi-Fi adapter | ~$50 |\n| **O.MG Cable** | USB cable with embedded implant | ~$120 |\n\n---\n\n## 35. OSINT Operating Systems\n\n\u003e 🖥️ Specialized operating systems built for security research, OSINT, and privacy.\n\n| OS | Focus | Link |\n|----|-------|------|\n| **Kali Linux** | Penetration testing (600+ tools) | [kali.org](https://kali.org/) |\n| **Parrot OS** | Security \u0026 privacy | [parrotsec.org](https://parrotsec.org/) |\n| **Tails** | Privacy \u0026 anonymity (amnesic) | [tails.boum.org](https://tails.boum.org/) |\n| **Whonix** | Anonymous OS via Tor | [whonix.org](https://whonix.org/) |\n| **CSI Linux** | OSINT \u0026 forensics focused | [csilinux.com](https://csilinux.com/) |\n| **Trace Labs OSINT VM** | OSINT-specific VM | [tracelabs.org](https://tracelabs.org/) |\n| **BlackArch** | 2800+ security tools | [blackarch.org](https://blackarch.org/) |\n| **SIFT Workstation** | SANS digital forensics | [digital-forensics.sans.org](https://digital-forensics.sans.org/) |\n| **REMnux** | Malware analysis | [remnux.org](https://remnux.org/) |\n| **Qubes OS** | Security via compartmentalization | [qubes-os.org](https://qubes-os.org/) |\n| **CommandoVM** | Windows pentest VM | [github.com/mandiant/commando-vm](https://github.com/mandiant/commando-vm) |\n\n---\n\n## 36. OSINT APIs \u0026 Developer Tools\n\n\u003e 🔌 Programmatic access to OSINT data sources for building your own tools.\n\n| API | Description | Link |\n|-----|-------------|------|\n| **Shodan API** | IoT/device search | [developer.shodan.io](https://developer.shodan.io/) |\n| **VirusTotal API** | File/URL analysis | [developers.virustotal.com](https://developers.virustotal.com/) |\n| **Hunter.io API** | Email discovery | [hunter.io/api](https://hunter.io/api) |\n| **Have I Been Pwned API** | Breach check | [haveibeenpwned.com/API](https://haveibeenpwned.com/API) |\n| **IPinfo API** | IP geolocation | [ipinfo.io/developers](https://ipinfo.io/developers) |\n| **Censys API** | Internet scanning | [search.censys.io/api](https://search.censys.io/api) |\n| **GitHub API** | Repository/user data | [api.github.com](https://api.github.com/) |\n| **Dehashed API** | Breach data search | [dehashed.com/docs](https://dehashed.com/docs) |\n| **urlscan.io API** | URL analysis | [urlscan.io/docs/api](https://urlscan.io/docs/api/) |\n| **AbuseIPDB API** | IP reputation | [abuseipdb.com/api](https://www.abuseipdb.com/api) |\n| **Google Custom Search API** | Programmable search | [developers.google.com/custom-search](https://developers.google.com/custom-search) |\n| **WhoisXML API** | Domain intelligence | [whoisxmlapi.com](https://whoisxmlapi.com/) |\n| **Criminal IP API** | Threat intelligence | [criminalip.io/developer](https://www.criminalip.io/developer) |\n| **Claude-OSINT** | Paired Claude skills for OSINT recon (90+ modules) | [github.com/elementalsouls/Claude-OSINT](https://github.com/elementalsouls/Claude-OSINT) |\n\n---\n\n## 37. Browser Extensions for OSINT\n\n\u003e 🧩 Must-have browser extensions for every OSINT investigator.\n\n| Extension | Description | Browser |\n|-----------|-------------|:-------:|\n| **Search by Image** | Multi-engine reverse image search | Chrome / Firefox |\n| **Wappalyzer** | Technology stack detector | Chrome / Firefox |\n| **Shodan** | Server info on any website | Chrome / Firefox |\n| **Wayback Machine** | View archived pages instantly | Chrome / Firefox |\n| **EXIF Viewer** | View image metadata | Chrome / Firefox |\n| **User-Agent Switcher** | Change browser identity | Chrome / Firefox |\n| **FoxyProxy** | Proxy management | Chrome / Firefox |\n| **Hunchly** | OSINT web capture \u0026 case manager | Chrome |\n| **InVID/WeVerify** | Video/image verification | Chrome / Firefox |\n| **SingleFile** | Save complete web pages | Chrome / Firefox |\n\n---\n\n## 38. OSINT Learning Resources\n\n\u003e 📚 The best resources for learning OSINT — from beginner to professional.\n\n| Resource | Type | Link |\n|----------|------|------|\n| **OSINT Framework** | Interactive tool directory | [osintframework.com](https://osintframework.com/) |\n| **IntelTechniques** | Michael Bazzell's resources \u0026 podcast | [inteltechniques.com](https://inteltechniques.com/) |\n| **Bellingcat** | OSINT investigative journalism | [bellingcat.com](https://bellingcat.com/) |\n| **Trace Labs** | OSINT for missing persons CTFs | [tracelabs.org](https://tracelabs.org/) |\n| **OSINT Curious Project** | Community \u0026 training | [osintcurio.us](https://osintcurio.us/) |\n| **Sector035 Week in OSINT** | Weekly OSINT newsletter | [sector035.nl](https://sector035.nl/) |\n| **OSINT Dojo** | Training platform \u0026 challenges | [osintdojo.com](https://osintdojo.com/) |\n| **CTF Time** | Hands-on CTF competitions | [ctftime.org](https://ctftime.org/) |\n| **GIJN** | Global Investigative Journalism Network | [gijn.org](https://gijn.org/) |\n| **SANS OSINT** | Professional cyber training | [sans.org](https://sans.org/) |\n\n### 📺 YouTube Channels\n\n| Channel | Focus |\n|---------|-------|\n| **John Hammond** | Cybersecurity \u0026 CTFs |\n| **The Cyber Mentor** | Ethical hacking |\n| **David Bombal** | Networking \u0026 security |\n| **NetworkChuck** | Cybersecurity tutorials |\n| **HackerSploit** | Penetration testing |\n| **Null Byte** | Hacking tutorials |\n| **13Cubed** | DFIR \u0026 forensics |\n\n---\n\n## 39. Awesome OSINT GitHub Repos\n\n\u003e ⭐ The best curated OSINT resource lists on GitHub.\n\n| Repository | Stars | Link |\n|-----------|:-----:|------|\n| **jivoi/awesome-osint** | 20k+ | [github.com/jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) |\n| **danielmiessler/SecLists** | 55k+ | [github.com/danielmiessler/SecLists](https://github.com/danielmiessler/SecLists) |\n| **Z4nzu/hackingtool** | 40k+ | [github.com/Z4nzu/hackingtool](https://github.com/Z4nzu/hackingtool) |\n| **cipher387/osint_stuff_tool_collection** | 6k+ | [github.com/cipher387/osint_stuff_tool_collection](https://github.com/cipher387/osint_stuff_tool_collection) |\n| **Manisso/fsociety** | 10k+ | [github.com/Manisso/fsociety](https://github.com/Manisso/fsociety) |\n| **sinwindie/OSINT** | 3k+ | [github.com/sinwindie/OSINT](https://github.com/sinwindie/OSINT) |\n| **Astrosp/Awesome-OSINT-For-Everything** | 2k+ | [github.com/Astrosp/Awesome-OSINT-For-Everything](https://github.com/Astrosp/Awesome-OSINT-For-Everything) |\n| **tracelabs/awesome-osint** | 1k+ | [github.com/tracelabs/awesome-osint](https://github.com/tracelabs/awesome-osint) |\n| **apurvsinghgautam/dark-web-osint-tools** | 2k+ | [github.com/apurvsinghgautam/dark-web-osint-tools](https://github.com/apurvsinghgautam/dark-web-osint-tools) |\n| **DFW1N/DFW1N-OSINT** | 400+ | [github.com/DFW1N/DFW1N-OSINT](https://github.com/DFW1N/DFW1N-OSINT) |\n\n---\n\n## 40. One-Click Install Scripts\n\n### 🐉 Kali Linux — Full Arsenal\n\n```bash\n# Option 1: Direct from this repo (one command)\ncurl -sL https://raw.githubusercontent.com/rawfilejson/awesome-osint-arsenal/main/install.sh | sudo bash\n\n# Option 2: Clone first (recommended — inspect before running)\ngit clone https://github.com/rawfilejson/awesome-osint-arsenal.git\ncd awesome-osint-arsenal\nsudo bash install.sh\n```\n\n### 📱 Termux (Android)\n\n```bash\npkg update -y \u0026\u0026 pkg upgrade -y\npkg install -y python git wget curl nmap hydra perl openssh php clang make openssl\npip install requests colorama sherlock-project maigret holehe h8mail\ncd ~ \u0026\u0026 git clone https://github.com/htr-tech/zphisher \u0026\u0026 git clone https://github.com/Manisso/fsociety\n```\n\n### 🔧 Manual Kali Snippet\n\n```bash\nsudo apt update \u0026\u0026 sudo apt upgrade -y\nsudo apt install -y git python3 python3-pip golang-go nmap wireshark \\\n  sqlmap hydra john hashcat aircrack-ng nikto dirb wpscan \\\n  theharvester maltego spiderfoot set exiftool masscan whatweb \\\n  gobuster feroxbuster wfuzz libimage-exiftool-perl binwalk \\\n  foremost bulk-extractor macchanger tor proxychains4\n\npip3 install sherlock-project maigret holehe h8mail socialscan \\\n  social-analyzer phoneinfoga snscrape instaloader deepface \\\n  face_recognition volatility3 blackbird-osint nexfil \\\n  socid-extractor osrframework telepathy twayback toutatis \\\n  dnstwist waybackpy trufflehog\n\ncd /opt\nsudo git clone https://github.com/Manisso/fsociety\nsudo git clone https://github.com/Z4nzu/hackingtool\nsudo git clone https://github.com/ultrasecurity/Storm-Breaker\nsudo git clone https://github.com/htr-tech/zphisher\nsudo git clone https://github.com/s0md3v/Orbit\nsudo git clone https://github.com/s0md3v/Photon\nsudo git clone https://github.com/danielmiessler/SecLists\nsudo git clone https://github.com/lgandx/Responder\nsudo git clone https://github.com/commixproject/commix\nsudo git clone https://github.com/opsdisk/pagodo\nsudo git clone https://github.com/RedSiege/EyeWitness\n```\n\n---\n\n## 41. Top 50 Must-Have Tools (Quick Reference)\n\n| # | Tool | Category | Install |\n|:-:|------|----------|---------|\n| 1 | **Sherlock** | Username OSINT | `pip install sherlock-project` |\n| 2 | **Maigret** | Username OSINT (3000+ sites) | `pip install maigret` |\n| 3 | **h8mail** | Email breach hunting | `pip install h8mail` |\n| 4 | **Holehe** | Email registration check | `pip install holehe` |\n| 5 | **theHarvester** | Domain/email recon | `apt install theharvester` |\n| 6 | **PhoneInfoga** | Phone number OSINT | See install guide |\n| 7 | **Nmap** | Network scanning | `apt install nmap` |\n| 8 | **Amass** | DNS enumeration | `go install ...amass@master` |\n| 9 | **Subfinder** | Subdomain discovery | `go install ...subfinder@latest` |\n| 10 | **Nuclei** | Vulnerability scanning | `go install ...nuclei@latest` |\n| 11 | **SQLMap** | SQL injection | `apt install sqlmap` |\n| 12 | **Metasploit** | Exploitation framework | `apt install metasploit-framework` |\n| 13 | **Hashcat** | Password cracking (GPU) | `apt install hashcat` |\n| 14 | **Hydra** | Login brute force | `apt install hydra` |\n| 15 | **Wireshark** | Network analysis | `apt install wireshark` |\n| 16 | **Aircrack-ng** | Wi-Fi security | `apt install aircrack-ng` |\n| 17 | **Burp Suite** | Web proxy/testing | [portswigger.net](https://portswigger.net/) |\n| 18 | **SpiderFoot** | OSINT automation | `pip install spiderfoot` |\n| 19 | **Maltego** | Visual link analysis | Pre-installed in Kali |\n| 20 | **Recon-ng** | Recon framework | `pip install recon-ng` |\n| 21 | **PimEyes** | Face search engine | [pimeyes.com](https://pimeyes.com/) |\n| 22 | **Shodan** | IoT device search | [shodan.io](https://shodan.io/) |\n| 23 | **Censys** | Internet scanning | [censys.io](https://censys.io/) |\n| 24 | **Zphisher** | Phishing tool | `git clone .../zphisher` |\n| 25 | **Storm-Breaker** | Camera/mic SE tool | `git clone .../Storm-Breaker` |\n| 26 | **ExifTool** | Image metadata | `apt install libimage-exiftool-perl` |\n| 27 | **Autopsy** | Digital forensics | [autopsy.com](https://autopsy.com/) |\n| 28 | **Volatility** | Memory forensics | `pip install volatility3` |\n| 29 | **Tor Browser** | Anonymous browsing | [torproject.org](https://torproject.org/) |\n| 30 | **DeHashed** | Breach search engine | [dehashed.com](https://dehashed.com/) |\n| 31 | **Have I Been Pwned** | Breach checker | [haveibeenpwned.com](https://haveibeenpwned.com/) |\n| 32 | **fsociety** | All-in-one framework | `git clone .../fsociety` |\n| 33 | **Hackingtool** | 100+ tools in one | `git clone .../hackingtool` |\n| 34 | **SecLists** | Security wordlists | `git clone .../SecLists` |\n| 35 | **Osintgram** | Instagram OSINT | `git clone .../Osintgram` |\n| 36 | **VirusTotal** | Malware/file analysis | [virustotal.com](https://virustotal.com/) |\n| 37 | **Canary Tokens** | IP tracking tokens | [canarytokens.org](https://canarytokens.org/) |\n| 38 | **CyberChef** | Data analysis tool | [gchq.github.io/CyberChef](https://gchq.github.io/CyberChef) |\n| 39 | **DeepFace** | AI face analysis | `pip install deepface` |\n| 40 | **dnsrecon** | DNS enumeration | `pip install dnsrecon` |\n| 41 | **Gobuster** | Directory brute-force | `go install ...gobuster@latest` |\n| 42 | **HTTPx** | HTTP probing | `go install ...httpx@latest` |\n| 43 | **EyeWitness** | Web screenshots | `git clone .../EyeWitness` |\n| 44 | **Responder** | LLMNR/NBT-NS poisoner | `git clone .../Responder` |\n| 45 | **Bettercap** | MITM framework | `apt install bettercap` |\n| 46 | **Photon** | Web OSINT crawler | `git clone .../Photon` |\n| 47 | **Perplexity AI** | AI research assistant | [perplexity.ai](https://perplexity.ai/) |\n| 48 | **GeoSpy** | AI image geolocation | [geospy.ai](https://geospy.ai/) |\n| 49 | **osmedeus** | Full recon workflow | `git clone .../osmedeus` |\n| 50 | **trufflehog** | Git secret scanner | `pip install trufflehog` |\n\n---\n\n\n\u003cdiv align=\"center\"\u003e\n\n☕ *Liked everything above? Section 42-50 just dropped — fuel the next batch:*\n\n\u003ca href=\"https://www.buymeacoffee.com/rawfilejson\" target=\"_blank\"\u003e\u003cimg src=\"https://cdn.buymeacoffee.com/buttons/v2/default-yellow.png\" alt=\"Buy Me a Coffee\" style=\"height: 60px !important;width: 217px !important;\" \u003e\u003c/a\u003e\n\n\u003c/div\u003e\n\n---\n\n## 42. ⚔️ Red Team \u0026 Offensive Security\n\n\u003e C2 frameworks, AD attacks, exploitation kits, post-exploitation. Authorized testing only.\n\u003e\n\u003e **Pro tip:** Sliver and Havoc are the modern open-source Cobalt Strike alternatives — start there before paying.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **AD Attack \u0026 Defense** | Comprehensive Active Directory attack reference | `git clone https://github.com/infosecn1nja/AD-Attack-Defense.git` |\n| **Arjun** | HTTP parameter discovery suite | `pip3 install arjun` |\n| **BloodHound** | AD attack-path graph analysis | `git clone https://github.com/BloodHoundAD/BloodHound.git` |\n| **BloodHound CE** | Community Edition of BloodHound — modernized stack | `docker pull specterops/bloodhound:latest` |\n| **[Brute Ratel C4](https://bruteratel.com)** | Premium C2 with strong AV/EDR evasion | [bruteratel.com](https://bruteratel.com) |\n| **Certipy** | Active Directory Certificate Services enumeration and abuse | `pip3 install certipy-ad` |\n| **[Cobalt Strike](https://www.cobaltstrike.com)** | Premium adversary simulation / red team framework | [cobaltstrike.com](https://www.cobaltstrike.com) |\n| **CrackMapExec** | Post-exploitation tool for AD networks | `pip3 install crackmapexec` |\n| **CRLFuzz** | Fast CRLF-injection scanner in Go | `go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latest` |\n| **Dalfox** | Fast, intelligent XSS scanner | `go install github.com/hahwul/dalfox/v2@latest` |\n| **Evil-WinRM** | Ultimate WinRM shell for hacking/pentesting | `apt install evil-winrm` |\n| **Ghauri** | Advanced cross-platform tool to detect/exploit SQLi | `git clone https://github.com/r0oth3x49/ghauri.git` |\n| **Gxss** | Test parameters for cross-site scripting reflection | `go install github.com/KathanP19/Gxss@latest` |\n| **[HackTricks](https://book.hacktricks.xyz)** | Pentesting / hacking knowledge base by carlospolop | [book.hacktricks.xyz](https://book.hacktricks.xyz) |\n| **Havoc** | Modern, malleable post-exploitation C2 framework | `git clone https://github.com/HavocFramework/Havoc.git` |\n| **Impacket** | Python classes for working with network protocols (Windows attacks) | `pip3 install impacket` |\n| **Kerbrute** | Tool for performing Kerberos pre-auth bruteforcing | `go install github.com/ropnop/kerbrute@latest` |\n| **kiterunner** | Contextual content-discovery for modern API endpoints | `go install github.com/assetnote/kiterunner/cmd/kr@latest` |\n| **Merlin** | Cross-platform HTTP/2 post-exploitation server and agent in Go | `go install github.com/Ne0nd0g/merlin@latest` |\n| **Metasploit Framework** | Industry-standard exploitation framework with 2000+ modules | `apt install metasploit-framework` |\n| **Mythic** | Cross-platform, post-exploit, multi-user red team framework | `git clone https://github.com/its-a-feature/Mythic.git` |\n| **NetExec (nxc)** | CrackMapExec maintained successor — AD network exploitation | `pip3 install git+https://github.com/Pennyw0rth/NetExec` |\n| **[Nighthawk](https://www.mdsec.co.uk/nighthawk/)** | Premium evasive C2 by MDSec (Cobalt Strike alt) | [mdsec.co.uk](https://www.mdsec.co.uk/nighthawk/) |\n| **NoSQLMap** | Automated NoSQL database enumeration and exploitation | `git clone https://github.com/codingo/NoSQLMap.git` |\n| **Nuclei Templates** | Community-curated templates for Nuclei | `git clone https://github.com/projectdiscovery/nuclei-templates.git` |\n| **ParamMiner (Burp ext)** | Discover hidden, unlinked HTTP parameters in Burp | `git clone https://github.com/PortSwigger/param-miner.git` |\n| **PayloadsAllTheThings** | Web app pentest payloads, bypasses, and methodology | `git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git` |\n| **PetitPotam** | PoC tool to coerce Windows hosts to authenticate to attacker | `git clone https://github.com/topotam/PetitPotam.git` |\n| **PowerShell Empire** | Post-exploitation framework with PS-based agents | `git clone https://github.com/BC-SECURITY/Empire.git` |\n| **Rubeus** | C# toolset for raw Kerberos interaction and abuse | `git clone https://github.com/GhostPack/Rubeus.git` |\n| **SharpHound** | C# data collector for BloodHound | `git clone https://github.com/BloodHoundAD/SharpHound.git` |\n| **Sliver** | Open-source adversary emulation/red-team framework (Cobalt Strike alt) | `go install github.com/bishopfox/sliver/server@latest` |\n| **SSRFmap** | Automated SSRF detection and exploitation framework | `git clone https://github.com/swisskyrepo/SSRFmap.git` |\n| **Villain** | High-level stage 0/1 C2 framework for handling sibling agents | `git clone https://github.com/t3l3machus/Villain.git` |\n| **XSStrike** | Advanced XSS scanner with crawler and payload generator | `git clone https://github.com/s0md3v/XSStrike.git` |\n\n---\n\n## 43. 🛡️ Blue Team \u0026 Defensive Security\n\n\u003e SIEM, EDR, network monitoring, detection engineering, IR.\n\u003e\n\u003e **Pro tip:** Wazuh is your free Splunk replacement. Pair it with Sigma rules + Suricata for a full SOC stack on commodity hardware.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **Atomic Red Team** | Library of small detection-test scripts mapped to MITRE ATT\u0026CK | `git clone https://github.com/redcanaryco/atomic-red-team.git` |\n| **Chainsaw** | Hunt threats in Windows event logs — fast forensics | `git clone https://github.com/WithSecureLabs/chainsaw.git` |\n| **Cortex (TheHive)** | Observable analysis and active response engine | `docker pull thehiveproject/cortex:latest` |\n| **Elastic Stack (ELK)** | Elasticsearch + Logstash + Kibana — log analytics | `docker pull docker.elastic.co/elasticsearch/elasticsearch:latest` |\n| **Falco** | Cloud-native runtime security | `git clone https://github.com/falcosecurity/falco.git` |\n| **Graylog** | Open-source log management / SIEM | `docker pull graylog/graylog:latest` |\n| **Hayabusa** | Windows event log fast forensics timeline generator | `git clone https://github.com/Yamato-Security/hayabusa.git` |\n| **Loki** | Simple IOC and YARA scanner by Florian Roth | `git clone https://github.com/Neo23x0/Loki.git` |\n| **[MITRE ATT\u0026CK](https://attack.mitre.org)** | Adversary tactics, techniques, and procedures knowledge base | [attack.mitre.org](https://attack.mitre.org) |\n| **MITRE CALDERA** | Cyber adversary emulation platform | `git clone https://github.com/mitre/caldera.git` |\n| **[MITRE D3FEND](https://d3fend.mitre.org)** | Defensive countermeasure knowledge graph | [d3fend.mitre.org](https://d3fend.mitre.org) |\n| **osquery** | SQL-powered OS instrumentation/monitoring/analytics | `apt install osquery` |\n| **RITA** | Real Intelligence Threat Analytics — beaconing/long-conn detection | `git clone https://github.com/activecm/rita.git` |\n| **[Security Onion](https://securityonionsolutions.com)** | Linux distro for threat hunting, monitoring, and log management | [securityonionsolutions.com](https://securityonionsolutions.com) |\n| **Sigma** | Generic signature format for SIEM detections | `git clone https://github.com/SigmaHQ/sigma.git` |\n| **sigma-cli** | Convert Sigma rules to native SIEM queries | `pip3 install sigma-cli` |\n| **Snort** | Open-source intrusion-prevention/detection system | `apt install snort` |\n| **Suricata** | High-perf network IDS / IPS / NSM | `apt install suricata` |\n| **TheHive** | Scalable, free, open-source case management for SOCs | `docker pull strangebee/thehive:latest` |\n| **Tracee** | Runtime security and forensics using eBPF (Aqua) | `git clone https://github.com/aquasecurity/tracee.git` |\n| **Velociraptor** | Endpoint visibility and digital forensics — query-driven | `git clone https://github.com/Velocidex/velociraptor.git` |\n| **[Velociraptor Server](https://docs.velociraptor.app)** | Centralized server for Velociraptor agents | [docs.velociraptor.app](https://docs.velociraptor.app) |\n| **Wazuh** | Open-source XDR / SIEM platform | `git clone https://github.com/wazuh/wazuh.git` |\n| **Zeek (Bro)** | Powerful network analysis framework for security monitoring | `apt install zeek` |\n\n---\n\n## 44. 🛰️ Threat Intel Platforms\n\n\u003e CTI platforms — open-source and enterprise.\n\u003e\n\u003e **Pro tip:** MISP is free and powerful. OpenCTI gives you a STIX2-native graph DB. Both run as Docker stacks.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **[Anomali ThreatStream](https://www.anomali.com)** | Enterprise threat intel aggregation platform | [anomali.com](https://www.anomali.com) |\n| **[CrowdStrike Falcon Intelligence](https://www.crowdstrike.com/products/threat-intelligence/)** | Premium adversary intel from CrowdStrike | [crowdstrike.com](https://www.crowdstrike.com/products/threat-intelligence/) |\n| **[Digital Shadows SearchLight](https://www.reliaquest.com)** | Brand protection + dark web monitoring (now ReliaQuest GreyMatter DRP) | [reliaquest.com](https://www.reliaquest.com) |\n| **[EclecticIQ Intelligence Center](https://www.eclecticiq.com)** | STIX/TAXII-native threat intel platform | [eclecticiq.com](https://www.eclecticiq.com) |\n| **[Flashpoint](https://flashpoint.io)** | Business risk intel from criminal forums and dark web | [flashpoint.io](https://flashpoint.io) |\n| **[Intel471](https://intel471.com)** | Premium adversary intelligence and underground monitoring platform | [intel471.com](https://intel471.com) |\n| **[IntSights](https://intsights.com)** | External threat protection and intel (now part of Rapid7) | [intsights.com](https://intsights.com) |\n| **[KELA](https://kelacyber.com)** | Cybercrime intelligence and dark-web monitoring | [kelacyber.com](https://kelacyber.com) |\n| **[Mandiant Advantage](https://www.mandiant.com/advantage)** | Threat intel from Google's Mandiant team | [mandiant.com](https://www.mandiant.com/advantage) |\n| **OpenCTI** | Open-source CTI platform structured around STIX2 | `docker pull opencti/platform` |\n| **[SOCRadar](https://socradar.io)** | Extended threat intel — attack surface + dark web + brand | [socradar.io](https://socradar.io) |\n| **[ThreatConnect](https://threatconnect.com)** | Threat intel platform combining intel and SOAR | [threatconnect.com](https://threatconnect.com) |\n| **[ThreatQ](https://www.threatq.com)** | Threat intel platform for SOCs | [threatq.com](https://www.threatq.com) |\n| **Yeti** | Open distributed threat intelligence platform | `git clone https://github.com/yeti-platform/yeti.git` |\n| **[ThreatFox](https://threatfox.abuse.ch)** | Free IOC database by abuse.ch | [threatfox.abuse.ch](https://threatfox.abuse.ch/) |\n| **[Validin](https://validin.com)** | DNS \u0026 threat intelligence search | [validin.com](https://validin.com/) |\n| **[Maltiverse](https://maltiverse.com)** | Free IOC search across 100+ threat-intel sources | [maltiverse.com](https://maltiverse.com/) |\n\n---\n\n## 45. 🔬 Digital Forensics \u0026 Reverse Engineering\n\n\u003e Disk/memory forensics, malware reverse engineering, timeline tools, binary analysis.\n\u003e\n\u003e **Pro tip:** Volatility 3 + Plaso (log2timeline) + KAPE = the modern DFIR triage stack. Ghidra \u003e IDA Free for static analysis.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **[Binary Ninja](https://binary.ninja)** | Modern reverse engineering platform with API | [binary.ninja](https://binary.ninja) |\n| **Cutter** | GUI for radare2/rizin reverse-engineering | `git clone https://github.com/rizinorg/cutter.git` |\n| **Dissect** | Fox-IT framework for fast forensic image analysis | `pip3 install dissect` |\n| **[Eric Zimmerman's Tools](https://ericzimmerman.github.io)** | Suite of free Windows DFIR utilities | [ericzimmerman.github.io](https://ericzimmerman.github.io) |\n| **[FTK Imager](https://www.exterro.com/ftk-imager)** | Forensic disk imaging tool by AccessData | [exterro.com](https://www.exterro.com/ftk-imager) |\n| **Ghidra** | NSA's open-source software reverse engineering suite | `git clone https://github.com/NationalSecurityAgency/ghidra.git` |\n| **[IDA Free](https://hex-rays.com/ida-free/)** | Free version of IDA disassembler/decompiler | [hex-rays.com](https://hex-rays.com/ida-free/) |\n| **[KAPE](https://www.kroll.com/kape)** | Kroll Artifact Parser and Extractor — fast triage collection | [kroll.com](https://www.kroll.com/kape) |\n| **PhotoRec** | File data recovery — focuses on multimedia | `apt install testdisk` |\n| **Plaso (log2timeline)** | Super-timeline creation from forensic artifacts | `pip3 install plaso` |\n| **radare2** | Reverse engineering framework | `apt install radare2` |\n| **RegRipper** | Open-source Windows registry parsing tool | `git clone https://github.com/keydet89/RegRipper3.0.git` |\n| **Rekall** | Memory forensics tooling (legacy fork of Volatility) | `pip3 install rekall` |\n| **rizin** | Modern fork of radare2 with cleaner API | `git clone https://github.com/rizinorg/rizin.git` |\n| **The Sleuth Kit** | Library and CLI tools for forensic disk analysis | `apt install sleuthkit` |\n| **Volatility 3** | Memory forensics framework | `pip3 install volatility3` |\n| **x64dbg** | Open-source Windows x64/x32 debugger | `git clone https://github.com/x64dbg/x64dbg` |\n| **dnSpy (dnSpyEx)** | .NET debugger \u0026 assembly editor | `git clone https://github.com/dnSpyEx/dnSpy` |\n| **Detect It Easy** | File type \u0026 packer detection | `git clone https://github.com/horsicq/Detect-It-Easy` |\n| **capa** | Detect capabilities in executables | `pip install flare-capa` |\n\n---\n\n## 46. 🎓 Training, Labs \u0026 CTF\n\n\u003e Hands-on practice — paid platforms and free local labs.\n\u003e\n\u003e **Pro tip:** Free path: TryHackMe → PortSwigger Academy → HackTheBox retired boxes. Paid path: HTB Academy + OffSec PG.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **[BugBountyHunter](https://www.bugbountyhunter.com)** | Web hacking training and labs | [bugbountyhunter.com](https://www.bugbountyhunter.com) |\n| **[CTFtime](https://ctftime.org)** | Calendar of upcoming and past CTF events | [ctftime.org](https://ctftime.org) |\n| **[Cybrary](https://www.cybrary.it)** | Free + paid cybersecurity courses | [cybrary.it](https://www.cybrary.it) |\n| **DVWA** | Damn Vulnerable Web Application — classic appsec lab | `git clone https://github.com/digininja/DVWA.git` |\n| **[Hack The Box](https://www.hackthebox.com)** | Online pentesting labs and CTFs | [hackthebox.com](https://www.hackthebox.com) |\n| **[Hacker101](https://www.hacker101.com)** | Free HackerOne course library and CTF | [hacker101.com](https://www.hacker101.com) |\n| **[Immersive Labs](https://www.immersivelabs.com)** | Cyber skills platform with hands-on exercises | [immersivelabs.com](https://www.immersivelabs.com) |\n| **[Metasploitable](https://docs.rapid7.com/metasploit/metasploitable-2/)** | Intentionally vulnerable Linux VM for Metasploit practice | [docs.rapid7.com](https://docs.rapid7.com/metasploit/metasploitable-2/) |\n| **[OffSec Proving Grounds](https://www.offsec.com/labs/individual/)** | OSCP-style training labs by Offensive Security | [offsec.com](https://www.offsec.com/labs/individual/) |\n| **[OverTheWire Wargames](https://overthewire.org)** | Free wargames for learning offensive security from scratch | [overthewire.org](https://overthewire.org) |\n| **OWASP Juice Shop** | Modern, intentionally insecure web app — covers OWASP Top 10 | `docker pull bkimminich/juice-shop` |\n| **OWASP WebGoat** | Deliberately insecure Java-based web app for training | `docker pull webgoat/webgoat` |\n| **[PentesterLab](https://pentesterlab.com)** | Hands-on web-app pentesting training | [pentesterlab.com](https://pentesterlab.com) |\n| **[picoCTF](https://picoctf.org)** | Free CTF and learning platform built by CMU | [picoctf.org](https://picoctf.org) |\n| **[PortSwigger Web Security Academy](https://portswigger.net/web-security)** | Free, world-class web security training (by Burp Suite team) | [portswigger.net](https://portswigger.net/web-security) |\n| **[pwn.college](https://pwn.college)** | Free college-level cybersecurity education from ASU | [pwn.college](https://pwn.college) |\n| **PwnedHub** | Intentionally-vulnerable web app for hands-on appsec training | `git clone https://github.com/practisec/pwnedhub.git` |\n| **[Root-Me](https://www.root-me.org)** | 500+ challenges and 100+ virtual labs | [root-me.org](https://www.root-me.org) |\n| **[TryHackMe](https://tryhackme.com)** | Beginner-friendly cybersecurity training platform | [tryhackme.com](https://tryhackme.com) |\n| **[VulnHub](https://www.vulnhub.com)** | Free downloadable vulnerable VMs for offline practice | [vulnhub.com](https://www.vulnhub.com) |\n| **[VulnYX](https://vulnyx.com)** | Online platform with vulnerable boxes (free + premium) | [vulnyx.com](https://vulnyx.com) |\n\n---\n\n## 47. 🎯 Bug Bounty Platforms\n\n\u003e Where to actually earn money from your skills.\n\u003e\n\u003e **Pro tip:** Start on Bugcrowd or YesWeHack public programs — easier triage and lower competition than HackerOne H1.\n\n| Tool | Description | Install / Link |\n|------|-------------|----------------|\n| **[Bugbase](https://bugbase.ai)** | Indian-origin bug-bounty + vulnerability disclosure platform | [bugbase.ai](https://bugbase.ai) |\n| **[Bugcrowd](https://bugcrowd.com)** | Crowdsourced security platform — bug bounty + pentesting | [bugcrowd.com](https://bugcrowd.com) |\n| **[Disclose.io](https://disclose.io)** | Standardized vulnerability-disclosure language and tools | [disclose.io](https://disclose.io) |\n| **[HackerOne](https://hackerone.com)** | Largest bug-bounty platform — public and private programs | [hackerone.com](https://hackerone.com) |\n| **[HackTrophy](https://hacktrophy.com)** | European bug-bounty platform | [hacktrophy.com](https://hacktrophy.com) |\n| **[Immunefi](https://immunefi.com)** | Web3 / crypto-focused bug bounty platform | [immunefi.com](https://immunefi.com) |\n| **[Intigriti](https://www.intigriti.com)** | European bug-bounty platform with fast triage | [intigriti.com](https://www.intigriti.com) |\n| **[Open Bug Bounty](https://www.openbugbounty.org)** | Free coordinated-disclosure platform | [openbugbounty.org](https://www.openbugbounty.org) |\n| **[Public Bug Bounty Programs (chaos)](https://chaos.projectdiscovery.io)** | ProjectDiscovery's free BBH program list | [chaos.projectdiscovery.io](https://chaos.projectdiscovery.io) |\n| **[Synack](https://www.synack.com)** | Crowdsourced + vetted-researcher pentesting platform | [synack.com](https://www.synack.com) |\n| **[YesWeHack](https://www.yeswehack.com)** | European-based bug-bounty and VDP platform | [yeswehack.com](https://www.yeswehack.com) |\n| **[Zerodium](https://zerodium.com)** | Premium 0day acquisition platform | [zerodium.com](https://zerodium.com) |\n\n---\n\n## 48. 📚 Learning Resources\n\n\u003e Books, courses, blogs, YouTube channels, awesome lists.\n\u003e\n\u003e **Pro tip:** IppSec.rocks indexes EVERY HackTheBox walkthrough — search any retired box a","projects_url":"https://awesome.ecosyste.ms/api/v1/lists/rawfilejson%2Fawesome-osint-arsenal/projects"}