awesome-osint

A curated list of 360+ OSINT tools: people search, domains, social media, geolocation, breach data, forensics, and frameworks
https://github.com/edwardtay/awesome-osint

Last synced: 14 days ago
JSON representation

🧩 Browser Extensions & Bookmarklets
- Web Archives
- Search by Image - image search any picture across many engines from the context menu. |
- RevEye - click reverse image search via Google, Bing, Yandex, TinEye and Baidu. |
- Vortimo OSINT Tool
- Distill Web Monitor
🏛️ Business, Records & Archives
- Aleph (OCCRP)
- OpenCorporates
- ICIJ Offshore Leaks
- SEC EDGAR
- UK Companies House
- GLEIF LEI Search
- LittleSis
- Wayback Machine
- archive.today - demand web-page archiver that captures and freezes a snapshot of a URL for evidence. |
- OpenSanctions
- North Data
- Pappers
- EU BRIS - state business registers. |
- Unternehmensregister
- Rusprofile
- Zauba Corp
- Tianyancha - information platform (ownership, shareholders, litigation). |
- ACRA BizFile
- Equasis
- CourtListener
- judyrecords - text search across hundreds of millions of US court cases. |
- Sayari - network and trade-risk graph across global registries. |
☁️ Cloud, IoT & Web Recon
- S3Scanner - compatible APIs and dumps permissions. |
- cloud_enum - cloud OSINT tool enumerating public AWS, Azure, and GCP resources. |
- CloudBrute
- cloudlist
- GCPBucketBrute - escalation paths. |
- ScoutSuite - cloud security auditing tool that surfaces misconfigured/exposed assets. |
- Kamerka
- webanalyze
- WhatWeb
- FavFreak
- waybackurls
- gau
- waymore
- hakrawler
- web-check - in-one website OSINT dashboard: DNS, headers, tech stack, certs, archives, and more. |
Contributing
- Edward Tay
⛓️ Crypto / Blockchain OSINT
- Etherscan
- Blockchain.com Explorer - chain block explorer for tracing addresses, transactions and balances. |
- Blockchair - blockchain explorer and analytics with powerful filtering across 17+ chains. |
- Arkham Intelligence - chain analytics that de-anonymises wallets and labels entities to follow flows of funds. |
- Breadcrumbs
- WalletExplorer - clustering explorer that groups addresses and links them to known services/exchanges. |
- OXT - graph and clustering research. |
- Dune Analytics - chain queries. |
- WalletLabels
- Orbit
- Crystal Intelligence
- MistTrack
- Bubblemaps - holder analytics mapping wallet clusters to expose insider/sybil concentration. |
🧅 Dark Web & Paste Sites
- OnionSearch - web search engines for a given keyword. |
- Ahmia
- Intelligence X
- psbdmp
- Pastebin
- DarkOwl
- TorBot
- OnionScan
- TorCrawl.py
- darc
- PasteHunter
- pystemon - alike sites for regex/keyword hits and stores or alerts on pastes. |
- pwndb
📚 Datasets, Lists & APIs
- Awesome OSINT - maintained curated list of OSINT tools and resources by category. |
- Trace Labs OSINT VM - based live OSINT operating system preloaded with investigation tools for missing-persons CTFs. |
- Bellingcat Online Investigation Toolkit
🌐 Domain, DNS & Infrastructure
- OWASP Amass - depth attack-surface mapping and external asset discovery via passive and active DNS reconnaissance. |
- theHarvester
- subfinder
- Sublist3r
- dnstwist - permutation engine that detects typosquats, phishing and brand-impersonation domains. |
- knockpy
- assetfinder
- crt.sh
- DNSDumpster
- SecurityTrails
- ViewDNS.info - IP, IP-history and port-check utilities in one place. |
- BuiltWith
- Wappalyzer
- Netlas.io - wide scan and attack-surface search engine for hosts, domains, certificates and responses. |
- dnsx - purpose DNS toolkit for bulk A/AAAA/CNAME/PTR queries and brute-force. |
- shuffledns - force and resolution with wildcard filtering. |
- massdns - performance stub DNS resolver for bulk lookups (millions of names/sec). |
- puredns
- Findomain - platform subdomain enumerator pulling from cert transparency and dozens of sources. |
- chaos-client - wide DNS/subdomain data. |
- asnmap
- mapcidr
- cero
- CTFR - force). |
- hakrevdns
- dnsgen
- dnsrecon - force, SRV/PTR enumeration, cache snooping. |
- Fierce - contiguous IP space and hostnames. |
- Gobuster - force tool with DNS subdomain, vhost, and directory/file enumeration modes. |
- alterx - based subdomain wordlist/permutation generator for active enumeration. |
📧 Email & Breach Data
- Have I Been Pwned - monitoring API. |
- Holehe - reset and signup flows. |
- h8mail - hunting tool that pulls passwords from local dumps and online services. |
- Mosint
- breach-parse
- buster
- Dehashed - data engine to query emails, usernames, passwords, names and IPs across leaks. |
- Snusbase - database search across billions of leaked records by email, hash, IP or name. |
- LeakCheck - breach search engine and API for checking emails, usernames and keywords against leak corpora. |
- EmailRep
- Hunter.io
- check-if-email-exists
- WhatBreach
- EmailHarvester
- MailFinder
- EmailFinder
- XposedOrNot - breach search engine and open API for emails and domains. |
- BreachDirectory
- Hudson Rock Cavalier - infection lookup for emails, domains and usernames. |
- LeakPeek
- Leak-Lookup
- LeakRadar - log/combolist engine indexing 507B+ credentials; free search, paid reveal. |
- Whiteintel - web/infostealer credential monitoring with free domain-compromise search. |
- ransomware.live - leak sites; API and live victim map. |
- RansomLook - source aggregator tracking 580+ ransomware groups and their leak-site posts. |
- DDoSecrets
🧰 Frameworks & All-in-One
- Maltego - analysis platform mapping relationships between people, domains, infrastructure and social accounts via transforms. |
- SpiderFoot
- Recon-ng - featured modular web reconnaissance framework with a Metasploit-style interface. |
- OSINT Framework - off map for investigators. |
- IntelTechniques Tools
- Mr.Holmes - in-one information-gathering framework for usernames, phone numbers and domains. |
- OSINT-SPY
- Datasploit
- Mitaka - click. |
- Osmedeus - surface mapping. |
- FinalRecon - in-one web recon tool (whois, DNS, headers, crawl, Wayback, subdomains). |
- sn0int - automatic OSINT framework and package manager for entity-graph recon. |
- OWASP Maryam - source framework for web-based OSINT and data mining. |
- maltego-trx
- gOSINT
- Tsurugi Linux - focused Linux distribution with a dedicated OSINT tool set. |
- CSI Linux - focused Linux platform bundling OSINT, DFIR and dark-web tooling. |
🗺️ Geolocation & GEOINT
- SunCalc
- Overpass Turbo
- Mapillary - level imagery for visual ground-truthing where Street View is absent. |
- KartaView - level imagery platform, an alternative source for ground-truthing locations. |
- GeoSpy
- GeoHints - specific visual clues — bollards, signs, plates — to narrow image geolocation. |
- Bellingcat ShadowFinder
- Wikimapia
- Copernicus Browser - lapse and band analysis. |
- NASA Worldview
- Zoom Earth
- USGS EarthExplorer
- OpenAerialMap - licensed drone and aerial imagery searchable by location. |
- Picarta
- Shadowmap - based chronolocation. |
- PeakVisor - based geolocation. |
- Instant Street View
- Liveuamap - source reporting. |
- Geograph - level photos across Britain and Ireland. |
- Bellingcat OSM Search
- Nominatim - geocoding engine for names, addresses, and coordinates. |
- QGIS - source GIS for geospatial analysis and layering imagery, with 200+ algorithms. |
🔎 Google Dorking & Search Operators
- Photon
- Pagodo
- FOCA
- Metagoofil
- Google Hacking Database (GHDB) - DB's curated catalog of Google dork queries that surface exposed files, devices and data. |
- DorkSearch - built dork builder and library that speeds up crafting advanced Google search operators. |
🖼️ Image & Reverse Image Search
- Google Lens / Images
- TinEye
- Bing Visual Search
- FotoForensics - manipulation analysis using Error Level Analysis and metadata to spot edits and fakes. |
- Forensically - based image forensics toolkit: clone detection, ELA, noise analysis, magnifier and metadata. |
- Karma Decay
- ExifTool
- DeepFace
- InsightFace - of-the-art 2D and 3D face analysis (detection, recognition, alignment) toolkit. |
- face_recognition - based "world's simplest" face recognition API for Python and CLI. ⚠️ |
- CompreFace - hosted, dockerized open-source face recognition system with REST API. |
- trace.moe
- SmartImage
- FaceCheck.ID
- Search4faces
- Lenso.ai
- SauceNAO
- ascii2d
- IQDB - service image search across booru sites (Danbooru, Konachan, Gelbooru, Sankaku). |
- ImgOps - tool routing an image to many reverse-search, EXIF, and editing utilities. |
- Photo Sherlock
🔬 Image, Video & Media Forensics
- Sherloq - source desktop image forensics suite: ELA, JPEG/quantization, noise and resampling analysis. |
- DeepfakeBench - of-the-art deepfake-detection models. |
- FaceForensics++ - manipulation methods. ⚠️ |
- InVID-WeVerify Plugin - extension verification toolbox: video keyframes, magnifier, metadata, reverse search. |
- MeVer Verification Assistant - detection, EXIF, GPS and reverse-search for media verification. |
- Deepware Scanner - manipulation deepfakes with confidence scores. |

Programming Languages

Python 85 Go 30 JavaScript 7 C 7 C++ 6 Rust 4 TypeScript 4 Shell 3 C# 3 HTML 2

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Awesome

awesome-osint

🧩 Browser Extensions & Bookmarklets

🏛️ Business, Records & Archives

☁️ Cloud, IoT & Web Recon

Contributing

⛓️ Crypto / Blockchain OSINT

🧅 Dark Web & Paste Sites

📚 Datasets, Lists & APIs

🌐 Domain, DNS & Infrastructure

📧 Email & Breach Data

🧰 Frameworks & All-in-One

🗺️ Geolocation & GEOINT

🔎 Google Dorking & Search Operators

🖼️ Image & Reverse Image Search

🔬 Image, Video & Media Forensics