Offensive-OSINT-Tools
OffSec OSINT Pentest/RedTeam Tools
https://github.com/wddadk/Offensive-OSINT-Tools
Last synced: 2 days ago
JSON representation
-
[↑](#-table-of-contents) Email addresses
- findemail.io
- Eyes - Email osint tool
- Infoga
- Prospeo.io
- Poastal - Tool that provides valuable information on any email address
- Omail
- Skymem
- Signalhire
- Rocketreach
- tomba.io - email finder
- contactout.com - person finder
- Hunter.io
- Snov.io
- Email-format - Analyses the company's mail format.
- h8mail - Email OSINT & Password breach hunting tool
- EmailFinder - Search emails from a domain through search engines
- Anymailfinder - Find Verified Emails
-
[↑](#-table-of-contents) SubDomain's
-
Tools
- Bbot
- subchase - Chase subdomains by parsing the results of Google and Yandex search results
- subdomainfinder.c99. - A subdomain finder is a tool used to find the subdomains of a given domain.
- Shrewdeye
- Phonebook
- Subdominator
- SubDomainRadar.io - Discover hidden subdomains with unparalleled accuracy and speed
- subchase - Chase subdomains by parsing the results of Google and Yandex search results
- SubGPT - SubGPT looks at subdomains you have already discovered for a domain and uses BingGPT to find more.
- Amass
- dash.pugrecon.celes.in
- sub.Monitor - Passive subdomain continous monitoring tool
- Sudomy
- alterx - Fast and customizable subdomain wordlist generator using DSL.
- Photon - Incredibly fast crawler designed for OSINT.
- subdomain-enum - securitytrails api
-
-
[↑](#-table-of-contents) URLs
-
Tools
- Gau
- Xurlfind3r
- Unja
- urlhunter - a recon tool that allows searching on URLs that are exposed via shortener services
- GooFuzz - Enumerate directories, files, subdomains or parameters without leaving evidence on the target's serve
- Urlfinder
- Rextracter.streamlit - Gathers links and analyses content
- ronin-recon - Recursive recon engine and framework that can enumerate subdomains, DNS records, port scan, grab TLS certs, spider websites, and collect email addresses.
- Waymore
- Spiderfoot
- theHarvester
- Uscrapper - Tool that allows users to extract various personal information from a website.
- Ominis-Osint - The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.
-
-
[](#-table-of-contents) Certifications
-
[↑](#-table-of-contents) Passive Infrastructure scanner
-
Tools
-
-
[↑](#-table-of-contents) Microsoft Exchange
-
Tools
-
-
[↑](#-table-of-contents) Telegram
-
Tools
-
-
[↑](#-table-of-contents) Google Dorks
-
Tools
- Pagodo
- Search - Custom queries in Google
- Recruitin - Compiles Google dorks to search on LinkedIn, Dribbble, GitHub, Xing, StackOverflow, Twitter
- Google hacking database
-
-
[↑](#-table-of-contents) Nickname search
-
[↑](#-table-of-contents) Phone number
-
[↑](#-table-of-contents) Cloud
-
Tools
-
-
[↑](#-table-of-contents) Information gathering tools
-
Tools
-
-
[↑](-table-of-contents) Usefull links
-
Tools
- WhereToGo - list of popular services that might be used in organizations. By having an account of the user - you can try to find entry points to the organization data. #semiosint
- Cloud OSINT - Repository with information related to Cloud Osint
- Information Disclosure Write-Ups And PoCs
-
-
[↑](#-table-of-contents) Search Engines
-
[↑](#-table-of-contents) Dark web
-
Tools
-
-
[↑](#-table-of-contents) Intelligence
-
[↑](#-table-of-contents) Network Info
-
[↑](#-table-of-contents) Wifi
-
Tools
- 3Wifi - free base of access points
-
-
[↑](#-table-of-contents) SubDomain collector
-
Tools
-
-
[↑](#-table-of-contents) DnsHistory
-
Tools
-
-
[↑](#-table-of-contents) FTP servers
-
Tools
-
-
[↑](#-table-of-contents) Source code
-
Tools
-
Categories
[↑](#-table-of-contents) Email addresses
17
[↑](#-table-of-contents) SubDomain's
16
[↑](#-table-of-contents) Search Engines
14
[↑](#-table-of-contents) Nickname search
14
[↑](#-table-of-contents) URLs
13
[↑](#-table-of-contents) Network Info
7
[↑](#-table-of-contents) Intelligence
6
[↑](#-table-of-contents) Phone number
6
[↑](#-table-of-contents) Source code
4
[↑](#-table-of-contents) Google Dorks
4
[↑](#-table-of-contents) Information gathering tools
3
[↑](-table-of-contents) Usefull links
3
[↑](#-table-of-contents) DnsHistory
3
[↑](#-table-of-contents) Passive Infrastructure scanner
2
[](#-table-of-contents) Certifications
2
[↑](#-table-of-contents) Dark web
1
[↑](#-table-of-contents) Telegram
1
[↑](#-table-of-contents) Wifi
1
[↑](#-table-of-contents) FTP servers
1
[↑](#-table-of-contents) Cloud
1
[↑](#-table-of-contents) Microsoft Exchange
1
[↑](#-table-of-contents) SubDomain collector
1
Sub Categories
Keywords
osint
31
python
16
information-gathering
15
reconnaissance
14
recon
10
subdomain-enumeration
8
bugbounty
7
username
7
osint-python
7
pentesting
6
osint-tool
6
infosec
6
cli
6
cybersecurity
6
security
5
subdomain-scanner
5
scanner
5
hacking
5
redteam
5
email
5
osint-framework
4
username-checker
4
security-tools
4
subdomain-finder
4
golang
3
enumeration
3
linux
3
python3
3
bug-bounty
3
scraping
3
sherlock
3
osint-tools
3
blueteam
3
subdomain
3
osint-reconnaissance
2
tools
2
scanning
2
discovery
2
go
2
penetration-testing
2
phone-number
2
macos
2
username-search
2
socmint
2
network-security
2
nmap
2
investigation
2
social-media
2
termux
2
information
2