The full OSINT tools directory.

Blockchain analytics platform using AI and data science to transform blockchain data into actionable insights. Features entity identification, transaction visualization, and comprehensive address labeling with both free and premium tiers.

Advanced blockchain money tracing APIs powered by mathematical algorithms. Provides real-time transaction tracking, money flow analysis, and supports 40+ blockchain networks with automated fund tracking and suspicious activity detection.

Comprehensive blockchain analytics and forensics platform with three licensing tiers. Provides transaction visualization, risk scoring, and compliance tools with extensive real-world entity identification capabilities.

European Patent Office free patent database with 130+ million documents from 97 countries. Features smart search, advanced filtering, classification search, and machine translation between 32 languages.

Open-source cryptoasset analytics platform emphasizing full data sovereignty, algorithmic transparency, and scalability. Supports both UTXO-based and account-model blockchains with interactive investigation dashboard, entity clustering, and path analysis.

Open-source semantic search platform integrating patents with scholarly literature. Features AI-powered prior art discovery, non-patent literature integration, and comprehensive patent analytics with free access to 130+ million patent records.

Predictive cryptocurrency risk and intelligence platform using AI for transaction monitoring, compliance training, and forensic analysis. Features automated risk scoring, suspicious activity detection, and comprehensive investigation tools.

Enhanced Due Diligence platform leveraging AI to connect corporate records, adverse media, and OSINT. Covers 600+ billion archived web pages, 1.8+ billion court records, and 198+ million corporate records with automated risk assessment.

Web3 OSINT platform automating investigation discovery across blockchain networks. Supports multiple chains including Ethereum, Solana, Tron, BNB Chain, Polygon, Optimism, Arbitrum, and Base with wallet tracking and username searches.

Open collaboration platform for automated patent search and prior art discovery. Features AI-powered similarity search, comprehensive patent analytics, and community-driven development with free access.

AI-powered investigation platform collecting data from 500+ open sources including social media, messaging apps, blockchains, and dark web content. Features automated data processing, flexible visualization, and machine learning-enhanced analysis.

Comprehensive OSINT platform designed for financial crime investigations, offering multi-source data integration, automated correlation, and detailed audit trails with both reactive and proactive investigation capabilities.

World Intellectual Property Organization comprehensive patent database with 83+ million patent documents. Features full-text search, machine translation for multiple languages, and PCT application tracking with weekly updates.

Advanced Google account investigation tool that extracts comprehensive information from Google accounts using just an email address. Reveals connected services, YouTube channels, Google Photos, location data, and associated accounts.

Data breach search service with API access to check if email addresses appear in known breaches. Provides detailed breach information and password exposure data.

Advanced email enumeration tool that checks if emails are registered on 120+ websites including social media, dating platforms, and specialized services. Includes password recovery function testing to verify account existence.

Email discovery and verification service with powerful API. Finds email addresses associated with domains, verifies deliverability, and provides confidence scores.

Advanced real-time lookup platform that reveals connected online accounts for emails, phone numbers, usernames, and crypto wallets. Provides comprehensive digital footprint analysis and account correlation.

Real-time email verification API written in Rust, providing advanced email validation capabilities. Open-source tool that offers comprehensive email intelligence including deliverability scoring and fraud detection.

Advanced email OSINT and password breach hunting tool that supports chasing down related emails. Integrates with multiple premium breach databases and provides comprehensive email intelligence gathering capabilities.

Global flight tracking platform that provides real-time aircraft positions using ADS-B data. Offers comprehensive coverage including military and government aircraft often not shown on commercial trackers.

Agence France-Presse fact-checking service covering global misinformation and false claims. Provides verified information and debunking of viral false content.

Parser for Android logs, events, and protobuf data to extract forensic artifacts. Processes various Android system logs and application data for comprehensive timeline analysis.

Machine learning-powered code review service for identifying performance issues and security vulnerabilities. Amazon solution for automated code analysis.

Web application security scanner for identifying vulnerabilities in web applications and APIs. Comprehensive tool for web security assessment.

Search engine and directory for .onion sites with user-friendly interface. Indexes hidden services and provides search functionality for dark web content discovery.

Network security auditing toolkit for wireless networks. Useful for analyzing WiFi security and investigating wireless network infrastructure.

Open-source security information and event management platform with threat intelligence capabilities. Now part of AT&T Cybersecurity providing unified security management.

In-depth attack surface mapping and asset discovery tool. Performs comprehensive subdomain enumeration and network mapping for reconnaissance.

Video authentication platform that creates tamper-evident recordings with cryptographic verification. Useful for evidence collection and verification in investigations.

IBM intelligence analysis tool for investigating complex networks and relationships. Features timeline analysis, geospatial mapping, and advanced link analysis capabilities.

Fast forensic evidence collection tool for Android devices. Deploys on-device collector agents to gather forensic data without relying on limited Android shell environments.

Threat intelligence management platform that aggregates data from multiple sources and provides automated threat detection and response capabilities with machine learning.

Content analysis toolkit for extracting metadata and text from over 1,000 different file types. Provides APIs for Java, Python, and other languages with extensive format support and programmatic access.

Container and cloud security platform providing vulnerability scanning and runtime protection. Specialized solution for containerized environments.

Domain reconnaissance tool for discovering and investigating subdomains. Provides visual inspection capabilities for web-based assets.

Lightweight subdomain discovery tool that finds domains and subdomains potentially related to a given domain. Uses multiple sources including certificate transparency logs, Wayback Machine, and various APIs.

Library of tests mapped to MITRE ATT&CK framework for testing security controls. Provides small, highly portable detection tests for security validation.

Multi-threaded network reconnaissance tool that performs automated enumeration of services. Conducts initial port scans and launches appropriate service enumeration tools based on discovered services. Features customizable scanning profiles.

Digital forensics platform with graphical interface for analyzing hard drives and mobile devices. Provides comprehensive toolkit for forensic investigations.

Curated list of OSINT tools and resources maintained by the community. Provides comprehensive collection of tools organized by category and regularly updated.

Security scanning and compliance features integrated into Azure DevOps. Microsoft solution for secure software development and deployment.

Comprehensive OSINT framework designed for subdomain enumeration, port scanning, web screenshots, and vulnerability scanning. Features a modular architecture with extensive configuration options and supports multiple output formats.

Security linter for Python code that identifies common security issues. Open-source tool for automated Python security analysis.

Collection of tools and techniques used by Bellingcat for online investigations. Includes guides, tools, and methodologies for digital investigations.

Specialized search tool for OpenStreetMap data designed specifically for OSINT investigations. Enables investigators to search for specific features, landmarks, and geographic elements.

Facial recognition and detection API providing demographic analysis, emotion detection, and face matching capabilities for investigative purposes.

Cybersecurity search engine that scans the internet for exposed services and devices. Provides comprehensive data on open ports, services, and potential vulnerabilities across internet-connected devices with real-time alerts and API access.

Software composition analysis solution for managing open source risk and compliance. Comprehensive platform for open source security management.

Arch Linux-based penetration testing distribution containing over 2800 tools for security professionals. Includes comprehensive collection of OSINT and forensic tools.

Static analysis security scanner for Ruby on Rails applications. Specialized tool for identifying security vulnerabilities in Rails applications.

Web application security testing platform with comprehensive tools for manual and automated security testing. Essential for investigating web applications and APIs.

Linux virtual machine pre-configured with OSINT tools and resources. Designed specifically for open source intelligence gathering and investigations.

Advanced malware sandbox derived from Cuckoo, specializing in configuration and payload extraction. Features dynamic countermeasures against evasive malware and automated unpacking capabilities.

Common Attack Pattern Enumeration and Classification dictionary providing detailed information about attack patterns used by adversaries to exploit known weaknesses.

Business framework for governance and management of enterprise IT. Provides comprehensive framework for information technology governance and management practices.

Collaborative Research Into Threats platform providing analysts with a single tool for storing, analyzing, and collaborating on threat data. Features malware reverse engineering and indicator tracking.

Ubuntu-based operating system designed for digital forensics and OSINT investigations. Includes tools specifically selected for cybersecurity investigations and incident response.

Dictionary of publicly disclosed cybersecurity vulnerabilities and exposures maintained by MITRE Corporation. Provides standardized identifiers for known security issues.

Community-developed list of software and hardware weakness types that can lead to vulnerabilities. Provides classification system for security weaknesses and coding errors.

Internet-wide scanning platform providing detailed information about hosts, certificates, and websites. Offers comprehensive API for automating security assessments.

Static application security testing platform for identifying security vulnerabilities in source code. Comprehensive solution for secure code development.

Commercial threat intelligence service providing real-time threat data, vulnerability research, and security analytics. Offers APIs and feeds for automated security operations.

Automated fact-checking tool that identifies checkable factual claims in political speeches and debates. Provides real-time analysis of fact-checkable statements.

Commercial penetration testing tool providing post-exploitation capabilities and adversary simulation. Widely used for red team exercises and security testing.

Semantic code analysis engine for finding security vulnerabilities and bugs. GitHub-developed tool providing deep code analysis capabilities.

Adobe-led initiative providing tools to verify image and media authenticity through C2PA standards. Helps identify manipulated or synthetic content.

European Space Agency platform providing free access to Sentinel satellite data. Offers comprehensive search and download capabilities for scientific and investigative purposes.

Open-source analysis engine that provides observable analysis to TheHive platform. Offers 130+ analyzers and responders for comprehensive threat intelligence processing.

Cyber threat intelligence platform that provides IP reputation data, asset discovery, and vulnerability assessment. Offers comprehensive information about internet-connected devices with focus on security threats and API access.

Cloud-native threat intelligence platform providing adversary intelligence, indicators, and malware analysis. Features automated threat hunting and attribution analysis.

Automated malware analysis system that executes suspicious files in isolated environment. Provides detailed analysis reports and behavioral information.

Open-source software platform for visualizing complex networks and integrating attribute data. Features extensive app ecosystem and automation through REST API.

Comprehensive DNS enumeration tool that performs various reconnaissance techniques including zone transfers, reverse DNS lookups, SRV record enumeration, and wildcard detection. Supports multiple output formats and includes advanced features for DNS cache snooping.

Commercial dark web intelligence platform with extensive content database. Features real-time monitoring, entity enrichment, and specialized ransomware tracking capabilities.

Enterprise-class alternative to IBM i2 with superior capabilities and collaborative features. Server-based architecture with web browser interface and integrated analytics.

Real-time information discovery platform that detects high-impact events and emerging risks from publicly available data. Uses AI to analyze social media and news sources for early event detection.

Leading software for creating deepfakes with comprehensive face swap functionality. Also useful for facial analysis and recognition in forensic investigations.

Framework for analyzing cyber intrusions by examining the relationships between adversary, capability, infrastructure, and victim. Provides structured approach to threat analysis.

Open-source platform for digital investigation and incident response. Provides modular architecture for developing custom forensic tools and workflows.

Community and resources for digital forensics and incident response professionals. Provides tools, techniques, and training for forensic investigations.

Web content scanner for finding hidden directories and files on web servers. Essential tool for web application reconnaissance and content discovery.

Java application for brute forcing directories and files on web servers. Comprehensive tool for web content discovery and reconnaissance.

Script for checking Docker container security configuration against CIS benchmarks. Essential tool for Docker security assessment.

Advanced satellite imagery analysis platform with real-time visualization capabilities. Offers over 20 spectral indices, time series analysis, and change detection tools for environmental monitoring.

Security-focused linting plugin for JavaScript that identifies security vulnerabilities. Essential tool for JavaScript security analysis and code review.

Comprehensive EXIF data viewer that extracts and displays metadata from images. Reveals camera information, GPS coordinates, timestamps, and other forensic data.

Tool for taking screenshots of websites and providing server header info. Useful for visual reconnaissance and asset documentation.

Factor Analysis of Information Risk quantitative model for understanding, analyzing, and measuring information risk in financial terms for business decision making.

Comprehensive metadata extraction tool for finding hidden information in documents. Supports Microsoft Office, PDF, OpenOffice, Adobe InDesign, and SVG files with searches using multiple search engines.

Cyberspace search engine that indexes internet-connected devices and services. Provides detailed information about network infrastructure, including IoT devices, industrial control systems, and web applications with advanced search syntax.

License compliance and vulnerability management platform for open source software. Solution for managing open source risk and compliance requirements.

Python library that recognizes and manipulates faces from Python or from the command line. Uses the worlds simplest face recognition library for forensic analysis.

Google tool that searches fact-checking articles from publishers worldwide. Helps identify previously fact-checked claims and verified information.

Nonpartisan fact-checking website that monitors the factual accuracy of political statements. Provides detailed analysis of claims by politicians and organizations.

Open-source runtime security tool for detecting anomalous activity in containers and Kubernetes. Cloud-native security monitoring solution.

Fast web fuzzer written in Go for content discovery and parameter brute forcing. High-performance tool for web application security testing.

Domain reconnaissance tool that performs DNS scanning to locate non-contiguous IP space and hostnames. Attempts zone transfers and uses dictionary attacks to discover additional hostnames. Includes features for identifying nearby domains.

Facial recognition platform that identifies people in photos using advanced neural networks. Provides API access for integration with OSINT workflows and investigations.

Threat intelligence platform providing contextual threat data, adversary tactics, and indicators of compromise. Features predictive threat analytics and campaign tracking.

Organization providing training and tools for information verification and fact-checking. Offers comprehensive resources for identifying mis- and disinformation.

Comprehensive route mapping tool that shows flight connections between airports worldwide. Useful for travel pattern analysis and route verification.

Chinese-based cyberspace search engine providing comprehensive internet-connected device discovery. Features advanced filtering capabilities by IP ranges, domains, headers, and service banners with API access.

Browser-based collection of image forensics tools including clone detection, noise analysis, principal component analysis, C2PA content authenticity verification, and JPEG forensics without uploading images to servers.

UK fact-checking organization providing automated fact-checking tools and services. Develops AI-powered systems for identifying and checking claims.

AI-powered geolocation tool that analyzes outdoor photos using deep learning to predict where images were taken. Provides detailed location estimates with confidence scores and contextual information.

AI-powered tool for determining photo geolocation using visual clues. Analyzes architectural features, vegetation, signage, and other visual indicators to estimate where images were taken with confidence scores.

Leading open-source platform for visualizing and exploring networks and graphs. Features real-time network manipulation, advanced layout algorithms, and comprehensive network analysis metrics.

NSA-developed reverse engineering framework with comprehensive binary analysis capabilities. Features decompiler, disassembler, and scripting interface for malware analysis and software investigation.

Fully automated digital image forensics tool with web interface for massive image analysis. Performs error level analysis, metadata extraction, GPS location mapping, hash-based similarity detection, and thumbnail comparison.

Security features integrated into GitHub providing code scanning and dependency analysis. Comprehensive security solution for software development.

Static application security testing integrated into GitLab CI/CD pipeline. Built-in security scanning for continuous integration and deployment.

Tool for discovering and analyzing Git repositories containing sensitive information. Scans for exposed credentials, API keys, and configuration files across multiple platforms.

Platform for tracking fishing vessel activity using satellite and AIS data. Offers insights into fishing patterns, potential illegal activities, and maritime conservation efforts.

Directory and file brute-forcer written in Go. Fast and efficient tool for discovering hidden web content and API endpoints.

Centralized security management platform for Google Cloud providing asset discovery and vulnerability assessment. Comprehensive cloud security solution.

Japanese-developed OSINT extension optimized for searching IP addresses, domains, URLs, and social media handles. Provides access to specialized Japanese and international search engines.

Go-based web screenshot utility for reconnaissance and asset discovery. Fast and efficient tool for visual inspection of web assets.

GPU-accelerated visual graph analytics platform that automatically transforms data into interactive visual maps. Provides real-time data processing and advanced visualization capabilities.

Cybersecurity platform that characterizes internet background noise to help analysts focus on targeted threats. Provides comprehensive data on automated scanning, common vulnerabilities, and benign internet activity.

Advanced password recovery tool supporting numerous hash types. Essential for password analysis and credential investigation in security assessments.

Fast and multi-purpose HTTP toolkit for running multiple probes. Essential tool for web asset discovery and HTTP service enumeration.

Professional online investigation tool that automatically captures and organizes web pages, screenshots, and notes. Provides case management and evidence documentation features.

Free malware analysis service using CrowdStrike Falcon technology. Combines static/dynamic analysis with ML-powered threat detection and extensive IOC database with 1.3B+ indicators.

Parallel login cracker supporting numerous protocols. Useful for testing authentication security and investigating credential-based attacks.

Cloud-based threat intelligence sharing platform providing access to human and machine-generated intelligence. Offers threat indicators, research reports, and vulnerability data.

International standard for information security management systems. Provides framework for establishing, implementing, maintaining and improving information security management.

Browser extension for journalists and investigators to verify images and videos. Includes reverse image search, metadata analysis, video fragmentation, and integration with multiple search engines.

Web-based platform for video and image verification providing multiple analysis tools. Includes reverse search, metadata extraction, and forensic analysis capabilities.

Video and image verification tool designed for journalists and fact-checkers. Provides reverse image search, metadata analysis, and forensic capabilities for debunking misinformation.

Network visualization and analysis tool with text-to-graph capabilities. Features AI-generated cluster analysis, community detection, and network structure diversity metrics.

Collection of OSINT tools and techniques developed by Michael Bazzell. Includes custom search engines, investigation methodologies, and privacy tools.

Solution for CERTs to collect and process security feeds, pastebins, and social media threats. Features message queue protocol with automated processing and distribution capabilities.

Advanced search engine that indexes content from surface web, dark web, and historical records. Searches across multiple data sources including public leaks, document sharing platforms, and archived content.

Universal software composition analysis solution providing security and compliance scanning. Comprehensive platform for DevSecOps and supply chain security.

Password cracking tool for identifying weak passwords and analyzing password security. Widely used in security assessments and forensic investigations.

Debian-based penetration testing platform containing hundreds of security tools. Widely used by security professionals for penetration testing, digital forensics, and OSINT work.

Next-generation crawling and spidering framework designed for dark web reconnaissance. Features JavaScript parsing, form extraction, and custom filtering capabilities.

Wireless network detector and intrusion detection system. Provides comprehensive analysis of wireless networks and devices for OSINT investigations.

Python subdomain scanner with support for wildcards and threading. Efficient tool for subdomain enumeration and domain reconnaissance.

Debian-based operating system focused on providing secure, anonymous, and anti-forensic environment. Routes traffic through VPN, Tor, and DNSCrypt for enhanced privacy.

Tool for running security checks against Kubernetes clusters based on CIS benchmarks. Essential for Kubernetes security assessment.

Web-based platform for organizing complex data into relationship maps with beautiful visualizations. Supports collaborative mapping, sharing capabilities, and built-in presentation builder.

Fact-checking website specializing in viral misinformation on social media platforms. Uses technology to detect and debunk false stories before they spread widely.

Real-time data breach and leak detection platform that monitors sensitive information exposures across the internet. Indexes leaked databases, exposed services, and misconfigurations.

AI-powered reverse image search engine for finding people, places, duplicates, and similar images. Uses advanced computer vision algorithms for enhanced search accuracy beyond traditional reverse image tools.

Open source discovery platform tracking millions of libraries across package managers. Enables analysis of software dependencies and supply chain security with comprehensive library tracking.

Enterprise-grade graph visualization and analysis platform for complex connected data. Provides interactive graph exploration, pattern detection, and advanced query templates.

Real-time air traffic control communications platform providing live audio feeds from airports and control centers worldwide. Essential for understanding flight operations and emergency situations.

Framework for understanding and analyzing cyber attacks by breaking them into seven distinct phases. Helps analysts understand adversary tactics and develop countermeasures.

Security auditing tool for Unix and Linux systems providing comprehensive system hardening assessment. Open-source solution for system security evaluation.

Open-source threat intelligence and sharing platform designed to improve the sharing of structured threat information. Features automated correlation and flexible data models.

Knowledge base of adversary tactics and techniques based on real-world observations. Provides comprehensive matrix of attack techniques and mitigation strategies.

Automated adversary emulation platform for testing and training security teams. Simulates advanced persistent threat behaviors for defensive testing.

Global ship tracking platform using AIS data to provide real-time vessel positions, routes, and information. Offers both free and premium services with historical data access and comprehensive analytics.

Ultra-fast port scanner capable of scanning the entire Internet in under 5 minutes. Designed for large-scale network reconnaissance and can transmit packets at rates of 25 million packets per second.

Java-based tool for extracting preservation metadata from various file formats including PDF, MS Office documents, images, and audio/video files with both Windows GUI and Unix command-line interfaces.

Information gathering tool that searches Google to find and download documents, then extracts metadata using various Python libraries. Supports multiple file formats and provides HTML reporting capabilities.

Penetration testing platform providing exploit development and delivery system. Widely used for security assessments and vulnerability validation in OSINT investigations.

OSINT browser extension providing access to 100+ search engines and analysis tools. Enables quick searches for IPs, domains, hashes, and other IOCs directly from web pages.

All-in-one mobile application security testing framework for Android, iOS, and Windows mobile apps. Performs static and dynamic analysis, malware detection, and comprehensive security assessment.

Amnesty International toolkit for consensual forensic analysis of Android and iOS devices to identify potential compromise by spyware. Supports backup analysis, IOC scanning, and timeline generation.

Interactive interface for browsing global satellite imagery and data. Provides access to near real-time imagery from multiple NASA satellites with advanced filtering and analysis tools.

Voluntary framework providing standards, guidelines, and best practices for managing cybersecurity risks. Widely adopted framework for organizational cybersecurity programs.

Fast port scanner written in Go that focuses on reliability and simplicity. Supports both SYN and CONNECT scan types and includes features for host discovery, port verification, and integration with other ProjectDiscovery tools.

HTML/CSS/JavaScript search engine that enables searching through the source code of websites. Useful for competitive intelligence and technology stack analysis.

Commercial vulnerability scanner providing comprehensive security assessment capabilities. Industry-standard tool for vulnerability management and security testing.

Comprehensive internet search engine that provides detailed information about internet-connected devices, SSL certificates, and network infrastructure. Offers advanced search capabilities with filters for specific technologies and geographic locations.

Network forensic analysis tool for extracting artifacts from PCAP files. Provides detailed analysis of network communications and file transfers.

Network discovery and reconnaissance tool that combines multiple scanning techniques. Provides comprehensive network mapping with visualization capabilities and detection of network devices and services.

Vulnerability management solution providing real-time visibility into security risks. Comprehensive platform for vulnerability assessment and remediation.

Web server scanner for identifying potentially dangerous files, configurations, and vulnerabilities. Useful for web application reconnaissance and security assessment.

Fast and customizable vulnerability scanner based on simple YAML templates. Comprehensive tool for automated security testing and vulnerability assessment.

Operationally Critical Threat, Asset, and Vulnerability Evaluation approach for identifying and managing information security risks through organizational assessment.

Browser-based automated link diagram tool that creates network visualizations from CSV files. Supports up to 4 comma-separated columns and can handle up to 10,000 nodes with client-side processing.

Community-driven project providing resources, tools, and training for OSINT practitioners. Offers webcasts, tools, and educational content for investigators.

Training platform providing hands-on OSINT exercises and challenges. Offers practical training scenarios for developing OSINT investigation skills.

Collection of OSINT tools organized by category with direct links to resources. Provides comprehensive directory of open source intelligence gathering tools.

Russian-language OSINT community providing tools, techniques, and training. Offers specialized tools and methodologies for social media and internet investigations.

Collection of automated OSINT scripts for domain, IP, and social media reconnaissance. Includes tools for certificate transparency and DNS analysis.

Open-source host-based intrusion detection system providing log analysis and integrity checking. Comprehensive solution for system monitoring and security.

Tool for identifying vulnerable components in project dependencies. Essential for supply chain security and vulnerability management.

List of the most critical web application security risks. Updated regularly to reflect current threat landscape and provide guidance for secure development practices.

Python-based dark web monitoring tool for crawling .onion websites. Features automated link discovery, content analysis, and JSON output formatting with live link verification.

Open-source web application security scanner providing automated and manual testing capabilities. Useful for investigating web application security and vulnerabilities.

Tool for investigating dark web services and identifying security issues. Scans .onion sites for vulnerabilities, misconfigurations, and potential deanonymization vectors.

Cyber threat intelligence platform that provides passive DNS analysis, IP geolocation, and infrastructure mapping. Offers comprehensive data on internet-connected devices with focus on cybersecurity applications.

General-purpose policy engine for cloud native environments. Provides unified policy framework for security and compliance automation.

Open-source platform for sharing and accessing aerial and satellite imagery. Particularly useful for disaster response and humanitarian mapping with crowdsourced data.

Open-source cyber threat intelligence platform that structures, stores, organizes and visualizes technical and non-technical information about cyber threats. Built on STIX2 standards with GraphQL API.

Community-based air traffic surveillance network providing real-time flight data. Offers research-grade data access and historical flight information for aviation analysis with comprehensive API access.

Open-source vulnerability assessment tool providing comprehensive security scanning capabilities. Free alternative to commercial vulnerability scanners.

Web-based data filtering tool for OpenStreetMap that allows users to run queries and extract specific geographic data. Excellent for finding particular map features and infrastructure elements.

Online PCAP analysis platform with malware detection capabilities. Provides network traffic analysis and threat intelligence correlation for security investigations.

Data integration and analytics platform used by government and enterprises for large-scale data analysis. Provides advanced visualization and analytical capabilities for complex investigations.

Debian-based operating system designed for security experts, developers, and privacy-aware users. Includes tools for penetration testing, digital forensics, and OSINT investigations.

Microsoft technology for detecting and removing child exploitation images. Helps identify previously flagged content and supports law enforcement investigations.

Advanced AI-based photo geolocation service that uses machine learning to identify locations from images. Features location prediction, similarity matching, and integration capabilities for investigators.

Face search engine that finds photos of people on the internet by facial recognition technology. Uses advanced algorithms to match faces across millions of indexed images.

Comprehensive aircraft database with detailed information on aircraft registration, history, and ownership. Valuable for tracking aircraft ownership changes and operational history.

Commercial satellite imagery platform offering daily global coverage with high-resolution imagery. Provides API access and advanced analytics for change detection and monitoring.

Microsoft modern browser automation framework supporting Chromium, Firefox, and WebKit. Offers faster execution than Selenium with built-in auto-waiting and network interception.

Fact-checking website that rates the accuracy of claims by elected officials and political figures. Uses the Truth-O-Meter to rate claim accuracy.

Comprehensive cloud security platform providing vulnerability management and compliance monitoring. Enterprise solution for multi-cloud security.

BBC-led project developing technical standards for media provenance and authentication. Provides tools for verifying the source and history of digital content.

Source code search engine that allows searching through HTML, CSS, and JavaScript of websites. Useful for finding websites using specific technologies, tracking pixels, or analytics codes.

Threat intelligence platform that aggregates data from multiple sources. Provides search capabilities for IOCs, domains, IPs, and malware samples with community-driven intelligence feeds.

Node.js-based browser automation tool providing high-level API for controlling Chrome/Chromium browsers. Excellent for scraping JavaScript-heavy sites with headless mode support.

Framework for conducting collaborative exercises between red and blue teams. Provides structured approach to improving organizational security posture.

Cloud-based vulnerability management platform providing continuous monitoring and assessment. Enterprise-grade solution for vulnerability detection and response.

Security-oriented operating system that uses virtualization to create isolated security domains. Provides strong compartmentalization for sensitive operations and investigations.

Static analysis tool for detecting security vulnerabilities in PHP applications. Specialized tool for PHP security assessment and code review.

Modular web reconnaissance framework with database backend. Includes modules for DNS, social media, and credential harvesting with custom module development support.

Comprehensive reconnaissance framework that automates the entire reconnaissance process. Includes subdomain enumeration, port scanning, vulnerability assessment, and report generation with multiple scanning profiles.

Threat intelligence platform that analyzes data from the web, dark web, and technical sources to provide predictive threat intelligence and risk assessments.

Comprehensive dark web monitoring with automated threat correlation. Provides insights into credential theft, compromised systems, and threat actor communications.

Collection of simple tests for security teams to validate their detection capabilities. Mapped to MITRE ATT&CK techniques for comprehensive coverage.

Machine learning tool that detects image manipulations and inconsistencies. Provides confidence scores for various types of image alterations.

NIST framework providing structured approach for integrating security and risk management activities into system development life cycle processes.

Modern port scanner built in Rust that aims to be faster than Nmap while maintaining accuracy. Features adaptive timing, custom scripts, and integration with Nmap for service detection. Can scan all 65,535 ports in under 3 seconds.

Training and certification programs for digital forensics and incident response. Provides comprehensive education in forensic investigation techniques.

Ubuntu-based forensic distribution containing digital forensic and incident response tools. Provides comprehensive toolkit for forensic analysis and investigation.

List of the most dangerous software errors that lead to security vulnerabilities. Provides guidance for developers and security professionals on critical coding issues.

Adversary emulation platform for testing security controls and training security teams. Provides automated threat emulation based on real-world attack techniques.

Automatic SQL injection and database takeover tool. Essential for investigating web application security and database vulnerabilities.

Structured threat information standards for sharing cyber threat intelligence. STIX provides data format while TAXII defines transport mechanisms for sharing threat data.

Fast, high-level web crawling and scraping framework for Python. Features built-in support for handling requests, following links, and dealing with common scraping challenges.

Source code search engine that indexes millions of repositories and code files. Useful for finding exposed API keys, configuration files, and sensitive information in public code repositories.

Static analysis tool for finding bugs, security vulnerabilities, and enforcing code standards. Multi-language tool supporting numerous programming languages.

Web-based application for browsing and analyzing satellite data from multiple sources including Sentinel, Landsat, and MODIS. Features advanced visualization tools and custom script capabilities.

Unique tool that helps identify possible locations of shadows around the world by analyzing shadow patterns in images. Useful for temporal and geographic verification of photos and videos.

Advanced shadow analysis tool that visualizes and analyzes sunlight, shadows, and solar potential for any location. Useful for temporal verification and architectural analysis.

Comprehensive digital image forensics toolkit implementing state-of-the-art algorithms for image authentication. Features error level analysis, JPEG ghost detection, noise analysis, copy-move forgery detection, and wavelet blocking analysis.

Search engine for internet-connected devices and services. Provides API access to scan results, vulnerability data, and network intelligence for infrastructure reconnaissance.

Comprehensive intelligence analysis platform offering end-to-end data collection, processing, and visualization. Features web harvesting capabilities and AI-powered analysis tools.

Collection of command-line digital forensics tools for analyzing disk images and file systems. Provides low-level analysis capabilities for forensic investigations.

Automated reconnaissance framework that performs comprehensive security assessments. Includes web application scanning, network reconnaissance, and vulnerability assessment capabilities with detailed reporting.

Fact-checking website covering urban legends, myths, and misinformation. Provides detailed analysis and verification of viral claims and stories.

Developer security platform for finding and fixing vulnerabilities in dependencies and code. Comprehensive solution for application security testing.

Cross-platform software for social network analysis and visualization. Computes network metrics including distances, centrality measures, and prominence indices with intuitive visualization layouts.

Code quality and security analysis platform for continuous inspection of code quality. Open-source solution for identifying security vulnerabilities in code.

Automated OSINT reconnaissance tool with 200+ modules. Performs comprehensive footprinting including DNS, social media, dark web, and threat intelligence gathering.

Exploit and vulnerability database with advanced search capabilities. Aggregates exploits from multiple sources and provides detailed analysis of security vulnerabilities.

Static analysis tool for finding bugs and security vulnerabilities in Java code. Successor to FindBugs providing comprehensive Java security analysis.

OSINT extension for quickly searching IPs, domains, file hashes, and URLs using free intelligence resources. Integrates with 40+ services for comprehensive IOC analysis.

News intelligence platform specializing in social media verification and discovery. Provides real-time monitoring and verification services for news organizations.

Modular subdomain enumeration tool that supports multiple target inputs and various data sources including BeVigil, Chaos, CertSpotter, and BufferOver. Provides DNS resolution, CNAME lookups for subdomain takeover opportunities, and HTTP probing.

Subdomain discovery tool that discovers valid subdomains using passive online sources. Fast and efficient tool for reconnaissance and asset discovery.

Fast subdomain enumeration tool that leverages search engines and APIs. Integrates with other tools like Subbrute for comprehensive subdomain discovery.

Comprehensive subdomain enumeration tool that combines active and passive reconnaissance methods. Utilizes 22 third-party sources including Shodan, VirusTotal, and Censys for passive enumeration, and Gobuster for active subdomain bruteforce attacks.

Interactive tool that shows sun movement and sunlight phases for any location and date. Essential for shadow analysis, verification of photo timestamps, and understanding lighting conditions.

Container security and monitoring platform providing runtime protection and compliance. Comprehensive solution for container and cloud security.

Privacy-focused operating system that routes all traffic through Tor and leaves no traces on the computer. Designed for journalists, activists, and investigators requiring anonymity.

Command-line packet analyzer for capturing and analyzing network traffic. Fundamental tool for network analysis and forensic investigations.

Scalable open-source security incident response platform designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents.

Threat intelligence platform that aggregates and enriches threat data from multiple sources. Provides analytics, collaboration tools, and automated threat hunting capabilities.

Official TinEye extension for reverse image searching. Quickly identify image sources, modifications, and usage across the web with right-click functionality.

Privacy-focused web browser that routes traffic through the Tor network for anonymous browsing. Essential tool for OSINT investigators accessing dark web content safely.

Crowdsourced OSINT competition focused on finding missing persons. Provides platform for practicing OSINT skills while contributing to real missing person cases.

Advanced malware sandboxing solution supporting Windows, Linux, Android, and macOS analysis. Provides both static and dynamic analysis with detailed behavioral reports and automated IOC extraction.

Platform for photo and video verification using computer vision and blockchain technology. Provides controlled capture and verification tools for authentic media.

Secrets scanning tool for finding credentials and sensitive information in Git repositories. Features regex-based detection and entropy analysis for comprehensive security auditing.

Command-line version of Wireshark for network packet analysis. Provides scriptable interface for automated network traffic analysis and forensics.

Enhanced version of Sublist3r with advanced DNS analysis capabilities. Queries public DNS servers for discovered subdomains and categorizes responses as CNAME or A records. Includes debug mode for detailed DNS analysis.

Container security platform providing vulnerability management and compliance monitoring. Now part of Palo Alto Networks Prisma Cloud.

Wrapper around Nmap that provides additional features for large-scale scanning. Includes intelligent host discovery, custom timing profiles, and enhanced output formatting for reconnaissance.

Application security platform providing static and dynamic analysis capabilities. Enterprise solution for secure software development and testing.

Digital guide providing practical advice for journalists on verification techniques and tools. Covers image, video, and social media verification methods.

Comprehensive guide covering digital verification methods and tools. Provides step-by-step instructions for verifying various types of online content.

Comprehensive vessel tracking service with detailed ship information, port calls, and voyage data. Provides satellite AIS coverage and historical tracking capabilities.

Platform offering training and tools for video verification and analysis. Provides courses on technical verification methods and best practices.

Malware analysis service with comprehensive API for file, URL, and domain reputation checking. Aggregates data from 70+ antivirus engines with threat intelligence feeds.

Advanced memory forensics framework for incident response and malware analysis. Provides extensive capabilities for analyzing memory dumps and system artifacts.

EU-funded project developing tools and services for content verification. Provides browser plugins, mobile apps, and APIs for media authentication.

Weekly newsletter and blog covering latest OSINT tools, techniques, and news. Provides regular updates on new tools and investigation methodologies.

Web application fuzzer for discovering vulnerabilities and hidden content. Provides flexible fuzzing capabilities for security testing.

Unique addressing system that has divided the world into 3-meter squares, each identified by three words. Useful for precise location identification and sharing in areas without traditional addresses.

Software composition analysis platform for managing open source security and compliance. Enterprise solution for supply chain security management.

Operating system designed for anonymity, privacy and security. Uses virtualization to isolate applications from the host system and routes traffic through Tor.

Automated wireless auditing tool for testing WiFi security. Simplifies wireless penetration testing and security assessment processes.

Network protocol analyzer for examining network traffic and communications. Essential tool for network forensics and understanding communication patterns.

Human rights organization developing tools for video verification and authentication. Provides resources and training for using video as evidence.

Pattern matching engine designed for malware researchers. Provides a domain-specific language for creating rules to identify and classify malware families and suspicious files.

Tool for scanning files and processes against YARA rules to identify malware and suspicious content. Widely used in malware analysis and threat hunting.

Forensics intelligence platform bridging CTI and DFIR practitioners. Stores observables, IOCs, TTPs, and threat knowledge with automated enrichment capabilities and bulk observable search.

Network scanner designed for Internet-wide network studies. Can scan the entire IPv4 address space in under 45 minutes from a single machine with proper rate limiting and source validation.

Real-time satellite imagery and weather data platform. Offers live views of Earth with overlay capabilities for weather patterns, fires, and other environmental phenomena.

Cyberspace search engine that provides comprehensive visibility into internet-connected devices and services. Offers detailed information about network infrastructure, including geographic distribution, technology stacks, and security posture.

Industry-standard visual intelligence analysis environment for transforming complex data into actionable intelligence. Features advanced link analysis, timeline creation, and pattern detection.

iOS forensic artifact parser for extracting data from iOS device backups, file system dumps, and iTunes backups. Processes logs, plists, and databases for comprehensive iOS analysis.

Cross-platform software library for communicating with iOS devices without Apple proprietary SDK. Enables backup creation, file system access, and app installation for forensic purposes.

Automated reconnaissance framework for web applications with a focus on streamlined recon processes. Provides comprehensive subdomain discovery, port scanning, vulnerability assessment, and report generation with a web interface.

Multi-source email, subdomain, and host enumeration tool. Gathers intelligence from search engines, PGP key servers, and SHODAN with support for over 40 different sources.

Powerful desktop application for creating high-quality diagrams and network visualizations. Features automatic layout algorithms for large datasets and cross-platform compatibility.

People search engine with API access to deep web and public records. Provides comprehensive identity resolution and background information gathering capabilities.

Advanced social media monitoring tool designed for businesses of all sizes. Provides comprehensive brand monitoring, competitive analysis, and influencer identification with real-time alerts.

Advanced username search tool that scans over 600+ websites for username presence. More comprehensive than Sherlock, includes adult content platforms, gaming sites, and specialized forums often missed by other tools.

Advanced social media monitoring and analytics platform with AI-powered sentiment analysis. Monitors millions of sources in real-time with advanced threat detection and brand protection capabilities.

Advanced Discord conversation analysis tool that saves chat history including media content. Provides comprehensive Discord intelligence gathering with advanced search and analysis capabilities.

Advanced OSINT geolocalization tool specifically designed for Telegram. Finds nearby users and groups with precise location tracking within 50-100 meters using Telegram location features.

Instagram automation tool using Selenium for social media intelligence gathering. Automates interactions, follows, likes, and data collection from Instagram profiles.

Fast Instagram Private API wrapper for Python that does not require Selenium. Provides comprehensive Instagram data extraction without browser automation overhead.

Advanced username investigation tool that creates comprehensive dossiers on individuals by analyzing usernames across multiple platforms. Includes advanced correlation features and detailed reporting capabilities.

Advanced Instagram OSINT tool offering an interactive shell for deep analysis of Instagram accounts. Goes beyond basic profile viewing to extract hidden information including followers analysis, posts metadata, location data, and engagement patterns.

Username enumeration tool that searches for usernames across 400+ social networks. Fast, efficient, and regularly updated with new sites and profile information gathering.

Real-time social media search engine that monitors multiple platforms simultaneously. Provides advanced sentiment analysis, trending topic identification, and comprehensive social media intelligence across platforms including obscure social networks.

Advanced Instagram OSINT tool focused on follower/following analysis and relationship mapping. Exports detailed follower data and performs social network analysis to identify connections and patterns not visible through standard Instagram interfaces.

Advanced Telegram analytics platform with database of 37+ billion posts from public channels and groups. Provides comprehensive channel analysis, trending topics, and advanced search capabilities.

Advanced social listening platform with Blue Silk AI technology that provides predictive analytics for trend forecasting up to 90 days. Includes visual recognition capabilities for logo and brand detection.

Advanced Telegram investigation tool that provides comprehensive channel and user analysis. Includes message history analysis, member enumeration, and advanced search capabilities for Telegram intelligence gathering.

Specialized Instagram intelligence extraction tool that recovers hidden information including email addresses, phone numbers, and detailed profile metadata from Instagram accounts. Particularly valuable for investigations where subjects have privacy settings enabled.

Advanced Twitter scraping and OSINT tool that bypasses Twitter API limitations. Scrapes followers, following, tweets, and comprehensive user data while evading most API restrictions. Includes advanced search capabilities and data export features.

Multi-disciplinary search engine for academic web resources, indexing over 240 million documents from repositories worldwide with comprehensive coverage.

Advanced data exploration platform providing access to demographic, economic, and geographic data from U.S. Census Bureau surveys and programs.

Scientific literature digital library focusing on computer science and information technology. Provides citation analysis and document clustering capabilities.

Database of clinical studies conducted around the world, providing transparency into medical research and drug development processes with comprehensive trial information.

Comprehensive bibliography database for computer science publications, providing complete reference information for conferences, journals, and proceedings.

Comprehensive directory of open-access academic journals across all disciplines. All indexed content is freely accessible without subscription requirements.

Online catalog of National Archives holdings, providing access to historical documents, photographs, and government records spanning centuries with comprehensive search capabilities.

Federal court system database providing access to case and docket information from federal appellate, district, and bankruptcy courts with comprehensive legal records.

Official U.S. government system for procurement opportunities, entity registration, and exclusion records. Provides access to federal contracting information and vendor databases.

Electronic Data Gathering, Analysis, and Retrieval system containing financial filings from public companies, providing comprehensive corporate intelligence and regulatory filings.

AI-powered research tool that helps navigate academic literature by understanding context and relationships between papers. Provides citation analysis and research recommendations.

Open-access repository of scientific papers in physics, mathematics, computer science, and related fields. Provides pre-print access to cutting-edge research before peer review publication.