diff --git a/public/arf.json b/public/arf.json index 086d965..14eb620 100644 --- a/public/arf.json +++ b/public/arf.json @@ -1,7670 +1,7910 @@ { - "name": "OSINT Framework", - "type": "folder", - "children": [ - { - "name": "Username", - "type": "folder", - "children": [ - { - "name": "Username Search Engines", - "type": "folder", - "children": [ - { - "name": "Sylva Identity Discovery (T)", - "type": "url", - "url": "https://sylva.pfeister.dev/", - "description": "Open-source CLI tool for username and identity discovery with branch discovery to expand searches as additional linked identities are uncovered.", - "status": "live", - "pricing": "free", - "bestFor": "Username enumeration with identity branching", - "input": "Username", - "output": "Linked accounts and identities across platforms", - "opsec": "active", - "opsecNote": "Makes requests to target platforms to check username existence; external API keys may be used.", - "localInstall": true, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Sherlock (T)", - "type": "url", - "url": "https://github.com/sherlock-project/sherlock", - "description": "Python CLI tool that hunts down social media accounts by username across 400+ social networks. Supports Tor routing, proxy configuration, and CSV/XLSX export.", - "status": "live", - "pricing": "free", - "bestFor": "Mass username enumeration across 400+ sites", - "input": "Username(s)", - "output": "List of discovered profile URLs across social networks", - "opsec": "active", - "opsecNote": "Directly queries each target site to check username existence; supports Tor/proxy for anonymity.", - "localInstall": true, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Namechk", - "type": "url", - "url": "https://namechk.com/", - "description": "Web-based username and domain availability checker that searches 100+ social media platforms and 36 domain extensions simultaneously.", - "status": "live", - "pricing": "free", - "bestFor": "Quick username availability check across social media and domains", - "input": "Username or domain name", - "output": "Availability status across 100+ platforms and domain extensions", - "opsec": "passive", - "opsecNote": "Searches are routed through Namechk's servers; target accounts are not directly contacted by the user.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "WhatsMyName (T)", - "type": "url", - "url": "https://github.com/WebBreacher/WhatsMyName", - "description": "OSINT project maintaining a curated JSON database of website detection patterns for username enumeration. Web interface available at whatsmyname.app.", - "status": "live", - "pricing": "free", - "bestFor": "Username enumeration using community-maintained site detection data", - "input": "Username", - "output": "List of sites where the username exists, based on HTTP response pattern matching", - "opsec": "active", - "opsecNote": "Makes HTTP requests to each target site to check for username existence.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Thats Them", - "type": "url", - "url": "https://thatsthem.com/", - "description": "Free people search engine aggregating data from 50+ sources. Supports lookups by name, address, phone number, or email.", - "status": "live", - "pricing": "freemium", - "bestFor": "People search by name, email, phone, or address", - "input": "Name, email address, phone number, or physical address", - "output": "Contact info, residential details, demographics, and financial estimates", - "opsec": "passive", - "opsecNote": "Searches are routed through ThatsThem's servers; the target is not alerted.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "NameCheckup", - "type": "url", - "url": "https://namecheckup.com/", - "description": "Free web-based username and domain availability checker that searches across 20+ social media platforms and 40+ domain extensions with WHOIS lookup support.", - "status": "live", - "pricing": "free", - "bestFor": "Username and domain availability checking with WHOIS info", - "input": "Username or domain name", - "output": "Availability status across social platforms and domain extensions, with WHOIS data", - "opsec": "passive", - "opsecNote": "Searches are proxied through NameCheckup's servers; no direct contact with target platforms by the user.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "GitFive (T)", - "type": "url", - "url": "https://github.com/mxrch/GitFive", - "description": "OSINT CLI tool for investigating GitHub profiles. Tracks username/name history, maps emails to accounts, extracts SSH public keys, and exports findings as JSON.", - "status": "live", - "pricing": "free", - "bestFor": "Deep investigation of GitHub user profiles and email-to-account mapping", - "input": "GitHub username or email address", - "output": "Profile history, linked emails, SSH keys, repository analysis, JSON export", - "opsec": "active", - "opsecNote": "Queries GitHub API directly; developer recommends using a secondary GitHub account.", - "localInstall": true, - "googleDork": false, - "registration": true, - "editUrl": false, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Sherlock", - "type": "url", - "url": "https://github.com/sherlock-project/sherlock", - "description": "Python CLI tool that hunts down social media accounts by username across 400+ social networks. Supports Tor routing, proxy configuration, and CSV/XLSX export.", - "status": "live", - "pricing": "free", - "bestFor": "Mass username enumeration across 400+ sites", - "input": "Username(s)", - "output": "List of discovered profile URLs across social networks", - "opsec": "active", - "opsecNote": "Directly queries each target site to check username existence; supports Tor/proxy for anonymity.", - "localInstall": true, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Names Directory", - "type": "url", - "url": "https://namesdir.com/", - "description": "Searchable database of 1B+ name combinations collected from public sources. Allows bidirectional lookup to find first names by surname or surnames by first name.", - "status": "live", - "pricing": "free", - "bestFor": "Finding name combinations and frequency data for a given first or last name", - "input": "First name or surname", - "output": "Associated name combinations with frequency counts", - "opsec": "passive", - "opsecNote": "Queries a static public database; no contact with any target individual.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Lullar", - "type": "url", - "url": "https://com.lullar.com", - "description": "Free people search and username lookup tool that searches across 148+ social media platforms including Instagram, TikTok, Facebook, and LinkedIn.", - "status": "live", - "pricing": "free", - "bestFor": "Social media profile discovery by username, email, or name", - "input": "Email address, full name, or username", - "output": "Social media profiles found across 148+ platforms", - "opsec": "passive", - "opsecNote": "Searches are routed through Lullar's servers; no direct queries from the user to target platforms.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": false, - "invitationOnly": false, - "deprecated": false - } - ] - }, - { - "name": "Specific Sites", - "type": "folder", - "children": [ - { - "name": "Amazon Usernames (M)", - "type": "url", - "url": "https://www.google.com/search?q=site:amazon.com+%3Cusername%3E", - "description": "Google dork that searches Amazon.com for pages associated with a specific username, surfacing public profiles, wishlists, and reviews.", - "status": "live", - "pricing": "free", - "bestFor": "Finding Amazon public profiles, wishlists, and review activity by username", - "input": "Username (inserted into Google search query)", - "output": "Google search results linking to Amazon pages mentioning the username", - "opsec": "passive", - "opsecNote": "Query goes to Google, not Amazon directly. Google may log the search but the target is not alerted.", - "localInstall": false, - "googleDork": true, - "registration": false, - "editUrl": true, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Github User (M)", - "type": "url", - "url": "https://api.github.com/users/%3Cusername%3E/events/public", - "description": "Queries the GitHub public Events API to retrieve a user's recent public activity, including pushes, pull requests, issues, and other repository events.", - "status": "live", - "pricing": "free", - "bestFor": "Enumerating a GitHub user's recent public activity and repository interactions", - "input": "GitHub username (inserted into URL path)", - "output": "JSON array of public events (pushes, PRs, issues, comments) with timestamps and repo details", - "opsec": "passive", - "opsecNote": "Unauthenticated API call; GitHub rate-limits by IP (60 req/hr) but does not notify the target user.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": true, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Tinder Usernames (M)", - "type": "url", - "url": "https://www.gotinder.com/@%3Cusername%3E", - "description": "Accesses a Tinder user's public web profile via their username. The gotinder.com domain redirects to tinder.com.", - "status": "live", - "pricing": "free", - "bestFor": "Confirming existence of a Tinder profile and viewing public profile details", - "input": "Tinder username (appended to URL after @)", - "output": "Public profile page with name, photo, and basic info if the user has web sharing enabled", - "opsec": "passive", - "opsecNote": "Simple HTTP GET to a public page; target is not notified of profile views via the web URL.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": true, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Keybase", - "type": "url", - "url": "https://keybase.io/", - "description": "Platform for cryptographic identity verification, linking social media accounts, PGP keys, and cryptocurrency addresses to a single profile. Acquired by Zoom in 2020 but still operational.", - "status": "live", - "pricing": "free", - "bestFor": "Looking up verified social accounts, PGP keys, and crypto wallets tied to a username", - "input": "Username", - "output": "User profile showing verified identities across platforms, PGP keys, cryptocurrency addresses, and devices", - "opsec": "passive", - "opsecNote": "Public profile lookups are passive web requests. No login required to view profiles.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "MIT PGP Key Server", - "type": "url", - "url": "https://pgp.mit.edu/", - "description": "MIT PGP Public Key Server for searching, submitting, and removing PGP public keys. Look up keys by name, email, or key ID to find associated cryptographic identities.", - "status": "live", - "pricing": "free", - "bestFor": "Looking up PGP public keys associated with a username or email address", - "input": "Name, email address, or key ID", - "output": "PGP public key data, key fingerprints, associated UIDs/email addresses, and key metadata", - "opsec": "passive", - "opsecNote": "Public key server query; no authentication required and target is not notified of lookups.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "ProtonMail users (M)", - "type": "url", - "url": "https://api.protonmail.ch/pks/lookup?op=index&search=@protonmail.com", - "description": "Queries ProtonMail's HKP-compatible PGP key server to look up the public key for a ProtonMail username. A successful response confirms the account exists.", - "status": "live", - "pricing": "free", - "bestFor": "Confirming whether a ProtonMail username exists and retrieving its PGP public key", - "input": "ProtonMail username (appended with @protonmail.com)", - "output": "PGP key index with public key fingerprint, algorithm, creation timestamp, and email UID", - "opsec": "passive", - "opsecNote": "Unauthenticated API query to ProtonMail's public key server. Target user is not notified. Enables user enumeration.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": true, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "ProtonMail Domains (M)", - "type": "url", - "url": "https://api.protonmail.ch/pks/lookup?op=index&search=", - "description": "Queries ProtonMail's HKP key server with a full email address to check for a PGP public key. Useful for identifying ProtonMail users on custom domains.", - "status": "live", - "pricing": "free", - "bestFor": "Checking if an email address on a custom domain is hosted on ProtonMail", - "input": "Full email address (any domain that may be hosted on ProtonMail)", - "output": "PGP key index with public key fingerprint, algorithm, creation timestamp, and email UID", - "opsec": "passive", - "opsecNote": "Unauthenticated public HKP endpoint. Target is not notified. Can reveal whether a custom domain uses ProtonMail.", - "localInstall": false, - "googleDork": false, - "registration": false, - "editUrl": true, - "api": true, - "invitationOnly": false, - "deprecated": false - } - ] - } - ] - }, - { - "name": "Email Address", - "type": "folder", - "children": [ - { - "name": "Email Search", - "type": "folder", - "children": [ - { - "name": "Sylva Identity Discovery (T)", - "type": "url", - "url": "https://sylva.pfeister.dev/" - }, - { - "name": "ThatsThem", - "type": "url", - "url": "https://thatsthem.com/reverse-email-lookup" - }, - { - "name": "Hunter", - "type": "url", - "url": "https://hunter.io/" - }, - { - "name": "Email to Address (R)", - "type": "url", - "url": "https://www.melissa.com/" - }, - { - "name": "VoilaNorbert", - "type": "url", - "url": "https://www.voilanorbert.com/" - }, - { - "name": "GHunt (T)", - "type": "url", - "url": "https://github.com/mxrch/GHunt" - }, - { - "name": "OSINT Industries", - "type": "url", - "url": "https://www.osint.industries/" - }, - { - "name": "theHarvester (T)", - "type": "url", - "url": "https://github.com/laramies/theHarvester", - "description": "Command-line tool for gathering emails, subdomains, IPs, and URLs from public sources.", - "status": "live", - "pricing": "free", - "bestFor": "Email harvesting, subdomain enumeration, passive recon", - "input": "Domain name", - "output": "Email addresses, subdomains, IPs, URLs", - "opsec": "passive", - "opsecNote": "Queries third-party search engines and APIs. Does not contact the target directly.", - "localInstall": true, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Infoga (T)", - "type": "url", - "url": "https://github.com/m4ll0k/infoga" - }, - { - "name": "Skymem", - "type": "url", - "url": "https://www.skymem.info/" - }, - { - "name": "Epieos Email Tool", - "type": "url", - "url": "https://tools.epieos.com/email.php" - }, - { - "name": "breach.vip", - "type": "url", - "url": "https://breach.vip/" - }, - { - "name": "Holehe (T)", - "type": "url", - "url": "https://github.com/megadose/holehe" - } - ] - }, - { - "name": "Common Email Formats", - "type": "folder", - "children": [ - { - "name": "Email Format", - "type": "url", - "url": "https://www.email-format.com/" - }, - { - "name": "Email Permutator", - "type": "url", - "url": "https://metricsparrow.com/toolkit/email-permutator/" - } - ] - }, - { - "name": "Email Verification", - "type": "folder", - "children": [ - { - "name": "Reacher Github (T)", - "type": "url", - "url": "https://github.com/reacherhq/check-if-email-exists" - }, - { - "name": "Reacher Demo", - "type": "url", - "url": "https://reacher.email" - }, - { - "name": "MailScrap", - "type": "url", - "url": "https://mailscrap.com/" - }, - { - "name": "Read Notify", - "type": "url", - "url": "https://www.readnotify.com/" - }, - { - "name": "Email Reputation", - "type": "url", - "url": "https://emailrep.io/" - }, - { - "name": "MailboxValidator", - "type": "url", - "url": "https://www.mailboxvalidator.com/demo" - }, - { - "name": "VerifyEmail (R$)", - "type": "url", - "url": "https://emailable.com/" - } - ] - }, - { - "name": "Breach Data", - "type": "folder", - "children": [ - { - "name": "Have I been pwned?", - "type": "url", - "url": "https://haveibeenpwned.com/", - "description": "Database of breached credentials and email addresses from known data breaches.", - "status": "live", - "pricing": "freemium", - "bestFor": "Breach detection, credential exposure checks", - "input": "Email address, phone number, password hash", - "output": "Breach names, breach dates, exposed data types", - "opsec": "passive", - "opsecNote": "Queries breach database via API. Target is not notified of lookups.", - "localInstall": false, - "googleDork": false, - "registration": true, - "editUrl": false, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Hudson Rock", - "type": "url", - "url": "https://www.hudsonrock.com/threat-intelligence-cybercrime-tools" - }, - { - "name": "DeHashed (R)", - "type": "url", - "url": "https://dehashed.com/" - }, - { - "name": "Vigilante.pw", - "type": "url", - "url": "https://www.vigilante.pw/" - } - ] - }, - { - "name": "Mail Blacklists", - "type": "folder", - "children": [ - { - "name": "MxToolbox", - "type": "url", - "url": "https://mxtoolbox.com/" - } - ] - } - ] - }, - { - "name": "Domain Name", - "type": "folder", - "children": [ - { - "name": "Whois Records", - "type": "folder", - "children": [ - { - "name": "Domain Dossier", - "type": "url", - "url": "https://centralops.net/co/DomainDossier.aspx" - }, - { - "name": "domainIQ", - "type": "url", - "url": "https://www.domainiq.com/" - }, - { - "name": "DomainTools Whois", - "type": "url", - "url": "https://whois.domaintools.com/" - }, - { - "name": "SWITCH Internet Domains Whois (.ch)", - "type": "url", - "url": "https://www.nic.ch/whois/" - }, - { - "name": "Whoisology", - "type": "url", - "url": "https://whoisology.com/#advanced" - }, - { - "name": "Whois ARIN", - "type": "url", - "url": "https://whois.arin.net/ui/advanced.jsp" - }, - { - "name": "DNSstuff", - "type": "url", - "url": "https://www.dnsstuff.com/freetools" - }, - { - "name": "Robtex (R)", - "type": "url", - "url": "https://robtex.com/" - }, - { - "name": "Domaincrawler.com", - "type": "url", - "url": "https://domaincrawler.com/" - }, - { - "name": "MarkMonitor Whois Search", - "type": "url", - "url": "https://domains.markmonitor.com/whois/" - }, - { - "name": "easyWhois", - "type": "url", - "url": "https://www.easywhois.com/" - }, - { - "name": "Website Informer", - "type": "url", - "url": "https://website.informer.com/" - }, - { - "name": "Who.is", - "type": "url", - "url": "https://who.is/" - }, - { - "name": "Whois AMPed", - "type": "url", - "url": "https://whoisamped.com/" - }, - { - "name": "ViewDNS.info", - "type": "url", - "url": "https://viewdns.info/" - }, - { - "name": "Daily DNS Changes", - "type": "url", - "url": "https://dailychanges.domaintools.com/" - }, - { - "name": "IP2WHOIS", - "type": "url", - "url": "https://www.ip2whois.com" - }, - { - "name": "Netlas.io", - "type": "url", - "url": "https://app.netlas.io/whois_domains/" - } - ] - }, - { - "name": "Subdomains", - "type": "folder", - "children": [ - { - "name": "SynapsInt", - "type": "url", - "url": "https://synapsint.com" - }, - { - "name": "Aquatone (T)", - "type": "url", - "url": "https://github.com/michenriksen/aquatone" - }, - { - "name": "FindSubDomains", - "type": "url", - "url": "https://findsubdomains.com/" - }, - { - "name": "Google Subdomains (D)", - "type": "url", - "url": "https://www.google.com/?gws_rd=ssl#q=site:%3Cdomain.com%3E" - }, - { - "name": "Recon-ng (T)", - "type": "url", - "url": "https://github.com/lanmaster53/recon-ng", - "description": "Full-featured web reconnaissance framework with independent modules for data gathering.", - "status": "live", - "pricing": "free", - "bestFor": "Modular web recon, API-driven data collection", - "input": "Domain, company name, email, IP", - "output": "Contacts, hosts, credentials, ports via module-specific results", - "opsec": "passive", - "opsecNote": "Queries third-party APIs and data sources. Does not probe the target unless specific modules are configured to do so.", - "localInstall": true, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "XRay", - "type": "url", - "url": "https://github.com/evilsocket/xray" - }, - { - "name": "DNS Recon (T)", - "type": "url", - "url": "https://github.com/darkoperator/dnsrecon" - }, - { - "name": "Gobuster (T)", - "type": "url", - "url": "https://github.com/OJ/gobuster" - }, - { - "name": "Fierce Domain Scanner (T)", - "type": "url", - "url": "https://github.com/davidpepper/fierce-domain-scanner" - }, - { - "name": "Bluto (T)", - "type": "url", - "url": "https://github.com/darryllane/Bluto" - }, - { - "name": "OWASP Maryam (T)", - "type": "url", - "url": "https://github.com/saeeddhqan/Maryam" - }, - { - "name": "theHarvester (T)", - "type": "url", - "url": "https://github.com/laramies/theHarvester", - "description": "Command-line tool for gathering emails, subdomains, IPs, and URLs from public sources.", - "status": "live", - "pricing": "free", - "bestFor": "Email harvesting, subdomain enumeration, passive recon", - "input": "Domain name", - "output": "Email addresses, subdomains, IPs, URLs", - "opsec": "passive", - "opsecNote": "Queries third-party search engines and APIs. Does not contact the target directly.", - "localInstall": true, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Pentest-tools.com Subdomains", - "type": "url", - "url": "https://pentest-tools.com/information-gathering/find-subdomains-of-domain" - }, - { - "name": "SecLists DNS Subdomains (T)", - "type": "url", - "url": "https://github.com/danielmiessler/SecLists/tree/master/Discovery/DNS" - }, - { - "name": "dnspop (T)", - "type": "url", - "url": "https://github.com/bitquark/dnspop" - }, - { - "name": "gdns (T)", - "type": "url", - "url": "https://github.com/hrbrmstr/gdns" - }, - { - "name": "Sublist3r", - "type": "url", - "url": "https://github.com/aboul3la/Sublist3r" - }, - { - "name": "AltDNS (T)", - "type": "url", - "url": "https://github.com/infosec-au/altdns" - }, - { - "name": "Netlas.io", - "type": "url", - "url": "https://app.netlas.io/domains/" - } - ] - }, - { - "name": "Discovery", - "type": "folder", - "children": [ - { - "name": "Shodan", - "type": "url", - "url": "https://www.shodan.io/", - "description": "Search engine for internet-connected devices. Find open ports, services, and vulnerabilities across the public internet.", - "status": "live", - "pricing": "freemium", - "bestFor": "Port scanning, banner grabbing, IoT discovery", - "input": "IP address, domain", - "output": "Open ports, services, banners, CVEs", - "opsec": "passive", - "opsecNote": "Queries cached scan data. Does not directly probe the target.", - "localInstall": false, - "googleDork": false, - "registration": true, - "editUrl": false, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Netlas.io", - "type": "url", - "url": "https://app.netlas.io/" - }, - { - "name": "Kraken (T)", - "type": "url", - "url": "https://github.com/Sw4mpf0x/Kraken" - }, - { - "name": "Online Nikto scanner", - "type": "url", - "url": "https://nikto.online/" - }, - { - "name": "urlscan.io", - "type": "url", - "url": "https://urlscan.io/search/#*" - }, - { - "name": "Daily DNS Changes", - "type": "url", - "url": "https://dailychanges.domaintools.com/" - }, - { - "name": "Redirect Detective", - "type": "url", - "url": "https://redirectdetective.com/" - }, - { - "name": "Sitediff (T)", - "type": "url", - "url": "https://github.com/digininja/sitediff" - }, - { - "name": "BuiltWith", - "type": "url", - "url": "https://builtwith.com/", - "description": "Technology profiler that identifies the tech stack, analytics, and frameworks used by websites.", - "status": "live", - "pricing": "freemium", - "bestFor": "Technology stack identification, competitor analysis", - "input": "Domain or URL", - "output": "Technology list, analytics IDs, hosting info, historical tech changes", - "opsec": "passive", - "opsecNote": "Queries cached technology profiles. Does not contact the target.", - "localInstall": false, - "googleDork": false, - "registration": true, - "editUrl": false, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "Wappalyzer", - "type": "url", - "url": "https://www.wappalyzer.com/" - }, - { - "name": "AnalyzeID", - "type": "url", - "url": "https://analyzeid.com/" - }, - { - "name": "Criminal IP Search", - "type": "url", - "url": "https://www.criminalip.io/" - }, - { - "name": "urlDNA", - "type": "url", - "url": "https://urldna.io" - }, - { - "name": "ZoomEye.ai", - "type": "url", - "url": "https://www.zoomeye.org/" - } - ] - }, - { - "name": "Certificate Search", - "type": "folder", - "children": [ - { - "name": "Shodan", - "type": "url", - "url": "https://www.shodan.io/" - }, - { - "name": "Google's Certificate Transparency", - "type": "url", - "url": "https://www.certificate-transparency.org/known-logs" - }, - { - "name": "Spyse", - "type": "url", - "url": "https://spyse.com/search/certificate" - }, - { - "name": "Censys", - "type": "url", - "url": "https://censys.io/", - "description": "Internet-wide scanner and search engine for hosts, certificates, and services.", - "status": "live", - "pricing": "freemium", - "bestFor": "Certificate discovery, host enumeration, exposure monitoring", - "input": "Domain, IP, certificate fingerprint, search query", - "output": "Host details, open ports, TLS certificates, service banners", - "opsec": "passive", - "opsecNote": "Queries pre-scanned data. Does not probe the target directly.", - "localInstall": false, - "googleDork": false, - "registration": true, - "editUrl": false, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "crt.sh - Certificate Search", - "type": "url", - "url": "https://crt.sh/?" - }, - { - "name": "CertKit - Certificate Transparency Log Search", - "type": "url", - "url": "https://www.certkit.io/tools/ct-logs/" - }, - { - "name": "certgraph (T)", - "type": "url", - "url": "https://github.com/lanrat/certgraph" - }, - { - "name": "Netlas.io", - "type": "url", - "url": "https://app.netlas.io/certs/" - } - ] - }, - { - "name": "PassiveDNS", - "type": "folder", - "children": [ - { - "name": "Mnemonic", - "type": "url", - "url": "https://passivedns.mnemonic.no/" - }, - { - "name": "DNS Dumpster", - "type": "url", - "url": "https://dnsdumpster.com/" - }, - { - "name": "Deteque (R)", - "type": "url", - "url": "https://www.deteque.com/" - } - ] - }, - { - "name": "Reputation", - "type": "folder", - "children": [ - { - "name": "UrlQuery.net", - "type": "url", - "url": "https://urlquery.net/" - }, - { - "name": "URL Void", - "type": "url", - "url": "https://www.urlvoid.com/" - }, - { - "name": "FortiGuard Reputation Service", - "type": "url", - "url": "https://fortiguard.com/iprep" - }, - { - "name": "Trend Micro Site Safety Center", - "type": "url", - "url": "https://global.sitesafety.trendmicro.com/" - }, - { - "name": "WatchGuard ReputationAuthority", - "type": "url", - "url": "https://www.reputationauthority.org/" - }, - { - "name": "Sucuri SiteCheck", - "type": "url", - "url": "https://sitecheck.sucuri.net/" - }, - { - "name": "ThreatMiner.org", - "type": "url", - "url": "https://www.threatminer.org/" - }, - { - "name": "BlueCoat WebPulse", - "type": "url", - "url": "https://sitereview.bluecoat.com/sitereview.jsp" - }, - { - "name": "Zscaler Zulu URL Risk Analyzer", - "type": "url", - "url": "https://zulu.zscaler.com/" - }, - { - "name": "Joe Sandbox Url Analyzer", - "type": "url", - "url": "https://www.url-analyzer.net/" - }, - { - "name": "Deepviz Domain Search", - "type": "url", - "url": "https://search.deepviz.com/" - }, - { - "name": "AVG Threat Labs", - "type": "url", - "url": "https://www.avg.com/en/signal/website-safety" - }, - { - "name": "Webroot BrightCloud URL/IP Lookup", - "type": "url", - "url": "https://www.brightcloud.com/tools/url-ip-lookup.php" - }, - { - "name": "vURL Online", - "type": "url", - "url": "https://vurldissect.co.uk/" - }, - { - "name": "AlienVault Open Threat Exchange", - "type": "url", - "url": "https://otx.alienvault.com/browse/pulses/" - }, - { - "name": "Malware Domain List", - "type": "url", - "url": "https://www.malwaredomainlist.com/mdl.php" - }, - { - "name": "Web Inspector Online Scan", - "type": "url", - "url": "https://www.webinspector.com/website-malware-scanner/" - }, - { - "name": "Google Safe Browsing API", - "type": "url", - "url": "https://developers.google.com/safe-browsing/?csw=1" - }, - { - "name": "Cisco Talos", - "type": "url", - "url": "https://talosintelligence.com/" - } - ] - }, - { - "name": "Domain Blacklists", - "type": "folder", - "children": [ - { - "name": "Threatexpert.com Malicious URLs", - "type": "url", - "url": "https://www.networksec.org/grabbho/block.txt" - }, - { - "name": "Zeus C2 Tracker", - "type": "url", - "url": "https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist" - }, - { - "name": "Malware Domains Blacklist", - "type": "url", - "url": "https://mirror1.malwaredomains.com/files/domains.txt" - }, - { - "name": "Blackweb", - "type": "url", - "url": "https://github.com/maravento/blackweb" - }, - { - "name": "Critical Stack Intel (R)", - "type": "url", - "url": "https://intel.criticalstack.com/" - }, - { - "name": "DNS Sinkhole", - "type": "url", - "url": "https://malc0de.com/bl/" - }, - { - "name": "DNS-BH Malware Domain Blocklist", - "type": "url", - "url": "https://www.malwaredomains.com/wordpress/?page_id=66" - }, - { - "name": "Malware Domain List", - "type": "url", - "url": "https://www.malwaredomainlist.com/hostslist/hosts.txt" - }, - { - "name": "MalwareURL (R)", - "type": "url", - "url": "https://www.malwareurl.com/index.php" - }, - { - "name": "scumware.org", - "type": "url", - "url": "https://www.scumware.org/" - }, - { - "name": "ZeuS Tracker", - "type": "url", - "url": "https://zeustracker.abuse.ch/blocklist.php" - }, - { - "name": "Shadowserver Foundation", - "type": "url", - "url": "https://www.shadowserver.org/" - }, - { - "name": "Email Domain Validation", - "type": "url", - "url": "https://www.mailboxvalidator.com/domain" - } - ] - }, - { - "name": "Typosquatting", - "type": "folder", - "children": [ - { - "name": "DNS Twist (T)", - "type": "url", - "url": "https://github.com/elceef/dnstwist" - }, - { - "name": "URLCrazy (T)", - "type": "url", - "url": "https://www.morningstarsecurity.com/research/urlcrazy" - }, - { - "name": "dnstwister", - "type": "url", - "url": "https://dnstwister.report/" - }, - { - "name": "Catphish (T)", - "type": "url", - "url": "https://github.com/ring0lab/catphish" - } - ] - }, - { - "name": "Analytics", - "type": "folder", - "children": [ - { - "name": "BuiltWith", - "type": "url", - "url": "https://builtwith.com/", - "description": "Technology profiler that identifies the tech stack, analytics, and frameworks used by websites.", - "status": "live", - "pricing": "freemium", - "bestFor": "Technology stack identification, competitor analysis", - "input": "Domain or URL", - "output": "Technology list, analytics IDs, hosting info, historical tech changes", - "opsec": "passive", - "opsecNote": "Queries cached technology profiles. Does not contact the target.", - "localInstall": false, - "googleDork": false, - "registration": true, - "editUrl": false, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "SiteSleuth", - "type": "url", - "url": "https://www.sitesleuth.io/" - }, - { - "name": "Wappalyzer (T)", - "type": "url", - "url": "https://www.wappalyzer.com/" - }, - { - "name": "SEMrush", - "type": "url", - "url": "https://www.semrush.com/" - }, - { - "name": "Moonsearch", - "type": "url", - "url": "https://moonsearch.com/" - }, - { - "name": "Ewhois", - "type": "url", - "url": "https://ewhois.com/" - }, - { - "name": "StatsCrop", - "type": "url", - "url": "https://www.statscrop.com/" - }, - { - "name": "Open Site Explorer", - "type": "url", - "url": "https://moz.com/link-explorer" - }, - { - "name": "SpyOnWeb", - "type": "url", - "url": "https://www.spyonweb.com/" - }, - { - "name": "Keyword Density", - "type": "url", - "url": "https://tools.seobook.com/general/keyword-density/" - }, - { - "name": "Alexa Site Statistics", - "type": "url", - "url": "https://alexa.amazon.com/about" - }, - { - "name": "Cisco Umbrella Popularity List", - "type": "url", - "url": "https://s3-us-west-1.amazonaws.com/umbrella-static/index.html" - }, - { - "name": "Alexa Top 500 Global Sites", - "type": "url", - "url": "https://alexa.amazon.com/about" - }, - { - "name": "Sitedossier", - "type": "url", - "url": "https://www.sitedossier.com/" - }, - { - "name": "Visual Site Mapper", - "type": "url", - "url": "https://github.com/alentum/sitemapper-nodejs" - }, - { - "name": "ClearWebStats.com", - "type": "url", - "url": "https://www.clearwebstats.com/" - }, - { - "name": "PubDB", - "type": "url", - "url": "https://pub-db.com/" - }, - { - "name": "SimilarWeb", - "type": "url", - "url": "https://www.similarweb.com/" - }, - { - "name": "Siteliner", - "type": "url", - "url": "https://www.siteliner.com/" - }, - { - "name": "WhatWeb", - "type": "url", - "url": "https://github.com/urbanadventurer/WhatWeb" - } - ] - }, - { - "name": "URL Expanders", - "type": "folder", - "children": [ - { - "name": "Link Expander", - "type": "url", - "url": "https://www.linkexpander.com/" - }, - { - "name": "CheckShortURL", - "type": "url", - "url": "https://checkshorturl.com/" - }, - { - "name": "URL Expander", - "type": "url", - "url": "https://urlex.org/" - }, - { - "name": "Where Does This Link Go?", - "type": "url", - "url": "https://wheregoes.com/" - }, - { - "name": "KnowURL", - "type": "url", - "url": "https://www.knowurl.com/" - } - ] - }, - { - "name": "Change Detection", - "type": "folder", - "children": [ - { - "name": "VisualPing", - "type": "url", - "url": "https://visualping.io:443/" - }, - { - "name": "Change Detection", - "type": "url", - "url": "https://visualping.io/" - }, - { - "name": "Check site availability Online", - "type": "url", - "url": "https://upcheck.online/" - }, - { - "name": "Follow That Page", - "type": "url", - "url": "https://www.followthatpage.com/" - }, - { - "name": "Urlwatch", - "type": "url", - "url": "https://github.com/thp/urlwatch" - }, - { - "name": "WatchThatPage", - "type": "url", - "url": "https://watchthatpage.com/" - }, - { - "name": "ChangeDetect", - "type": "url", - "url": "https://www.eatgrainmaker.com/home/" - } - ] - }, - { - "name": "Social Analysis", - "type": "folder", - "children": [ - { - "name": "Google Trends", - "type": "url", - "url": "https://trends.google.com/trends/" - } - ] - }, - { - "name": "DNSSEC", - "type": "folder", - "children": [ - { - "name": "DNSSEC Analyzer", - "type": "url", - "url": "https://dnssec-analyzer.verisignlabs.com/" - }, - { - "name": "DNSViz", - "type": "url", - "url": "https://dnsviz.net/" - } - ] - }, - { - "name": "Vulnerabilities", - "type": "folder", - "children": [ - { - "name": "Scanners", - "type": "folder", - "children": [ - { - "name": "Sn1per (T)", - "type": "url", - "url": "https://github.com/1N3/Sn1per" - }, - { - "name": "Online Nikto scanner", - "type": "url", - "url": "https://nikto.online/" - }, - { - "name": "WDES - Web Data Exposure Scanner (T)", - "type": "url", - "url": "https://github.com/eduardoit/web-data-exposure-scanner" - } - ] - }, - { - "name": "Disclosure Sites", - "type": "folder", - "children": [ - { - "name": "Zone-H.org", - "type": "url", - "url": "https://zone-h.org/archive" - } - ] - }, - { - "name": "RobotsDisallowed", - "type": "url", - "url": "https://github.com/danielmiessler/RobotsDisallowed" - } - ] - }, - { - "name": "Tools", - "type": "folder", - "children": [ - { - "name": "Belati (T)", - "type": "url", - "url": "https://github.com/aancw/Belati" - }, - { - "name": "Burp Suite (T)", - "type": "url", - "url": "https://portswigger.net/burp" - }, - { - "name": "EyeWitness (T)", - "type": "url", - "url": "https://github.com/ChrisTruncer/EyeWitness" - }, - { - "name": "Hunting-New-Registered-Domains (T)", - "type": "url", - "url": "https://github.com/gfek/Hunting-New-Registered-Domains" - }, - { - "name": "International Domain Name Conversion Tool", - "type": "url", - "url": "https://mct.verisign-grs.com/" - }, - { - "name": "Online Nikto scanner", - "type": "url", - "url": "https://nikto.online/" - } - ] - }, - { - "name": "Report Malicious Sites", - "type": "folder", - "children": [ - { - "name": "Microsoft", - "type": "url", - "url": "https://www.microsoft.com/en-us/wdsi/support/report-unsafe-site-guest" - }, - { - "name": "Google", - "type": "url", - "url": "https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en" - } - ] - } - ] - }, - { - "name": "Cloud Infrastructure", - "type": "folder", - "children": [ - { - "name": "AWS Enumeration", - "type": "folder", - "children": [ - { - "name": "cloud_enum (T)", - "type": "url", - "url": "https://github.com/initstring/cloud_enum" - }, - { - "name": "AWSBucketDump (T)", - "type": "url", - "url": "https://github.com/jordanpotti/AWSBucketDump" - }, - { - "name": "Subfinder (T)", - "type": "url", - "url": "https://github.com/projectdiscovery/subfinder" - } - ] - }, - { - "name": "Azure/GCP Discovery", - "type": "folder", - "children": [ - { - "name": "GCPBucketBrute (T)", - "type": "url", - "url": "https://github.com/RhinoSecurityLabs/GCPBucketBrute" - }, - { - "name": "AADInternals (T)", - "type": "url", - "url": "https://github.com/Gerenios/AADInternals" - }, - { - "name": "ROADtools (T)", - "type": "url", - "url": "https://github.com/dirkjanm/roadtools" - }, - { - "name": "MicroBurst (T)", - "type": "url", - "url": "https://github.com/NetSPI/MicroBurst" - }, - { - "name": "Stormspotter (T)", - "type": "url", - "url": "https://github.com/Azure/Stormspotter" - } - ] - }, - { - "name": "S3/Blob Storage", - "type": "folder", - "children": [ - { - "name": "Public Buckets", - "type": "url", - "url": "https://buckets.grayhatwarfare.com/" - }, - { - "name": "goblob (T)", - "type": "url", - "url": "https://github.com/Macmod/goblob" - }, - { - "name": "S3Scanner (T)", - "type": "url", - "url": "https://github.com/sa7mon/s3scanner" - }, - { - "name": "BucketLoot (T)", - "type": "url", - "url": "https://github.com/redhuntlabs/BucketLoot" - }, - { - "name": "lazys3 (T)", - "type": "url", - "url": "https://github.com/nahamsec/lazys3" - } - ] - }, - { - "name": "Cloud Configuration Analysis", - "type": "folder", - "children": [ - { - "name": "Prowler (T)", - "type": "url", - "url": "https://github.com/prowler-cloud/prowler" - }, - { - "name": "ScoutSuite (T)", - "type": "url", - "url": "https://github.com/nccgroup/ScoutSuite" - }, - { - "name": "Cloud Custodian (T)", - "type": "url", - "url": "https://github.com/cloud-custodian/cloud-custodian" - }, - { - "name": "Checkov (T)", - "type": "url", - "url": "https://github.com/bridgecrewio/checkov" - }, - { - "name": "Steampipe (T)", - "type": "url", - "url": "https://github.com/turbot/steampipe" - } - ] - }, - { - "name": "SaaS Footprinting", - "type": "folder", - "children": [ - { - "name": "Amass (T)", - "type": "url", - "url": "https://github.com/owasp-amass/amass" - }, - { - "name": "Sublist3r (T)", - "type": "url", - "url": "https://github.com/aboul3la/Sublist3r" - }, - { - "name": "theHarvester (T)", - "type": "url", - "url": "https://github.com/laramies/theHarvester", - "description": "Command-line tool for gathering emails, subdomains, IPs, and URLs from public sources.", - "status": "live", - "pricing": "free", - "bestFor": "Email harvesting, subdomain enumeration, passive recon", - "input": "Domain name", - "output": "Email addresses, subdomains, IPs, URLs", - "opsec": "passive", - "opsecNote": "Queries third-party search engines and APIs. Does not contact the target directly.", - "localInstall": true, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": false, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "SpiderFoot (T)", - "type": "url", - "url": "https://github.com/smicallef/spiderfoot", - "description": "Automated OSINT collection tool with 200+ modules for reconnaissance and threat intelligence.", - "status": "live", - "pricing": "free", - "bestFor": "Automated recon, attack surface mapping, threat intelligence", - "input": "Domain, IP, email, name, phone, subnet", - "output": "Correlated intelligence graph, structured findings across modules", - "opsec": "active", - "opsecNote": "Some modules actively probe targets. Review module settings before running.", - "localInstall": true, - "googleDork": false, - "registration": false, - "editUrl": false, - "api": true, - "invitationOnly": false, - "deprecated": false - }, - { - "name": "dnsrecon (T)", - "type": "url", - "url": "https://github.com/darkoperator/dnsrecon" - } - ] - } - ] - }, - { - "name": "IP & MAC Address", - "type": "folder", - "children": [ - { - "name": "Geolocation", - "type": "folder", - "children": [ - { - "name": "MaxMind Demo", - "type": "url", - "url": "https://www.maxmind.com/en/home" - }, - { - "name": "IPv4/IPv6 lists by country code", - "type": "url", - "url": "https://github.com/ipverse/" - }, - { - "name": "IP2Location.com", - "type": "url", - "url": "https://www.ip2location.com/demo" - }, - { - "name": "IP Fingerprints", - "type": "url", - "url": "https://ipfingerprints.com/" - }, - { - "name": "DB-IP", - "type": "url", - "url": "https://db-ip.com/" - }, - { - "name": "IP Location Finder", - "type": "url", - "url": "https://www.iplocation.net/" - }, - { - "name": "Info Sniper", - "type": "url", - "url": "https://www.infosniper.net/" - }, - { - "name": "utrace", - "type": "url", - "url": "https://en.utrace.de/" - } - ] - }, - { - "name": "Host / Port Discovery", - "type": "folder", - "children": [ - { - "name": "urlscan.io", - "type": "url", - "url": "https://urlscan.io/search/#*" - }, - { - "name": "Spyse", - "type": "url", - "url": "https://spyse.com/search/ip" - }, - { - "name": "Shodan", - "type": "url", - "url": "https://www.shodan.io/" - }, - { - "name": "Netlas.io", - "type": "url", - "url": "https://netlas.io/" - }, - { - "name": "Portmap", - "type": "url", - "url": "https://portmap.com/" - }, - { - "name": "Scans.io", - "type": "url", - "url": "https://scans.io/" - }, - { - "name": "Nmap (T)", - "type": "url", - "url": "https://nmap.org/download.html" - }, - { - "name": "Online Port scanner", - "type": "url", - "url": "https://portscanner.online/" - }, - { - "name": "Internet Census Search", - "type": "url", - "url": "https://www.exfiltrated.com/querystart.php" - }, - { - "name": "Criminal IP Search", - "type": "url", - "url": "https://www.criminalip.io/" - }, - { - "name": "Scanless (T)", - "type": "url", - "url": "https://github.com/vesche/scanless" - }, - { - "name": "BinaryEdge (R)", - "type": "url", - "url": "https://www.binaryedge.io/" - }, - { - "name": "Masscan (T)", - "type": "url", - "url": "https://github.com/robertdavidgraham/masscan" - } - ] - }, - { - "name": "IPv4", - "type": "folder", - "children": [ - { - "name": "ASlookup.com", - "type": "url", - "url": "https://aslookup.com/" - }, - { - "name": "Port scanner Online", - "type": "url", - "url": "https://portscanner.online/" - }, - { - "name": "Onyphe", - "type": "url", - "url": "https://www.onyphe.io/" - }, - { - "name": "IPv4 CIDR Report", - "type": "url", - "url": "https://www.cidr-report.org/as2.0/" - }, - { - "name": "Reverse.report", - "type": "url", - "url": "https://reverse.report/" - }, - { - "name": "Team Cymru IP to ASN", - "type": "url", - "url": "https://asn.cymru.com/" - }, - { - "name": "IP to ASN DB", - "type": "url", - "url": "https://iptoasn.com/" - }, - { - "name": "Hacker Target - Reverse DNS", - "type": "url", - "url": "https://hackertarget.com/reverse-dns-lookup/" - } - ] - }, - { - "name": "IPv6", - "type": "folder", - "children": [ - { - "name": "IPv6 CIDR Report", - "type": "url", - "url": "https://www.cidr-report.org/v6/as2.0/" - } - ] - }, - { - "name": "BGP", - "type": "folder", - "children": [ - { - "name": "Hurricane Electric BGP Toolkit", - "type": "url", - "url": "https://bgp.he.net/" - }, - { - "name": "BGP Malicious Content Ranking", - "type": "url", - "url": "https://bgpranking.circl.lu/" - }, - { - "name": "PeeringDB", - "type": "url", - "url": "https://www.peeringdb.com/advanced_search" - }, - { - "name": "BGP Tools", - "type": "url", - "url": "https://www.bgp4.as/tools" - } - ] - }, - { - "name": "Reputation", - "type": "folder", - "children": [ - { - "name": "IP Void", - "type": "url", - "url": "https://www.ipvoid.com/" - }, - { - "name": "ExoneraTor", - "type": "url", - "url": "https://exonerator.torproject.org/" - }, - { - "name": "Grey Noise", - "type": "url", - "url": "https://viz.greynoise.io/" - } - ] - }, - { - "name": "Blacklists", - "type": "folder", - "children": [ - { - "name": "Blocklist.de", - "type": "url", - "url": "https://www.blocklist.de/en/index.html" - }, - { - "name": "DShield API", - "type": "url", - "url": "https://isc.sans.edu/api/" - }, - { - "name": "FireHOL IP Lists ", - "type": "url", - "url": "https://iplists.firehol.org/" - }, - { - "name": "Project Honey Pot", - "type": "url", - "url": "https://www.projecthoneypot.org/list_of_ips.php" - } - ] - }, - { - "name": "Neighbor Domains", - "type": "folder", - "children": [ - { - "name": "IP Fingerprints - Reverse IP Lookup", - "type": "url", - "url": "https://ipfingerprints.com/reverseip.php" - }, - { - "name": "Bing IP Search (D)", - "type": "url", - "url": "https://www.bing.com/search?q=ip%3A8.8.8.8" - }, - { - "name": "TCP/IP Utils - Domain Neighbors", - "type": "url", - "url": "https://dnslytics.com/" - }, - { - "name": "MyIPNeighbors", - "type": "url", - "url": "https://www.my-ip-neighbors.com/" - } - ] - }, - { - "name": "Protected by Cloud Services", - "type": "folder", - "children": [ - { - "name": "CloudFlare Watch", - "type": "url", - "url": "https://www.crimeflare.com/" - }, - { - "name": "CloudFail (T)", - "type": "url", - "url": "https://github.com/m0rtem/CloudFail" - } - ] - }, - { - "name": "Wireless Network Info", - "type": "folder", - "children": [ - { - "name": "WiGLE: Wireless Network Mapping", - "type": "url", - "url": "https://wigle.net/" - }, - { - "name": "OpenCellid: Database of Cell Towers", - "type": "url", - "url": "https://opencellid.org/" - } - ] - }, - { - "name": "Network Analysis Tools", - "type": "folder", - "children": [ - { - "name": "Wireshark", - "type": "url", - "url": "https://www.wireshark.org/download.html" - }, - { - "name": "NetworkMiner", - "type": "url", - "url": "https://www.netresec.com/?page=Networkminer" - }, - { - "name": "Packet Total", - "type": "url", - "url": "https://www.packettotal.com/" - }, - { - "name": "checkip (T)", - "type": "url", - "url": "https://github.com/jreisinger/checkip" - } - ] - }, - { - "name": "IP Loggers", - "type": "folder", - "children": [ - { - "name": "Ki.tc", - "type": "url", - "url": "https://ki.tc" - }, - { - "name": "Grabify", - "type": "url", - "url": "https://grabify.link" - }, - { - "name": "IP Logger", - "type": "url", - "url": "https://iplogger.com/" - } - ] - } - ] - }, - { - "name": "Images / Videos / Docs", - "type": "folder", - "children": [ - { - "name": "Images", - "type": "folder", - "children": [ - { - "name": "Search", - "type": "folder", - "children": [ - { - "name": "Google Images", - "type": "url", - "url": "https://images.google.com/?gws_rd=ssl" - }, - { - "name": "Bing Images", - "type": "url", - "url": "https://www.bing.com/images" - }, - { - "name": "FaceCheck Facial Recognition Search", - "type": "url", - "url": "https://facecheck.id/" - }, - { - "name": "Surfface Face & People Search Engine", - "type": "url", - "url": "https://surfface.com/" - }, - { - "name": "PimEyes Face Search Engine", - "type": "url", - "url": "https://pimeyes.com/en" - }, - { - "name": "Yandex Images", - "type": "url", - "url": "https://www.yandex.com/images/" - }, - { - "name": "Baidu Images", - "type": "url", - "url": "https://graph.baidu.com/pcpage/index?tpl_from=pc" - }, - { - "name": "Twitter Image Search (M)", - "type": "url", - "url": "https://twitter.com/search?q=%3Csearchterm%3E&src=typd&vertical=default&f=images" - }, - { - "name": "Imgur Search", - "type": "url", - "url": "https://imgur.com/search" - }, - { - "name": "Photobucket", - "type": "url", - "url": "https://photobucket.com/" - }, - { - "name": "7Photos.net", - "type": "url", - "url": "https://7photos.net/" - }, - { - "name": "Panoramio", - "type": "url", - "url": "https://www.panoramio.com/" - }, - { - "name": "Current Location", - "type": "url", - "url": "https://current-location.com/" - }, - { - "name": "Lakako Photo Search", - "type": "url", - "url": "https://www.lakako.com/" - }, - { - "name": "Lenso.ai", - "type": "url", - "url": "https://lenso.ai/" - }, - { - "name": "CC Search", - "type": "url", - "url": "https://ccsearch.creativecommons.org/" - }, - { - "name": "CamFind App", - "type": "url", - "url": "https://camfindapp.com/" - }, - { - "name": "RevEye Reverse Image Search (T)", - "type": "url", - "url": "https://chrome.google.com/webstore/detail/reveye-reverse-image-sear/keaaclcjhehbbapnphnmpiklalfhelgf?hl=en" - }, - { - "name": "SmugMug Search", - "type": "url", - "url": "https://www.smugmug.com/" - }, - { - "name": "ImageNet", - "type": "url", - "url": "https://image-net.org/" - }, - { - "name": "Places2", - "type": "url", - "url": "https://places2.csail.mit.edu/explore.html" - }, - { - "name": "Image Identification Project", - "type": "url", - "url": "https://www.imageidentify.com/" - }, - { - "name": "SauceNAO", - "type": "url", - "url": "https://saucenao.com/" - }, - { - "name": "Picarta", - "type": "url", - "url": "https://picarta.ai/" - }, - { - "name": "FaceSeek Face Search Engine", - "type": "url", - "url": "https://faceseek.online" - } - ] - }, - { - "name": "Instagram", - "type": "folder", - "children": [ - { - "name": "Webstigram", - "type": "url", - "url": "https://websta.me/search-engine-optimization/" - }, - { - "name": "Instagram", - "type": "url", - "url": "https://www.instagram.com/" - }, - { - "name": "Mini Instagram", - "type": "url", - "url": "https://mininsta.net/" - }, - { - "name": "Imgrab", - "type": "url", - "url": "https://www.imgrab.com/" - }, - { - "name": "Tofo.me", - "type": "url", - "url": "https://tofo.me/" - } - ] - }, - { - "name": "Flickr", - "type": "folder", - "children": [ - { - "name": "Flickr", - "type": "url", - "url": "https://www.flickr.com/" - }, - { - "name": "Flickr Map", - "type": "url", - "url": "https://www.flickr.com/map/" - }, - { - "name": "My Pics Map", - "type": "url", - "url": "https://www.mypicsmap.com/" - }, - { - "name": "idGettr", - "type": "url", - "url": "https://www.webfx.com/tools/idgettr/" - }, - { - "name": "Flickr Hive Mind", - "type": "url", - "url": "https://flickrhivemind.net/" - } - ] - }, - { - "name": "Metadata", - "type": "folder", - "children": [ - { - "name": "ExifEditor", - "type": "url", - "url": "https://exifeditor.io" - }, - { - "name": "ExifTool (T)", - "type": "url", - "url": "https://exiftool.org/" - }, - { - "name": "ExifViewer", - "type": "url", - "url": "https://www.exifviewer.org/" - }, - { - "name": "FOCA (T)", - "type": "url", - "url": "https://github.com/ElevenPaths/FOCA" - }, - { - "name": "GeoSetter", - "type": "url", - "url": "https://geosetter.de/en/main-en/" - }, - { - "name": "Jeffrey's Exif Viewer", - "type": "url", - "url": "https://exif.regex.info/" - }, - { - "name": "JPEGsnoop (T)", - "type": "url", - "url": "https://www.impulseadventure.com/photo/jpeg-snoop.html" - }, - { - "name": "Metapicz", - "type": "url", - "url": "https://metapicz.com/#landing" - }, - { - "name": "Search by Exif", - "type": "url", - "url": "https://www.exif-search.com/" - }, - { - "name": "xeuledoc - Fetch metadata about any public Google document", - "type": "url", - "url": "https://github.com/Malfrats/xeuledoc" - }, - { - "name": "FOCA (T)", - "type": "url", - "url": "https://github.com/ElevenPaths/FOCA" - }, - { - "name": "Exiv2 (T)", - "type": "url", - "url": "https://exiv2.org/" - }, - { - "name": "MediaInfo (T)", - "type": "url", - "url": "https://mediaarea.net/en/MediaInfo" - }, - { - "name": "Apache Tika (T)", - "type": "url", - "url": "https://tika.apache.org/" - }, - { - "name": "oletools (T)", - "type": "url", - "url": "https://github.com/decalage2/oletools" - }, - { - "name": "Hachoir (T)", - "type": "url", - "url": "https://github.com/vstinner/hachoir" - }, - { - "name": "C2PA Verify", - "type": "url", - "url": "https://contentcredentials.org/verify" - }, - { - "name": "Metadata2Go", - "type": "url", - "url": "https://www.metadata2go.com/" - }, - { - "name": "Get-Metadata", - "type": "url", - "url": "https://www.get-metadata.com/" - } - ] - }, - { - "name": "Forensics", - "type": "folder", - "children": [ - { - "name": "Ghiro (T)", - "type": "url", - "url": "https://github.com/ghirensics/ghiro" - }, - { - "name": "Camera Trace", - "type": "url", - "url": "https://www.cameratrace.com/trace" - }, - { - "name": "Forensically", - "type": "url", - "url": "https://29a.ch/photo-forensics/" - } - ] - }, - { - "name": "OCR", - "type": "folder", - "children": [ - { - "name": "Online OCR", - "type": "url", - "url": "https://www.sodapdf.com/pdf-tools/ocr-pdf/" - }, - { - "name": "i2OCR", - "type": "url", - "url": "https://www.i2ocr.com/" - }, - { - "name": "New OCR", - "type": "url", - "url": "https://www.newocr.com/" - }, - { - "name": "Online OCR", - "type": "url", - "url": "https://www.onlineocr.net/" - } - ] - }, - { - "name": "Tools", - "type": "folder", - "children": [ - { - "name": "Creepy (T)", - "type": "url", - "url": "https://www.geocreepy.com/" - } - ] - } - ] - }, - { - "name": "Videos", - "type": "folder", - "children": [ - { - "name": "Search", - "type": "folder", - "children": [ - { - "name": "Google Videos", - "type": "url", - "url": "https://www.google.com/videohp?gws_rd=ssl" - }, - { - "name": "Bing Videos", - "type": "url", - "url": "https://www.bing.com/videos" - }, - { - "name": "Internet Archive Videos", - "type": "url", - "url": "https://archive.org/details/opensource_movies" - }, - { - "name": "Vines (D)", - "type": "url", - "url": "https://www.google.com/search?q=site:vine.co+%3Csearchterm%3E" - }, - { - "name": "Dogpile Web Search", - "type": "url", - "url": "https://www.dogpile.com/" - }, - { - "name": "Geo Search Tool", - "type": "url", - "url": "https://www.geosearchtool.com/" - }, - { - "name": "blinkx Video Search", - "type": "url", - "url": "https://blinkx.com/" - }, - { - "name": "Facebook Live Map", - "type": "url", - "url": "https://www.facebook.com/watch/live/?ref=live_delegate" - }, - { - "name": "LiveLeak", - "type": "url", - "url": "https://www.liveleak.com/" - }, - { - "name": "Metatube", - "type": "url", - "url": "https://www.metatube.com/" - }, - { - "name": "Yahoo Video Search", - "type": "url", - "url": "https://video.search.yahoo.com/" - }, - { - "name": "Search YouTube by Location", - "type": "url", - "url": "https://mattw.io/youtube-geofind/location" - } - ] - }, - { - "name": "Analyze / Record", - "type": "folder", - "children": [ - { - "name": "DetURL", - "type": "url", - "url": "https://deturl.com/" - }, - { - "name": "Print YouTube StoryBoard Instructions", - "type": "url", - "url": "https://www.labnol.org/internet/print-youtube-video/28217" - }, - { - "name": "Print Storyboard from Youtube", - "type": "url", - "url": "javascript:(function(){a=ytplayer.config.args.storyboard_spec;if(!a){alert(\"Sorry we cannot process this YouTube video. Could you please try another one\");exit();}b=a.split(\"|\");base=b[0].split(\"$\")[0]+\"2/M\";c=b[3].split(\"%23\");sigh=c[c.length-1];var imgs=\"\";t=ytplayer.config.args.length_seconds;n=Math.ceil(c[2]/(c[3]*c[4]));for(i=0;i
\";}var title=ytplayer.config.args.title;msg=\"@protonmail.com", + "description": "Queries ProtonMail's HKP-compatible PGP key server to look up the public key for a ProtonMail username. A successful response confirms the account exists.", + "status": "live", + "pricing": "free", + "bestFor": "Confirming whether a ProtonMail username exists and retrieving its PGP public key", + "input": "ProtonMail username (appended with @protonmail.com)", + "output": "PGP key index with public key fingerprint, algorithm, creation timestamp, and email UID", + "opsec": "passive", + "opsecNote": "Unauthenticated API query to ProtonMail's public key server. Target user is not notified. Enables user enumeration.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": true, + "api": true, + "invitationOnly": false, + "deprecated": false + }, + { + "name": "ProtonMail Domains (M)", + "type": "url", + "url": "https://api.protonmail.ch/pks/lookup?op=index&search=", + "description": "Queries ProtonMail's HKP key server with a full email address to check for a PGP public key. Useful for identifying ProtonMail users on custom domains.", + "status": "live", + "pricing": "free", + "bestFor": "Checking if an email address on a custom domain is hosted on ProtonMail", + "input": "Full email address (any domain that may be hosted on ProtonMail)", + "output": "PGP key index with public key fingerprint, algorithm, creation timestamp, and email UID", + "opsec": "passive", + "opsecNote": "Unauthenticated public HKP endpoint. Target is not notified. Can reveal whether a custom domain uses ProtonMail.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": true, + "api": true, + "invitationOnly": false, + "deprecated": false + } + ] + } + ] + }, + { + "name": "Email Address", + "type": "folder", + "children": [ + { + "name": "Email Search", + "type": "folder", + "children": [ + { + "name": "Sylva Identity Discovery (T)", + "type": "url", + "url": "https://sylva.pfeister.dev/" + }, + { + "name": "ThatsThem", + "type": "url", + "url": "https://thatsthem.com/reverse-email-lookup" + }, + { + "name": "Hunter", + "type": "url", + "url": "https://hunter.io/" + }, + { + "name": "Email to Address (R)", + "type": "url", + "url": "https://www.melissa.com/" + }, + { + "name": "VoilaNorbert", + "type": "url", + "url": "https://www.voilanorbert.com/" + }, + { + "name": "GHunt (T)", + "type": "url", + "url": "https://github.com/mxrch/GHunt" + }, + { + "name": "OSINT Industries", + "type": "url", + "url": "https://www.osint.industries/" + }, + { + "name": "theHarvester (T)", + "type": "url", + "url": "https://github.com/laramies/theHarvester", + "description": "Command-line tool for gathering emails, subdomains, IPs, and URLs from public sources.", + "status": "live", + "pricing": "free", + "bestFor": "Email harvesting, subdomain enumeration, passive recon", + "input": "Domain name", + "output": "Email addresses, subdomains, IPs, URLs", + "opsec": "passive", + "opsecNote": "Queries third-party search engines and APIs. Does not contact the target directly.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false + }, + { + "name": "Infoga (T)", + "type": "url", + "url": "https://github.com/m4ll0k/infoga" + }, + { + "name": "Skymem", + "type": "url", + "url": "https://www.skymem.info/" + }, + { + "name": "Epieos Email Tool", + "type": "url", + "url": "https://tools.epieos.com/email.php" + }, + { + "name": "breach.vip", + "type": "url", + "url": "https://breach.vip/" + }, + { + "name": "Holehe (T)", + "type": "url", + "url": "https://github.com/megadose/holehe" + } + ] + }, + { + "name": "Common Email Formats", + "type": "folder", + "children": [ + { + "name": "Email Format", + "type": "url", + "url": "https://www.email-format.com/" + }, + { + "name": "Email Permutator", + "type": "url", + "url": "https://metricsparrow.com/toolkit/email-permutator/" + } + ] + }, + { + "name": "Email Verification", + "type": "folder", + "children": [ + { + "name": "Reacher Github (T)", + "type": "url", + "url": "https://github.com/reacherhq/check-if-email-exists" + }, + { + "name": "Reacher Demo", + "type": "url", + "url": "https://reacher.email" + }, + { + "name": "MailScrap", + "type": "url", + "url": "https://mailscrap.com/" + }, + { + "name": "Read Notify", + "type": "url", + "url": "https://www.readnotify.com/" + }, + { + "name": "Email Reputation", + "type": "url", + "url": "https://emailrep.io/" + }, + { + "name": "MailboxValidator", + "type": "url", + "url": "https://www.mailboxvalidator.com/demo" + }, + { + "name": "VerifyEmail (R$)", + "type": "url", + "url": "https://emailable.com/" + } + ] + }, + { + "name": "Breach Data", + "type": "folder", + "children": [ + { + "name": "Have I been pwned?", + "type": "url", + "url": "https://haveibeenpwned.com/", + "description": "Database of breached credentials and email addresses from known data breaches.", + "status": "live", + "pricing": "freemium", + "bestFor": "Breach detection, credential exposure checks", + "input": "Email address, phone number, password hash", + "output": "Breach names, breach dates, exposed data types", + "opsec": "passive", + "opsecNote": "Queries breach database via API. Target is not notified of lookups.", + "localInstall": false, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false + }, + { + "name": "Hudson Rock", + "type": "url", + "url": "https://www.hudsonrock.com/threat-intelligence-cybercrime-tools" + }, + { + "name": "DeHashed (R)", + "type": "url", + "url": "https://dehashed.com/" + }, + { + "name": "Vigilante.pw", + "type": "url", + "url": "https://www.vigilante.pw/" + } + ] + }, + { + "name": "Mail Blacklists", + "type": "folder", + "children": [ + { + "name": "MxToolbox", + "type": "url", + "url": "https://mxtoolbox.com/" + } + ] + } + ] + }, + { + "name": "Domain Name", + "type": "folder", + "children": [ + { + "name": "Whois Records", + "type": "folder", + "children": [ + { + "name": "Domain Dossier", + "type": "url", + "url": "https://centralops.net/co/DomainDossier.aspx" + }, + { + "name": "domainIQ", + "type": "url", + "url": "https://www.domainiq.com/" + }, + { + "name": "DomainTools Whois", + "type": "url", + "url": "https://whois.domaintools.com/" + }, + { + "name": "SWITCH Internet Domains Whois (.ch)", + "type": "url", + "url": "https://www.nic.ch/whois/" + }, + { + "name": "Whoisology", + "type": "url", + "url": "https://whoisology.com/#advanced" + }, + { + "name": "Whois ARIN", + "type": "url", + "url": "https://whois.arin.net/ui/advanced.jsp" + }, + { + "name": "DNSstuff", + "type": "url", + "url": "https://www.dnsstuff.com/freetools" + }, + { + "name": "Robtex (R)", + "type": "url", + "url": "https://robtex.com/" + }, + { + "name": "Domaincrawler.com", + "type": "url", + "url": "https://domaincrawler.com/" + }, + { + "name": "MarkMonitor Whois Search", + "type": "url", + "url": "https://domains.markmonitor.com/whois/" + }, + { + "name": "easyWhois", + "type": "url", + "url": "https://www.easywhois.com/" + }, + { + "name": "Website Informer", + "type": "url", + "url": "https://website.informer.com/" + }, + { + "name": "Who.is", + "type": "url", + "url": "https://who.is/" + }, + { + "name": "Whois AMPed", + "type": "url", + "url": "https://whoisamped.com/" + }, + { + "name": "ViewDNS.info", + "type": "url", + "url": "https://viewdns.info/" + }, + { + "name": "Daily DNS Changes", + "type": "url", + "url": "https://dailychanges.domaintools.com/" + }, + { + "name": "IP2WHOIS", + "type": "url", + "url": "https://www.ip2whois.com" + }, + { + "name": "Netlas.io", + "type": "url", + "url": "https://app.netlas.io/whois_domains/" + } + ] + }, + { + "name": "Subdomains", + "type": "folder", + "children": [ + { + "name": "SynapsInt", + "type": "url", + "url": "https://synapsint.com" + }, + { + "name": "Aquatone (T)", + "type": "url", + "url": "https://github.com/michenriksen/aquatone" + }, + { + "name": "FindSubDomains", + "type": "url", + "url": "https://findsubdomains.com/" + }, + { + "name": "Google Subdomains (D)", + "type": "url", + "url": "https://www.google.com/?gws_rd=ssl#q=site:%3Cdomain.com%3E" + }, + { + "name": "Recon-ng (T)", + "type": "url", + "url": "https://github.com/lanmaster53/recon-ng", + "description": "Full-featured web reconnaissance framework with independent modules for data gathering.", + "status": "live", + "pricing": "free", + "bestFor": "Modular web recon, API-driven data collection", + "input": "Domain, company name, email, IP", + "output": "Contacts, hosts, credentials, ports via module-specific results", + "opsec": "passive", + "opsecNote": "Queries third-party APIs and data sources. Does not probe the target unless specific modules are configured to do so.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false + }, + { + "name": "XRay", + "type": "url", + "url": "https://github.com/evilsocket/xray" + }, + { + "name": "DNS Recon (T)", + "type": "url", + "url": "https://github.com/darkoperator/dnsrecon" + }, + { + "name": "Gobuster (T)", + "type": "url", + "url": "https://github.com/OJ/gobuster" + }, + { + "name": "Fierce Domain Scanner (T)", + "type": "url", + "url": "https://github.com/davidpepper/fierce-domain-scanner" + }, + { + "name": "Bluto (T)", + "type": "url", + "url": "https://github.com/darryllane/Bluto" + }, + { + "name": "OWASP Maryam (T)", + "type": "url", + "url": "https://github.com/saeeddhqan/Maryam" + }, + { + "name": "theHarvester (T)", + "type": "url", + "url": "https://github.com/laramies/theHarvester", + "description": "Command-line tool for gathering emails, subdomains, IPs, and URLs from public sources.", + "status": "live", + "pricing": "free", + "bestFor": "Email harvesting, subdomain enumeration, passive recon", + "input": "Domain name", + "output": "Email addresses, subdomains, IPs, URLs", + "opsec": "passive", + "opsecNote": "Queries third-party search engines and APIs. Does not contact the target directly.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false + }, + { + "name": "Pentest-tools.com Subdomains", + "type": "url", + "url": "https://pentest-tools.com/information-gathering/find-subdomains-of-domain" + }, + { + "name": "SecLists DNS Subdomains (T)", + "type": "url", + "url": "https://github.com/danielmiessler/SecLists/tree/master/Discovery/DNS" + }, + { + "name": "dnspop (T)", + "type": "url", + "url": "https://github.com/bitquark/dnspop" + }, + { + "name": "gdns (T)", + "type": "url", + "url": "https://github.com/hrbrmstr/gdns" + }, + { + "name": "Sublist3r", + "type": "url", + "url": "https://github.com/aboul3la/Sublist3r" + }, + { + "name": "AltDNS (T)", + "type": "url", + "url": "https://github.com/infosec-au/altdns" + }, + { + "name": "Netlas.io", + "type": "url", + "url": "https://app.netlas.io/domains/" + } + ] + }, + { + "name": "Discovery", + "type": "folder", + "children": [ + { + "name": "Shodan", + "type": "url", + "url": "https://www.shodan.io/", + "description": "Search engine for internet-connected devices. Find open ports, services, and vulnerabilities across the public internet.", + "status": "live", + "pricing": "freemium", + "bestFor": "Port scanning, banner grabbing, IoT discovery", + "input": "IP address, domain", + "output": "Open ports, services, banners, CVEs", + "opsec": "passive", + "opsecNote": "Queries cached scan data. Does not directly probe the target.", + "localInstall": false, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false + }, + { + "name": "Netlas.io", + "type": "url", + "url": "https://app.netlas.io/" + }, + { + "name": "Kraken (T)", + "type": "url", + "url": "https://github.com/Sw4mpf0x/Kraken" + }, + { + "name": "Online Nikto scanner", + "type": "url", + "url": "https://nikto.online/" + }, + { + "name": "urlscan.io", + "type": "url", + "url": "https://urlscan.io/search/#*" + }, + { + "name": "Daily DNS Changes", + "type": "url", + "url": "https://dailychanges.domaintools.com/" + }, + { + "name": "Redirect Detective", + "type": "url", + "url": "https://redirectdetective.com/" + }, + { + "name": "Sitediff (T)", + "type": "url", + "url": "https://github.com/digininja/sitediff" + }, + { + "name": "BuiltWith", + "type": "url", + "url": "https://builtwith.com/", + "description": "Technology profiler that identifies the tech stack, analytics, and frameworks used by websites.", + "status": "live", + "pricing": "freemium", + "bestFor": "Technology stack identification, competitor analysis", + "input": "Domain or URL", + "output": "Technology list, analytics IDs, hosting info, historical tech changes", + "opsec": "passive", + "opsecNote": "Queries cached technology profiles. Does not contact the target.", + "localInstall": false, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false + }, + { + "name": "Wappalyzer", + "type": "url", + "url": "https://www.wappalyzer.com/" + }, + { + "name": "AnalyzeID", + "type": "url", + "url": "https://analyzeid.com/" + }, + { + "name": "Criminal IP Search", + "type": "url", + "url": "https://www.criminalip.io/" + }, + { + "name": "urlDNA", + "type": "url", + "url": "https://urldna.io" + }, + { + "name": "ZoomEye.ai", + "type": "url", + "url": "https://www.zoomeye.org/" + } + ] + }, + { + "name": "Certificate Search", + "type": "folder", + "children": [ + { + "name": "Shodan", + "type": "url", + "url": "https://www.shodan.io/" + }, + { + "name": "Google's Certificate Transparency", + "type": "url", + "url": "https://www.certificate-transparency.org/known-logs" + }, + { + "name": "Spyse", + "type": "url", + "url": "https://spyse.com/search/certificate" + }, + { + "name": "Censys", + "type": "url", + "url": "https://censys.io/", + "description": "Internet-wide scanner and search engine for hosts, certificates, and services.", + "status": "live", + "pricing": "freemium", + "bestFor": "Certificate discovery, host enumeration, exposure monitoring", + "input": "Domain, IP, certificate fingerprint, search query", + "output": "Host details, open ports, TLS certificates, service banners", + "opsec": "passive", + "opsecNote": "Queries pre-scanned data. Does not probe the target directly.", + "localInstall": false, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false + }, + { + "name": "crt.sh - Certificate Search", + "type": "url", + "url": "https://crt.sh/?" + }, + { + "name": "CertKit - Certificate Transparency Log Search", + "type": "url", + "url": "https://www.certkit.io/tools/ct-logs/" + }, + { + "name": "certgraph (T)", + "type": "url", + "url": "https://github.com/lanrat/certgraph" + }, + { + "name": "Netlas.io", + "type": "url", + "url": "https://app.netlas.io/certs/" + } + ] + }, + { + "name": "PassiveDNS", + "type": "folder", + "children": [ + { + "name": "Mnemonic", + "type": "url", + "url": "https://passivedns.mnemonic.no/" + }, + { + "name": "DNS Dumpster", + "type": "url", + "url": "https://dnsdumpster.com/" + }, + { + "name": "Deteque (R)", + "type": "url", + "url": "https://www.deteque.com/" + } + ] + }, + { + "name": "Reputation", + "type": "folder", + "children": [ + { + "name": "UrlQuery.net", + "type": "url", + "url": "https://urlquery.net/" + }, + { + "name": "URL Void", + "type": "url", + "url": "https://www.urlvoid.com/" + }, + { + "name": "FortiGuard Reputation Service", + "type": "url", + "url": "https://fortiguard.com/iprep" + }, + { + "name": "Trend Micro Site Safety Center", + "type": "url", + "url": "https://global.sitesafety.trendmicro.com/" + }, + { + "name": "WatchGuard ReputationAuthority", + "type": "url", + "url": "https://www.reputationauthority.org/" + }, + { + "name": "Sucuri SiteCheck", + "type": "url", + "url": "https://sitecheck.sucuri.net/" + }, + { + "name": "ThreatMiner.org", + "type": "url", + "url": "https://www.threatminer.org/" + }, + { + "name": "BlueCoat WebPulse", + "type": "url", + "url": "https://sitereview.bluecoat.com/sitereview.jsp" + }, + { + "name": "Zscaler Zulu URL Risk Analyzer", + "type": "url", + "url": "https://zulu.zscaler.com/" + }, + { + "name": "Joe Sandbox Url Analyzer", + "type": "url", + "url": "https://www.url-analyzer.net/" + }, + { + "name": "Deepviz Domain Search", + "type": "url", + "url": "https://search.deepviz.com/" + }, + { + "name": "AVG Threat Labs", + "type": "url", + "url": "https://www.avg.com/en/signal/website-safety" + }, + { + "name": "Webroot BrightCloud URL/IP Lookup", + "type": "url", + "url": "https://www.brightcloud.com/tools/url-ip-lookup.php" + }, + { + "name": "vURL Online", + "type": "url", + "url": "https://vurldissect.co.uk/" + }, + { + "name": "AlienVault Open Threat Exchange", + "type": "url", + "url": "https://otx.alienvault.com/browse/pulses/" + }, + { + "name": "Malware Domain List", + "type": "url", + "url": "https://www.malwaredomainlist.com/mdl.php" + }, + { + "name": "Web Inspector Online Scan", + "type": "url", + "url": "https://www.webinspector.com/website-malware-scanner/" + }, + { + "name": "Google Safe Browsing API", + "type": "url", + "url": "https://developers.google.com/safe-browsing/?csw=1" + }, + { + "name": "Cisco Talos", + "type": "url", + "url": "https://talosintelligence.com/" + } + ] + }, + { + "name": "Domain Blacklists", + "type": "folder", + "children": [ + { + "name": "Threatexpert.com Malicious URLs", + "type": "url", + "url": "https://www.networksec.org/grabbho/block.txt" + }, + { + "name": "Zeus C2 Tracker", + "type": "url", + "url": "https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist" + }, + { + "name": "Malware Domains Blacklist", + "type": "url", + "url": "https://mirror1.malwaredomains.com/files/domains.txt" + }, + { + "name": "Blackweb", + "type": "url", + "url": "https://github.com/maravento/blackweb" + }, + { + "name": "Critical Stack Intel (R)", + "type": "url", + "url": "https://intel.criticalstack.com/" + }, + { + "name": "DNS Sinkhole", + "type": "url", + "url": "https://malc0de.com/bl/" + }, + { + "name": "DNS-BH Malware Domain Blocklist", + "type": "url", + "url": "https://www.malwaredomains.com/wordpress/?page_id=66" + }, + { + "name": "Malware Domain List", + "type": "url", + "url": "https://www.malwaredomainlist.com/hostslist/hosts.txt" + }, + { + "name": "MalwareURL (R)", + "type": "url", + "url": "https://www.malwareurl.com/index.php" + }, + { + "name": "scumware.org", + "type": "url", + "url": "https://www.scumware.org/" + }, + { + "name": "ZeuS Tracker", + "type": "url", + "url": "https://zeustracker.abuse.ch/blocklist.php" + }, + { + "name": "Shadowserver Foundation", + "type": "url", + "url": "https://www.shadowserver.org/" + }, + { + "name": "Email Domain Validation", + "type": "url", + "url": "https://www.mailboxvalidator.com/domain" + } + ] + }, + { + "name": "Typosquatting", + "type": "folder", + "children": [ + { + "name": "DNS Twist (T)", + "type": "url", + "url": "https://github.com/elceef/dnstwist" + }, + { + "name": "URLCrazy (T)", + "type": "url", + "url": "https://www.morningstarsecurity.com/research/urlcrazy" + }, + { + "name": "dnstwister", + "type": "url", + "url": "https://dnstwister.report/" + }, + { + "name": "Catphish (T)", + "type": "url", + "url": "https://github.com/ring0lab/catphish" + } + ] + }, + { + "name": "Analytics", + "type": "folder", + "children": [ + { + "name": "BuiltWith", + "type": "url", + "url": "https://builtwith.com/", + "description": "Technology profiler that identifies the tech stack, analytics, and frameworks used by websites.", + "status": "live", + "pricing": "freemium", + "bestFor": "Technology stack identification, competitor analysis", + "input": "Domain or URL", + "output": "Technology list, analytics IDs, hosting info, historical tech changes", + "opsec": "passive", + "opsecNote": "Queries cached technology profiles. Does not contact the target.", + "localInstall": false, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false + }, + { + "name": "SiteSleuth", + "type": "url", + "url": "https://www.sitesleuth.io/" + }, + { + "name": "Wappalyzer (T)", + "type": "url", + "url": "https://www.wappalyzer.com/" + }, + { + "name": "SEMrush", + "type": "url", + "url": "https://www.semrush.com/" + }, + { + "name": "Moonsearch", + "type": "url", + "url": "https://moonsearch.com/" + }, + { + "name": "Ewhois", + "type": "url", + "url": "https://ewhois.com/" + }, + { + "name": "StatsCrop", + "type": "url", + "url": "https://www.statscrop.com/" + }, + { + "name": "Open Site Explorer", + "type": "url", + "url": "https://moz.com/link-explorer" + }, + { + "name": "SpyOnWeb", + "type": "url", + "url": "https://www.spyonweb.com/" + }, + { + "name": "Keyword Density", + "type": "url", + "url": "https://tools.seobook.com/general/keyword-density/" + }, + { + "name": "Alexa Site Statistics", + "type": "url", + "url": "https://alexa.amazon.com/about" + }, + { + "name": "Cisco Umbrella Popularity List", + "type": "url", + "url": "https://s3-us-west-1.amazonaws.com/umbrella-static/index.html" + }, + { + "name": "Alexa Top 500 Global Sites", + "type": "url", + "url": "https://alexa.amazon.com/about" + }, + { + "name": "Sitedossier", + "type": "url", + "url": "https://www.sitedossier.com/" + }, + { + "name": "Visual Site Mapper", + "type": "url", + "url": "https://github.com/alentum/sitemapper-nodejs" + }, + { + "name": "ClearWebStats.com", + "type": "url", + "url": "https://www.clearwebstats.com/" + }, + { + "name": "PubDB", + "type": "url", + "url": "https://pub-db.com/" + }, + { + "name": "SimilarWeb", + "type": "url", + "url": "https://www.similarweb.com/" + }, + { + "name": "Siteliner", + "type": "url", + "url": "https://www.siteliner.com/" + }, + { + "name": "WhatWeb", + "type": "url", + "url": "https://github.com/urbanadventurer/WhatWeb" + } + ] + }, + { + "name": "URL Expanders", + "type": "folder", + "children": [ + { + "name": "Link Expander", + "type": "url", + "url": "https://www.linkexpander.com/" + }, + { + "name": "CheckShortURL", + "type": "url", + "url": "https://checkshorturl.com/" + }, + { + "name": "URL Expander", + "type": "url", + "url": "https://urlex.org/" + }, + { + "name": "Where Does This Link Go?", + "type": "url", + "url": "https://wheregoes.com/" + }, + { + "name": "KnowURL", + "type": "url", + "url": "https://www.knowurl.com/" + } + ] + }, + { + "name": "Change Detection", + "type": "folder", + "children": [ + { + "name": "VisualPing", + "type": "url", + "url": "https://visualping.io:443/" + }, + { + "name": "Change Detection", + "type": "url", + "url": "https://visualping.io/" + }, + { + "name": "Check site availability Online", + "type": "url", + "url": "https://upcheck.online/" + }, + { + "name": "Follow That Page", + "type": "url", + "url": "https://www.followthatpage.com/" + }, + { + "name": "Urlwatch", + "type": "url", + "url": "https://github.com/thp/urlwatch" + }, + { + "name": "WatchThatPage", + "type": "url", + "url": "https://watchthatpage.com/" + }, + { + "name": "ChangeDetect", + "type": "url", + "url": "https://www.eatgrainmaker.com/home/" + } + ] + }, + { + "name": "Social Analysis", + "type": "folder", + "children": [ + { + "name": "Google Trends", + "type": "url", + "url": "https://trends.google.com/trends/" + } + ] + }, + { + "name": "DNSSEC", + "type": "folder", + "children": [ + { + "name": "DNSSEC Analyzer", + "type": "url", + "url": "https://dnssec-analyzer.verisignlabs.com/" + }, + { + "name": "DNSViz", + "type": "url", + "url": "https://dnsviz.net/" + } + ] + }, + { + "name": "Vulnerabilities", + "type": "folder", + "children": [ + { + "name": "Scanners", + "type": "folder", + "children": [ + { + "name": "Sn1per (T)", + "type": "url", + "url": "https://github.com/1N3/Sn1per" + }, + { + "name": "Online Nikto scanner", + "type": "url", + "url": "https://nikto.online/" + }, + { + "name": "WDES - Web Data Exposure Scanner (T)", + "type": "url", + "url": "https://github.com/eduardoit/web-data-exposure-scanner" + } + ] + }, + { + "name": "Disclosure Sites", + "type": "folder", + "children": [ + { + "name": "Zone-H.org", + "type": "url", + "url": "https://zone-h.org/archive" + } + ] + }, + { + "name": "RobotsDisallowed", + "type": "url", + "url": "https://github.com/danielmiessler/RobotsDisallowed" + } + ] + }, + { + "name": "Tools", + "type": "folder", + "children": [ + { + "name": "Belati (T)", + "type": "url", + "url": "https://github.com/aancw/Belati" + }, + { + "name": "Burp Suite (T)", + "type": "url", + "url": "https://portswigger.net/burp" + }, + { + "name": "EyeWitness (T)", + "type": "url", + "url": "https://github.com/ChrisTruncer/EyeWitness" + }, + { + "name": "Hunting-New-Registered-Domains (T)", + "type": "url", + "url": "https://github.com/gfek/Hunting-New-Registered-Domains" + }, + { + "name": "International Domain Name Conversion Tool", + "type": "url", + "url": "https://mct.verisign-grs.com/" + }, + { + "name": "Online Nikto scanner", + "type": "url", + "url": "https://nikto.online/" + } + ] + }, + { + "name": "Report Malicious Sites", + "type": "folder", + "children": [ + { + "name": "Microsoft", + "type": "url", + "url": "https://www.microsoft.com/en-us/wdsi/support/report-unsafe-site-guest" + }, + { + "name": "Google", + "type": "url", + "url": "https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en" + } + ] + } + ] + }, + { + "name": "Cloud Infrastructure", + "type": "folder", + "children": [ + { + "name": "AWS Enumeration", + "type": "folder", + "children": [ + { + "name": "cloud_enum (T)", + "type": "url", + "url": "https://github.com/initstring/cloud_enum" + }, + { + "name": "AWSBucketDump (T)", + "type": "url", + "url": "https://github.com/jordanpotti/AWSBucketDump" + }, + { + "name": "Subfinder (T)", + "type": "url", + "url": "https://github.com/projectdiscovery/subfinder" + } + ] + }, + { + "name": "Azure/GCP Discovery", + "type": "folder", + "children": [ + { + "name": "GCPBucketBrute (T)", + "type": "url", + "url": "https://github.com/RhinoSecurityLabs/GCPBucketBrute" + }, + { + "name": "AADInternals (T)", + "type": "url", + "url": "https://github.com/Gerenios/AADInternals" + }, + { + "name": "ROADtools (T)", + "type": "url", + "url": "https://github.com/dirkjanm/roadtools" + }, + { + "name": "MicroBurst (T)", + "type": "url", + "url": "https://github.com/NetSPI/MicroBurst" + }, + { + "name": "Stormspotter (T)", + "type": "url", + "url": "https://github.com/Azure/Stormspotter" + } + ] + }, + { + "name": "S3/Blob Storage", + "type": "folder", + "children": [ + { + "name": "Public Buckets", + "type": "url", + "url": "https://buckets.grayhatwarfare.com/" + }, + { + "name": "goblob (T)", + "type": "url", + "url": "https://github.com/Macmod/goblob" + }, + { + "name": "S3Scanner (T)", + "type": "url", + "url": "https://github.com/sa7mon/s3scanner" + }, + { + "name": "BucketLoot (T)", + "type": "url", + "url": "https://github.com/redhuntlabs/BucketLoot" + }, + { + "name": "lazys3 (T)", + "type": "url", + "url": "https://github.com/nahamsec/lazys3" + } + ] + }, + { + "name": "Cloud Configuration Analysis", + "type": "folder", + "children": [ + { + "name": "Prowler (T)", + "type": "url", + "url": "https://github.com/prowler-cloud/prowler" + }, + { + "name": "ScoutSuite (T)", + "type": "url", + "url": "https://github.com/nccgroup/ScoutSuite" + }, + { + "name": "Cloud Custodian (T)", + "type": "url", + "url": "https://github.com/cloud-custodian/cloud-custodian" + }, + { + "name": "Checkov (T)", + "type": "url", + "url": "https://github.com/bridgecrewio/checkov" + }, + { + "name": "Steampipe (T)", + "type": "url", + "url": "https://github.com/turbot/steampipe" + } + ] + }, + { + "name": "SaaS Footprinting", + "type": "folder", + "children": [ + { + "name": "Amass (T)", + "type": "url", + "url": "https://github.com/owasp-amass/amass" + }, + { + "name": "Sublist3r (T)", + "type": "url", + "url": "https://github.com/aboul3la/Sublist3r" + }, + { + "name": "theHarvester (T)", + "type": "url", + "url": "https://github.com/laramies/theHarvester", + "description": "Command-line tool for gathering emails, subdomains, IPs, and URLs from public sources.", + "status": "live", + "pricing": "free", + "bestFor": "Email harvesting, subdomain enumeration, passive recon", + "input": "Domain name", + "output": "Email addresses, subdomains, IPs, URLs", + "opsec": "passive", + "opsecNote": "Queries third-party search engines and APIs. Does not contact the target directly.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false + }, + { + "name": "SpiderFoot (T)", + "type": "url", + "url": "https://github.com/smicallef/spiderfoot", + "description": "Automated OSINT collection tool with 200+ modules for reconnaissance and threat intelligence.", + "status": "live", + "pricing": "free", + "bestFor": "Automated recon, attack surface mapping, threat intelligence", + "input": "Domain, IP, email, name, phone, subnet", + "output": "Correlated intelligence graph, structured findings across modules", + "opsec": "active", + "opsecNote": "Some modules actively probe targets. Review module settings before running.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false + }, + { + "name": "dnsrecon (T)", + "type": "url", + "url": "https://github.com/darkoperator/dnsrecon" + } + ] + } + ] + }, + { + "name": "IP & MAC Address", + "type": "folder", + "children": [ + { + "name": "Geolocation", + "type": "folder", + "children": [ + { + "name": "MaxMind Demo", + "type": "url", + "url": "https://www.maxmind.com/en/home" + }, + { + "name": "IPv4/IPv6 lists by country code", + "type": "url", + "url": "https://github.com/ipverse/" + }, + { + "name": "IP2Location.com", + "type": "url", + "url": "https://www.ip2location.com/demo" + }, + { + "name": "IP Fingerprints", + "type": "url", + "url": "https://ipfingerprints.com/" + }, + { + "name": "DB-IP", + "type": "url", + "url": "https://db-ip.com/" + }, + { + "name": "IP Location Finder", + "type": "url", + "url": "https://www.iplocation.net/" + }, + { + "name": "Info Sniper", + "type": "url", + "url": "https://www.infosniper.net/" + }, + { + "name": "utrace", + "type": "url", + "url": "https://en.utrace.de/" + } + ] + }, + { + "name": "Host / Port Discovery", + "type": "folder", + "children": [ + { + "name": "urlscan.io", + "type": "url", + "url": "https://urlscan.io/search/#*" + }, + { + "name": "Spyse", + "type": "url", + "url": "https://spyse.com/search/ip" + }, + { + "name": "Shodan", + "type": "url", + "url": "https://www.shodan.io/" + }, + { + "name": "Netlas.io", + "type": "url", + "url": "https://netlas.io/" + }, + { + "name": "Portmap", + "type": "url", + "url": "https://portmap.com/" + }, + { + "name": "Scans.io", + "type": "url", + "url": "https://scans.io/" + }, + { + "name": "Nmap (T)", + "type": "url", + "url": "https://nmap.org/download.html" + }, + { + "name": "Online Port scanner", + "type": "url", + "url": "https://portscanner.online/" + }, + { + "name": "Internet Census Search", + "type": "url", + "url": "https://www.exfiltrated.com/querystart.php" + }, + { + "name": "Criminal IP Search", + "type": "url", + "url": "https://www.criminalip.io/" + }, + { + "name": "Scanless (T)", + "type": "url", + "url": "https://github.com/vesche/scanless" + }, + { + "name": "BinaryEdge (R)", + "type": "url", + "url": "https://www.binaryedge.io/" + }, + { + "name": "Masscan (T)", + "type": "url", + "url": "https://github.com/robertdavidgraham/masscan" + } + ] + }, + { + "name": "IPv4", + "type": "folder", + "children": [ + { + "name": "ASlookup.com", + "type": "url", + "url": "https://aslookup.com/" + }, + { + "name": "Port scanner Online", + "type": "url", + "url": "https://portscanner.online/" + }, + { + "name": "Onyphe", + "type": "url", + "url": "https://www.onyphe.io/" + }, + { + "name": "IPv4 CIDR Report", + "type": "url", + "url": "https://www.cidr-report.org/as2.0/" + }, + { + "name": "Reverse.report", + "type": "url", + "url": "https://reverse.report/" + }, + { + "name": "Team Cymru IP to ASN", + "type": "url", + "url": "https://asn.cymru.com/" + }, + { + "name": "IP to ASN DB", + "type": "url", + "url": "https://iptoasn.com/" + }, + { + "name": "Hacker Target - Reverse DNS", + "type": "url", + "url": "https://hackertarget.com/reverse-dns-lookup/" + } + ] + }, + { + "name": "IPv6", + "type": "folder", + "children": [ + { + "name": "IPv6 CIDR Report", + "type": "url", + "url": "https://www.cidr-report.org/v6/as2.0/" + } + ] + }, + { + "name": "BGP", + "type": "folder", + "children": [ + { + "name": "Hurricane Electric BGP Toolkit", + "type": "url", + "url": "https://bgp.he.net/" + }, + { + "name": "BGP Malicious Content Ranking", + "type": "url", + "url": "https://bgpranking.circl.lu/" + }, + { + "name": "PeeringDB", + "type": "url", + "url": "https://www.peeringdb.com/advanced_search" + }, + { + "name": "BGP Tools", + "type": "url", + "url": "https://www.bgp4.as/tools" + } + ] + }, + { + "name": "Reputation", + "type": "folder", + "children": [ + { + "name": "IP Void", + "type": "url", + "url": "https://www.ipvoid.com/" + }, + { + "name": "ExoneraTor", + "type": "url", + "url": "https://exonerator.torproject.org/" + }, + { + "name": "Grey Noise", + "type": "url", + "url": "https://viz.greynoise.io/" + } + ] + }, + { + "name": "Blacklists", + "type": "folder", + "children": [ + { + "name": "Blocklist.de", + "type": "url", + "url": "https://www.blocklist.de/en/index.html" + }, + { + "name": "DShield API", + "type": "url", + "url": "https://isc.sans.edu/api/" + }, + { + "name": "FireHOL IP Lists ", + "type": "url", + "url": "https://iplists.firehol.org/" + }, + { + "name": "Project Honey Pot", + "type": "url", + "url": "https://www.projecthoneypot.org/list_of_ips.php" + } + ] + }, + { + "name": "Neighbor Domains", + "type": "folder", + "children": [ + { + "name": "IP Fingerprints - Reverse IP Lookup", + "type": "url", + "url": "https://ipfingerprints.com/reverseip.php" + }, + { + "name": "Bing IP Search (D)", + "type": "url", + "url": "https://www.bing.com/search?q=ip%3A8.8.8.8" + }, + { + "name": "TCP/IP Utils - Domain Neighbors", + "type": "url", + "url": "https://dnslytics.com/" + }, + { + "name": "MyIPNeighbors", + "type": "url", + "url": "https://www.my-ip-neighbors.com/" + } + ] + }, + { + "name": "Protected by Cloud Services", + "type": "folder", + "children": [ + { + "name": "CloudFlare Watch", + "type": "url", + "url": "https://www.crimeflare.com/" + }, + { + "name": "CloudFail (T)", + "type": "url", + "url": "https://github.com/m0rtem/CloudFail" + } + ] + }, + { + "name": "Wireless Network Info", + "type": "folder", + "children": [ + { + "name": "WiGLE: Wireless Network Mapping", + "type": "url", + "url": "https://wigle.net/" + }, + { + "name": "OpenCellid: Database of Cell Towers", + "type": "url", + "url": "https://opencellid.org/" + } + ] + }, + { + "name": "Network Analysis Tools", + "type": "folder", + "children": [ + { + "name": "Wireshark", + "type": "url", + "url": "https://www.wireshark.org/download.html" + }, + { + "name": "NetworkMiner", + "type": "url", + "url": "https://www.netresec.com/?page=Networkminer" + }, + { + "name": "Packet Total", + "type": "url", + "url": "https://www.packettotal.com/" + }, + { + "name": "checkip (T)", + "type": "url", + "url": "https://github.com/jreisinger/checkip" + } + ] + }, + { + "name": "IP Loggers", + "type": "folder", + "children": [ + { + "name": "Ki.tc", + "type": "url", + "url": "https://ki.tc" + }, + { + "name": "Grabify", + "type": "url", + "url": "https://grabify.link" + }, + { + "name": "IP Logger", + "type": "url", + "url": "https://iplogger.com/" + } + ] + } + ] + }, + { + "name": "Images / Videos / Docs", + "type": "folder", + "children": [ + { + "name": "Images", + "type": "folder", + "children": [ + { + "name": "Search", + "type": "folder", + "children": [ + { + "name": "Google Images", + "type": "url", + "url": "https://images.google.com/?gws_rd=ssl" + }, + { + "name": "Bing Images", + "type": "url", + "url": "https://www.bing.com/images" + }, + { + "name": "FaceCheck Facial Recognition Search", + "type": "url", + "url": "https://facecheck.id/" + }, + { + "name": "Surfface Face & People Search Engine", + "type": "url", + "url": "https://surfface.com/" + }, + { + "name": "PimEyes Face Search Engine", + "type": "url", + "url": "https://pimeyes.com/en" + }, + { + "name": "Yandex Images", + "type": "url", + "url": "https://www.yandex.com/images/" + }, + { + "name": "Baidu Images", + "type": "url", + "url": "https://graph.baidu.com/pcpage/index?tpl_from=pc" + }, + { + "name": "Twitter Image Search (M)", + "type": "url", + "url": "https://twitter.com/search?q=%3Csearchterm%3E&src=typd&vertical=default&f=images" + }, + { + "name": "Imgur Search", + "type": "url", + "url": "https://imgur.com/search" + }, + { + "name": "Photobucket", + "type": "url", + "url": "https://photobucket.com/" + }, + { + "name": "7Photos.net", + "type": "url", + "url": "https://7photos.net/" + }, + { + "name": "Panoramio", + "type": "url", + "url": "https://www.panoramio.com/" + }, + { + "name": "Current Location", + "type": "url", + "url": "https://current-location.com/" + }, + { + "name": "Lakako Photo Search", + "type": "url", + "url": "https://www.lakako.com/" + }, + { + "name": "Lenso.ai", + "type": "url", + "url": "https://lenso.ai/" + }, + { + "name": "CC Search", + "type": "url", + "url": "https://ccsearch.creativecommons.org/" + }, + { + "name": "CamFind App", + "type": "url", + "url": "https://camfindapp.com/" + }, + { + "name": "RevEye Reverse Image Search (T)", + "type": "url", + "url": "https://chrome.google.com/webstore/detail/reveye-reverse-image-sear/keaaclcjhehbbapnphnmpiklalfhelgf?hl=en" + }, + { + "name": "SmugMug Search", + "type": "url", + "url": "https://www.smugmug.com/" + }, + { + "name": "ImageNet", + "type": "url", + "url": "https://image-net.org/" + }, + { + "name": "Places2", + "type": "url", + "url": "https://places2.csail.mit.edu/explore.html" + }, + { + "name": "Image Identification Project", + "type": "url", + "url": "https://www.imageidentify.com/" + }, + { + "name": "SauceNAO", + "type": "url", + "url": "https://saucenao.com/" + }, + { + "name": "Picarta", + "type": "url", + "url": "https://picarta.ai/" + }, + { + "name": "FaceSeek Face Search Engine", + "type": "url", + "url": "https://faceseek.online" + } + ] + }, + { + "name": "Instagram", + "type": "folder", + "children": [ + { + "name": "Webstigram", + "type": "url", + "url": "https://websta.me/search-engine-optimization/" + }, + { + "name": "Instagram", + "type": "url", + "url": "https://www.instagram.com/" + }, + { + "name": "Mini Instagram", + "type": "url", + "url": "https://mininsta.net/" + }, + { + "name": "Imgrab", + "type": "url", + "url": "https://www.imgrab.com/" + }, + { + "name": "Tofo.me", + "type": "url", + "url": "https://tofo.me/" + } + ] + }, + { + "name": "Flickr", + "type": "folder", + "children": [ + { + "name": "Flickr", + "type": "url", + "url": "https://www.flickr.com/" + }, + { + "name": "Flickr Map", + "type": "url", + "url": "https://www.flickr.com/map/" + }, + { + "name": "My Pics Map", + "type": "url", + "url": "https://www.mypicsmap.com/" + }, + { + "name": "idGettr", + "type": "url", + "url": "https://www.webfx.com/tools/idgettr/" + }, + { + "name": "Flickr Hive Mind", + "type": "url", + "url": "https://flickrhivemind.net/" + } + ] + }, + { + "name": "Metadata", + "type": "folder", + "children": [ + { + "name": "ExifEditor", + "type": "url", + "url": "https://exifeditor.io" + }, + { + "name": "ExifTool (T)", + "type": "url", + "url": "https://exiftool.org/" + }, + { + "name": "ExifViewer", + "type": "url", + "url": "https://www.exifviewer.org/" + }, + { + "name": "FOCA (T)", + "type": "url", + "url": "https://github.com/ElevenPaths/FOCA" + }, + { + "name": "GeoSetter", + "type": "url", + "url": "https://geosetter.de/en/main-en/" + }, + { + "name": "Jeffrey's Exif Viewer", + "type": "url", + "url": "https://exif.regex.info/" + }, + { + "name": "JPEGsnoop (T)", + "type": "url", + "url": "https://www.impulseadventure.com/photo/jpeg-snoop.html" + }, + { + "name": "Metapicz", + "type": "url", + "url": "https://metapicz.com/#landing" + }, + { + "name": "Search by Exif", + "type": "url", + "url": "https://www.exif-search.com/" + }, + { + "name": "xeuledoc - Fetch metadata about any public Google document", + "type": "url", + "url": "https://github.com/Malfrats/xeuledoc" + }, + { + "name": "FOCA (T)", + "type": "url", + "url": "https://github.com/ElevenPaths/FOCA" + }, + { + "name": "Exiv2 (T)", + "type": "url", + "url": "https://exiv2.org/" + }, + { + "name": "MediaInfo (T)", + "type": "url", + "url": "https://mediaarea.net/en/MediaInfo" + }, + { + "name": "Apache Tika (T)", + "type": "url", + "url": "https://tika.apache.org/" + }, + { + "name": "oletools (T)", + "type": "url", + "url": "https://github.com/decalage2/oletools" + }, + { + "name": "Hachoir (T)", + "type": "url", + "url": "https://github.com/vstinner/hachoir" + }, + { + "name": "C2PA Verify", + "type": "url", + "url": "https://contentcredentials.org/verify" + }, + { + "name": "Metadata2Go", + "type": "url", + "url": "https://www.metadata2go.com/" + }, + { + "name": "Get-Metadata", + "type": "url", + "url": "https://www.get-metadata.com/" + } + ] + }, + { + "name": "Forensics", + "type": "folder", + "children": [ + { + "name": "Ghiro (T)", + "type": "url", + "url": "https://github.com/ghirensics/ghiro" + }, + { + "name": "Camera Trace", + "type": "url", + "url": "https://www.cameratrace.com/trace" + }, + { + "name": "Forensically", + "type": "url", + "url": "https://29a.ch/photo-forensics/" + } + ] + }, + { + "name": "OCR", + "type": "folder", + "children": [ + { + "name": "Online OCR", + "type": "url", + "url": "https://www.sodapdf.com/pdf-tools/ocr-pdf/" + }, + { + "name": "i2OCR", + "type": "url", + "url": "https://www.i2ocr.com/" + }, + { + "name": "New OCR", + "type": "url", + "url": "https://www.newocr.com/" + }, + { + "name": "Online OCR", + "type": "url", + "url": "https://www.onlineocr.net/" + } + ] + }, + { + "name": "Tools", + "type": "folder", + "children": [ + { + "name": "Creepy (T)", + "type": "url", + "url": "https://www.geocreepy.com/" + } + ] + } + ] + }, + { + "name": "Videos", + "type": "folder", + "children": [ + { + "name": "Search", + "type": "folder", + "children": [ + { + "name": "Google Videos", + "type": "url", + "url": "https://www.google.com/videohp?gws_rd=ssl" + }, + { + "name": "Bing Videos", + "type": "url", + "url": "https://www.bing.com/videos" + }, + { + "name": "Internet Archive Videos", + "type": "url", + "url": "https://archive.org/details/opensource_movies" + }, + { + "name": "Vines (D)", + "type": "url", + "url": "https://www.google.com/search?q=site:vine.co+%3Csearchterm%3E" + }, + { + "name": "Dogpile Web Search", + "type": "url", + "url": "https://www.dogpile.com/" + }, + { + "name": "Geo Search Tool", + "type": "url", + "url": "https://www.geosearchtool.com/" + }, + { + "name": "blinkx Video Search", + "type": "url", + "url": "https://blinkx.com/" + }, + { + "name": "Facebook Live Map", + "type": "url", + "url": "https://www.facebook.com/watch/live/?ref=live_delegate" + }, + { + "name": "LiveLeak", + "type": "url", + "url": "https://www.liveleak.com/" + }, + { + "name": "Metatube", + "type": "url", + "url": "https://www.metatube.com/" + }, + { + "name": "Yahoo Video Search", + "type": "url", + "url": "https://video.search.yahoo.com/" + }, + { + "name": "Search YouTube by Location", + "type": "url", + "url": "https://mattw.io/youtube-geofind/location" + } + ] + }, + { + "name": "Analyze / Record", + "type": "folder", + "children": [ + { + "name": "DetURL", + "type": "url", + "url": "https://deturl.com/" + }, + { + "name": "Print YouTube StoryBoard Instructions", + "type": "url", + "url": "https://www.labnol.org/internet/print-youtube-video/28217" + }, + { + "name": "Print Storyboard from Youtube", + "type": "url", + "url": "javascript:(function(){a=ytplayer.config.args.storyboard_spec;if(!a){alert(\"Sorry we cannot process this YouTube video. Could you please try another one\");exit();}b=a.split(\"|\");base=b[0].split(\"$\")[0]+\"2/M\";c=b[3].split(\"%23\");sigh=c[c.length-1];var imgs=\"\";t=ytplayer.config.args.length_seconds;n=Math.ceil(c[2]/(c[3]*c[4]));for(i=0;i
\";}var title=ytplayer.config.args.title;msg=\"