diff --git a/public/arf.json b/public/arf.json index b8b4568..42089c1 100644 --- a/public/arf.json +++ b/public/arf.json @@ -5626,22 +5626,82 @@ { "name": "Genymotion (T)", "type": "url", - "url": "https://www.genymotion.com/" + "url": "https://www.genymotion.com/", + "status": "live", + "pricing": "freemium", + "description": "Cloud-based and desktop Android emulator platform for app testing and forensic analysis. Supports multi-instance deployment and integration with security testing tools.", + "bestFor": "Testing mobile apps, forensic analysis, multi-device simulation", + "input": "APK files, app bundles", + "output": "Runtime behavior, app data artifacts, system logs", + "opsec": "active", + "opsecNote": "Genymotion generates detectable device signatures; fingerprinting tools may identify it as emulated", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "BlueStacks 2 (T)", "type": "url", - "url": "https://www.bluestacks.com/" + "url": "https://www.bluestacks.com/", + "status": "live", + "pricing": "free", + "description": "Free, lightweight Android emulator for desktop. Includes built-in forensic capabilities for data extraction from installed apps.", + "bestFor": "Quick Android testing, forensic artifact extraction, app analysis", + "input": "APK files, installed apps", + "output": "App data, SQLite databases, shared preferences, file system artifacts", + "opsec": "active", + "opsecNote": "Emulator detection possible via device properties and system checks", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Nox App Player", "type": "url", - "url": "https://www.bignox.com/" + "url": "https://www.bignox.com/", + "status": "live", + "pricing": "free", + "description": "Free Android emulator with support for multiple Android versions and root access. Used for app analysis and testing.", + "bestFor": "Android version testing, app analysis, rooted device simulation", + "input": "APK files, apps", + "output": "App behavior, system-level data, rooted access artifacts", + "opsec": "active", + "opsecNote": "Detectable via emulator checks; includes obvious emulator markers", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Apk Online", "type": "url", - "url": "https://www.apkonline.net/" + "url": "https://apk.online/", + "status": "live", + "pricing": "free", + "description": "Browser-based tool for analyzing and downloading APK files. Allows viewing app permissions, features, and metadata without installation.", + "bestFor": "Quick APK analysis, permission review, app feature reconnaissance", + "input": "App package names or APK files", + "output": "APK downloads, permission lists, app metadata, manifest data", + "opsec": "passive", + "opsecNote": "No installation required; passive reconnaissance only", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false } ] }, @@ -5656,22 +5716,82 @@ { "name": "Facebook (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=com.facebook.katana" + "url": "https://www.facebook.com/", + "status": "live", + "pricing": "free", + "description": "Major social network with over 2 billion users. Primary target for social OSINT and profile reconnaissance.", + "bestFor": "Profile reconnaissance, relationship mapping, photo analysis, location tracking", + "input": "Usernames, profile URLs, phone numbers, email addresses", + "output": "Profile data, friend networks, photos, location history, activity timeline", + "opsec": "active", + "opsecNote": "Facebook monitors and blocks suspicious activity patterns; tool-based scraping is easily detected", + "localInstall": false, + "googleDork": true, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "LinkedIn (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=com.linkedin.android" + "url": "https://www.linkedin.com/", + "status": "live", + "pricing": "freemium", + "description": "Professional social network with 900M+ users. Key source for professional identity verification and corporate structure mapping.", + "bestFor": "Professional background verification, corporate reconnaissance, employment history research", + "input": "Usernames, email domains, company names", + "output": "Professional profiles, employment history, connections, company structure", + "opsec": "active", + "opsecNote": "LinkedIn actively blocks scraping tools and monitors for bulk data collection", + "localInstall": false, + "googleDork": true, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Twitter (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=com.twitter.android" + "url": "https://www.twitter.com/", + "status": "live", + "pricing": "free", + "description": "Microblogging platform with 500M+ users. Extensive public data, real-time information, and relationship networks.", + "bestFor": "Real-time monitoring, account verification, relationship mapping, sentiment analysis", + "input": "Usernames, hashtags, keywords, user IDs", + "output": "Tweets, user profiles, follower networks, location data, media", + "opsec": "passive", + "opsecNote": "Mostly passive; API-based tools are rate-limited but account scraping can be detected", + "localInstall": false, + "googleDork": true, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Pinterest (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=com.pinterest" + "url": "https://www.pinterest.com/", + "status": "live", + "pricing": "free", + "description": "Visual discovery platform with 460M+ users. Used for lifestyle, location, and interest-based profiling.", + "bestFor": "Interest profiling, location discovery, lifestyle analysis, image reverse search", + "input": "Usernames, pins, boards, images", + "output": "User profiles, boards, pins, location metadata, follower networks", + "opsec": "passive", + "opsecNote": "Passive reconnaissance; less aggressively monitored than Facebook or LinkedIn", + "localInstall": false, + "googleDork": true, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false } ] }, @@ -5682,42 +5802,162 @@ { "name": "Signal Private Messenger (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=org.thoughtcrime.securesms" + "url": "https://signal.org/", + "status": "live", + "pricing": "free", + "description": "End-to-end encrypted messaging app with 40M+ users. Limited OSINT value due to privacy-first design.", + "bestFor": "Identity verification, account discovery via phone/email, community research", + "input": "Phone numbers, email addresses, usernames", + "output": "Account existence, profile names, avatar images", + "opsec": "passive", + "opsecNote": "Very limited information exposure; encrypted content not accessible", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Riot.im - Communicate, your way (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=im.vector.app" + "url": "https://riot.im/", + "status": "live", + "pricing": "free", + "description": "Open-source Matrix client for decentralized messaging. Limited public data but useful for community monitoring.", + "bestFor": "Open community monitoring, channel discovery, user verification", + "input": "Usernames, community names, room IDs", + "output": "Community membership, user profiles, message history (if public), user activity", + "opsec": "passive", + "opsecNote": "Privacy depends on server configuration; public rooms and communities are openly accessible", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Telegram (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=org.telegram.messenger" + "url": "https://telegram.org/", + "status": "live", + "pricing": "free", + "description": "Messaging platform with 700M+ users. Extensive public data through public channels, groups, and user searches.", + "bestFor": "User discovery, channel monitoring, group reconnaissance, bot creation for data collection", + "input": "Usernames, user IDs, chat links, phone numbers", + "output": "User profiles, channel data, group membership, message history, media", + "opsec": "passive", + "opsecNote": "Public channels and users are accessible without authentication; bot development requires API key", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Snapchat (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=com.snapchat.android" + "url": "https://www.snapchat.com/", + "status": "live", + "pricing": "free", + "description": "Ephemeral messaging app with 400M+ users. Limited historical data due to auto-deletion, but real-time activity visible.", + "bestFor": "User verification, story analysis, location tracking via snap maps, relationship mapping", + "input": "Usernames, Snapcodes, phone numbers", + "output": "User profiles, story content, snap maps, friend networks", + "opsec": "active", + "opsecNote": "Snapchat actively detects and blocks third-party clients; API access is restricted", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "WhatsApp Messenger (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=com.whatsapp" + "url": "https://www.whatsapp.com/", + "status": "live", + "pricing": "free", + "description": "Messaging platform with 2B+ users. End-to-end encrypted, but profile data and metadata are accessible.", + "bestFor": "User verification, profile discovery, status updates, contact verification", + "input": "Phone numbers, WhatsApp IDs", + "output": "User profiles, status messages, profile pictures, last-seen timestamps, online status", + "opsec": "passive", + "opsecNote": "No official API for OSINT; third-party tools easily detected and account-banned", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Kik (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=kik.android" + "url": "https://www.kik.com/", + "status": "live", + "pricing": "free", + "description": "Messaging app with 300M+ registered users. Public username search and profile visibility.", + "bestFor": "User discovery, profile analysis, public username search", + "input": "Usernames, user handles", + "output": "User profiles, status, profile pictures, user discovery", + "opsec": "passive", + "opsecNote": "Public search available; less monitored than major platforms", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Yik Yak (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=com.yik.yak" + "url": "https://www.yikyak.com/", + "status": "live", + "pricing": "free", + "description": "Anonymous location-based social network. Public posts visible by location, useful for community sentiment and event tracking.", + "bestFor": "Location-based event monitoring, community sentiment analysis, anonymity assessment", + "input": "Location coordinates, proximity radius", + "output": "Anonymous posts, location data, user engagement, community trends", + "opsec": "passive", + "opsecNote": "Designed for anonymity; minimal PII exposure, but location data and timing can reveal patterns", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "LINE (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=jp.naver.line.android" + "url": "https://line.me/", + "status": "live", + "pricing": "free", + "description": "Messaging app with 200M+ users, dominant in Asia. User search and public profile visibility.", + "bestFor": "Asian market user discovery, profile analysis, account verification", + "input": "User IDs, phone numbers, LINE accounts", + "output": "User profiles, status messages, timeline data, friends list", + "opsec": "passive", + "opsecNote": "Public profile search available; varies by region and privacy settings", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false } ] }, @@ -5728,12 +5968,42 @@ { "name": "Instagram (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=com.instagram.android" + "url": "https://www.instagram.com/", + "status": "live", + "pricing": "free", + "description": "Photo and video sharing platform with 2B+ users. Extensive visual OSINT and metadata analysis.", + "bestFor": "Visual reconnaissance, metadata analysis, location tracking via geotagging, relationship mapping", + "input": "Usernames, hashtags, locations, profile URLs", + "output": "User profiles, photos, videos, captions, location data, follower networks", + "opsec": "active", + "opsecNote": "Instagram aggressively blocks scraping tools; bulk data collection easily detected", + "localInstall": false, + "googleDork": true, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Flickr (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=com.yahoo.mobile.client.android.flickr" + "url": "https://www.flickr.com/", + "status": "live", + "pricing": "freemium", + "description": "Photo hosting and sharing platform with 200M+ photos. Extensive metadata and location data.", + "bestFor": "Photo metadata analysis, EXIF data extraction, location tracking, photographer identification", + "input": "Usernames, tags, locations, URLs", + "output": "Photos, metadata, EXIF data, location coordinates, user profiles", + "opsec": "passive", + "opsecNote": "Passive access to public photos; metadata freely available", + "localInstall": false, + "googleDork": true, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false } ] }, @@ -5744,24 +6014,84 @@ { "name": "Periscope (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=tv.periscope.android" + "url": "https://www.periscope.tv/", + "status": "live", + "pricing": "free", + "description": "Live video streaming app merged into Twitter. Limited standalone value; functionality integrated into Twitter.", + "bestFor": "Live event monitoring, real-time location tracking (via broadcast metadata), community monitoring", + "input": "Broadcast URLs, user handles, search keywords", + "output": "Broadcast data, viewer information, location metadata, broadcast archives", + "opsec": "passive", + "opsecNote": "Functionality largely superseded by Twitter; limited independent OSINT utility", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Meerkat (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=co.getair.meerkat" + "url": "https://meerkatapp.co/", + "status": "live", + "pricing": "free", + "description": "Live streaming social app. Currently dormant with minimal active users; historical value for archived streams.", + "bestFor": "Legacy stream archives, historical event analysis", + "input": "Stream URLs, user profiles, timestamps", + "output": "Archived streams, viewer data, user activity logs", + "opsec": "unknown", + "opsecNote": "Service is largely dormant; limited active OSINT value", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Vine (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=co.vine.android" + "url": "https://vine.co/", + "status": "down", + "pricing": "free", + "description": "Short-form video platform shut down by Twitter in January 2017. No longer operational.", + "bestFor": "Historical video archives only (via archive services)", + "input": "Archived Vine URLs, video IDs", + "output": "Historical video data via Internet Archive or similar services", + "opsec": "unknown", + "opsecNote": "Platform is defunct; only accessible via web archives", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": true } ] }, { "name": "Truecaller (T)", "type": "url", - "url": "https://play.google.com/store/apps/details?id=com.truecaller" + "url": "https://www.truecaller.com/", + "status": "live", + "pricing": "freemium", + "description": "Phone and contact verification app with 500M+ users. Reverse phone lookup and caller ID identification.", + "bestFor": "Phone number verification, caller ID lookup, spam detection, contact validation", + "input": "Phone numbers, contact names", + "output": "Caller name, carrier info, location data, spam reports, contact validation", + "opsec": "passive", + "opsecNote": "Requires app or web access; limited free tier for bulk lookups", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false } ] } @@ -5774,22 +6104,82 @@ { "name": "APKLeaks", "type": "url", - "url": "https://github.com/dwisiswant0/apkleaks" + "url": "https://github.com/dwisiswant0/apkleaks", + "status": "live", + "pricing": "free", + "description": "Open-source tool that scans APK files for hardcoded secrets, API endpoints, and sensitive information.", + "bestFor": "API endpoint discovery, hardcoded credential detection, sensitive data extraction from APKs", + "input": "APK files", + "output": "Discovered secrets, API endpoints, hardcoded strings, configuration data", + "opsec": "passive", + "opsecNote": "Local analysis only; no network communication required", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "APKtool", "type": "url", - "url": "https://apktool.org/" + "url": "https://apktool.org/", + "status": "live", + "pricing": "free", + "description": "Open-source tool for reverse engineering Android apps. Decompiles APKs to extract resources and bytecode.", + "bestFor": "APK decompilation, resource extraction, smali code analysis, app structure analysis", + "input": "APK files", + "output": "Decompiled source code, resources, manifest data, smali bytecode", + "opsec": "passive", + "opsecNote": "Local analysis only; operates offline on APK files", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "JADX", "type": "url", - "url": "https://github.com/skylot/jadx" + "url": "https://github.com/skylot/jadx", + "status": "live", + "pricing": "free", + "description": "Open-source decompiler (47k+ GitHub stars) that converts DEX bytecode to Java source code. GUI and CLI available.", + "bestFor": "Java source code recovery, app logic analysis, vulnerability assessment, code review", + "input": "APK files, DEX files, class files", + "output": "Java source code, code structure, method signatures, data flow", + "opsec": "passive", + "opsecNote": "Local analysis tool; no network communication", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "MobSF", "type": "url", - "url": "https://github.com/MobSF/Mobile-Security-Framework-MobSF" + "url": "https://github.com/MobSF/Mobile-Security-Framework-MobSF", + "status": "live", + "pricing": "free", + "description": "Open-source mobile security framework for static and dynamic analysis. Comprehensive vulnerability scanning and artifact extraction.", + "bestFor": "Comprehensive mobile app security analysis, vulnerability assessment, artifact extraction, compliance testing", + "input": "APK files, IPA files, source code", + "output": "Security vulnerabilities, permissions analysis, data flow analysis, forensic artifacts", + "opsec": "passive", + "opsecNote": "Can be deployed locally or on private infrastructure for analysis", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false } ] }, @@ -5800,12 +6190,42 @@ { "name": "Autopsy", "type": "url", - "url": "https://www.autopsy.com/" + "url": "https://www.autopsy.com/", + "status": "live", + "pricing": "free", + "description": "Open-source digital forensics platform. Extracts and analyzes data from mobile devices and disk images.", + "bestFor": "Mobile forensic artifact extraction, database analysis, file system recovery, evidence analysis", + "input": "Device backups, disk images, app databases, file systems", + "output": "SQLite databases, app data, deleted files, timeline analysis, forensic artifacts", + "opsec": "passive", + "opsecNote": "Works on forensic images and backups; no interaction with live devices", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Frida", "type": "url", - "url": "https://frida.re/" + "url": "https://frida.re/", + "status": "live", + "pricing": "free", + "description": "Open-source dynamic instrumentation toolkit. Injects JavaScript to intercept and modify app behavior at runtime.", + "bestFor": "Runtime behavior analysis, API call interception, encryption bypass, behavior modification", + "input": "Running app processes, method signatures, target functions", + "output": "Intercepted method calls, API parameters, return values, runtime state", + "opsec": "active", + "opsecNote": "Requires rooted/jailbroken device or emulator; app-level detection is possible", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false } ] }, @@ -5816,17 +6236,62 @@ { "name": "Charles Proxy", "type": "url", - "url": "https://www.charlesproxy.com/" + "url": "https://www.charlesproxy.com/", + "status": "live", + "pricing": "paid", + "description": "Commercial HTTP/HTTPS proxy for traffic analysis. Captures and analyzes network traffic between apps and servers.", + "bestFor": "Network traffic interception, API endpoint mapping, parameter analysis, encryption analysis", + "input": "Network traffic, SSL/TLS sessions", + "output": "HTTP requests/responses, SSL certificates, decoded payloads, traffic analysis", + "opsec": "active", + "opsecNote": "HTTPS interception requires certificate pinning bypass; easily detected by security-aware apps", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Lynxio OSINT", "type": "url", - "url": "https://apps.apple.com/us/app/lynxio-osint/id6745894335" + "url": "https://lynxio.io/", + "status": "live", + "pricing": "freemium", + "description": "Mobile OSINT search tool for multi-identifier reconnaissance. Searches across phone numbers, email addresses, usernames, and social platforms.", + "bestFor": "Multi-identifier search, quick reconnaissance, phone number lookup, email verification", + "input": "Phone numbers, email addresses, usernames, URLs", + "output": "Associated identifiers, social media profiles, verification results, relationship mapping", + "opsec": "passive", + "opsecNote": "Aggregates public data from multiple sources; passive only", + "localInstall": false, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "OSINT Researcher", "type": "url", - "url": "https://apps.apple.com/gy/app/osint-researcher/id6747302251" + "url": "https://apps.apple.com/us/app/osint-researcher/id6747302251", + "status": "live", + "pricing": "free", + "description": "iOS app for GitHub organization reconnaissance and open-source intelligence. Limited to App Store distribution.", + "bestFor": "GitHub OSINT, organization structure analysis, open-source project discovery, team reconnaissance", + "input": "Organization names, GitHub URLs, repository URLs", + "output": "Organization members, repository lists, contribution history, project metadata", + "opsec": "passive", + "opsecNote": "App Store only; limited availability and distribution", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false } ] }