WEBDIENSTE/OSINT-Framework
1
0
Fork 0
mirror of https://github.com/lockfale/OSINT-Framework.git synced 2026-08-31 20:19:37 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
121fd7dc710ed0a8bd340f4e31585fd6180d2203
OSINT-Framework/public/arf.json
T
s0lrayandGitHub 121fd7dc71 Merge pull request #608 from lockfale/feature/THE-127-enrich-domain-names 
Enrich 25 Domain Name tools batch 1/6 with OSINT metadata (THE-127)
2026-03-27 22:14:12 -04:00

10336 lines
372 KiB
JSON
Raw Blame History

{
"name": "OSINT Framework",
"type": "folder",
"children": [
{
"name": "Username",
"type": "folder",
"children": [
{
"name": "Username Search Engines",
"type": "folder",
"children": [
{
"name": "WhatsMyName (T)",
"type": "url",
"url": "https://github.com/WebBreacher/WhatsMyName",
"description": "OSINT project maintaining a curated JSON database of website detection patterns for username enumeration. Web interface available at whatsmyname.app.",
"status": "live",
"pricing": "free",
"bestFor": "Username enumeration using community-maintained site detection data",
"input": "Username",
"output": "List of sites where the username exists, based on HTTP response pattern matching",
"opsec": "active",
"opsecNote": "Makes HTTP requests to each target site to check for username existence.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Sylva Identity Discovery (T)",
"type": "url",
"url": "https://sylva.pfeister.dev/",
"description": "Open-source CLI tool for username and identity discovery with branch discovery to expand searches as additional linked identities are uncovered.",
"status": "live",
"pricing": "free",
"bestFor": "Username enumeration with identity branching",
"input": "Username",
"output": "Linked accounts and identities across platforms",
"opsec": "active",
"opsecNote": "Makes requests to target platforms to check username existence; external API keys may be used.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Sherlock (T)",
"type": "url",
"url": "https://github.com/sherlock-project/sherlock",
"description": "Python CLI tool that hunts down social media accounts by username across 400+ social networks. Supports Tor routing, proxy configuration, and CSV/XLSX export.",
"status": "live",
"pricing": "free",
"bestFor": "Mass username enumeration across 400+ sites",
"input": "Username(s)",
"output": "List of discovered profile URLs across social networks",
"opsec": "active",
"opsecNote": "Directly queries each target site to check username existence; supports Tor/proxy for anonymity.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Namechk",
"type": "url",
"url": "https://namechk.com/",
"description": "Web-based username and domain availability checker that searches 100+ social media platforms and 36 domain extensions simultaneously.",
"status": "live",
"pricing": "free",
"bestFor": "Quick username availability check across social media and domains",
"input": "Username or domain name",
"output": "Availability status across 100+ platforms and domain extensions",
"opsec": "passive",
"opsecNote": "Searches are routed through Namechk's servers; target accounts are not directly contacted by the user.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Thats Them",
"type": "url",
"url": "https://thatsthem.com/",
"description": "Free people search engine aggregating data from 50+ sources. Supports lookups by name, address, phone number, or email.",
"status": "live",
"pricing": "freemium",
"bestFor": "People search by name, email, phone, or address",
"input": "Name, email address, phone number, or physical address",
"output": "Contact info, residential details, demographics, and financial estimates",
"opsec": "passive",
"opsecNote": "Searches are routed through ThatsThem's servers; the target is not alerted.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "NameCheckup",
"type": "url",
"url": "https://namecheckup.com/",
"description": "Free web-based username and domain availability checker that searches across 20+ social media platforms and 40+ domain extensions with WHOIS lookup support.",
"status": "live",
"pricing": "free",
"bestFor": "Username and domain availability checking with WHOIS info",
"input": "Username or domain name",
"output": "Availability status across social platforms and domain extensions, with WHOIS data",
"opsec": "passive",
"opsecNote": "Searches are proxied through NameCheckup's servers; no direct contact with target platforms by the user.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "GitFive (T)",
"type": "url",
"url": "https://github.com/mxrch/GitFive",
"description": "OSINT CLI tool for investigating GitHub profiles. Tracks username/name history, maps emails to accounts, extracts SSH public keys, and exports findings as JSON.",
"status": "live",
"pricing": "free",
"bestFor": "Deep investigation of GitHub user profiles and email-to-account mapping",
"input": "GitHub username or email address",
"output": "Profile history, linked emails, SSH keys, repository analysis, JSON export",
"opsec": "active",
"opsecNote": "Queries GitHub API directly; developer recommends using a secondary GitHub account.",
"localInstall": true,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Sherlock",
"type": "url",
"url": "https://github.com/sherlock-project/sherlock",
"description": "Python CLI tool that hunts down social media accounts by username across 400+ social networks. Supports Tor routing, proxy configuration, and CSV/XLSX export.",
"status": "live",
"pricing": "free",
"bestFor": "Mass username enumeration across 400+ sites",
"input": "Username(s)",
"output": "List of discovered profile URLs across social networks",
"opsec": "active",
"opsecNote": "Directly queries each target site to check username existence; supports Tor/proxy for anonymity.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Names Directory",
"type": "url",
"url": "https://namesdir.com/",
"description": "Searchable database of 1B+ name combinations collected from public sources. Allows bidirectional lookup to find first names by surname or surnames by first name.",
"status": "live",
"pricing": "free",
"bestFor": "Finding name combinations and frequency data for a given first or last name",
"input": "First name or surname",
"output": "Associated name combinations with frequency counts",
"opsec": "passive",
"opsecNote": "Queries a static public database; no contact with any target individual.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Lullar",
"type": "url",
"url": "https://com.lullar.com",
"description": "Free people search and username lookup tool that searches across 148+ social media platforms including Instagram, TikTok, Facebook, and LinkedIn.",
"status": "live",
"pricing": "free",
"bestFor": "Social media profile discovery by username, email, or name",
"input": "Email address, full name, or username",
"output": "Social media profiles found across 148+ platforms",
"opsec": "passive",
"opsecNote": "Searches are routed through Lullar's servers; no direct queries from the user to target platforms.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Specific Sites",
"type": "folder",
"children": [
{
"name": "Amazon Usernames (M)",
"type": "url",
"url": "https://www.google.com/search?q=site:amazon.com+%3Cusername%3E",
"description": "Google dork that searches Amazon.com for pages associated with a specific username, surfacing public profiles, wishlists, and reviews.",
"status": "live",
"pricing": "free",
"bestFor": "Finding Amazon public profiles, wishlists, and review activity by username",
"input": "Username (inserted into Google search query)",
"output": "Google search results linking to Amazon pages mentioning the username",
"opsec": "passive",
"opsecNote": "Query goes to Google, not Amazon directly. Google may log the search but the target is not alerted.",
"localInstall": false,
"googleDork": true,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Github User (M)",
"type": "url",
"url": "https://api.github.com/users/%3Cusername%3E/events/public",
"description": "Queries the GitHub public Events API to retrieve a user's recent public activity, including pushes, pull requests, issues, and other repository events.",
"status": "live",
"pricing": "free",
"bestFor": "Enumerating a GitHub user's recent public activity and repository interactions",
"input": "GitHub username (inserted into URL path)",
"output": "JSON array of public events (pushes, PRs, issues, comments) with timestamps and repo details",
"opsec": "passive",
"opsecNote": "Unauthenticated API call; GitHub rate-limits by IP (60 req/hr) but does not notify the target user.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Tinder Usernames (M)",
"type": "url",
"url": "https://www.gotinder.com/@%3Cusername%3E",
"description": "Accesses a Tinder user's public web profile via their username. The gotinder.com domain redirects to tinder.com.",
"status": "live",
"pricing": "free",
"bestFor": "Confirming existence of a Tinder profile and viewing public profile details",
"input": "Tinder username (appended to URL after @)",
"output": "Public profile page with name, photo, and basic info if the user has web sharing enabled",
"opsec": "passive",
"opsecNote": "Simple HTTP GET to a public page; target is not notified of profile views via the web URL.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Keybase",
"type": "url",
"url": "https://keybase.io/",
"description": "Platform for cryptographic identity verification, linking social media accounts, PGP keys, and cryptocurrency addresses to a single profile. Acquired by Zoom in 2020 but still operational.",
"status": "live",
"pricing": "free",
"bestFor": "Looking up verified social accounts, PGP keys, and crypto wallets tied to a username",
"input": "Username",
"output": "User profile showing verified identities across platforms, PGP keys, cryptocurrency addresses, and devices",
"opsec": "passive",
"opsecNote": "Public profile lookups are passive web requests. No login required to view profiles.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "MIT PGP Key Server",
"type": "url",
"url": "https://pgp.mit.edu/",
"description": "MIT PGP Public Key Server for searching, submitting, and removing PGP public keys. Look up keys by name, email, or key ID to find associated cryptographic identities.",
"status": "live",
"pricing": "free",
"bestFor": "Looking up PGP public keys associated with a username or email address",
"input": "Name, email address, or key ID",
"output": "PGP public key data, key fingerprints, associated UIDs/email addresses, and key metadata",
"opsec": "passive",
"opsecNote": "Public key server query; no authentication required and target is not notified of lookups.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "ProtonMail users (M)",
"type": "url",
"url": "https://api.protonmail.ch/pks/lookup?op=index&search=<username>@protonmail.com",
"description": "Queries ProtonMail's HKP-compatible PGP key server to look up the public key for a ProtonMail username. A successful response confirms the account exists.",
"status": "live",
"pricing": "free",
"bestFor": "Confirming whether a ProtonMail username exists and retrieving its PGP public key",
"input": "ProtonMail username (appended with @protonmail.com)",
"output": "PGP key index with public key fingerprint, algorithm, creation timestamp, and email UID",
"opsec": "passive",
"opsecNote": "Unauthenticated API query to ProtonMail's public key server. Target user is not notified. Enables user enumeration.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "ProtonMail Domains (M)",
"type": "url",
"url": "https://api.protonmail.ch/pks/lookup?op=index&search=<email_address>",
"description": "Queries ProtonMail's HKP key server with a full email address to check for a PGP public key. Useful for identifying ProtonMail users on custom domains.",
"status": "live",
"pricing": "free",
"bestFor": "Checking if an email address on a custom domain is hosted on ProtonMail",
"input": "Full email address (any domain that may be hosted on ProtonMail)",
"output": "PGP key index with public key fingerprint, algorithm, creation timestamp, and email UID",
"opsec": "passive",
"opsecNote": "Unauthenticated public HKP endpoint. Target is not notified. Can reveal whether a custom domain uses ProtonMail.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
}
]
},
{
"name": "Email Address",
"type": "folder",
"children": [
{
"name": "Email Search",
"type": "folder",
"children": [
{
"name": "Sylva Identity Discovery (T)",
"type": "url",
"url": "https://sylva.pfeister.dev/",
"description": "Identity discovery utility that searches GitHub and PGP key servers to link identities across platforms using email addresses, usernames, or PGP keys.",
"status": "live",
"pricing": "free",
"bestFor": "Identity correlation via GitHub and PGP",
"input": "Email, username, or PGP fingerprint",
"output": "Linked identities, GitHub profiles, PGP keys",
"opsec": "passive",
"opsecNote": "Queries public GitHub and PGP servers without direct target contact.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "ThatsThem",
"type": "url",
"url": "https://thatsthem.com/reverse-email-lookup",
"description": "Reverse email lookup tool that searches a database of hundreds of millions of emails to reveal name, address, phone number, and public records associated with an email address.",
"status": "live",
"pricing": "freemium",
"bestFor": "Reverse email lookup, person identification",
"input": "Email address",
"output": "Name, address, phone number, education",
"opsec": "passive",
"opsecNote": "Queries ThatsThem's public database without alerting the target.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Hunter",
"type": "url",
"url": "https://hunter.io/",
"description": "Email finder and verifier that discovers business email addresses from company domains, names, and social profiles with up to 98% accuracy rate.",
"status": "live",
"pricing": "freemium",
"bestFor": "Business email discovery, email verification",
"input": "Domain name, person name, or company info",
"output": "Verified business email addresses",
"opsec": "passive",
"opsecNote": "Queries Hunter's database of public emails; does not contact targets.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Email to Address (R)",
"type": "url",
"url": "https://www.melissa.com/",
"description": "Melissa.com's data quality and verification service that validates and enriches email addresses with supplementary contact information.",
"status": "live",
"pricing": "paid",
"bestFor": "Email validation, address enrichment",
"input": "Email addresses, contact data",
"output": "Validated email, postal address, phone",
"opsec": "passive",
"opsecNote": "Data verification service; does not perform reconnaissance.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "VoilaNorbert",
"type": "url",
"url": "https://www.voilanorbert.com/",
"description": "Email finder and verifier with 98% success rate that discovers business emails by company/domain, person name, or LinkedIn profile with bulk upload capability.",
"status": "live",
"pricing": "freemium",
"bestFor": "Business email discovery, bulk email finding",
"input": "Domain, name, or LinkedIn URL",
"output": "Business email addresses, verification status",
"opsec": "passive",
"opsecNote": "Searches public email database; does not contact targets directly.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "GHunt (T)",
"type": "url",
"url": "https://github.com/mxrch/GHunt",
"description": "Offensive Google framework that investigates Google accounts using email addresses to uncover YouTube channels, Google Photos, Maps reviews, and associated artifacts.",
"status": "live",
"pricing": "free",
"bestFor": "Google account investigation, YouTube/Google Photos OSINT",
"input": "Gmail address or GAIA ID",
"output": "YouTube channels, Google Photos, Maps reviews, device info",
"opsec": "active",
"opsecNote": "Requires Google login via browser extension; may be detected by Google.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "OSINT Industries",
"type": "url",
"url": "https://www.osint.industries/",
"description": "Account linking service that extracts all registered accounts tied to an email or phone across 500+ platforms including social media, messaging apps, and lifestyle services.",
"status": "live",
"pricing": "freemium",
"bestFor": "Account enumeration, breach detection, digital footprint mapping",
"input": "Email address, phone number, username, or crypto wallet",
"output": "Linked accounts, breach information, geospatial data, timeline",
"opsec": "passive",
"opsecNote": "Scours public websites and databases without contacting the target.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "theHarvester (T)",
"type": "url",
"url": "https://github.com/laramies/theHarvester",
"description": "Command-line tool for gathering emails, subdomains, IPs, and URLs from public sources.",
"status": "live",
"pricing": "free",
"bestFor": "Email harvesting, subdomain enumeration, passive recon",
"input": "Domain name",
"output": "Email addresses, subdomains, IPs, URLs",
"opsec": "passive",
"opsecNote": "Queries third-party search engines and APIs. Does not contact the target directly.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Infoga (T)",
"type": "url",
"url": "https://github.com/m4ll0k/infoga",
"description": "Python-based email OSINT tool that gathers email account information (IP, hostname, country) from search engines, PGP servers, and Shodan, with breach checking via haveibeenpwned.",
"status": "live",
"pricing": "free",
"bestFor": "Early-stage email reconnaissance, information gathering",
"input": "Email address",
"output": "IP addresses, hostnames, country, breach status",
"opsec": "passive",
"opsecNote": "Queries search engines and public APIs without direct target contact.",
"localInstall": true,
"googleDork": true,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Skymem",
"type": "url",
"url": "https://www.skymem.info/",
"description": "Email finder that discovers company and personal email addresses by domain or name, with bulk search, email list creation, and advanced filtering capabilities.",
"status": "live",
"pricing": "freemium",
"bestFor": "Email discovery by domain, bulk email list creation",
"input": "Domain name or person name + domain",
"output": "Email addresses, bulk email lists",
"opsec": "passive",
"opsecNote": "Scrapes and aggregates public email data from websites and profiles.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Epieos Email Tool",
"type": "url",
"url": "https://tools.epieos.com/email.php",
"description": "Freemium OSINT tool performing email reverse lookups to uncover associated social media profiles across 120+ websites and services with breach detection.",
"status": "live",
"pricing": "freemium",
"bestFor": "Email reverse lookup, social media profile discovery",
"input": "Email address or phone number",
"output": "Associated social media profiles, forum posts, breach info",
"opsec": "passive",
"opsecNote": "Passive reconnaissance across 120+ websites; does not alert the target.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "breach.vip",
"type": "url",
"url": "https://breach.vip/",
"description": "Free database search engine providing access to 1000+ breach databases for research, email searching, and analysis of compromised credentials.",
"status": "live",
"pricing": "free",
"bestFor": "Breach database search, credential lookup",
"input": "Email, domain, Discord ID, or phone number",
"output": "Breach records, leaked credentials",
"opsec": "passive",
"opsecNote": "Queries aggregated public breach databases.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Holehe (T)",
"type": "url",
"url": "https://github.com/megadose/holehe",
"description": "Python-based email enumeration tool that checks if an email is registered across 120+ websites and services using password-reset mechanisms.",
"status": "live",
"pricing": "free",
"bestFor": "Email account enumeration, service detection",
"input": "Email address",
"output": "List of websites where email is registered",
"opsec": "passive",
"opsecNote": "Uses password-reset functionality without sending emails or alerting targets.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Common Email Formats",
"type": "folder",
"children": [
{
"name": "Email Format",
"type": "url",
"url": "https://www.email-format.com/",
"description": "Tool for analyzing and discovering corporate email address patterns and formats to predict valid employee email addresses within an organization.",
"status": "live",
"pricing": "free",
"bestFor": "Corporate email pattern analysis, email format discovery",
"input": "Sample email addresses or company info",
"output": "Predicted email format patterns",
"opsec": "passive",
"opsecNote": "Statistical analysis of publicly known email patterns.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Email Permutator",
"type": "url",
"url": "https://metricsparrow.com/toolkit/email-permutator/",
"description": "OSINT tool that generates all possible email address combinations from a person's name and domain(s) for reconnaissance and email guessing.",
"status": "live",
"pricing": "free",
"bestFor": "Email pattern generation, targeted email guessing",
"input": "Person name, nickname, domain(s)",
"output": "List of possible email address variations",
"opsec": "passive",
"opsecNote": "Generates permutations without any network contact.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Email Verification",
"type": "folder",
"children": [
{
"name": "Reacher Github (T)",
"type": "url",
"url": "https://github.com/reacherhq/check-if-email-exists",
"description": "Open-source Rust-based email verification API that checks email deliverability without sending messages, detecting catch-all and disposable addresses.",
"status": "live",
"pricing": "free",
"bestFor": "Email verification, bounce detection, list cleaning",
"input": "Email address",
"output": "Deliverability status, MX records, bounce type",
"opsec": "passive",
"opsecNote": "Verifies email existence through MTA queries without sending mail.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Reacher Demo",
"type": "url",
"url": "https://reacher.email",
"description": "Hosted demo of the Reacher email verification API allowing free testing of email validation and deliverability checks online.",
"status": "live",
"pricing": "free",
"bestFor": "Email verification testing, demonstration",
"input": "Email address",
"output": "Deliverability status, bounce information",
"opsec": "passive",
"opsecNote": "Passive MTA-based verification without sending emails.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "MailScrap",
"type": "url",
"url": "https://mailscrap.com/",
"description": "Email verification tool that connects to mail servers to verify mailbox existence and removes disposable email addresses from lists.",
"status": "live",
"pricing": "freemium",
"bestFor": "Email validation, list cleaning, disposable email detection",
"input": "Email addresses or email lists",
"output": "Validation status, mailbox existence",
"opsec": "passive",
"opsecNote": "Connects to mail servers for verification without sending messages.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Read Notify",
"type": "url",
"url": "https://www.readnotify.com/",
"description": "Email tracking and read receipt service that monitors email opens and engagement, useful for confirming email validity through delivery.",
"status": "live",
"pricing": "freemium",
"bestFor": "Email delivery confirmation, read receipt tracking",
"input": "Email address",
"output": "Delivery and read status",
"opsec": "active",
"opsecNote": "Sends tracking pixels; may alert targets to monitoring.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Email Reputation",
"type": "url",
"url": "https://emailrep.io/",
"description": "Tool that checks email reputation, risk scoring, and breach history to identify phishing emails, compromised accounts, and risky addresses.",
"status": "live",
"pricing": "free",
"bestFor": "Email reputation checking, risk assessment",
"input": "Email address",
"output": "Reputation score, risk level, breach history",
"opsec": "passive",
"opsecNote": "Passive database lookup without target contact.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "MailboxValidator",
"type": "url",
"url": "https://www.mailboxvalidator.com/demo",
"description": "Email verification API that validates email deliverability, detects catch-all addresses, and provides risk scoring for bulk email list cleaning.",
"status": "live",
"pricing": "paid",
"bestFor": "Email validation, list cleaning, bounce prevention",
"input": "Email addresses or bulk lists",
"output": "Validation status, risk score, catch-all detection",
"opsec": "passive",
"opsecNote": "Server-based verification without sending emails.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "VerifyEmail (R$)",
"type": "url",
"url": "https://emailable.com/",
"description": "Email verification service offering both free and premium tiers for validating email addresses and maintaining clean mailing lists.",
"status": "live",
"pricing": "freemium",
"bestFor": "Email validation, list cleaning",
"input": "Email addresses",
"output": "Validation status, deliverability info",
"opsec": "passive",
"opsecNote": "Passive email verification without sending messages.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Breach Data",
"type": "folder",
"children": [
{
"name": "Have I been pwned?",
"type": "url",
"url": "https://haveibeenpwned.com/",
"description": "Database of breached credentials and email addresses from known data breaches.",
"status": "live",
"pricing": "freemium",
"bestFor": "Breach detection, credential exposure checks",
"input": "Email address, phone number, password hash",
"output": "Breach names, breach dates, exposed data types",
"opsec": "passive",
"opsecNote": "Queries breach database via API. Target is not notified of lookups.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Hudson Rock",
"type": "url",
"url": "https://www.hudsonrock.com/threat-intelligence-cybercrime-tools",
"description": "Infostealer threat intelligence platform that searches a database of compromised devices and stolen credentials to identify if emails have been exposed via malware infections.",
"status": "live",
"pricing": "freemium",
"bestFor": "Infostealer detection, breach assessment, device compromise verification",
"input": "Email address, domain, username, or IP",
"output": "Infostealer hits, compromised account data, breach details",
"opsec": "passive",
"opsecNote": "Queries public infostealer database compiled from malware captures.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "DeHashed (R)",
"type": "url",
"url": "https://dehashed.com/",
"description": "Modern breach search engine indexing historical breach data over a decade old, enabling searches by email, username, password, domain, phone, and IP address.",
"status": "live",
"pricing": "freemium",
"bestFor": "Breach searching, credential lookup, historical breach analysis",
"input": "Email, username, password, domain, phone, or IP",
"output": "Breach records, exposed credentials, breach dates",
"opsec": "passive",
"opsecNote": "Searches aggregated public breach databases.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Vigilante.pw",
"type": "url",
"url": "https://www.vigilante.pw/",
"description": "Breach database directory and search platform raising awareness of data breaches by aggregating publicly leaked database information and breach details.",
"status": "live",
"pricing": "free",
"bestFor": "Breach research, public breach database navigation",
"input": "Email, username, domain",
"output": "Breach records, exposed data information",
"opsec": "passive",
"opsecNote": "Aggregates and indexes publicly disclosed breach data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Mail Blacklists",
"type": "folder",
"children": [
{
"name": "MxToolbox",
"type": "url",
"url": "https://mxtoolbox.com/",
"description": "Email deliverability diagnostics tool that checks MX records, SPF, DKIM, DMARC configuration, and server health to prevent email delivery issues.",
"status": "live",
"pricing": "free",
"bestFor": "Email server diagnostics, deliverability testing, DNS validation",
"input": "Domain name or email address",
"output": "MX records, SPF/DKIM/DMARC status, blacklist info",
"opsec": "passive",
"opsecNote": "Public DNS lookups and SMTP diagnostics without target alerting.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
}
]
},
{
"name": "Domain Name",
"type": "folder",
"children": [
{
"name": "Whois Records",
"type": "folder",
"children": [
{
"name": "Domain Dossier",
"type": "url",
"url": "https://centralops.net/co/DomainDossier.aspx",
"description": "Free web-based tool that aggregates WHOIS, DNS, and network information for domains and IP addresses into a single consolidated report.",
"status": "live",
"pricing": "free",
"bestFor": "Quick domain and IP reconnaissance with DNS and WHOIS data",
"input": "Domain name or IP address",
"output": "WHOIS records, DNS records, IP information, registration details",
"opsec": "passive",
"opsecNote": "Queries public WHOIS and DNS records; does not contact the target domain directly.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "domainIQ",
"type": "url",
"url": "https://www.domainiq.com/",
"description": "Comprehensive domain intelligence platform offering reverse lookups, ownership history, and related domain discovery. Trusted by government agencies, domain investors, and legal firms.",
"status": "live",
"pricing": "freemium",
"bestFor": "Domain ownership history, reverse analytics lookup, competitor domain research",
"input": "Domain name",
"output": "Domain owner information, historical ownership, similar domains, analytics data, reverse MX/IP/DNS lookups",
"opsec": "passive",
"opsecNote": "Queries aggregated domain data; does not probe the target directly.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "DomainTools Whois",
"type": "url",
"url": "https://whois.domaintools.com/",
"description": "Enterprise-grade WHOIS API with decades of historical domain data and rapid query response. The industry leader for threat intelligence and domain tracking.",
"status": "live",
"pricing": "paid",
"bestFor": "Historical WHOIS research, threat actor tracking, enterprise domain intelligence",
"input": "Domain name or IP address",
"output": "Current and historical WHOIS records, registrant details, hosting history",
"opsec": "passive",
"opsecNote": "Queries cached WHOIS data; no direct contact with target infrastructure.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "SWITCH Internet Domains Whois (.ch)",
"type": "url",
"url": "https://www.nic.ch/whois/",
"description": "Official Swiss domain registry WHOIS lookup service operated by SWITCH for .ch and .li country-code domains. Public registry with all owner contact details visible.",
"status": "live",
"pricing": "free",
"bestFor": ".ch and .li domain ownership research, Swiss Internet infrastructure lookup",
"input": ".ch or .li domain name",
"output": "Registrant contact details, creation/expiry dates, nameservers, registration status",
"opsec": "passive",
"opsecNote": "Queries the official SWITCH registry database; does not probe the target.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Whoisology",
"type": "url",
"url": "https://whoisology.com/#advanced",
"description": "Searchable archive of billions of current and historical domain WHOIS records with cross-referencing capabilities. Designed for InfoSec, legal, and research professionals.",
"status": "live",
"pricing": "freemium",
"bestFor": "Historical domain ownership, reverse WHOIS lookups, domain connection tracking",
"input": "Domain name, email, registrant name",
"output": "Historical WHOIS records, ownership changes, registrant information across domains",
"opsec": "passive",
"opsecNote": "Accesses archived WHOIS data; no direct probing of target domains.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Whois ARIN",
"type": "url",
"url": "https://whois.arin.net/ui/advanced.jsp",
"description": "Official American Registry for Internet Numbers WHOIS and RDAP lookup service for IPv4, IPv6, ASNs, and organizations in the North American region.",
"status": "live",
"pricing": "free",
"bestFor": "IP address and ASN registration data, North American internet resource tracking",
"input": "IP address, ASN, organization name, contact information",
"output": "IP ownership, organization details, Points of Contact (POCs), ASN information",
"opsec": "passive",
"opsecNote": "Queries official ARIN database; does not contact targets or perform active scanning.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "DNSstuff",
"type": "url",
"url": "https://www.dnsstuff.com/freetools",
"description": "Suite of free DNS and network tools providing lookups, DNS checks, and WHOIS information for domain reconnaissance.",
"status": "live",
"pricing": "free",
"bestFor": "Quick DNS and WHOIS lookups, network diagnostics",
"input": "Domain name, IP address",
"output": "DNS records, WHOIS data, DNS propagation checks, nameserver information",
"opsec": "passive",
"opsecNote": "Queries public DNS and WHOIS servers; does not probe target infrastructure.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Robtex (R)",
"type": "url",
"url": "https://robtex.com/",
"description": "Comprehensive free DNS lookup and network intelligence tool with decade-spanning database containing billions of documents of internet data. Useful for forensics and threat actor tracking.",
"status": "live",
"pricing": "free",
"bestFor": "DNS reconnaissance, IP and domain relationship mapping, historical internet data lookup",
"input": "Domain name, IP address, hostname, autonomous system",
"output": "DNS records, IP information, SEO data, reputation scores, historical relationships",
"opsec": "passive",
"opsecNote": "Searches historical and cached DNS data; does not perform active probing.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Domaincrawler.com",
"type": "url",
"url": "https://domaincrawler.com/",
"description": "Enterprise-grade domain database covering 1.4+ billion registered and unregistered domains with 80+ billion historical records since 2008. Used by brand protection and OSINT professionals.",
"status": "live",
"pricing": "paid",
"bestFor": "Large-scale domain research, brand protection monitoring, zone file analysis, market intelligence",
"input": "Domain name, DNS data, technology stack filters",
"output": "Domain metadata, DNS configuration, SSL certificates, technology stack, ownership connections, historical data",
"opsec": "passive",
"opsecNote": "Queries aggregated domain database updated every 7 days; no active scanning of targets.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "MarkMonitor Whois Search",
"type": "url",
"url": "https://domains.markmonitor.com/whois/",
"description": "ICANN-accredited registrar and brand protection company offering WHOIS lookup and domain management services. Exclusively serves corporate clients including major global brands.",
"status": "live",
"pricing": "paid",
"bestFor": "Corporate domain portfolio management, brand protection, trademark monitoring",
"input": "Domain name",
"output": "WHOIS records, registration data, brand portfolio information",
"opsec": "passive",
"opsecNote": "Accesses standard WHOIS records through registered domain lookups; no direct target probing.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "easyWhois",
"type": "url",
"url": "https://www.easywhois.com/",
"description": "Free domain WHOIS lookup and DNS tools service. Now operated under the DomainHelp platform, providing domain registration information and DNS lookups.",
"status": "live",
"pricing": "free",
"bestFor": "Quick domain WHOIS lookups and DNS checks",
"input": "Domain name",
"output": "WHOIS records, DNS information, registrant details, nameservers",
"opsec": "passive",
"opsecNote": "Queries public WHOIS and DNS data; does not contact the target domain.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Website Informer",
"type": "url",
"url": "https://website.informer.com/",
"description": "Free domain and website information aggregator providing visitor statistics, safety status, Alexa rankings, ownership data, and technical details about websites.",
"status": "live",
"pricing": "free",
"bestFor": "Website profiling, ownership verification, traffic estimation, technical stack discovery",
"input": "Domain name or URL",
"output": "Visitor statistics, safety ratings, domain owner information, technology stack, Alexa rank, historical snapshots",
"opsec": "passive",
"opsecNote": "Aggregates public website data and statistics; does not contact the target infrastructure.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Who.is",
"type": "url",
"url": "https://who.is/",
"description": "Comprehensive WHOIS and RDAP lookup service with large database of domain registration, DNS records, and IP information. Provides both current and historical data.",
"status": "live",
"pricing": "free",
"bestFor": "Domain registration research, WHOIS lookups, RDAP queries, IP tracking",
"input": "Domain name or IP address",
"output": "WHOIS records, RDAP data, DNS records, nameservers, registrant information",
"opsec": "passive",
"opsecNote": "Queries public WHOIS and RDAP databases; does not perform active scanning.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Whois AMPed",
"type": "url",
"url": "https://whoisamped.com/",
"description": "Mobile-optimized WHOIS lookup service accessible via web interface for domain registration information and WHOIS queries.",
"status": "live",
"pricing": "free",
"bestFor": "Mobile-friendly WHOIS lookups, quick domain information retrieval",
"input": "Domain name",
"output": "WHOIS records, domain registration information, registrant details",
"opsec": "passive",
"opsecNote": "Accesses public WHOIS data; no target probing or direct contact.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "ViewDNS.info",
"type": "url",
"url": "https://viewdns.info/",
"description": "Comprehensive DNS lookup and WHOIS service providing detailed DNS records, reverse IP lookups, reverse WHOIS searches, and API access for automated queries.",
"status": "live",
"pricing": "free",
"bestFor": "DNS reconnaissance, reverse IP and reverse WHOIS lookups, historical DNS tracking",
"input": "Domain name, IP address, registrant name/email, nameserver",
"output": "DNS records, WHOIS information, reverse lookups, IP hosting, historical DNS changes",
"opsec": "passive",
"opsecNote": "Queries public DNS and WHOIS data; does not perform active probing of targets.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Daily DNS Changes",
"type": "url",
"url": "https://dailychanges.domaintools.com/",
"description": "DomainTools service monitoring DNS record changes across domains, detecting newly registered subdomains and tracking DNS infrastructure modifications.",
"status": "live",
"pricing": "freemium",
"bestFor": "DNS change detection, subdomain discovery, infrastructure monitoring",
"input": "Domain name",
"output": "New DNS records, nameserver changes, subdomain discoveries, historical DNS changes",
"opsec": "passive",
"opsecNote": "Monitors public DNS records for changes; no active scanning or direct contact.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "IP2WHOIS",
"type": "url",
"url": "https://www.ip2whois.com",
"description": "Free WHOIS lookup service for domain names and IP addresses, providing registration details, registrant information, location data, and API access.",
"status": "live",
"pricing": "free",
"bestFor": "Domain and IP WHOIS lookups, registrant research",
"input": "Domain name or IP address",
"output": "WHOIS records, registrant details, location information, registration dates",
"opsec": "passive",
"opsecNote": "Queries public WHOIS databases; does not contact the target.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Netlas.io",
"type": "url",
"url": "https://app.netlas.io/whois_domains/",
"description": "Comprehensive internet-wide scanning and OSINT platform providing DNS, WHOIS, SSL, and network reconnaissance with attack surface discovery capabilities.",
"status": "live",
"pricing": "freemium",
"bestFor": "Internet reconnaissance, DNS and WHOIS lookups, attack surface discovery, vulnerability research",
"input": "Domain name, IP address, ASN, DNS records",
"output": "DNS records, WHOIS data, open ports, SSL certificates, service information, historical data",
"opsec": "passive",
"opsecNote": "Queries cached internet scanning data; free tier available with 50 daily requests.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Subdomains",
"type": "folder",
"children": [
{
"name": "SynapsInt",
"type": "url",
"url": "https://synapsint.com",
"description": "Unified web-based OSINT research platform supporting domain, IP, SSL, analytics, email, phone, and social media lookups with subdomain enumeration.",
"status": "live",
"pricing": "free",
"bestFor": "Unified OSINT research, subdomain discovery, multi-vector intelligence gathering",
"input": "Domain, IP, email, phone, username, CVE ID",
"output": "Subdomains, DNS records, WHOIS data, open ports, vulnerabilities, social media accounts, historical data",
"opsec": "passive",
"opsecNote": "Aggregates publicly available information from multiple sources; no direct target contact.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Aquatone (T)",
"type": "url",
"url": "https://github.com/michenriksen/aquatone",
"description": "Go-based tool for domain reconnaissance that automates subdomain discovery, HTTP service scanning, screenshot capture, and visual HTML report generation for attack surface analysis.",
"status": "live",
"pricing": "free",
"bestFor": "Visual subdomain reconnaissance, HTTP service discovery, attack surface mapping",
"input": "Domain name",
"output": "Discovered subdomains, open ports, HTTP screenshots, consolidated reconnaissance report",
"opsec": "active",
"opsecNote": "Makes HTTP requests to discovered hosts to capture screenshots and fingerprint services; supports integration with passive enumeration tools.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "FindSubDomains",
"type": "url",
"url": "https://findsubdomains.com/",
"description": "Free web-based automated subdomain discovery tool with filtering and analysis capabilities, showing organization names, relationships, and top subdomain statistics.",
"status": "live",
"pricing": "free",
"bestFor": "Automated subdomain enumeration, organization name filtering, subdomain statistics",
"input": "Domain name or keyword",
"output": "Discovered subdomains, organization associations, popularity metrics, filtering options",
"opsec": "passive",
"opsecNote": "Uses passive DNS and search-based methods for subdomain discovery; no active probing.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Google Subdomains (D)",
"type": "url",
"url": "https://www.google.com/?gws_rd=ssl#q=site:%3Cdomain.com%3E",
"description": "Google Dork technique using the 'site:' operator to enumerate subdomains of a target domain via Google's search index.",
"status": "live",
"pricing": "free",
"bestFor": "Indexed subdomain discovery, publicly visible subdomain enumeration",
"input": "Domain name (as Google Dork syntax: site:domain.com)",
"output": "Indexed subdomains and pages from Google search results",
"opsec": "passive",
"opsecNote": "Uses Google's search index; no direct contact with the target domain.",
"localInstall": false,
"googleDork": true,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Recon-ng (T)",
"type": "url",
"url": "https://github.com/lanmaster53/recon-ng",
"description": "Full-featured web reconnaissance framework with independent modules for data gathering.",
"status": "live",
"pricing": "free",
"bestFor": "Modular web recon, API-driven data collection",
"input": "Domain, company name, email, IP",
"output": "Contacts, hosts, credentials, ports via module-specific results",
"opsec": "passive",
"opsecNote": "Queries third-party APIs and data sources. Does not probe the target unless specific modules are configured to do so.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "XRay",
"type": "url",
"url": "https://github.com/evilsocket/xray",
"description": "Go-based network reconnaissance tool that automates subdomain enumeration via DNS brute force, integrates Shodan for port discovery, and gathers banner information with web UI visualization.",
"status": "live",
"pricing": "free",
"bestFor": "Automated subdomain discovery with banner grabbing, open port enumeration, Shodan integration",
"input": "Domain name, subdomain wordlist, Shodan API key (optional), ViewDNS API key (optional)",
"output": "Enumerated subdomains, open ports, banner information, historical data, web-based results UI",
"opsec": "active",
"opsecNote": "Performs DNS brute force for subdomain enumeration and makes banner grabbing connections to discovered services.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "DNS Recon (T)",
"type": "url",
"url": "https://github.com/darkoperator/dnsrecon",
"description": "Python-based DNS enumeration script supporting zone transfers, standard record enumeration, TLD expansion, DNS brute force, and PTR lookups.",
"status": "live",
"pricing": "free",
"bestFor": "DNS enumeration, zone transfer testing, subdomain brute forcing, DNS security assessment",
"input": "Domain name, IP range/CIDR, subdomain wordlist, DNS server address",
"output": "NS/SOA/MX/A records, discovered subdomains, zone transfer results, PTR records, wildcard resolution status",
"opsec": "active",
"opsecNote": "Performs active DNS queries and brute force attempts; does not probe target services directly but makes repeated DNS requests.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Gobuster (T)",
"type": "url",
"url": "https://github.com/OJ/gobuster"
},
{
"name": "Fierce Domain Scanner (T)",
"type": "url",
"url": "https://github.com/davidpepper/fierce-domain-scanner"
},
{
"name": "Bluto (T)",
"type": "url",
"url": "https://github.com/darryllane/Bluto"
},
{
"name": "OWASP Maryam (T)",
"type": "url",
"url": "https://github.com/saeeddhqan/Maryam"
},
{
"name": "theHarvester (T)",
"type": "url",
"url": "https://github.com/laramies/theHarvester",
"description": "Command-line tool for gathering emails, subdomains, IPs, and URLs from public sources.",
"status": "live",
"pricing": "free",
"bestFor": "Email harvesting, subdomain enumeration, passive recon",
"input": "Domain name",
"output": "Email addresses, subdomains, IPs, URLs",
"opsec": "passive",
"opsecNote": "Queries third-party search engines and APIs. Does not contact the target directly.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Pentest-tools.com Subdomains",
"type": "url",
"url": "https://pentest-tools.com/information-gathering/find-subdomains-of-domain"
},
{
"name": "SecLists DNS Subdomains (T)",
"type": "url",
"url": "https://github.com/danielmiessler/SecLists/tree/master/Discovery/DNS"
},
{
"name": "dnspop (T)",
"type": "url",
"url": "https://github.com/bitquark/dnspop"
},
{
"name": "gdns (T)",
"type": "url",
"url": "https://github.com/hrbrmstr/gdns"
},
{
"name": "Sublist3r",
"type": "url",
"url": "https://github.com/aboul3la/Sublist3r"
},
{
"name": "AltDNS (T)",
"type": "url",
"url": "https://github.com/infosec-au/altdns"
},
{
"name": "Netlas.io",
"type": "url",
"url": "https://app.netlas.io/domains/",
"description": "Comprehensive internet-wide scanning and OSINT platform providing DNS, WHOIS, SSL, and network reconnaissance with attack surface discovery capabilities.",
"status": "live",
"pricing": "freemium",
"bestFor": "Internet reconnaissance, DNS and WHOIS lookups, attack surface discovery, vulnerability research",
"input": "Domain name, IP address, ASN, DNS records",
"output": "DNS records, WHOIS data, open ports, SSL certificates, service information, historical data",
"opsec": "passive",
"opsecNote": "Queries cached internet scanning data; free tier available with 50 daily requests.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Discovery",
"type": "folder",
"children": [
{
"name": "Shodan",
"type": "url",
"url": "https://www.shodan.io/",
"description": "Search engine for internet-connected devices. Find open ports, services, and vulnerabilities across the public internet.",
"status": "live",
"pricing": "freemium",
"bestFor": "Port scanning, banner grabbing, IoT discovery",
"input": "IP address, domain",
"output": "Open ports, services, banners, CVEs",
"opsec": "passive",
"opsecNote": "Queries cached scan data. Does not directly probe the target.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Netlas.io",
"type": "url",
"url": "https://app.netlas.io/",
"description": "Comprehensive internet-wide scanning and OSINT platform providing DNS, WHOIS, SSL, and network reconnaissance with attack surface discovery capabilities.",
"status": "live",
"pricing": "freemium",
"bestFor": "Internet reconnaissance, DNS and WHOIS lookups, attack surface discovery, vulnerability research",
"input": "Domain name, IP address, ASN, DNS records",
"output": "DNS records, WHOIS data, open ports, SSL certificates, service information, historical data",
"opsec": "passive",
"opsecNote": "Queries cached internet scanning data; free tier available with 50 daily requests.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Kraken (T)",
"type": "url",
"url": "https://github.com/Sw4mpf0x/Kraken"
},
{
"name": "Online Nikto scanner",
"type": "url",
"url": "https://nikto.online/"
},
{
"name": "urlscan.io",
"type": "url",
"url": "https://urlscan.io/search/#*"
},
{
"name": "Daily DNS Changes",
"type": "url",
"url": "https://dailychanges.domaintools.com/",
"description": "DomainTools service monitoring DNS record changes across domains, detecting newly registered subdomains and tracking DNS infrastructure modifications.",
"status": "live",
"pricing": "freemium",
"bestFor": "DNS change detection, subdomain discovery, infrastructure monitoring",
"input": "Domain name",
"output": "New DNS records, nameserver changes, subdomain discoveries, historical DNS changes",
"opsec": "passive",
"opsecNote": "Monitors public DNS records for changes; no active scanning or direct contact.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Redirect Detective",
"type": "url",
"url": "https://redirectdetective.com/"
},
{
"name": "Sitediff (T)",
"type": "url",
"url": "https://github.com/digininja/sitediff"
},
{
"name": "BuiltWith",
"type": "url",
"url": "https://builtwith.com/",
"description": "Technology profiler that identifies the tech stack, analytics, and frameworks used by websites.",
"status": "live",
"pricing": "freemium",
"bestFor": "Technology stack identification, competitor analysis",
"input": "Domain or URL",
"output": "Technology list, analytics IDs, hosting info, historical tech changes",
"opsec": "passive",
"opsecNote": "Queries cached technology profiles. Does not contact the target.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Wappalyzer",
"type": "url",
"url": "https://www.wappalyzer.com/"
},
{
"name": "AnalyzeID",
"type": "url",
"url": "https://analyzeid.com/"
},
{
"name": "Criminal IP Search",
"type": "url",
"url": "https://www.criminalip.io/"
},
{
"name": "urlDNA",
"type": "url",
"url": "https://urldna.io"
},
{
"name": "ZoomEye.ai",
"type": "url",
"url": "https://www.zoomeye.org/"
}
]
},
{
"name": "Certificate Search",
"type": "folder",
"children": [
{
"name": "Shodan",
"type": "url",
"url": "https://www.shodan.io/"
},
{
"name": "Google's Certificate Transparency",
"type": "url",
"url": "https://www.certificate-transparency.org/known-logs"
},
{
"name": "Spyse",
"type": "url",
"url": "https://spyse.com/search/certificate"
},
{
"name": "Censys",
"type": "url",
"url": "https://censys.io/",
"description": "Internet-wide scanner and search engine for hosts, certificates, and services.",
"status": "live",
"pricing": "freemium",
"bestFor": "Certificate discovery, host enumeration, exposure monitoring",
"input": "Domain, IP, certificate fingerprint, search query",
"output": "Host details, open ports, TLS certificates, service banners",
"opsec": "passive",
"opsecNote": "Queries pre-scanned data. Does not probe the target directly.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "crt.sh - Certificate Search",
"type": "url",
"url": "https://crt.sh/?"
},
{
"name": "CertKit - Certificate Transparency Log Search",
"type": "url",
"url": "https://www.certkit.io/tools/ct-logs/"
},
{
"name": "certgraph (T)",
"type": "url",
"url": "https://github.com/lanrat/certgraph"
},
{
"name": "Netlas.io",
"type": "url",
"url": "https://app.netlas.io/certs/",
"description": "Comprehensive internet-wide scanning and OSINT platform providing DNS, WHOIS, SSL, and network reconnaissance with attack surface discovery capabilities.",
"status": "live",
"pricing": "freemium",
"bestFor": "Internet reconnaissance, DNS and WHOIS lookups, attack surface discovery, vulnerability research",
"input": "Domain name, IP address, ASN, DNS records",
"output": "DNS records, WHOIS data, open ports, SSL certificates, service information, historical data",
"opsec": "passive",
"opsecNote": "Queries cached internet scanning data; free tier available with 50 daily requests.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "PassiveDNS",
"type": "folder",
"children": [
{
"name": "Mnemonic",
"type": "url",
"url": "https://passivedns.mnemonic.no/"
},
{
"name": "DNS Dumpster",
"type": "url",
"url": "https://dnsdumpster.com/"
},
{
"name": "Deteque (R)",
"type": "url",
"url": "https://www.deteque.com/"
}
]
},
{
"name": "Reputation",
"type": "folder",
"children": [
{
"name": "UrlQuery.net",
"type": "url",
"url": "https://urlquery.net/"
},
{
"name": "URL Void",
"type": "url",
"url": "https://www.urlvoid.com/"
},
{
"name": "FortiGuard Reputation Service",
"type": "url",
"url": "https://fortiguard.com/iprep"
},
{
"name": "Trend Micro Site Safety Center",
"type": "url",
"url": "https://global.sitesafety.trendmicro.com/"
},
{
"name": "WatchGuard ReputationAuthority",
"type": "url",
"url": "https://www.reputationauthority.org/"
},
{
"name": "Sucuri SiteCheck",
"type": "url",
"url": "https://sitecheck.sucuri.net/"
},
{
"name": "ThreatMiner.org",
"type": "url",
"url": "https://www.threatminer.org/"
},
{
"name": "BlueCoat WebPulse",
"type": "url",
"url": "https://sitereview.bluecoat.com/sitereview.jsp"
},
{
"name": "Zscaler Zulu URL Risk Analyzer",
"type": "url",
"url": "https://zulu.zscaler.com/"
},
{
"name": "Joe Sandbox Url Analyzer",
"type": "url",
"url": "https://www.url-analyzer.net/"
},
{
"name": "Deepviz Domain Search",
"type": "url",
"url": "https://search.deepviz.com/"
},
{
"name": "AVG Threat Labs",
"type": "url",
"url": "https://www.avg.com/en/signal/website-safety"
},
{
"name": "Webroot BrightCloud URL/IP Lookup",
"type": "url",
"url": "https://www.brightcloud.com/tools/url-ip-lookup.php"
},
{
"name": "vURL Online",
"type": "url",
"url": "https://vurldissect.co.uk/"
},
{
"name": "AlienVault Open Threat Exchange",
"type": "url",
"url": "https://otx.alienvault.com/browse/pulses/"
},
{
"name": "Malware Domain List",
"type": "url",
"url": "https://www.malwaredomainlist.com/mdl.php"
},
{
"name": "Web Inspector Online Scan",
"type": "url",
"url": "https://www.webinspector.com/website-malware-scanner/"
},
{
"name": "Google Safe Browsing API",
"type": "url",
"url": "https://developers.google.com/safe-browsing/?csw=1"
},
{
"name": "Cisco Talos",
"type": "url",
"url": "https://talosintelligence.com/"
}
]
},
{
"name": "Domain Blacklists",
"type": "folder",
"children": [
{
"name": "Threatexpert.com Malicious URLs",
"type": "url",
"url": "https://www.networksec.org/grabbho/block.txt"
},
{
"name": "Zeus C2 Tracker",
"type": "url",
"url": "https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist"
},
{
"name": "Malware Domains Blacklist",
"type": "url",
"url": "https://mirror1.malwaredomains.com/files/domains.txt"
},
{
"name": "Blackweb",
"type": "url",
"url": "https://github.com/maravento/blackweb"
},
{
"name": "Critical Stack Intel (R)",
"type": "url",
"url": "https://intel.criticalstack.com/"
},
{
"name": "DNS Sinkhole",
"type": "url",
"url": "https://malc0de.com/bl/"
},
{
"name": "DNS-BH Malware Domain Blocklist",
"type": "url",
"url": "https://www.malwaredomains.com/wordpress/?page_id=66"
},
{
"name": "Malware Domain List",
"type": "url",
"url": "https://www.malwaredomainlist.com/hostslist/hosts.txt"
},
{
"name": "MalwareURL (R)",
"type": "url",
"url": "https://www.malwareurl.com/index.php"
},
{
"name": "scumware.org",
"type": "url",
"url": "https://www.scumware.org/"
},
{
"name": "ZeuS Tracker",
"type": "url",
"url": "https://zeustracker.abuse.ch/blocklist.php"
},
{
"name": "Shadowserver Foundation",
"type": "url",
"url": "https://www.shadowserver.org/"
},
{
"name": "Email Domain Validation",
"type": "url",
"url": "https://www.mailboxvalidator.com/domain"
}
]
},
{
"name": "Typosquatting",
"type": "folder",
"children": [
{
"name": "DNS Twist (T)",
"type": "url",
"url": "https://github.com/elceef/dnstwist"
},
{
"name": "URLCrazy (T)",
"type": "url",
"url": "https://www.morningstarsecurity.com/research/urlcrazy"
},
{
"name": "dnstwister",
"type": "url",
"url": "https://dnstwister.report/"
},
{
"name": "Catphish (T)",
"type": "url",
"url": "https://github.com/ring0lab/catphish"
}
]
},
{
"name": "Analytics",
"type": "folder",
"children": [
{
"name": "BuiltWith",
"type": "url",
"url": "https://builtwith.com/",
"description": "Technology profiler that identifies the tech stack, analytics, and frameworks used by websites.",
"status": "live",
"pricing": "freemium",
"bestFor": "Technology stack identification, competitor analysis",
"input": "Domain or URL",
"output": "Technology list, analytics IDs, hosting info, historical tech changes",
"opsec": "passive",
"opsecNote": "Queries cached technology profiles. Does not contact the target.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "SiteSleuth",
"type": "url",
"url": "https://www.sitesleuth.io/"
},
{
"name": "Wappalyzer (T)",
"type": "url",
"url": "https://www.wappalyzer.com/"
},
{
"name": "SEMrush",
"type": "url",
"url": "https://www.semrush.com/"
},
{
"name": "Moonsearch",
"type": "url",
"url": "https://moonsearch.com/"
},
{
"name": "Ewhois",
"type": "url",
"url": "https://ewhois.com/"
},
{
"name": "StatsCrop",
"type": "url",
"url": "https://www.statscrop.com/"
},
{
"name": "Open Site Explorer",
"type": "url",
"url": "https://moz.com/link-explorer"
},
{
"name": "SpyOnWeb",
"type": "url",
"url": "https://www.spyonweb.com/"
},
{
"name": "Keyword Density",
"type": "url",
"url": "https://tools.seobook.com/general/keyword-density/"
},
{
"name": "Alexa Site Statistics",
"type": "url",
"url": "https://alexa.amazon.com/about"
},
{
"name": "Cisco Umbrella Popularity List",
"type": "url",
"url": "https://s3-us-west-1.amazonaws.com/umbrella-static/index.html"
},
{
"name": "Alexa Top 500 Global Sites",
"type": "url",
"url": "https://alexa.amazon.com/about"
},
{
"name": "Sitedossier",
"type": "url",
"url": "https://www.sitedossier.com/"
},
{
"name": "Visual Site Mapper",
"type": "url",
"url": "https://github.com/alentum/sitemapper-nodejs"
},
{
"name": "ClearWebStats.com",
"type": "url",
"url": "https://www.clearwebstats.com/"
},
{
"name": "PubDB",
"type": "url",
"url": "https://pub-db.com/"
},
{
"name": "SimilarWeb",
"type": "url",
"url": "https://www.similarweb.com/"
},
{
"name": "Siteliner",
"type": "url",
"url": "https://www.siteliner.com/"
},
{
"name": "WhatWeb",
"type": "url",
"url": "https://github.com/urbanadventurer/WhatWeb"
}
]
},
{
"name": "URL Expanders",
"type": "folder",
"children": [
{
"name": "Link Expander",
"type": "url",
"url": "https://www.linkexpander.com/"
},
{
"name": "CheckShortURL",
"type": "url",
"url": "https://checkshorturl.com/"
},
{
"name": "URL Expander",
"type": "url",
"url": "https://urlex.org/"
},
{
"name": "Where Does This Link Go?",
"type": "url",
"url": "https://wheregoes.com/"
},
{
"name": "KnowURL",
"type": "url",
"url": "https://www.knowurl.com/"
}
]
},
{
"name": "Change Detection",
"type": "folder",
"children": [
{
"name": "VisualPing",
"type": "url",
"url": "https://visualping.io:443/"
},
{
"name": "Change Detection",
"type": "url",
"url": "https://visualping.io/"
},
{
"name": "Check site availability Online",
"type": "url",
"url": "https://upcheck.online/"
},
{
"name": "Follow That Page",
"type": "url",
"url": "https://www.followthatpage.com/",
"description": "Website monitoring service that checks pages for changes and sends alerts when tracked content updates. Supports keyword-based notifications for focused monitoring.",
"status": "live",
"pricing": "freemium",
"bestFor": "Tracking updates on specific web pages by keyword",
"input": "Target page URL and optional keyword filters",
"output": "Email alerts showing detected page changes",
"opsec": "passive",
"opsecNote": "Monitoring requests are performed by Follow That Page infrastructure rather than directly from the investigator's workstation.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Urlwatch",
"type": "url",
"url": "https://github.com/thp/urlwatch",
"description": "Open-source Python CLI tool for monitoring webpages and feeds for changes. Supports multiple filters, reporters, and scheduled checks via local automation.",
"status": "live",
"pricing": "free",
"bestFor": "Self-hosted web page change monitoring automation",
"input": "URLs, feeds, and local watch configuration",
"output": "Diffs and alerts through email, console, or integrations",
"opsec": "passive",
"opsecNote": "Can run locally or on controlled infrastructure, allowing investigators to manage request origin and monitoring cadence.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "WatchThatPage",
"type": "url",
"url": "https://watchthatpage.com/",
"description": "Web-based page monitoring platform that detects content changes and notifies users by email. Useful for tracking updates on websites without RSS feeds.",
"status": "live",
"pricing": "freemium",
"bestFor": "Monitoring static web pages for updates over time",
"input": "Web page URL and watch configuration",
"output": "Email notifications and change history snapshots",
"opsec": "passive",
"opsecNote": "Page checks originate from WatchThatPage systems instead of directly from the investigator.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "ChangeDetect",
"type": "url",
"url": "https://changedetection.io/",
"description": "Open-source website change detection platform with both self-hosted and hosted options. Supports visual diffs, notifications, and automation workflows.",
"status": "live",
"pricing": "freemium",
"bestFor": "Flexible page change monitoring with self-hosted control",
"input": "Target URL and optional monitoring rules/selectors",
"output": "Change alerts, snapshots, and webhook/integration notifications",
"opsec": "passive",
"opsecNote": "When self-hosted, investigators control infrastructure and request origin; hosted mode proxies checks through provider systems.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Social Analysis",
"type": "folder",
"children": [
{
"name": "Google Trends",
"type": "url",
"url": "https://trends.google.com/trends/",
"description": "Google analytics interface for comparing search interest trends across terms, regions, and time windows. Includes related queries and topic momentum insights.",
"status": "live",
"pricing": "free",
"bestFor": "Tracking public interest shifts in terms and topics",
"input": "Keywords, geography, category, and date range filters",
"output": "Relative search-interest graphs and related-query suggestions",
"opsec": "passive",
"opsecNote": "Queries are conducted within Google's public trends interface and do not directly interact with investigation targets.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "DNSSEC",
"type": "folder",
"children": [
{
"name": "DNSSEC Analyzer",
"type": "url",
"url": "https://dnssec-analyzer.verisignlabs.com/"
},
{
"name": "DNSViz",
"type": "url",
"url": "https://dnsviz.net/",
"description": "DNS and DNSSEC analysis platform that visualizes delegation chains and cryptographic validation paths. Helps diagnose trust and signing issues in domain configurations.",
"status": "live",
"pricing": "free",
"bestFor": "Visual DNSSEC validation and DNS misconfiguration analysis",
"input": "Domain name",
"output": "DNS resolution graphs, DNSSEC status, and validation diagnostics",
"opsec": "passive",
"opsecNote": "Analysis runs against public DNS infrastructure without direct interaction with domain owners.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Vulnerabilities",
"type": "folder",
"children": [
{
"name": "Scanners",
"type": "folder",
"children": [
{
"name": "Sn1per (T)",
"type": "url",
"url": "https://github.com/1N3/Sn1per",
"description": "Automated reconnaissance and penetration testing framework that orchestrates vulnerability scans and attack-surface discovery workflows.",
"status": "live",
"pricing": "freemium",
"bestFor": "Automated offensive security reconnaissance pipelines",
"input": "Target domains, hosts, ranges, or web applications",
"output": "Consolidated scan findings, vulnerabilities, and recon artifacts",
"opsec": "active",
"opsecNote": "Directly probes target infrastructure and can generate detectable scanning traffic.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Online Nikto scanner",
"type": "url",
"url": "https://nikto.online/",
"description": "Web-based interface for running Nikto vulnerability checks against web servers. Provides quick external testing without local deployment.",
"status": "live",
"pricing": "free",
"bestFor": "Quick browser-based web server vulnerability scanning",
"input": "Target website URL or host",
"output": "Nikto scan report of detected web server issues",
"opsec": "active",
"opsecNote": "Initiates direct security probing of target web servers and is likely to be logged by defenders.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "WDES - Web Data Exposure Scanner (T)",
"type": "url",
"url": "https://github.com/eduardoit/web-data-exposure-scanner"
}
]
},
{
"name": "Disclosure Sites",
"type": "folder",
"children": [
{
"name": "Zone-H.org",
"type": "url",
"url": "https://zone-h.org/archive",
"description": "Archive of reported website defacements and related incident metadata maintained by the Zone-H community.",
"status": "live",
"pricing": "free",
"bestFor": "Historical tracking of website defacement incidents",
"input": "Search terms, domains, or browsing archive filters",
"output": "Defacement records with timestamps and mirrored evidence",
"opsec": "passive",
"opsecNote": "Uses a third-party archive and does not require direct interaction with target infrastructure.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "RobotsDisallowed",
"type": "url",
"url": "https://github.com/danielmiessler/RobotsDisallowed",
"description": "Curated wordlist derived from robots.txt disallow paths, used for discovery and content enumeration in security testing.",
"status": "live",
"pricing": "free",
"bestFor": "Directory and content discovery wordlist generation",
"input": "Wordlist consumption by scanners/fuzzers",
"output": "Path candidates likely to expose sensitive or hidden content",
"opsec": "passive",
"opsecNote": "Repository usage is passive; OPSEC risk comes from downstream active scanning tools that consume the list.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Tools",
"type": "folder",
"children": [
{
"name": "Belati (T)",
"type": "url",
"url": "https://github.com/aancw/Belati",
"description": "Python OSINT framework that aggregates data from multiple online sources and automates collection workflows for investigations.",
"status": "live",
"pricing": "free",
"bestFor": "CLI-based multi-source OSINT collection automation",
"input": "Investigation keywords, handles, domains, or entity identifiers",
"output": "Collected artifacts from integrated OSINT data sources",
"opsec": "passive",
"opsecNote": "Collection relies on public-source queries; risk depends on enabled modules and target-facing lookups.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Burp Suite (T)",
"type": "url",
"url": "https://portswigger.net/burp",
"description": "Web security testing suite for intercepting, manipulating, and scanning HTTP(S) traffic in web application assessments.",
"status": "live",
"pricing": "freemium",
"bestFor": "Manual and automated web application security testing",
"input": "Target web application traffic and scan targets",
"output": "Intercepted requests, vulnerability findings, and test artifacts",
"opsec": "active",
"opsecNote": "Active testing traffic is sent to targets and can trigger alerts or defensive controls.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "EyeWitness (T)",
"type": "url",
"url": "https://github.com/ChrisTruncer/EyeWitness",
"description": "Reconnaissance tool that captures screenshots of web services and helps identify technologies and exposed login interfaces at scale.",
"status": "live",
"pricing": "free",
"bestFor": "Visual triage of large target lists and exposed services",
"input": "List of URLs, hosts, or network service endpoints",
"output": "Screenshots, service metadata, and summary HTML reports",
"opsec": "passive",
"opsecNote": "Primarily collects presentation-layer snapshots; network requests are still sent to targets but with lower interaction depth than exploit scans.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Hunting-New-Registered-Domains (T)",
"type": "url",
"url": "https://github.com/gfek/Hunting-New-Registered-Domains",
"description": "OSINT workflow and scripts focused on identifying newly registered domains likely associated with phishing and brand abuse.",
"status": "live",
"pricing": "free",
"bestFor": "Detecting suspicious newly registered domains for threat hunting",
"input": "Keywords, domain feeds, and candidate domain lists",
"output": "Prioritized domain candidates for further investigation",
"opsec": "passive",
"opsecNote": "Analysis is based on external data sources and does not require direct target interaction by default.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "International Domain Name Conversion Tool",
"type": "url",
"url": "https://mct.verisign-grs.com/",
"description": "Web utility for converting internationalized domain names between Unicode and Punycode representations.",
"status": "live",
"pricing": "free",
"bestFor": "IDN normalization and Unicode/Punycode translation",
"input": "Domain name in Unicode or Punycode format",
"output": "Converted domain representation in alternate encoding",
"opsec": "passive",
"opsecNote": "Conversion operations are deterministic and do not involve contacting investigation targets.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Online Nikto scanner",
"type": "url",
"url": "https://nikto.online/",
"description": "Browser-based Nikto scanning endpoint for identifying common web server misconfigurations and known weaknesses.",
"status": "live",
"pricing": "free",
"bestFor": "Fast external vulnerability checks against web targets",
"input": "Website URL or host target",
"output": "Web vulnerability scan results and issue summary",
"opsec": "active",
"opsecNote": "Performs active probing against target systems that may be detected and logged.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Report Malicious Sites",
"type": "folder",
"children": [
{
"name": "Microsoft",
"type": "url",
"url": "https://www.microsoft.com/en-us/wdsi/support/report-unsafe-site-guest"
},
{
"name": "Google",
"type": "url",
"url": "https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en"
}
]
}
]
},
{
"name": "Cloud Infrastructure",
"type": "folder",
"children": [
{
"name": "AWS Enumeration",
"type": "folder",
"children": [
{
"name": "cloud_enum (T)",
"type": "url",
"url": "https://github.com/initstring/cloud_enum"
},
{
"name": "AWSBucketDump (T)",
"type": "url",
"url": "https://github.com/jordanpotti/AWSBucketDump"
},
{
"name": "Subfinder (T)",
"type": "url",
"url": "https://github.com/projectdiscovery/subfinder"
}
]
},
{
"name": "Azure/GCP Discovery",
"type": "folder",
"children": [
{
"name": "GCPBucketBrute (T)",
"type": "url",
"url": "https://github.com/RhinoSecurityLabs/GCPBucketBrute"
},
{
"name": "AADInternals (T)",
"type": "url",
"url": "https://github.com/Gerenios/AADInternals"
},
{
"name": "ROADtools (T)",
"type": "url",
"url": "https://github.com/dirkjanm/roadtools"
},
{
"name": "MicroBurst (T)",
"type": "url",
"url": "https://github.com/NetSPI/MicroBurst"
},
{
"name": "Stormspotter (T)",
"type": "url",
"url": "https://github.com/Azure/Stormspotter"
}
]
},
{
"name": "S3/Blob Storage",
"type": "folder",
"children": [
{
"name": "Public Buckets",
"type": "url",
"url": "https://buckets.grayhatwarfare.com/"
},
{
"name": "goblob (T)",
"type": "url",
"url": "https://github.com/Macmod/goblob"
},
{
"name": "S3Scanner (T)",
"type": "url",
"url": "https://github.com/sa7mon/s3scanner"
},
{
"name": "BucketLoot (T)",
"type": "url",
"url": "https://github.com/redhuntlabs/BucketLoot"
},
{
"name": "lazys3 (T)",
"type": "url",
"url": "https://github.com/nahamsec/lazys3"
}
]
},
{
"name": "Cloud Configuration Analysis",
"type": "folder",
"children": [
{
"name": "Prowler (T)",
"type": "url",
"url": "https://github.com/prowler-cloud/prowler"
},
{
"name": "ScoutSuite (T)",
"type": "url",
"url": "https://github.com/nccgroup/ScoutSuite"
},
{
"name": "Cloud Custodian (T)",
"type": "url",
"url": "https://github.com/cloud-custodian/cloud-custodian"
},
{
"name": "Checkov (T)",
"type": "url",
"url": "https://github.com/bridgecrewio/checkov"
},
{
"name": "Steampipe (T)",
"type": "url",
"url": "https://github.com/turbot/steampipe"
}
]
},
{
"name": "SaaS Footprinting",
"type": "folder",
"children": [
{
"name": "Amass (T)",
"type": "url",
"url": "https://github.com/owasp-amass/amass"
},
{
"name": "Sublist3r (T)",
"type": "url",
"url": "https://github.com/aboul3la/Sublist3r"
},
{
"name": "theHarvester (T)",
"type": "url",
"url": "https://github.com/laramies/theHarvester",
"description": "Command-line tool for gathering emails, subdomains, IPs, and URLs from public sources.",
"status": "live",
"pricing": "free",
"bestFor": "Email harvesting, subdomain enumeration, passive recon",
"input": "Domain name",
"output": "Email addresses, subdomains, IPs, URLs",
"opsec": "passive",
"opsecNote": "Queries third-party search engines and APIs. Does not contact the target directly.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "SpiderFoot (T)",
"type": "url",
"url": "https://github.com/smicallef/spiderfoot",
"description": "Automated OSINT collection tool with 200+ modules for reconnaissance and threat intelligence.",
"status": "live",
"pricing": "free",
"bestFor": "Automated recon, attack surface mapping, threat intelligence",
"input": "Domain, IP, email, name, phone, subnet",
"output": "Correlated intelligence graph, structured findings across modules",
"opsec": "active",
"opsecNote": "Some modules actively probe targets. Review module settings before running.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "dnsrecon (T)",
"type": "url",
"url": "https://github.com/darkoperator/dnsrecon"
}
]
}
]
},
{
"name": "IP & MAC Address",
"type": "folder",
"children": [
{
"name": "Geolocation",
"type": "folder",
"children": [
{
"name": "MaxMind Demo",
"type": "url",
"url": "https://www.maxmind.com/en/home",
"description": "Web-based IP geolocation demo with location, ASN, and network data from MaxMind's GeoIP database.",
"status": "live",
"pricing": "free",
"bestFor": "Quick IP geolocation",
"input": "IP address",
"output": "Country, region, city, coordinates, ASN",
"opsec": "passive",
"opsecNote": "Queries MaxMind; submissions logged.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "IPv4/IPv6 lists by country code",
"type": "url",
"url": "https://github.com/ipverse/",
"description": "Database of IPv4 and IPv6 address ranges organized by country for geographic IP filtering.",
"status": "live",
"pricing": "free",
"bestFor": "Country-level IP enumeration",
"input": "Country code",
"output": "IP ranges in CIDR notation",
"opsec": "passive",
"opsecNote": "Passive lookup of public IP allocations.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "IP2Location.com",
"type": "url",
"url": "https://www.ip2location.com/demo",
"description": "Commercial IP geolocation service with free demo and database. Provides location, proxy detection, and network data.",
"status": "live",
"pricing": "freemium",
"bestFor": "Accurate geolocation with proxy detection",
"input": "IP address",
"output": "Location, ASN, proxy type, VPN status, timezone",
"opsec": "passive",
"opsecNote": "Passive database lookup; free tier limited.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "IP Fingerprints",
"type": "url",
"url": "https://ipfingerprints.com/",
"description": "Reverse IP lookup service identifying all domains hosted on a given IP address.",
"status": "live",
"pricing": "free",
"bestFor": "Find domains on shared hosting",
"input": "IP address",
"output": "List of domains on IP",
"opsec": "passive",
"opsecNote": "Uses public DNS reverse lookup data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "DB-IP",
"type": "url",
"url": "https://db-ip.com/",
"description": "Lightweight IP geolocation API covering 46M+ IPv4/IPv6 blocks with city-level accuracy.",
"status": "live",
"pricing": "freemium",
"bestFor": "Accurate IP geolocation with developer API",
"input": "IP address",
"output": "Location, timezone, ISP, coordinates",
"opsec": "passive",
"opsecNote": "Passive database lookup; free API rate limited.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "IP Location Finder",
"type": "url",
"url": "https://www.iplocation.net/",
"description": "Web-based tool for IP geolocation with maps and detailed location information.",
"status": "live",
"pricing": "free",
"bestFor": "Quick IP location with maps",
"input": "IP address",
"output": "City, coordinates, ISP, hostname",
"opsec": "passive",
"opsecNote": "Passive lookup; no notification to target.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Info Sniper",
"type": "url",
"url": "https://www.infosniper.net/",
"description": "Multi-field reverse OSINT tool for IP, email, phone lookups with social media enumeration.",
"status": "live",
"pricing": "freemium",
"bestFor": "Multi-field reverse lookup (IP/email/phone)",
"input": "IP, email, or phone",
"output": "Associated accounts and social profiles",
"opsec": "passive",
"opsecNote": "Correlates public data; paid features available.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "utrace",
"type": "url",
"url": "https://en.utrace.de/",
"description": "IP geolocation and reverse DNS lookup tool with network traceroute visualization.",
"status": "live",
"pricing": "free",
"bestFor": "IP location and traceroute",
"input": "IP or hostname",
"output": "Location, ASN, reverse DNS, route path",
"opsec": "active",
"opsecNote": "Traceroute is active; geolocation is passive.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Host / Port Discovery",
"type": "folder",
"children": [
{
"name": "urlscan.io",
"type": "url",
"url": "https://urlscan.io/search/#*",
"description": "Website scanner analyzing URLs and domains for malicious content with infrastructure intelligence.",
"status": "live",
"pricing": "freemium",
"bestFor": "URL/domain scanning for malware and phishing",
"input": "URL or domain",
"output": "Screenshot, DNS, IP, certificates, cookies",
"opsec": "passive",
"opsecNote": "Passive scanning; no direct contact with target.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Spyse",
"type": "url",
"url": "https://spyse.com/search/ip",
"description": "Internet assets search engine collecting and analyzing public data for attack surface management.",
"status": "live",
"pricing": "freemium",
"bestFor": "Internet asset discovery and reconnaissance",
"input": "IP, domain, email, organization",
"output": "Subdomains, services, vulnerabilities, data breaches",
"opsec": "passive",
"opsecNote": "Passive data collection; requires account for full access.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Shodan",
"type": "url",
"url": "https://www.shodan.io/",
"description": "Search engine for internet-connected devices, providing visibility into exposed services and vulnerabilities.",
"status": "live",
"pricing": "freemium",
"bestFor": "Find exposed IoT and network services",
"input": "IP, port, service type",
"output": "Service banners, open ports, vulnerabilities, location",
"opsec": "passive",
"opsecNote": "Passive data collection; InternetDB API free for non-commercial use.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Netlas.io",
"type": "url",
"url": "https://netlas.io/",
"description": "Comprehensive internet scanning platform with OSINT, DNS, and WHOIS data. Free tier: 50 requests/day.",
"status": "live",
"pricing": "freemium",
"bestFor": "Internet asset reconnaissance with web, DNS, WHOIS",
"input": "IP, domain, ASN",
"output": "Open ports, services, certificates, DNS records, WHOIS",
"opsec": "passive",
"opsecNote": "Passive scanning with account-based rate limits.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Portmap",
"type": "url",
"url": "https://portmap.com/",
"description": "Port mapping tool that scans for open ports and services on target IP addresses.",
"status": "live",
"pricing": "free",
"bestFor": "Port scanning and service discovery",
"input": "IP address or hostname",
"output": "Open ports, service types, versions",
"opsec": "active",
"opsecNote": "Active port scanning probes target network.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Scans.io",
"type": "url",
"url": "https://scans.io/",
"description": "Archive of internet-wide scan data including censys scans and other reconnaissance data.",
"status": "live",
"pricing": "free",
"bestFor": "Historical internet scan data access",
"input": "IP or domain",
"output": "Historical scan results, service history",
"opsec": "passive",
"opsecNote": "Passive access to historical scanning archives.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Nmap (T)",
"type": "url",
"url": "https://nmap.org/download.html",
"description": "Open-source network mapping and port scanning tool with OS detection and service version identification.",
"status": "live",
"pricing": "free",
"bestFor": "Network reconnaissance and port scanning",
"input": "IP range or hostname",
"output": "Open ports, OS type, service versions, MAC addresses",
"opsec": "active",
"opsecNote": "Active scanning tool; generates network traffic.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Online Port scanner",
"type": "url",
"url": "https://portscanner.online/",
"description": "Web-based port scanner checking open ports on target IP addresses without installation.",
"status": "live",
"pricing": "free",
"bestFor": "Quick port scanning without tools",
"input": "IP address and port range",
"output": "Open ports, response times",
"opsec": "active",
"opsecNote": "Active port scanning; limited to common ports on free tier.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Internet Census Search",
"type": "url",
"url": "https://www.exfiltrated.com/querystart.php",
"description": "Search interface for the Shodan-like internet census data and open services.",
"status": "live",
"pricing": "free",
"bestFor": "Search open services and devices",
"input": "Service type, IP range, port",
"output": "List of exposed services and IPs",
"opsec": "passive",
"opsecNote": "Passive data search of known internet census.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Criminal IP Search",
"type": "url",
"url": "https://www.criminalip.io/",
"description": "IP reputation and threat intelligence platform analyzing malicious IP addresses and attacks.",
"status": "live",
"pricing": "freemium",
"bestFor": "IP reputation and malicious activity analysis",
"input": "IP address",
"output": "Threat reports, activity logs, attack types",
"opsec": "passive",
"opsecNote": "Passive threat intelligence lookup.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Scanless (T)",
"type": "url",
"url": "https://github.com/vesche/scanless",
"description": "Command-line tool for port scanning without leaving traces on target using third-party services.",
"status": "live",
"pricing": "free",
"bestFor": "Stealthy port scanning via proxies",
"input": "IP and port",
"output": "Open port results",
"opsec": "passive",
"opsecNote": "Routes scans through third-party services for stealth.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "BinaryEdge (R)",
"type": "url",
"url": "https://www.binaryedge.io/",
"description": "Commercial security research platform with internet-wide scanning and module-based detection.",
"status": "live",
"pricing": "paid",
"bestFor": "Commercial internet threat intelligence",
"input": "IP, domain, query",
"output": "Services, vulnerabilities, threat modules",
"opsec": "passive",
"opsecNote": "Commercial threat intelligence requiring subscription.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Masscan (T)",
"type": "url",
"url": "https://github.com/robertdavidgraham/masscan",
"description": "Ultra-fast TCP port scanner designed for scanning large IP ranges and entire networks.",
"status": "live",
"pricing": "free",
"bestFor": "Large-scale network port scanning",
"input": "IP range",
"output": "Open ports, response times",
"opsec": "active",
"opsecNote": "Active scanner; generates significant network traffic.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "IPv4",
"type": "folder",
"children": [
{
"name": "ASlookup.com",
"type": "url",
"url": "https://aslookup.com/",
"description": "BGP and autonomous system lookup tool for finding IP ranges and ownership information.",
"status": "live",
"pricing": "free",
"bestFor": "BGP and ASN lookup",
"input": "ASN or IP address",
"output": "IP ranges, organization, peering info",
"opsec": "passive",
"opsecNote": "Passive lookup of public BGP data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Port scanner Online",
"type": "url",
"url": "https://portscanner.online/",
"description": "Simple web-based port scanner for checking common ports on target IPs.",
"status": "live",
"pricing": "free",
"bestFor": "Quick port availability checks",
"input": "IP and port",
"output": "Port status (open/closed)",
"opsec": "active",
"opsecNote": "Active probing; may be logged by firewalls.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Onyphe",
"type": "url",
"url": "https://www.onyphe.io/",
"description": "Cyber defense search engine with internet scanning, threat intelligence, and attack surface management.",
"status": "live",
"pricing": "freemium",
"bestFor": "Internet asset discovery and threat intel",
"input": "IP, domain, CVE",
"output": "Services, vulnerabilities, certificates, datasources",
"opsec": "passive",
"opsecNote": "Passive intelligence from public sources.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "IPv4 CIDR Report",
"type": "url",
"url": "https://www.cidr-report.org/as2.0/",
"description": "Tool for analyzing IPv4 CIDR blocks and finding contained IP addresses and subnets.",
"status": "live",
"pricing": "free",
"bestFor": "CIDR block analysis and subnet enumeration",
"input": "CIDR block",
"output": "IP ranges, subnet breakdown",
"opsec": "passive",
"opsecNote": "Passive analysis of IP allocation data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Reverse.report",
"type": "url",
"url": "https://reverse.report/",
"description": "Comprehensive reverse lookup tool for IP to domain, email, and phone number associations.",
"status": "live",
"pricing": "freemium",
"bestFor": "Reverse IP and domain lookups",
"input": "IP address or domain",
"output": "Associated domains, subdomains, history",
"opsec": "passive",
"opsecNote": "Passive lookup of DNS and WHOIS data.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Team Cymru IP to ASN",
"type": "url",
"url": "https://asn.cymru.com/",
"description": "IP to ASN mapping tool providing autonomous system ownership and prefix information.",
"status": "live",
"pricing": "free",
"bestFor": "IP to ASN mapping",
"input": "IP address",
"output": "ASN, organization, prefix",
"opsec": "passive",
"opsecNote": "Passive lookup of BGP and WHOIS data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "IP to ASN DB",
"type": "url",
"url": "https://iptoasn.com/",
"description": "Database and API service for looking up which ASN owns a given IP address.",
"status": "live",
"pricing": "free",
"bestFor": "IP to ASN lookup with historical data",
"input": "IP address",
"output": "ASN, organization, prefix, company info",
"opsec": "passive",
"opsecNote": "Passive database lookup.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Hacker Target - Reverse DNS",
"type": "url",
"url": "https://hackertarget.com/reverse-dns-lookup/",
"description": "Reverse DNS lookup tool and API finding domain names associated with IP addresses.",
"status": "live",
"pricing": "freemium",
"bestFor": "Reverse DNS lookup of IP addresses",
"input": "IP address or range",
"output": "Associated domains and PTR records",
"opsec": "passive",
"opsecNote": "Passive DNS lookup; includes free API tier.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "IPv6",
"type": "folder",
"children": [
{
"name": "IPv6 CIDR Report",
"type": "url",
"url": "https://www.cidr-report.org/v6/as2.0/",
"description": "CIDR block analysis tool for IPv6 address ranges and subnet enumeration.",
"status": "live",
"pricing": "free",
"bestFor": "IPv6 CIDR block analysis",
"input": "IPv6 CIDR block",
"output": "IPv6 ranges, subnet breakdown",
"opsec": "passive",
"opsecNote": "Passive analysis of IPv6 allocation data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "BGP",
"type": "folder",
"children": [
{
"name": "Hurricane Electric BGP Toolkit",
"type": "url",
"url": "https://bgp.he.net/",
"description": "BGP and network routing analysis tools including AS to prefix lookup and BGP prefix information.",
"status": "live",
"pricing": "free",
"bestFor": "BGP analysis and routing intelligence",
"input": "ASN, IP range, or prefix",
"output": "BGP routes, peering, organization info",
"opsec": "passive",
"opsecNote": "Passive lookup of public BGP data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "BGP Malicious Content Ranking",
"type": "url",
"url": "https://bgpranking.circl.lu/",
"description": "Platform ranking ASNs and BGP prefixes by malicious content and security threats.",
"status": "live",
"pricing": "free",
"bestFor": "Identify malicious ASNs and networks",
"input": "ASN or prefix",
"output": "Threat ranking, malicious activity metrics",
"opsec": "passive",
"opsecNote": "Passive threat intelligence from public sources.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "PeeringDB",
"type": "url",
"url": "https://www.peeringdb.com/advanced_search",
"description": "Database of internet exchange points, member networks, and AS relationships for network mapping.",
"status": "live",
"pricing": "free",
"bestFor": "Internet peering and AS relationship mapping",
"input": "ASN, organization, or IX",
"output": "Peering relationships, exchange points, contacts",
"opsec": "passive",
"opsecNote": "Passive lookup of public peering data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "BGP Tools",
"type": "url",
"url": "https://www.bgp4.as/tools",
"description": "Collection of BGP analysis and AS number lookup tools for network intelligence.",
"status": "live",
"pricing": "free",
"bestFor": "BGP routing and AS analysis",
"input": "ASN, IP, or prefix",
"output": "Routes, prefixes, organizations",
"opsec": "passive",
"opsecNote": "Passive analysis of public BGP data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Reputation",
"type": "folder",
"children": [
{
"name": "IP Void",
"type": "url",
"url": "https://www.ipvoid.com/",
"description": "IP reputation and threat intelligence service analyzing blacklist status and security risks.",
"status": "live",
"pricing": "freemium",
"bestFor": "Check IP reputation and blacklist status",
"input": "IP address",
"output": "Threat score, blacklist status, reports",
"opsec": "passive",
"opsecNote": "Passive reputation lookup; account needed for full data.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "ExoneraTor",
"type": "url",
"url": "https://exonerator.torproject.org/",
"description": "Tool for checking if an IP address belonged to Tor at a specific date.",
"status": "live",
"pricing": "free",
"bestFor": "Verify Tor relay membership by date",
"input": "IP address and date",
"output": "Tor exit/entry node status confirmation",
"opsec": "passive",
"opsecNote": "Passive historical Tor relay lookup from public archives.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Grey Noise",
"type": "url",
"url": "https://viz.greynoise.io/",
"description": "Platform for analyzing internet background noise and identifying benign scanning activity.",
"status": "live",
"pricing": "freemium",
"bestFor": "Distinguish malicious from benign internet activity",
"input": "IP address",
"output": "Classification, scanner type, threat assessment",
"opsec": "passive",
"opsecNote": "Passive threat intelligence; free tier available.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Blacklists",
"type": "folder",
"children": [
{
"name": "Blocklist.de",
"type": "url",
"url": "https://www.blocklist.de/en/index.html",
"description": "Community-contributed blocklist of IP addresses involved in attacks and malicious activity.",
"status": "live",
"pricing": "free",
"bestFor": "Check IP blacklist status",
"input": "IP address",
"output": "Blacklist status, attack types logged",
"opsec": "passive",
"opsecNote": "Passive lookup of community blocklist.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "DShield API",
"type": "url",
"url": "https://isc.sans.edu/api/",
"description": "API and database of security events and IPs involved in attacks monitored by SANS.",
"status": "live",
"pricing": "free",
"bestFor": "Query IPs involved in attacks",
"input": "IP address",
"output": "Attack reports, threat activity",
"opsec": "passive",
"opsecNote": "Passive threat intelligence from SANS monitored networks.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "FireHOL IP Lists ",
"type": "url",
"url": "https://iplists.firehol.org/",
"description": "Collection of firewall-friendly IP lists for blocking malicious and spam sources.",
"status": "live",
"pricing": "free",
"bestFor": "Block malicious/spam IP sources",
"input": "IP address or list download",
"output": "Blacklist membership status",
"opsec": "passive",
"opsecNote": "Passive lookup of public IP reputation lists.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Project Honey Pot",
"type": "url",
"url": "https://www.projecthoneypot.org/list_of_ips.php",
"description": "Global honeypot network collecting spam and attack data with IP reputation service.",
"status": "live",
"pricing": "freemium",
"bestFor": "Check IP for spam and attack history",
"input": "IP address",
"output": "Threat score, spam reports, attack activity",
"opsec": "passive",
"opsecNote": "Passive lookup of honeypot-collected threat data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Neighbor Domains",
"type": "folder",
"children": [
{
"name": "IP Fingerprints - Reverse IP Lookup",
"type": "url",
"url": "https://ipfingerprints.com/reverseip.php",
"description": "Find all domains hosted on a shared IP address through reverse IP lookup.",
"status": "live",
"pricing": "free",
"bestFor": "Find domains on shared hosting",
"input": "IP address",
"output": "List of domains on IP",
"opsec": "passive",
"opsecNote": "Passive DNS reverse lookup.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Bing IP Search (D)",
"type": "url",
"url": "https://www.bing.com/search?q=ip%3A8.8.8.8",
"description": "Bing search operator for finding domains and subdomains hosted on a specific IP address.",
"status": "live",
"pricing": "free",
"bestFor": "Find domains on IP using Bing index",
"input": "IP address",
"output": "Domains indexed by Bing on that IP",
"opsec": "passive",
"opsecNote": "Passive search using Bing's public index.",
"localInstall": false,
"googleDork": true,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "TCP/IP Utils - Domain Neighbors",
"type": "url",
"url": "https://dnslytics.com/",
"description": "Find all domains on the same IP and subdomain information via reverse IP lookups.",
"status": "live",
"pricing": "free",
"bestFor": "Identify related domains on same IP",
"input": "Domain or IP",
"output": "Neighbor domains, IP info",
"opsec": "passive",
"opsecNote": "Passive DNS and IP lookup data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "MyIPNeighbors",
"type": "url",
"url": "https://www.my-ip-neighbors.com/",
"description": "Reverse IP lookup tool for discovering all domains and subdomains on an IP address.",
"status": "live",
"pricing": "free",
"bestFor": "Find all domains on same shared IP",
"input": "IP address",
"output": "List of domains on IP, subdomains",
"opsec": "passive",
"opsecNote": "Passive DNS reverse lookup.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Protected by Cloud Services",
"type": "folder",
"children": [
{
"name": "CloudFlare Watch",
"type": "url",
"url": "https://www.crimeflare.com/",
"description": "Tool for identifying and analyzing websites protected by Cloudflare's CDN and security services.",
"status": "live",
"pricing": "free",
"bestFor": "Identify Cloudflare-protected sites",
"input": "Domain or IP",
"output": "Cloudflare status, origin IP (if discoverable)",
"opsec": "passive",
"opsecNote": "Passive lookup of Cloudflare configurations.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "CloudFail (T)",
"type": "url",
"url": "https://github.com/m0rtem/CloudFail",
"description": "Tool for finding origin IPs of Cloudflare-protected websites through enumeration techniques.",
"status": "live",
"pricing": "free",
"bestFor": "Bypass Cloudflare to find origin IP",
"input": "Domain protected by Cloudflare",
"output": "Origin IP address (if discoverable)",
"opsec": "active",
"opsecNote": "Uses active enumeration and DNS history techniques.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Wireless Network Info",
"type": "folder",
"children": [
{
"name": "WiGLE: Wireless Network Mapping",
"type": "url",
"url": "https://wigle.net/",
"description": "Global database of wireless networks (WiFi, Bluetooth, cellular) with mapping and signal strength data.",
"status": "live",
"pricing": "freemium",
"bestFor": "Map wireless networks and find signal coverage",
"input": "Location, SSID, or BSSID",
"output": "Network locations, signal maps, network details",
"opsec": "passive",
"opsecNote": "Crowdsourced wireless network data; passive lookup.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "OpenCellid: Database of Cell Towers",
"type": "url",
"url": "https://opencellid.org/",
"description": "Open database of cellular tower locations and coverage for mobile network geolocation.",
"status": "live",
"pricing": "free",
"bestFor": "Find cellular tower locations and coverage",
"input": "Cell tower ID or location",
"output": "Tower coordinates, operator, coverage area",
"opsec": "passive",
"opsecNote": "Passive lookup of public cellular network data.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Network Analysis Tools",
"type": "folder",
"children": [
{
"name": "Wireshark",
"type": "url",
"url": "https://www.wireshark.org/download.html",
"description": "Open-source network packet analyzer for deep packet inspection and network troubleshooting.",
"status": "live",
"pricing": "free",
"bestFor": "Network packet analysis and protocol debugging",
"input": "Network traffic capture file",
"output": "Detailed packet analysis, protocol breakdown",
"opsec": "Unknown",
"opsecNote": "Tool-dependent; passive capture or active sniffing possible.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "NetworkMiner",
"type": "url",
"url": "https://www.netresec.com/?page=Networkminer",
"description": "Passive network forensics tool for extracting files and data from network traffic captures.",
"status": "live",
"pricing": "free",
"bestFor": "Network forensics and file extraction from traffic",
"input": "PCAP network traffic files",
"output": "Extracted files, metadata, network sessions",
"opsec": "passive",
"opsecNote": "Passive analysis of already-captured traffic.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Packet Total",
"type": "url",
"url": "https://www.packettotal.com/",
"description": "Online platform for uploading and analyzing network packet captures (PCAP files).",
"status": "live",
"pricing": "free",
"bestFor": "Cloud-based network forensics analysis",
"input": "PCAP files",
"output": "Traffic analysis, threat indicators, IoCs",
"opsec": "Unknown",
"opsecNote": "Passive analysis of PCAP; consider privacy of uploaded data.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "checkip (T)",
"type": "url",
"url": "https://github.com/jreisinger/checkip",
"description": "Command-line utility for checking local machine IP address and network connectivity.",
"status": "live",
"pricing": "free",
"bestFor": "Display local IP and network info",
"input": "Local system (no input needed)",
"output": "Local IP, gateway, DNS servers",
"opsec": "passive",
"opsecNote": "Passive system utility; local only.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "IP Loggers",
"type": "folder",
"children": [
{
"name": "Ki.tc",
"type": "url",
"url": "https://ki.tc",
"description": "IP logging service that generates trackable links for IP/browser info collection.",
"status": "live",
"pricing": "free",
"bestFor": "Generate trackable links to log visitor IPs",
"input": "Target URL or destination",
"output": "Tracker link, IP logs, browser info",
"opsec": "Unknown",
"opsecNote": "Creates tracking mechanism; detection depends on how link is used.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Grabify",
"type": "url",
"url": "https://grabify.link",
"description": "URL shortener service that logs IP addresses and device information of link clickers.",
"status": "live",
"pricing": "free",
"bestFor": "Shorten URLs and log visitor IPs",
"input": "URL to shorten",
"output": "Short URL with IP logging",
"opsec": "Unknown",
"opsecNote": "Creates tracking link; malicious uses common.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "IP Logger",
"type": "url",
"url": "https://iplogger.com/",
"description": "IP logging and URL shortening service tracking visitor IP, location, and browser data.",
"status": "live",
"pricing": "free",
"bestFor": "Track visitor IPs through shortened links",
"input": "URL to wrap",
"output": "Logging URL, visitor IP/location data",
"opsec": "Unknown",
"opsecNote": "Tracking service; ethical and legal concerns apply.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
}
]
},
{
"name": "Images / Videos / Docs",
"type": "folder",
"children": [
{
"name": "Images",
"type": "folder",
"children": [
{
"name": "Search",
"type": "folder",
"children": [
{
"name": "Google Images",
"type": "url",
"url": "https://images.google.com/?gws_rd=ssl"
},
{
"name": "Bing Images",
"type": "url",
"url": "https://www.bing.com/images"
},
{
"name": "FaceCheck Facial Recognition Search",
"type": "url",
"url": "https://facecheck.id/"
},
{
"name": "Surfface Face & People Search Engine",
"type": "url",
"url": "https://surfface.com/"
},
{
"name": "PimEyes Face Search Engine",
"type": "url",
"url": "https://pimeyes.com/en"
},
{
"name": "Yandex Images",
"type": "url",
"url": "https://www.yandex.com/images/"
},
{
"name": "Baidu Images",
"type": "url",
"url": "https://graph.baidu.com/pcpage/index?tpl_from=pc"
},
{
"name": "Twitter Image Search (M)",
"type": "url",
"url": "https://twitter.com/search?q=%3Csearchterm%3E&src=typd&vertical=default&f=images"
},
{
"name": "Imgur Search",
"type": "url",
"url": "https://imgur.com/search"
},
{
"name": "Photobucket",
"type": "url",
"url": "https://photobucket.com/"
},
{
"name": "7Photos.net",
"type": "url",
"url": "https://7photos.net/"
},
{
"name": "Panoramio",
"type": "url",
"url": "https://www.panoramio.com/"
},
{
"name": "Current Location",
"type": "url",
"url": "https://current-location.com/"
},
{
"name": "Lakako Photo Search",
"type": "url",
"url": "https://www.lakako.com/"
},
{
"name": "Lenso.ai",
"type": "url",
"url": "https://lenso.ai/"
},
{
"name": "CC Search",
"type": "url",
"url": "https://ccsearch.creativecommons.org/"
},
{
"name": "CamFind App",
"type": "url",
"url": "https://camfindapp.com/"
},
{
"name": "RevEye Reverse Image Search (T)",
"type": "url",
"url": "https://chrome.google.com/webstore/detail/reveye-reverse-image-sear/keaaclcjhehbbapnphnmpiklalfhelgf?hl=en"
},
{
"name": "SmugMug Search",
"type": "url",
"url": "https://www.smugmug.com/"
},
{
"name": "ImageNet",
"type": "url",
"url": "https://image-net.org/"
},
{
"name": "Places2",
"type": "url",
"url": "https://places2.csail.mit.edu/explore.html"
},
{
"name": "Image Identification Project",
"type": "url",
"url": "https://www.imageidentify.com/"
},
{
"name": "SauceNAO",
"type": "url",
"url": "https://saucenao.com/"
},
{
"name": "Picarta",
"type": "url",
"url": "https://picarta.ai/"
},
{
"name": "FaceSeek Face Search Engine",
"type": "url",
"url": "https://faceseek.online"
}
]
},
{
"name": "Instagram",
"type": "folder",
"children": [
{
"name": "Webstigram",
"type": "url",
"url": "https://websta.me/search-engine-optimization/"
},
{
"name": "Instagram",
"type": "url",
"url": "https://www.instagram.com/"
},
{
"name": "Mini Instagram",
"type": "url",
"url": "https://mininsta.net/"
},
{
"name": "Imgrab",
"type": "url",
"url": "https://www.imgrab.com/"
},
{
"name": "Tofo.me",
"type": "url",
"url": "https://tofo.me/"
}
]
},
{
"name": "Flickr",
"type": "folder",
"children": [
{
"name": "Flickr",
"type": "url",
"url": "https://www.flickr.com/"
},
{
"name": "Flickr Map",
"type": "url",
"url": "https://www.flickr.com/map/"
},
{
"name": "My Pics Map",
"type": "url",
"url": "https://www.mypicsmap.com/"
},
{
"name": "idGettr",
"type": "url",
"url": "https://www.webfx.com/tools/idgettr/"
},
{
"name": "Flickr Hive Mind",
"type": "url",
"url": "https://flickrhivemind.net/"
}
]
},
{
"name": "Metadata",
"type": "folder",
"children": [
{
"name": "ExifEditor",
"type": "url",
"url": "https://exifeditor.io"
},
{
"name": "ExifTool (T)",
"type": "url",
"url": "https://exiftool.org/"
},
{
"name": "ExifViewer",
"type": "url",
"url": "https://www.exifviewer.org/"
},
{
"name": "FOCA (T)",
"type": "url",
"url": "https://github.com/ElevenPaths/FOCA"
},
{
"name": "GeoSetter",
"type": "url",
"url": "https://geosetter.de/en/main-en/"
},
{
"name": "Jeffrey's Exif Viewer",
"type": "url",
"url": "https://exif.regex.info/"
},
{
"name": "JPEGsnoop (T)",
"type": "url",
"url": "https://www.impulseadventure.com/photo/jpeg-snoop.html"
},
{
"name": "Metapicz",
"type": "url",
"url": "https://metapicz.com/#landing"
},
{
"name": "Search by Exif",
"type": "url",
"url": "https://www.exif-search.com/"
},
{
"name": "xeuledoc - Fetch metadata about any public Google document",
"type": "url",
"url": "https://github.com/Malfrats/xeuledoc"
},
{
"name": "FOCA (T)",
"type": "url",
"url": "https://github.com/ElevenPaths/FOCA"
},
{
"name": "Exiv2 (T)",
"type": "url",
"url": "https://exiv2.org/"
},
{
"name": "MediaInfo (T)",
"type": "url",
"url": "https://mediaarea.net/en/MediaInfo"
},
{
"name": "Apache Tika (T)",
"type": "url",
"url": "https://tika.apache.org/"
},
{
"name": "oletools (T)",
"type": "url",
"url": "https://github.com/decalage2/oletools"
},
{
"name": "Hachoir (T)",
"type": "url",
"url": "https://github.com/vstinner/hachoir"
},
{
"name": "C2PA Verify",
"type": "url",
"url": "https://contentcredentials.org/verify"
},
{
"name": "Metadata2Go",
"type": "url",
"url": "https://www.metadata2go.com/"
},
{
"name": "Get-Metadata",
"type": "url",
"url": "https://www.get-metadata.com/"
}
]
},
{
"name": "Forensics",
"type": "folder",
"children": [
{
"name": "Ghiro (T)",
"type": "url",
"url": "https://github.com/ghirensics/ghiro"
},
{
"name": "Camera Trace",
"type": "url",
"url": "https://www.cameratrace.com/trace"
},
{
"name": "Forensically",
"type": "url",
"url": "https://29a.ch/photo-forensics/"
}
]
},
{
"name": "OCR",
"type": "folder",
"children": [
{
"name": "Online OCR",
"type": "url",
"url": "https://www.sodapdf.com/pdf-tools/ocr-pdf/"
},
{
"name": "i2OCR",
"type": "url",
"url": "https://www.i2ocr.com/"
},
{
"name": "New OCR",
"type": "url",
"url": "https://www.newocr.com/"
},
{
"name": "Online OCR",
"type": "url",
"url": "https://www.onlineocr.net/"
}
]
},
{
"name": "Tools",
"type": "folder",
"children": [
{
"name": "Creepy (T)",
"type": "url",
"url": "https://www.geocreepy.com/"
}
]
}
]
},
{
"name": "Videos",
"type": "folder",
"children": [
{
"name": "Search",
"type": "folder",
"children": [
{
"name": "Google Videos",
"type": "url",
"url": "https://www.google.com/videohp?gws_rd=ssl"
},
{
"name": "Bing Videos",
"type": "url",
"url": "https://www.bing.com/videos"
},
{
"name": "Internet Archive Videos",
"type": "url",
"url": "https://archive.org/details/opensource_movies"
},
{
"name": "Vines (D)",
"type": "url",
"url": "https://www.google.com/search?q=site:vine.co+%3Csearchterm%3E"
},
{
"name": "Dogpile Web Search",
"type": "url",
"url": "https://www.dogpile.com/"
},
{
"name": "Geo Search Tool",
"type": "url",
"url": "https://www.geosearchtool.com/"
},
{
"name": "blinkx Video Search",
"type": "url",
"url": "https://blinkx.com/"
},
{
"name": "Facebook Live Map",
"type": "url",
"url": "https://www.facebook.com/watch/live/?ref=live_delegate"
},
{
"name": "LiveLeak",
"type": "url",
"url": "https://www.liveleak.com/"
},
{
"name": "Metatube",
"type": "url",
"url": "https://www.metatube.com/"
},
{
"name": "Yahoo Video Search",
"type": "url",
"url": "https://video.search.yahoo.com/"
},
{
"name": "Search YouTube by Location",
"type": "url",
"url": "https://mattw.io/youtube-geofind/location"
}
]
},
{
"name": "Analyze / Record",
"type": "folder",
"children": [
{
"name": "DetURL",
"type": "url",
"url": "https://deturl.com/"
},
{
"name": "Print YouTube StoryBoard Instructions",
"type": "url",
"url": "https://www.labnol.org/internet/print-youtube-video/28217"
},
{
"name": "Print Storyboard from Youtube",
"type": "url",
"url": "javascript:(function(){a=ytplayer.config.args.storyboard_spec;if(!a){alert(\"Sorry we cannot process this YouTube video. Could you please try another one\");exit();}b=a.split(\"|\");base=b[0].split(\"$\")[0]+\"2/M\";c=b[3].split(\"%23\");sigh=c[c.length-1];var imgs=\"\";t=ytplayer.config.args.length_seconds;n=Math.ceil(c[2]/(c[3]*c[4]));for(i=0;i<n;i++){imgs+=\"<PICTURE='\"+base+i+\".jpg%3Fsigh=\"+sigh+\"'><br/>\";}var title=ytplayer.config.args.title;msg=\"<body style='background-color:#444;color:#eee;margin:20px%20auto;width:90%;text-align:center'%3E%3Ch2%3ETITLE%3C/h2%3E%3Cdiv%3EIMAGES%3C/div%3E%3Cbr/%3E%3Cem%3E%3Ca%20href='http://labnol.org/?p=28217'%20style='text-decoration:none;color:#fff;font-style:bold'%3EPrinted%20using%20the%20YouTube%20bookmarklet.%3C/a%3E%3C/em%3E%3C/body%3E%22;msg=msg.replace(%22TITLE%22,title).replace(%22IMAGES%22,imgs).replace(/PICTURE/g,%22img%20src%22);var%20labnol=window.open();labnol.document.open();labnol.document.write(msg);labnol.document.close();})();"
},
{
"name": "Frame by Frame for YouTube (T)",
"type": "url",
"url": "https://chrome.google.com/webstore/detail/frame-by-frame-for-youtub/elkadbdicdciddfkdpmaolomehalghio?hl=en-GB"
},
{
"name": "TubeChop",
"type": "url",
"url": "https://tubechop.com/"
},
{
"name": "YouTube Data Tools",
"type": "url",
"url": "https://tools.digitalmethods.net/netvizz/youtube/"
},
{
"name": "Hooktube",
"type": "url",
"url": "https://hooktube.com/"
},
{
"name": "yasiv-youtube",
"type": "url",
"url": "https://yasiv.com/youtube/"
}
]
}
]
},
{
"name": "Webcams",
"type": "folder",
"children": [
{
"name": "SeeAllTheThings",
"type": "url",
"url": "https://github.com/baywolf88/seeallthethings"
},
{
"name": "Insecam",
"type": "url",
"url": "https://insecam.org/"
},
{
"name": "EarthCam",
"type": "url",
"url": "https://www.earthcam.com/"
}
]
},
{
"name": "Documents",
"type": "folder",
"children": [
{
"name": "Search",
"type": "folder",
"children": [
{
"name": "Common GoogleDorks",
"type": "folder",
"children": [
{
"name": "GoogleDocs (D)",
"type": "url",
"url": "https://www.google.com/?q=site:docs.google.com+%3Csearchterm%3E"
},
{
"name": "GoogleDrive (D)",
"type": "url",
"url": "https://www.google.com/?q=site:drive.google.com+%3Csearchterm%3E"
},
{
"name": "Dropbox (D)",
"type": "url",
"url": "https://www.google.com/?q=site:dl.dropbox.com+%3Csearchterm%3E"
},
{
"name": "Amazon AWS (D)",
"type": "url",
"url": "https://www.google.com/search?q=site:s3.amazonaws.com+%3Csearchterm%3E"
},
{
"name": "OneDrive (D)",
"type": "url",
"url": "https://www.google.com/search?safe=off&q=site:onedrive.live.com+%3Csearchterm%3E"
},
{
"name": "Cryptome (D)",
"type": "url",
"url": "https://www.google.com/search?q=site:cryptome.org+%3Csearchterm%3E"
}
]
},
{
"name": "Scribd",
"type": "url",
"url": "https://www.scribd.com/"
},
{
"name": "WikiLeaks Search",
"type": "url",
"url": "https://search.wikileaks.org/advanced"
},
{
"name": "RECAP Court Doc Repo",
"type": "url",
"url": "https://archive.recapthelaw.org/"
},
{
"name": "filessoo.com",
"type": "url",
"url": "https://filessoo.com/"
},
{
"name": "Leaked Cables",
"type": "url",
"url": "https://search.wikileaks.org/plusd/"
}
]
},
{
"name": "Paste Sites",
"type": "folder",
"children": [
{
"name": "Pastebin OSINT Harvester (T)",
"type": "url",
"url": "https://github.com/needmorecowbell/sniff-paste"
}
]
}
]
},
{
"name": "Fonts",
"type": "folder",
"children": [
{
"name": "What The Font",
"type": "url",
"url": "https://www.myfonts.com/pages/whatthefont"
},
{
"name": "Font Squirrel",
"type": "url",
"url": "https://www.fontsquirrel.com/matcherator"
},
{
"name": "IdentiFont",
"type": "url",
"url": "https://www.identifont.com/index.html"
},
{
"name": "What Font Is",
"type": "url",
"url": "https://www.whatfontis.com/"
}
]
}
]
},
{
"name": "Social Networks",
"type": "folder",
"children": [
{
"name": "Facebook",
"type": "folder",
"children": [
{
"name": "Search",
"type": "folder",
"children": [
{
"name": "FB Email Search",
"type": "url",
"url": "https://www.facebook.com/public?query=email@gmail.com&nomc=0"
},
{
"name": "Recover FB Account",
"type": "url",
"url": "https://www.facebook.com/login/identify?ctx=recover"
},
{
"name": "Facebook Photos by ID (M)",
"type": "url",
"url": "https://www.facebook.com/photo.php?fbid=PHOTO-ID-HERE"
},
{
"name": "FB Lookup ID",
"type": "url",
"url": "https://lookup-id.com/"
},
{
"name": "FB Identify (Requires Logout)",
"type": "url",
"url": "https://www.facebook.com/login/identify"
}
]
}
]
},
{
"name": "Fediverse/Mastodon",
"type": "folder",
"children": [
{
"name": "Fedifinder",
"type": "url",
"url": "https://fedifinder.glitch.me/",
"description": "Web tool that scanned Twitter profiles to find Fediverse/Mastodon handles among your contacts and exported them as CSV. The hosted instance now returns HTTP 410 and is no longer functional due to Twitter API restrictions.",
"status": "down",
"pricing": "free",
"bestFor": "Finding Twitter contacts who moved to Mastodon/Fediverse",
"input": "Twitter/X account (via OAuth login)",
"output": "CSV list of discovered Fediverse handles from your Twitter contacts",
"opsec": "active",
"opsecNote": "Requires Twitter OAuth authentication; scans public bios and tweets of followed accounts.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": true
},
{
"name": "Fediverse Observer",
"type": "url",
"url": "https://fediverse.observer/",
"description": "Real-time dashboard tracking Fediverse instances across Mastodon, Pleroma, Misskey, PeerTube, and other ActivityPub platforms with server statistics and geographic mapping.",
"status": "live",
"pricing": "free",
"bestFor": "Discovering and mapping Fediverse instances by software, country, or size",
"input": "Search filters (software type, country, language, instance name)",
"output": "Instance list with user counts, uptime, software version, registration status, and geographic location",
"opsec": "passive",
"opsecNote": "Queries the Fediverse Observer database, not individual instances; no contact with target servers.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Fediverse_OSINT (T)",
"type": "url",
"url": "https://github.com/cyfinoid/fediverse_osint",
"description": "Python CLI tool for checking whether a domain belongs to the Fediverse and hunting usernames across discoverable Fediverse servers.",
"status": "degraded",
"pricing": "free",
"bestFor": "Cross-instance Fediverse user and content search",
"input": "Username or search terms",
"output": "User profiles and posts found across Fediverse instances",
"opsec": "active",
"opsecNote": "Queries multiple Fediverse instances directly; requests may be logged by instance administrators.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Masto (T)",
"type": "url",
"url": "https://github.com/C3n7ral051nt4g3ncy/Masto",
"description": "Python-based Mastodon OSINT tool for investigating user accounts across instances. Retrieves profile details, toots, followers, and account metadata.",
"status": "live",
"pricing": "free",
"bestFor": "Mastodon user profile investigation and account analysis",
"input": "Mastodon username and instance (e.g., user@mastodon.social)",
"output": "Profile details, recent toots, follower/following lists, account creation date, and metadata",
"opsec": "active",
"opsecNote": "Makes API requests directly to the target Mastodon instance; instance admins can see request logs.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Instagram",
"type": "folder",
"children": [
{
"name": "Inflact Instagram Viewer (Anonymous)",
"type": "url",
"url": "https://inflact.com/instagram-viewer/profile/"
},
{
"name": "Osintgram (T)",
"type": "url",
"url": "https://github.com/Datalux/Osintgram"
}
]
},
{
"name": "Twitter",
"type": "folder",
"children": [
{
"name": "Search",
"type": "folder",
"children": [
{
"name": "Twitter Advanced Search",
"type": "url",
"url": "https://twitter.com/search-advanced"
},
{
"name": "Twitter Location Search",
"type": "url",
"url": "https://twitter.com/search?q=geocode%3A36.1143855%2C-115.1727518%2C1km&src=typd"
},
{
"name": "Twitter Date Search",
"type": "url",
"url": "https://twitter.com/search?q=SearchTerm%20since:2016-03-01%20until:2016-03-02"
},
{
"name": "Followerwonk (R)",
"type": "url",
"url": "https://followerwonk.com/"
},
{
"name": "Twopcharts",
"type": "url",
"url": "https://twopcharts.com/"
},
{
"name": "TweeterID",
"type": "url",
"url": "https://tweeterid.com/"
}
]
},
{
"name": "Analytics",
"type": "folder",
"children": [
{
"name": "Profile",
"type": "folder",
"children": [
{
"name": "Tweepsect",
"type": "url",
"url": "https://tweepsect.com/"
},
{
"name": "Twitonomy",
"type": "url",
"url": "https://www.twitonomy.com/"
},
{
"name": "Foller.me Analytics",
"type": "url",
"url": "https://foller.me/"
},
{
"name": "X0rz Tweets_analyzer (T)",
"type": "url",
"url": "https://github.com/x0rz/tweets_analyzer"
}
]
},
{
"name": "Hashtag",
"type": "folder",
"children": [
{
"name": "RiteTag",
"type": "url",
"url": "https://ritetag.com/"
},
{
"name": "TAGSExplorer",
"type": "url",
"url": "https://tags.hawksey.info/tagsexplorer/"
}
]
},
{
"name": "Tweet Metadata",
"type": "url",
"url": "https://www.wsj.com/public/resources/documents/TweetMetadata.pdf"
},
{
"name": "Birdwatcher (T)",
"type": "url",
"url": "https://github.com/michenriksen/birdwatcher"
},
{
"name": "Tinfoleak Web",
"type": "url",
"url": "https://tinfoleak.com/"
},
{
"name": "Tinfoleak.py (T)",
"type": "url",
"url": "https://www.vicenteaguileradiaz.com/tools/"
},
{
"name": "DMI-TCAT (T)",
"type": "url",
"url": "https://github.com/digitalmethodsinitiative/dmi-tcat"
},
{
"name": "Twint (T)",
"type": "url",
"url": "https://github.com/twintproject/twint"
}
]
},
{
"name": "Location / Mapping",
"type": "folder",
"children": [
{
"name": "GeoSocial Footprint",
"type": "url",
"url": "https://geosocialfootprint.com/"
},
{
"name": "One Million Tweet Map",
"type": "url",
"url": "https://onemilliontweetmap.com/"
},
{
"name": "Creepy (T)",
"type": "url",
"url": "https://www.geocreepy.com/"
},
{
"name": "Fedica",
"type": "url",
"url": "https://fedica.com/"
}
]
},
{
"name": "Archive / Deleted Tweets",
"type": "folder",
"children": [
{
"name": "All My Tweets",
"type": "url",
"url": "https://www.allmytweets.net/connect/"
},
{
"name": "Spoonbill",
"type": "url",
"url": "https://spoonbill.io"
},
{
"name": "TweetVacuum (T)",
"type": "url",
"url": "https://github.com/UberKitten/TweetVacuum"
}
]
}
]
},
{
"name": "Reddit",
"type": "folder",
"children": [
{
"name": "Reddit Metis",
"type": "url",
"url": "https://redditmetis.com/"
},
{
"name": "Reddit Archive",
"type": "url",
"url": "https://www.redditarchive.com/"
},
{
"name": "subreddits",
"type": "url",
"url": "https://subreddits.org/"
},
{
"name": "Reddit Comment History",
"type": "url",
"url": "https://roadtolarissa.com/javascript/reddit-comment-visualizer/"
}
]
},
{
"name": "LinkedIn",
"type": "folder",
"children": [
{
"name": "LinkedInt - LinkedIn Recon Tool (T)",
"type": "url",
"url": "https://github.com/vysecurity/LinkedInt"
},
{
"name": "ScrapedIn (T)",
"type": "url",
"url": "https://github.com/dchrastil/ScrapedIn"
},
{
"name": "InSpy (T)",
"type": "url",
"url": "https://github.com/jobroche/InSpy"
},
{
"name": "raven (T)",
"type": "url",
"url": "https://github.com/0x09AL/raven"
}
]
},
{
"name": "TikTok",
"type": "folder",
"children": [
{
"name": "TikTok (M)",
"type": "url",
"url": "https://www.tiktok.com/@username",
"description": "Direct TikTok profile lookup by manually editing the username in the URL. Quick way to check if a target has a TikTok presence.",
"status": "live",
"pricing": "free",
"bestFor": "Quick TikTok profile existence check",
"input": "TikTok username (replace 'username' in URL)",
"output": "Public TikTok profile page with videos, bio, and follower counts",
"opsec": "passive",
"opsecNote": "Standard web request to TikTok; profile views are not visible to the account owner without login.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "TikTok-OSINT (T)",
"type": "url",
"url": "https://github.com/Omicron166/TikTok-OSINT",
"description": "Python CLI tool for collecting OSINT data from TikTok profiles including user metadata, video listings, and engagement statistics. Last updated October 2022.",
"status": "degraded",
"pricing": "free",
"bestFor": "Automated TikTok profile data collection",
"input": "TikTok username or profile URL",
"output": "User metadata, video listings, engagement stats, and follower data",
"opsec": "active",
"opsecNote": "Makes direct API requests to TikTok servers; may trigger rate limiting.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Unfurl",
"type": "url",
"url": "https://dfir.blog/unfurl/",
"description": "Web and CLI tool that extracts and visualizes metadata embedded in URLs, including TikTok share links, timestamps, and tracking parameters. Also installable locally via Python.",
"status": "live",
"pricing": "free",
"bestFor": "URL metadata extraction and timestamp analysis",
"input": "Any URL (including TikTok share/video links)",
"output": "Visual graph of extracted URL components, timestamps, and embedded identifiers",
"opsec": "passive",
"opsecNote": "Parses URL structure locally in browser or on the Unfurl server; does not contact the target platform. Local install available for sensitive investigations.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "yt-dlp (T)",
"type": "url",
"url": "https://github.com/yt-dlp/yt-dlp",
"description": "Feature-rich command-line video downloader supporting 1000+ sites including TikTok. Extracts video files, metadata, thumbnails, subtitles, and comments.",
"status": "live",
"pricing": "free",
"bestFor": "Downloading TikTok videos and extracting metadata for preservation",
"input": "TikTok video URL or user profile URL",
"output": "Downloaded video files, JSON metadata, thumbnails, subtitles, and comments",
"opsec": "active",
"opsecNote": "Makes direct HTTP requests to TikTok to download content; IP is visible to the platform.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Bluesky",
"type": "folder",
"children": [
{
"name": "Treeverse (T)",
"type": "url",
"url": "https://github.com/paulgb/Treeverse"
}
]
},
{
"name": "Threads",
"type": "folder",
"children": [
{
"name": "Bellingcat Meta Content Library",
"type": "url",
"url": "https://bellingcat.gitbook.io/toolkit/more/all-tools/meta-content-library",
"description": "Bellingcat's guide to Meta's Content Library, a research platform providing near-real-time searchable archive of public Threads, Facebook, and Instagram content.",
"status": "live",
"pricing": "free",
"bestFor": "Large-scale Threads content search for academic and non-profit research",
"input": "Search queries, date ranges, content filters",
"output": "Public posts, engagement metrics, and text-in-image search results from Threads and other Meta platforms",
"opsec": "passive",
"opsecNote": "Searches Meta's research archive; does not interact with target accounts directly. Requires academic/non-profit eligibility approval.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": true,
"deprecated": false
},
{
"name": "Threads Dashboard",
"type": "url",
"url": "https://www.threadsdashboard.com/",
"description": "Analytics and insights platform for Threads accounts using the official API. Tracks audience demographics, engagement metrics, and historical posting data.",
"status": "live",
"pricing": "freemium",
"bestFor": "Threads account analytics and engagement investigation",
"input": "Threads username or account URL",
"output": "Audience demographics, engagement rates, posting frequency, optimal posting times, and historical data",
"opsec": "passive",
"opsecNote": "Retrieves data via Meta's official Threads API; no direct contact with the target account.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Threads-Scraper (T)",
"type": "url",
"url": "https://github.com/Zeeshanahmad4/Threads-Scraper",
"description": "Python browser automation tool that scrapes public Threads posts and profiles without authentication, outputting structured data in JSON, CSV, or XML. Last updated July 2023.",
"status": "degraded",
"pricing": "free",
"bestFor": "Bulk extraction of Threads posts for offline analysis",
"input": "Threads profile URL or post URL",
"output": "Extracted posts in JSON, CSV, or XML format with metadata",
"opsec": "active",
"opsecNote": "Scrapes Threads directly; depends on site structure and may trigger rate limiting.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "ThreadsRecon (T)",
"type": "url",
"url": "https://github.com/offseq/threadsrecon",
"description": "Python OSINT tool for Threads profile analysis including sentiment analysis, network visualization, and automated PDF reporting.",
"status": "live",
"pricing": "free",
"bestFor": "Threads profile investigation with sentiment and network analysis",
"input": "Threads username",
"output": "Profile analysis, sentiment scores, network graphs, and PDF investigation reports",
"opsec": "active",
"opsecNote": "Makes direct requests to Threads to collect profile and post data for analysis.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Steam, Discord & Gaming Networks",
"type": "folder",
"children": [
{
"name": "SteamOSINT (T)",
"type": "url",
"url": "https://github.com/Frontline-Femmes/Steam-OSINT"
}
]
},
{
"name": "Other Social Networks",
"type": "folder",
"children": [
{
"name": "Ask FM",
"type": "url",
"url": "https://ask.fm/%3Cusername%3E"
},
{
"name": "Myspace",
"type": "url",
"url": "https://myspace.com/"
},
{
"name": "Tumblr",
"type": "url",
"url": "https://www.tumblr.com/tagged/search"
},
{
"name": "TheHoodUp (NSFW)",
"type": "url",
"url": "https://thehoodup.com/board/"
},
{
"name": "Share Secret Feedback (M)",
"type": "url",
"url": "https://secreto.site/en/%3Cuser_id%3E"
},
{
"name": "BlackPlanet.com - Member Find",
"type": "url",
"url": "https://www.blackplanet.com/user_search/index.html"
},
{
"name": "MiGente (Latino)",
"type": "url",
"url": "https://migente.com/wp-login.php?redirect_to=https%3A%2F%2Fmigente.com%2Fuser_search%2Findex.html&bp-auth=1&action=bpnoaccess"
},
{
"name": "Asian Avenue",
"type": "url",
"url": "https://blackplanet.com/"
},
{
"name": "Orkut (Brazil)",
"type": "url",
"url": "https://orkut.google.com/"
},
{
"name": "Odnoklassniki",
"type": "url",
"url": "https://ok.ru/"
},
{
"name": "VK",
"type": "url",
"url": "https://vk.com/"
},
{
"name": "Delicious",
"type": "url",
"url": "https://del.icio.us/"
}
]
},
{
"name": "Search",
"type": "folder",
"children": [
{
"name": "Social Searcher",
"type": "url",
"url": "https://www.social-searcher.com/"
},
{
"name": "Google Social Search",
"type": "url",
"url": "https://www.social-searcher.com/google-social-search/"
},
{
"name": "Talkwalker Social Media Search (R)",
"type": "url",
"url": "https://www.talkwalker.com/social-media-analytics-search"
},
{
"name": "PinGroupie",
"type": "url",
"url": "https://pingroupie.com/"
}
]
}
]
},
{
"name": "Instant Messaging",
"type": "folder",
"children": [
{
"name": "Chat Archive Analysis",
"type": "folder",
"children": [
{
"name": "Comms Analyzer Toolbox (T)",
"type": "url",
"url": "https://github.com/bitsofinfo/comms-analyzer-toolbox"
}
]
},
{
"name": "Discord",
"type": "folder",
"children": [
{
"name": "Disboard",
"type": "url",
"url": "https://disboard.org/"
},
{
"name": "DiscordOSINT (T)",
"type": "url",
"url": "https://github.com/husseinmuhaisen/DiscordOSINT"
}
]
},
{
"name": "Resources",
"type": "folder",
"children": [
{
"name": "Awesome OSINT",
"type": "url",
"url": "https://github.com/jivoi/awesome-osint"
}
]
},
{
"name": "Signal / Phone Lookup",
"type": "folder",
"children": [
{
"name": "OSINT Industries",
"type": "url",
"url": "https://www.osint.industries/"
}
]
},
{
"name": "Slack",
"type": "folder",
"children": [
{
"name": "SlackPirate (T)",
"type": "url",
"url": "https://github.com/emtunc/SlackPirate"
},
{
"name": "slack-intelbot (T)",
"type": "url",
"url": "https://github.com/pun1sh3r/slack-intelbot"
},
{
"name": "slack-web-scraper (T)",
"type": "url",
"url": "https://github.com/iulspop/slack-web-scraper"
}
]
},
{
"name": "Telegram",
"type": "folder",
"children": [
{
"name": "Google CSE for Telegram links",
"type": "url",
"url": "https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg"
},
{
"name": "Telegago (T)",
"type": "url",
"url": "https://tools.osintnewsletter.com/osint-tools/telegago-telegram"
},
{
"name": "Telegram-OSINT (T)",
"type": "url",
"url": "https://github.com/The-Osint-Toolbox/Telegram-OSINT"
},
{
"name": "TGStat",
"type": "url",
"url": "https://tgstat.com/"
},
{
"name": "Tosint (T)",
"type": "url",
"url": "https://github.com/drego85/tosint"
}
]
},
{
"name": "WeChat / LINE",
"type": "folder",
"children": [
{
"name": "Sogou WeChat Search",
"type": "url",
"url": "https://weixin.sogou.com/"
},
{
"name": "WechatSogou (T)",
"type": "url",
"url": "https://github.com/Chowency/WechatSogou"
},
{
"name": "wechat-dump (T)",
"type": "url",
"url": "https://github.com/ppwwyyxx/wechat-dump"
},
{
"name": "wechat-text-backup (T)",
"type": "url",
"url": "https://github.com/zhaofeng-shu33/wechat-text-backup"
},
{
"name": "linelog2py (T)",
"type": "url",
"url": "https://github.com/jyu0414/linelog2py"
},
{
"name": "line-message-analyzer (T)",
"type": "url",
"url": "https://github.com/chonyy/line-message-analyzer"
}
]
},
{
"name": "WhatsApp",
"type": "folder",
"children": [
{
"name": "Email2WhatsApp (T)",
"type": "url",
"url": "https://github.com/dsonbaker/email2whatsapp"
},
{
"name": "WhatsApp-OSINT (T)",
"type": "url",
"url": "https://github.com/kinghacker0/WhatsApp-OSINT"
}
]
}
]
},
{
"name": "People Search Engines",
"type": "folder",
"children": [
{
"name": "General People Search",
"type": "folder",
"children": [
{
"name": "InfoFlow Public People Search In Chilean",
"type": "url",
"url": "https://infoflow.cloud/"
},
{
"name": "ThatsThem",
"type": "url",
"url": "https://thatsthem.com/name-address-search"
},
{
"name": "Melissa Data - People Finder (R)",
"type": "url",
"url": "https://www.melissa.com/"
},
{
"name": "SalesMaple Contact Search",
"type": "url",
"url": "https://www.salesmaple.com/contacts/#!/"
},
{
"name": "PeekYou",
"type": "url",
"url": "https://www.peekyou.com/"
},
{
"name": "Reverse Genie People",
"type": "url",
"url": "https://www.reversegenie.com/people.php"
},
{
"name": "Wink People Search",
"type": "url",
"url": "https://itools.com/tool/wink-people-search"
},
{
"name": "Webmii",
"type": "url",
"url": "https://webmii.com/"
},
{
"name": "Snitch.name",
"type": "url",
"url": "https://snitch.name/"
},
{
"name": "Lullar",
"type": "url",
"url": "https://com.lullar.com/"
},
{
"name": "Yasni",
"type": "url",
"url": "https://www.yasni.com/"
},
{
"name": "findmypast.com",
"type": "url",
"url": "https://www.findmypast.com/discover"
},
{
"name": "HowManyOfMe",
"type": "url",
"url": "https://howmanyofme.com/search/"
},
{
"name": "IDCrawl",
"type": "url",
"url": "https://www.idcrawl.com/"
},
{
"name": "FamilySearch.org",
"type": "url",
"url": "https://familysearch.org/search/"
},
{
"name": "Ancestry.com",
"type": "url",
"url": "https://www.ancestry.com/search/"
},
{
"name": "AnyWho",
"type": "url",
"url": "https://www.anywho.com/whitepages"
},
{
"name": "Addresses.com",
"type": "url",
"url": "https://www.addresses.com/"
},
{
"name": "FaceCheckID",
"type": "url",
"url": "https://facecheck.id/"
},
{
"name": "usa-people-search.com",
"type": "url",
"url": "https://www.usa-people-search.com/"
}
]
},
{
"name": "Registries",
"type": "folder",
"children": [
{
"name": "The Knot",
"type": "url",
"url": "https://www.theknot.com/registry/couplesearch"
},
{
"name": "Registry Finder",
"type": "url",
"url": "https://registryfinder.com:443/"
},
{
"name": "My Registry",
"type": "url",
"url": "https://www.myregistry.com/"
},
{
"name": "Amazon Registry Search",
"type": "url",
"url": "https://www.amazon.com/gp/registry/search"
},
{
"name": "Bed, Bath, & Beyond Gift Registry",
"type": "url",
"url": "https://www.bedbathandbeyond.com/store/giftregistry/registry_search_guest.jsp"
},
{
"name": "The Bump",
"type": "url",
"url": "https://registry.thebump.com/babyregistrysearch"
}
]
}
]
},
{
"name": "Dating",
"type": "folder",
"children": [
{
"name": "AYI.com",
"type": "url",
"url": "https://www.ayi.com/index.php"
},
{
"name": "Plenty Of Fish.com",
"type": "url",
"url": "https://www.pof.com/"
},
{
"name": "eHarmony",
"type": "url",
"url": "https://www.eharmony.com/"
},
{
"name": "Farmers Only",
"type": "url",
"url": "https://www.farmersonly.com:443/"
},
{
"name": "Tinder (R)",
"type": "url",
"url": "https://tinder.com/"
},
{
"name": "Bumble (R)",
"type": "url",
"url": "https://bumble.com/"
},
{
"name": "Tantan (R)",
"type": "url",
"url": "https://tantanapp.com/"
},
{
"name": "AdultFriendFinder",
"type": "url",
"url": "https://adultfriendfinder.com/"
},
{
"name": "BeautifulPeople.com",
"type": "url",
"url": "https://www.beautifulpeople.com/en-US"
},
{
"name": "Badoo",
"type": "url",
"url": "https://badoo.us/"
},
{
"name": "Spark.com",
"type": "url",
"url": "https://www.spark.com/"
},
{
"name": "Meetup",
"type": "url",
"url": "https://www.meetup.com/"
},
{
"name": "Bumble",
"type": "url",
"url": "https://bumble.com/"
},
{
"name": "Hinge",
"type": "url",
"url": "https://hinge.co/en-gb"
}
]
},
{
"name": "Telephone Numbers",
"type": "folder",
"children": [
{
"name": "Voicemail",
"type": "folder",
"children": [
{
"name": "Slydial",
"type": "url",
"url": "https://www.slydial.com/"
}
]
},
{
"name": "International",
"type": "folder",
"children": [
{
"name": "Numbering Plans",
"type": "url",
"url": "https://www.numberingplans.com/?page=analysis&sub=phonenr"
},
{
"name": "Numberway",
"type": "url",
"url": "https://www.numberway.com/"
}
]
},
{
"name": "WhoCalld",
"type": "url",
"url": "https://whocalld.com/"
},
{
"name": "CallerID Test",
"type": "url",
"url": "https://calleridtest.com/"
},
{
"name": "Twilio Lookup",
"type": "url",
"url": "https://www.twilio.com/lookup"
},
{
"name": "Fone Finder",
"type": "url",
"url": "https://www.fonefinder.net/"
},
{
"name": "True Caller",
"type": "url",
"url": "https://www.truecaller.com/"
},
{
"name": "Reverse Genie",
"type": "url",
"url": "https://www.reversegenie.com/phone.php"
},
{
"name": "SpyDialer",
"type": "url",
"url": "https://www.spydialer.com:443/default.aspx"
},
{
"name": "Phone Validator",
"type": "url",
"url": "https://www.phonevalidator.com/index.aspx"
},
{
"name": "Phonerator",
"type": "url",
"url": "https://www.martinvigo.com/phonerator/"
},
{
"name": "Mr. Number (M)",
"type": "url",
"url": "https://www.hiya.com/products/apps/hiya-spam-blocker"
},
{
"name": "Next Caller (R)",
"type": "url",
"url": "https://nextcaller.com/"
},
{
"name": "Data24-7 (R)",
"type": "url",
"url": "https://www.data24-7.com/signup.php"
},
{
"name": "HLR Lookup Portal (R)",
"type": "url",
"url": "https://www.hlr-lookups.com/en/start"
},
{
"name": "OpenCNAM API",
"type": "url",
"url": "https://api.opencnam.com/v2/phone/+19073372323"
},
{
"name": "Numspy (T)",
"type": "python3 Module",
"url": "https://bhattsameer.github.io/numspy/"
},
{
"name": "Numspy-Api",
"type": "url",
"url": "https://numspy.pythonanywhere.com/"
},
{
"name": "Family Tree Now (M)",
"type": "url",
"url": "https://www.familytreenow.com/search/genealogy/results?phoneno=(555)555-5555"
},
{
"name": "Whitepages Reverse Phone",
"type": "url",
"url": "https://www.whitepages.com/reverse-phone"
},
{
"name": "Hiya (R$)",
"type": "url",
"url": "https://www.hiya.com/"
}
]
},
{
"name": "Public Records",
"type": "folder",
"children": [
{
"name": "Property Records",
"type": "folder",
"children": [
{
"name": "Melissa Data - Property Viewer (R)",
"type": "url",
"url": "https://www.melissa.com/"
},
{
"name": "Regrid (US Only)",
"type": "url",
"url": "https://app.regrid.com/us/"
},
{
"name": "Emporis",
"type": "url",
"url": "https://www.emporis.com/"
},
{
"name": "Neighbor Report",
"type": "url",
"url": "https://neighbor.report/"
},
{
"name": "Redfin",
"type": "url",
"url": "https://www.redfin.com/"
}
]
},
{
"name": "Court / Criminal Records",
"type": "folder",
"children": [
{
"name": "Nationwide County Court Records",
"type": "url",
"url": "https://www.blackbookonline.info/USA-County-Court-Records.aspx"
},
{
"name": "World Legal Information Institute",
"type": "url",
"url": "https://worldlii.org/"
},
{
"name": "Most Wanted Criminal Pages",
"type": "url",
"url": "https://ancestorhunt.com/most-wanted-criminals-and-fugitives.htm"
},
{
"name": "Black Book Online - Criminal Search",
"type": "url",
"url": "https://www.blackbookonline.info/criminalsearch.aspx"
},
{
"name": "CrimeReports.com",
"type": "url",
"url": "https://www.crimereports.com/"
},
{
"name": "Familywatchdog - Sex Offender Search",
"type": "url",
"url": "https://www.familywatchdog.us/"
},
{
"name": "The Inmate Locator",
"type": "url",
"url": "https://theinmatelocator.com/"
},
{
"name": "National Sex Offender Search",
"type": "url",
"url": "https://www.nsopw.gov/search-public-sex-offender-registries"
},
{
"name": "Mugshots.com",
"type": "url",
"url": "https://mugshots.com/"
},
{
"name": "judyrecords",
"type": "url",
"url": "https://www.judyrecords.com/"
},
{
"name": "Caselaw Access Project",
"type": "url",
"url": "https://case.law/"
},
{
"name": "CourtListener",
"type": "url",
"url": "https://www.courtlistener.com/"
},
{
"name": "Docket Alarm",
"type": "url",
"url": "https://www.docketalarm.com/"
},
{
"name": "Google Scholar Case Law",
"type": "url",
"url": "https://scholar.google.com/"
},
{
"name": "PACER",
"type": "url",
"url": "https://pacer.uscourts.gov/"
},
{
"name": "Free Law RECAP Archive",
"type": "url",
"url": "https://www.courtlistener.com/recap/"
},
{
"name": "UniCourt",
"type": "url",
"url": "https://unicourt.com/"
},
{
"name": "Federal Inmate Locator",
"type": "url",
"url": "https://www.bop.gov/inmateloc/"
},
{
"name": "Epstein Exposed",
"type": "url",
"url": "https://epsteinexposed.com"
}
]
},
{
"name": "Government Records",
"type": "folder",
"children": [
{
"name": "NC Salary DB",
"type": "url",
"url": "https://www.newsobserver.com/news/databases/state-pay/"
},
{
"name": "Gov Data Canada",
"type": "url",
"url": "https://govdataca.com/"
},
{
"name": "CA Salary DB",
"type": "url",
"url": "https://www.sacbee.com/news/databases/state-pay/article229468549.html"
}
]
},
{
"name": "Financial / Tax Resources",
"type": "folder",
"children": [
{
"name": "BIN Base",
"type": "url",
"url": "https://www.binbase.com/search.html"
},
{
"name": "VAT Research",
"type": "url",
"url": "https://vat-search.eu/"
},
{
"name": "NETR Online",
"type": "url",
"url": "https://publicrecords.netronline.com/"
}
]
},
{
"name": "Birth Records",
"type": "folder",
"children": [
{
"name": "Sorted by Birth Date",
"type": "url",
"url": "https://sortedbybirthdate.com/"
}
]
},
{
"name": "Death Records",
"type": "folder",
"children": [
{
"name": "Death Check",
"type": "url",
"url": "https://www.melissa.com/"
},
{
"name": "Find A Grave",
"type": "url",
"url": "https://www.findagrave.com/"
},
{
"name": "GraveInfo",
"type": "url",
"url": "https://www.graveinfo.com/"
}
]
},
{
"name": "US County Data",
"type": "folder",
"children": [
{
"name": "NACo County Explorer",
"type": "url",
"url": "https://explorer.naco.org/index.html"
}
]
},
{
"name": "US Voter Records",
"type": "folder",
"children": [
{
"name": "Voter Registration Data",
"type": "url",
"url": "https://www.blackbookonline.info/USA-Voter-Records.aspx"
}
]
},
{
"name": "Patent Records",
"type": "folder",
"children": [
{
"name": "US Patent Office Search",
"type": "url",
"url": "https://www.uspto.gov/patents/search"
},
{
"name": "Google Patent Search",
"type": "url",
"url": "https://patents.google.com/advanced"
}
]
},
{
"name": "US Political Records",
"type": "folder",
"children": [
{
"name": "Political MoneyLine",
"type": "url",
"url": "https://info.cq.com/"
},
{
"name": "MelissaData - Campaign Contributions",
"type": "url",
"url": "https://www.melissa.com/"
},
{
"name": "Influence Explorer",
"type": "url",
"url": "https://data.influenceexplorer.com/#"
},
{
"name": "US Federal Election Commission",
"type": "url",
"url": "https://www.fec.gov/data/"
},
{
"name": "Every Politician",
"type": "url",
"url": "https://everypolitician.org:443/"
}
]
},
{
"name": "Public Records?",
"type": "url",
"url": "https://publicrecords.searchsystems.net/"
},
{
"name": "The World Bank Open Data Catalog",
"type": "url",
"url": "https://datacatalog.worldbank.org/"
},
{
"name": "BRB Public Records",
"type": "url",
"url": "https://www.brbpub.com/"
},
{
"name": "GOVDATA - Das Datenportal f\u00fcr Deutschland (German)",
"type": "url",
"url": "https://www.govdata.de/"
},
{
"name": "Open-Data-Portal M\u00fcnchen (German)",
"type": "url",
"url": "https://www.opengov-muenchen.de/"
},
{
"name": "Searchable FCC ID Database",
"type": "url",
"url": "https://fccid.io/"
}
]
},
{
"name": "Compliance & Risk Intelligence",
"type": "folder",
"children": [
{
"name": "Sanctions Screening",
"type": "folder",
"children": [
{
"name": "OpenSanctions",
"type": "url",
"url": "https://www.opensanctions.org/",
"description": "Aggregated database of sanctioned entities, politically exposed persons, and persons of criminal interest from 329 global data sources.",
"status": "live",
"pricing": "freemium",
"bestFor": "Bulk sanctions and PEP screening across consolidated global watchlists",
"input": "Person or entity name",
"output": "Entity profiles with sanctions designations, PEP flags, and source metadata",
"opsec": "passive",
"opsecNote": "Passive lookups against a public database; API usage requires an account and is logged.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "OFAC Sanctions List Search",
"type": "url",
"url": "https://sanctionssearch.ofac.treas.gov/",
"description": "Official U.S. Treasury tool for searching OFAC Specially Designated Nationals and related sanctions lists with approximate string matching.",
"status": "live",
"pricing": "free",
"bestFor": "Checking individuals or entities against U.S. sanctions programs",
"input": "Name, address, entity type, ID number, or sanctions program",
"output": "Matched records with name, sanctions program, list designation, and confidence score",
"opsec": "passive",
"opsecNote": "Public U.S. government search tool; queries are submitted to a federal server and may be logged.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "EU Sanctions Tool (D)",
"type": "url",
"url": "https://sanctions-tool.ec.europa.eu",
"description": "European Commission tool for searching EU restrictive measures and consolidated sanctions lists targeting persons, entities, and bodies.",
"status": "degraded",
"pricing": "free",
"bestFor": "Checking individuals or entities against EU sanctions regimes",
"input": "Person or entity name",
"output": "Matches against EU consolidated sanctions list with designation details",
"opsec": "passive",
"opsecNote": "Public EU government search tool; queries are submitted to an EU server and may be logged.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "dilisense",
"type": "url",
"url": "https://dilisense.com/en",
"description": "AML compliance platform that screens individuals and entities against sanctions, PEP, and watchlist data sources with fuzzy matching and confidence scoring.",
"status": "live",
"pricing": "freemium",
"bestFor": "Commercial AML/KYC sanctions screening and PEP checks",
"input": "Name, date of birth, citizenship, or other identifying information",
"output": "Match results with entity details, list sources, and confidence scores",
"opsec": "passive",
"opsecNote": "Queries sent to dilisense servers; registration required so searches are tied to an account.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "KYC / AML Tools",
"type": "folder",
"children": [
{
"name": "NameScan",
"type": "url",
"url": "https://namescan.io",
"description": "Compliance screening platform providing sanctions checks, PEP screenings, and adverse media searches against global government databases with a free tier.",
"status": "live",
"pricing": "freemium",
"bestFor": "Quick free sanctions and PEP screening with adverse media checks",
"input": "Individual or business name",
"output": "Screening reports with sanctions matches, PEP flags, and adverse media hits",
"opsec": "passive",
"opsecNote": "Free scans available without registration; full access requires account creation.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "OpenScreening",
"type": "url",
"url": "https://resources.linkurious.com/openscreening",
"description": "Free graph-based PEP and sanctions screening tool by Linkurious that visualizes connections across persons of interest using OpenSanctions and ICIJ data.",
"status": "live",
"pricing": "free",
"bestFor": "Visualizing connections between sanctioned entities, PEPs, and offshore structures",
"input": "Individual or organization name",
"output": "Interactive graph visualizations showing entity relationships and sanctions connections",
"opsec": "passive",
"opsecNote": "Web-based search against public datasets hosted by Linkurious; queries are sent to their servers.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Companies House (R)",
"type": "url",
"url": "https://find-and-update.company-information.service.gov.uk/",
"description": "Official UK government register for searching company information, officer appointments, and disqualified directors across all UK-registered companies.",
"status": "live",
"pricing": "free",
"bestFor": "Looking up UK company details, officers, and filing history",
"input": "Company name, company number, or officer name",
"output": "Company profiles, registered addresses, officer appointments, filing history, and document images",
"opsec": "passive",
"opsecNote": "Public UK government service; searches are passive lookups against an open register.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Beneficial Ownership Lookup",
"type": "folder",
"children": [
{
"name": "OpenOwnership",
"type": "url",
"url": "https://www.openownership.org/en/",
"description": "Global hub for beneficial ownership transparency, providing data standards and a register linking corporate ownership data across jurisdictions.",
"status": "live",
"pricing": "free",
"bestFor": "Investigating beneficial ownership of corporate entities across jurisdictions",
"input": "Company name, jurisdiction, or person name",
"output": "Beneficial ownership chains, corporate structures, and linked entities across registers",
"opsec": "passive",
"opsecNote": "Public web queries against open data; no notification to subjects.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "ICIJ Offshore Leaks Database",
"type": "url",
"url": "https://offshoreleaks.icij.org/",
"description": "Searchable database of 800,000+ offshore entities from ICIJ investigations including Panama Papers, Paradise Papers, and Pandora Papers.",
"status": "live",
"pricing": "free",
"bestFor": "Tracing offshore company structures and hidden ownership from leaked documents",
"input": "Person name, company name, address, or jurisdiction",
"output": "Entity records, officer relationships, intermediary connections, and network graphs",
"opsec": "passive",
"opsecNote": "Public database queries; no notification to subjects. Bulk data also available for download.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "OCCRP Aleph (R)",
"type": "url",
"url": "https://aleph.occrp.org/",
"description": "Global archive of research material for investigative reporting, aggregating public records, court filings, company registries, and leaks from 200+ sources.",
"status": "live",
"pricing": "free",
"bestFor": "Cross-referencing persons and companies across public records, leaks, and investigative datasets",
"input": "Person name, company name, or document keywords",
"output": "Entity profiles, linked datasets, document matches, and relationship mappings",
"opsec": "passive",
"opsecNote": "Registration required for full access; queries are logged by OCCRP but subjects are not notified.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "PEP Databases",
"type": "folder",
"children": [
{
"name": "PepChecker (R)",
"type": "url",
"url": "https://pepchecker.com",
"description": "PEP and sanctions screening tool offering checks against comprehensive PEP lists and global sanctions databases with a free tier of limited searches.",
"status": "live",
"pricing": "freemium",
"bestFor": "Screening individuals against PEP lists and international sanctions databases",
"input": "Person name",
"output": "PEP match results, sanctions list matches, risk indicators, and political exposure details",
"opsec": "passive",
"opsecNote": "Web-based queries; registration required for workspace features. Subjects are not notified.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Ukraine PEP Register (D)",
"type": "url",
"url": "https://pep.org.ua/en/",
"description": "Formerly a database of Ukrainian politically exposed persons maintained by civil society. Now redirects to a static wartime advocacy page.",
"status": "down",
"pricing": "free",
"bestFor": "Previously used for checking Ukrainian politically exposed persons",
"input": "Person name (when operational)",
"output": "PEP profiles and political positions (when operational)",
"opsec": "passive",
"opsecNote": "Site is no longer functional; original database was a public web lookup.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": true
},
{
"name": "EveryPolitician",
"type": "url",
"url": "https://everypolitician.org/",
"description": "Global database of political office-holders now operated as part of the OpenSanctions project, providing structured data on politicians and public officials worldwide.",
"status": "live",
"pricing": "free",
"bestFor": "Looking up current and former political office-holders globally for PEP screening",
"input": "Person name, country, or political position",
"output": "Politician profiles, positions held, party affiliations, and jurisdictional data",
"opsec": "passive",
"opsecNote": "Public database queries against open data; no notification to subjects.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
}
]
},
{
"name": "Business Records",
"type": "folder",
"children": [
{
"name": "Annual Reports",
"type": "folder",
"children": [
{
"name": "AnnualReports.com",
"type": "url",
"url": "https://www.annualreports.com/"
},
{
"name": "Public Register Online",
"type": "url",
"url": "https://www.annualreportservice.com/"
},
{
"name": "Public Register's Annual Report Service",
"type": "url",
"url": "https://www.prars.com/search/alpha/A"
},
{
"name": "International Registries",
"type": "url",
"url": "https://www.gov.uk/government/publications/overseas-registries/overseas-registries"
}
]
},
{
"name": "General Info & News",
"type": "folder",
"children": [
{
"name": "Commercial Register - Worldwide",
"type": "url",
"url": "https://www.sg.ch/recht/handelsregister-notariate.html"
},
{
"name": "SEC.gov - EDGAR",
"type": "url",
"url": "https://www.sec.gov/submit-filings"
},
{
"name": "International White Pages",
"type": "url",
"url": "https://www.wayp.com/"
},
{
"name": "UK Companies",
"type": "url",
"url": "https://www.gov.uk/get-information-about-a-company"
},
{
"name": "Global EDGE Resource Directory",
"type": "url",
"url": "https://globaledge.msu.edu/global-resources"
},
{
"name": "Google Finance",
"type": "url",
"url": "https://www.google.com/finance/"
}
]
},
{
"name": "Company Profiles",
"type": "folder",
"children": [
{
"name": "OpenCorporates",
"type": "url",
"url": "https://opencorporates.com/"
},
{
"name": "AIHIT",
"type": "url",
"url": "https://www.aihitdata.com/"
},
{
"name": "Plonked",
"type": "url",
"url": "https://www.plonked.com/"
},
{
"name": "Buzzfile",
"type": "url",
"url": "https://www.buzzfile.com/Home/Basic"
},
{
"name": "LittleSis",
"type": "url",
"url": "https://littlesis.org/"
},
{
"name": "Rusprofile",
"type": "url",
"url": "https://www.rusprofile.ru/"
},
{
"name": "Companies House",
"type": "url",
"url": "https://beta.companieshouse.gov.uk/"
},
{
"name": "Company Data Rex (EU)",
"type": "url",
"url": "https://www.cdrex.com/"
},
{
"name": "Europages",
"type": "url",
"url": "https://www.europages.co.uk:443/"
},
{
"name": "Owler (R)",
"type": "url",
"url": "https://www.owler.com/corp"
},
{
"name": "Vault",
"type": "url",
"url": "https://vault.com/"
},
{
"name": "Companies In The UK",
"type": "url",
"url": "https://www.companiesintheuk.co.uk/"
},
{
"name": "UK Data",
"type": "url",
"url": "https://ukdata.com/"
},
{
"name": "Orbis Directory",
"type": "url",
"url": "https://orbisdirectory.bvdinfo.com/version-2016121/OrbisDirectory/Companies"
},
{
"name": "Crunchbase",
"type": "url",
"url": "https://www.crunchbase.com/#/home/index"
}
]
},
{
"name": "Employee Profiles & Resumes",
"type": "folder",
"children": [
{
"name": "RecruitEm",
"type": "url",
"url": "https://recruitin.net/"
},
{
"name": "LinkedIn",
"type": "url",
"url": "https://www.linkedin.com/"
},
{
"name": "Jobster",
"type": "url",
"url": "https://jobster.com/"
},
{
"name": "XING (R)",
"type": "url",
"url": "https://www.xing.com/"
},
{
"name": "CVGadget",
"type": "url",
"url": "https://cvgadget.com/"
}
]
},
{
"name": "Additional Resources",
"type": "folder",
"children": [
{
"name": "RBA - Business Information Resources",
"type": "url",
"url": "https://www.rba.co.uk/sources/"
},
{
"name": "VAT Number Validation",
"type": "url",
"url": "https://ec.europa.eu/taxation_customs/vies/?locale=en"
}
]
}
]
},
{
"name": "Transportation",
"type": "folder",
"children": [
{
"name": "Vehicle Records",
"type": "folder",
"children": [
{
"name": "MyAccident - traffic accident map",
"type": "url",
"url": "https://myaccident.org/"
},
{
"name": "NHTSA Vehicle API",
"type": "url",
"url": "https://vpic.nhtsa.dot.gov/api/"
},
{
"name": "FindByPlate",
"type": "url",
"url": "https://findbyplate.com/"
},
{
"name": "carVertical VIN Decoder",
"type": "url",
"url": "https://www.carvertical.com/vin-decoder"
},
{
"name": "autoDNA VIN Lookup",
"type": "url",
"url": "https://www.autodna.com/"
},
{
"name": "VinDecodr",
"type": "url",
"url": "https://vindecodr.com/"
},
{
"name": "AutoRef (EU)",
"type": "url",
"url": "https://www.autoref.eu/en"
},
{
"name": "Carnet.ai",
"type": "url",
"url": "https://carnet.ai/"
},
{
"name": "Finnik (NL)",
"type": "url",
"url": "https://finnik.nl/en"
}
]
},
{
"name": "Air Traffic Records",
"type": "folder",
"children": [
{
"name": "Flightradar24.com",
"type": "url",
"url": "https://www.flightradar24.com/"
},
{
"name": "World Aeronautical Database",
"type": "url",
"url": "https://worldaerodata.com/"
},
{
"name": "ADS-B Exchange",
"type": "url",
"url": "https://www.adsbexchange.com/"
},
{
"name": "ADS-B.NL",
"type": "url",
"url": "https://www.ads-b.nl/index.php?pageno=9999"
},
{
"name": "OpenAIP World Aeronautical Database",
"type": "url",
"url": "https://www.openaip.net/"
}
]
},
{
"name": "Marine Records",
"type": "folder",
"children": [
{
"name": "Vessel Tracker",
"type": "url",
"url": "https://www.vesseltracker.com/"
},
{
"name": "Ship AIS",
"type": "url",
"url": "https://shipais.uk/"
},
{
"name": "OpenSeaMap - The free nautical chart",
"type": "url",
"url": "https://www.openseamap.org"
},
{
"name": "Vessel Finder",
"type": "url",
"url": "https://www.vesselfinder.com/"
},
{
"name": "Global Fishing Watch",
"type": "url",
"url": "https://globalfishingwatch.org"
}
]
},
{
"name": "Railway Records",
"type": "folder",
"children": [
{
"name": "Deutsche Bahn Open-Data-Portal (German)",
"type": "url",
"url": "https://data.deutschebahn.com/opendata"
},
{
"name": "OpenRailwayMap",
"type": "url",
"url": "https://www.openrailwaymap.org/"
}
]
},
{
"name": "Satellite Tracking",
"type": "url",
"url": "https://www.n2yo.com/"
},
{
"name": "Track-Trace",
"type": "url",
"url": "https://www.track-trace.com/"
}
]
},
{
"name": "Geolocation Tools / Maps",
"type": "folder",
"children": [
{
"name": "Geolocation Tools",
"type": "folder",
"children": [
{
"name": "Astrometry",
"type": "url",
"url": "https://nova.astrometry.net/"
},
{
"name": "SunCalc",
"type": "url",
"url": "https://suncalc.net/"
},
{
"name": "SunCalc",
"type": "url",
"url": "https://suncalc.org/"
},
{
"name": "GeoSpy",
"type": "url",
"url": "https://geospy.ai/"
}
]
},
{
"name": "Coordinates",
"type": "folder",
"children": [
{
"name": "GPSVisualizer",
"type": "url",
"url": "https://www.gpsvisualizer.com/geocode"
},
{
"name": "Military Grid Reference System Coordinates",
"type": "url",
"url": "https://dominoc925-pages.appspot.com/mapplets/cs_mgrs.html"
},
{
"name": "Batch Geocoding",
"type": "url",
"url": "https://www.doogal.co.uk/BatchGeocoding"
},
{
"name": "Batch Reverse Geocoding",
"type": "url",
"url": "https://www.doogal.co.uk/BatchReverseGeocoding"
}
]
},
{
"name": "Map Reporting Tools",
"type": "folder",
"children": [
{
"name": "Hyperlapse (T)",
"type": "url",
"url": "https://github.com/TeehanLax/Hyperlapse.js"
},
{
"name": "Google Maps Streetview Player",
"type": "url",
"url": "https://brianfolts.com/driver/"
},
{
"name": "ScribbleMaps",
"type": "url",
"url": "https://www.scribblemaps.com/"
},
{
"name": "Beholder",
"type": "url",
"url": "https://beholder.infragard.io/"
},
{
"name": "LiveUaMap",
"type": "url",
"url": "https://liveuamap.com/"
}
]
},
{
"name": "Mobile Coverage",
"type": "folder",
"children": [
{
"name": "OpenSignal",
"type": "url",
"url": "https://www.opensignal.com/"
},
{
"name": "AntennaSearch",
"type": "url",
"url": "https://www.antennasearch.com/"
},
{
"name": "OpenCelliD",
"type": "url",
"url": "https://opencellid.org/"
},
{
"name": "beaconDB",
"type": "url",
"url": "https://beacondb.net/"
}
]
},
{
"name": "Google Maps",
"type": "url",
"url": "https://www.google.com/maps/"
},
{
"name": "Bing Maps",
"type": "url",
"url": "https://www.bing.com/maps"
},
{
"name": "HERE Maps",
"type": "url",
"url": "https://maps.here.com/"
},
{
"name": "Dual Maps",
"type": "url",
"url": "https://data.mashedworld.com/dualmaps/map.htm"
},
{
"name": "Instant Google Street View",
"type": "url",
"url": "https://www.instantstreetview.com/"
},
{
"name": "Wikimapia",
"type": "url",
"url": "https://wikimapia.org/#lang=en&lat=40.078071&lon=-100.458984&z=5&m=b"
},
{
"name": "OpenStreetMap",
"type": "url",
"url": "https://www.openstreetmap.org/"
},
{
"name": "Flash Earth",
"type": "url",
"url": "https://zoom.earth/"
},
{
"name": "Historic Aerials",
"type": "url",
"url": "https://www.historicaerials.com/?javascript=&"
},
{
"name": "Google Maps Update Alerts",
"type": "url",
"url": "https://followyourworld.appspot.com/"
},
{
"name": "Google Earth Overlays",
"type": "url",
"url": "https://www.mgmaps.com/kml/"
},
{
"name": "Yandex.Maps",
"type": "url",
"url": "https://yandex.com/maps/"
},
{
"name": "Google Earth",
"type": "url",
"url": "https://earth.google.com/web/"
},
{
"name": "Baidu Maps",
"type": "url",
"url": "https://map.baidu.com/"
},
{
"name": "Corona",
"type": "url",
"url": "https://corona.cast.uark.edu/"
},
{
"name": "Naver (Korean)",
"type": "url",
"url": "https://map.naver.com/p/"
},
{
"name": "OpenStreetMap",
"type": "url",
"url": "https://www.openstreetmap.org/"
},
{
"name": "Overpass Turbo",
"type": "url",
"url": "https://overpass-turbo.eu/"
},
{
"name": "EarthExplorer",
"type": "url",
"url": "https://earthexplorer.usgs.gov/"
},
{
"name": "OpenStreetCam",
"type": "url",
"url": "https://kartaview.org/"
},
{
"name": "Travel by Drone",
"type": "url",
"url": "https://travelbydrone.com/"
},
{
"name": "Hivemapper",
"type": "url",
"url": "https://hivemapper.com/"
},
{
"name": "LandsatLook Viewer",
"type": "url",
"url": "https://landsatlook.usgs.gov/"
},
{
"name": "NEXRAD Data Inventory Search",
"type": "url",
"url": "https://www.ncdc.noaa.gov/nexradinv/"
},
{
"name": "MapQuest",
"type": "url",
"url": "https://www.mapquest.com/"
},
{
"name": "OpenRailwayMap",
"type": "url",
"url": "https://www.openrailwaymap.org/"
},
{
"name": "OpenInfrastructureMap",
"type": "url",
"url": "https://openinframap.org/"
},
{
"name": "Hiking & Biking Map",
"type": "url",
"url": "https://hikebikemap.org/"
},
{
"name": "US Nav Guide Zip Code Data",
"type": "url",
"url": "https://www.usnaviguide.com/"
},
{
"name": "Wayback Imagery",
"type": "url",
"url": "https://livingatlas.arcgis.com/wayback/"
},
{
"name": "SkyFi.com - Satellite Open Data (R)",
"type": "url",
"url": "https://app.skyfi.com/explore/open"
}
]
},
{
"name": "Search Engines",
"type": "folder",
"children": [
{
"name": "General Search",
"type": "folder",
"children": [
{
"name": "Google",
"type": "url",
"url": "https://www.google.com/?gws_rd=ssl"
},
{
"name": "Bing",
"type": "url",
"url": "https://www.bing.com/"
},
{
"name": "DuckDuckGo",
"type": "url",
"url": "https://duckduckgo.com/"
},
{
"name": "Yahoo Advanced Web Search",
"type": "url",
"url": "https://search.yahoo.com/web/advanced"
},
{
"name": "StartPage",
"type": "url",
"url": "https://www.startpage.com/"
},
{
"name": "Yandex",
"type": "url",
"url": "https://yandex.com/"
},
{
"name": "Baidu",
"type": "url",
"url": "https://www.baidu.com/"
},
{
"name": "Google Advanced Search",
"type": "url",
"url": "https://www.google.com/advanced_search"
},
{
"name": "iZito",
"type": "url",
"url": "https://www.izito.com/"
},
{
"name": "Bing vs. Google",
"type": "url",
"url": "https://bvsg.org/"
},
{
"name": "Ixquick Search Engine",
"type": "url",
"url": "https://www.ixquick.com/"
},
{
"name": "Advangle",
"type": "url",
"url": "https://advangle.com/"
},
{
"name": "Instya",
"type": "url",
"url": "https://www.instya.com/"
},
{
"name": "Hulbee",
"type": "url",
"url": "https://hulbee.com/de"
},
{
"name": "Mojeek",
"type": "url",
"url": "https://mojeek.com/"
},
{
"name": "Swisscows",
"type": "url",
"url": "https://swisscows.com/en"
},
{
"name": "Brave",
"type": "url",
"url": "https://search.brave.com/"
},
{
"name": "Stract",
"type": "url",
"url": "https://stract.com/"
}
]
},
{
"name": "Meta Search",
"type": "folder",
"children": [
{
"name": "Shuriken",
"type": "url",
"url": "https://shuriken.pm"
},
{
"name": "iSEEK",
"type": "url",
"url": "https://iseek.com/iseek/home.page"
},
{
"name": "Biznar",
"type": "url",
"url": "https://biznar.com/biznar/desktop/en/search.html"
},
{
"name": "eTools.ch",
"type": "url",
"url": "https://www.etools.ch/"
},
{
"name": "searx.me",
"type": "url",
"url": "https://searx.me/"
},
{
"name": "WhosTalkin",
"type": "url",
"url": "https://www.whostalkin.com/"
}
]
},
{
"name": "Code Search",
"type": "folder",
"children": [
{
"name": "PublicWWW",
"type": "url",
"url": "https://publicwww.com/"
},
{
"name": "Searchcode",
"type": "url",
"url": "https://searchcode.com/"
},
{
"name": "NerdyData",
"type": "url",
"url": "https://www.nerdydata.com/reports/new"
},
{
"name": "Gitrob (T)",
"type": "url",
"url": "https://github.com/michenriksen/gitrob"
},
{
"name": "Github-Dorks (T)",
"type": "url",
"url": "https://github.com/techgaun/github-dorks"
},
{
"name": "GitLeaks",
"type": "url",
"url": "https://github.com/gitleaks/gitleaks"
}
]
},
{
"name": "FTP Search",
"type": "folder",
"children": [
{
"name": "GlobalFile",
"type": "url",
"url": "https://globalfilesearch.com/"
},
{
"name": "FTP Google Dork (D)",
"type": "url",
"url": "https://www.google.com/search?q=inurl%3Aftp+-inurl%3Ahttp+-inurl%3Ahttps+ftpsearchterm"
},
{
"name": "Napalm FTP",
"type": "url",
"url": "https://www.searchftps.net/"
}
]
},
{
"name": "Academic / Publication Search",
"type": "folder",
"children": [
{
"name": "PubPeer",
"type": "url",
"url": "https://pubpeer.com/"
},
{
"name": "Bielefeld Academic Search Engine",
"type": "url",
"url": "https://www.base-search.net/Search/Advanced"
},
{
"name": "Google Scholar",
"type": "url",
"url": "https://scholar.google.com/"
},
{
"name": "PubMed - National Center for Biotechnology Information",
"type": "url",
"url": "https://pubmed.ncbi.nlm.nih.gov/"
},
{
"name": "Open Library",
"type": "url",
"url": "https://openlibrary.org/"
},
{
"name": "JURN",
"type": "url",
"url": "https://www.jurn.org/"
},
{
"name": "UK National Archives",
"type": "url",
"url": "https://discovery.nationalarchives.gov.uk/"
},
{
"name": "OpenGrey EU Papers",
"type": "url",
"url": "https://opengrey.eu/"
},
{
"name": "US Gov Publishing Office - FDsys",
"type": "url",
"url": "https://www.gpo.gov/fdsys/"
},
{
"name": "OpenDOAR",
"type": "url",
"url": "https://www.opendoar.org/search.php"
},
{
"name": "Microsoft Academic",
"type": "url",
"url": "https://academic.microsoft.com/"
},
{
"name": "Science Direct",
"type": "url",
"url": "https://www.sciencedirect.com/"
},
{
"name": "Think Tank Search",
"type": "url",
"url": "https://guides.library.harvard.edu/hks/think_tank_search"
},
{
"name": "Library Databases",
"type": "url",
"url": "https://guides.uflib.ufl.edu/az.php"
},
{
"name": "Copyscape Plagiarism Checker",
"type": "url",
"url": "https://www.copyscape.com/"
},
{
"name": "Lazy Scholar (T)",
"type": "url",
"url": "https://lazyscholar.org/"
},
{
"name": "Open Access Scholarly Journals",
"type": "url",
"url": "https://www.pagepress.org/"
},
{
"name": "The Open Syllabus Project",
"type": "url",
"url": "https://www.opensyllabus.org/"
},
{
"name": "Science Publications",
"type": "url",
"url": "https://www.thescipub.com/"
},
{
"name": "arXiv.org",
"type": "url",
"url": "https://arxiv.org/"
}
]
},
{
"name": "News Search",
"type": "folder",
"children": [
{
"name": "Google News Search",
"type": "url",
"url": "https://news.google.com/news/advanced_news_search?"
},
{
"name": "Flipboard",
"type": "url",
"url": "https://flipboard.com/"
},
{
"name": "YouGotTheNews",
"type": "url",
"url": "https://yougotthenews.com/"
},
{
"name": "NewspaperARCHIVE.com",
"type": "url",
"url": "https://newspaperarchive.com/"
},
{
"name": "PressReader.com",
"type": "url",
"url": "https://www.pressreader.com/"
},
{
"name": "Newspaper Map",
"type": "url",
"url": "https://newspapermap.com/"
},
{
"name": "NewsBrief",
"type": "url",
"url": "https://emm.newsbrief.eu/NewsBrief/clusteredition/en/latest.html"
},
{
"name": "AllYouCanRead.com",
"type": "url",
"url": "https://www.allyoucanread.com/"
},
{
"name": "World News",
"type": "url",
"url": "https://wn.com/#/search"
},
{
"name": "NewsNow.co.uk",
"type": "url",
"url": "https://www.newsnow.co.uk/h/"
},
{
"name": "Hubii",
"type": "url",
"url": "https://hubii.com/"
},
{
"name": "Inshorts",
"type": "url",
"url": "https://inshorts.com/en/read"
},
{
"name": "NewsBot",
"type": "url",
"url": "https://getnewsbot.com/"
}
]
},
{
"name": "Other Search",
"type": "folder",
"children": [
{
"name": "Colossus International Engine List",
"type": "url",
"url": "https://www.searchenginecolossus.com/"
},
{
"name": "Zenodo",
"type": "url",
"url": "https://zenodo.org/"
},
{
"name": "EntityCube",
"type": "url",
"url": "https://entitycube.research.microsoft.com/"
},
{
"name": "FindTheData A Research Engine",
"type": "url",
"url": "https://www.findthedata.com/"
}
]
},
{
"name": "Search Tools",
"type": "folder",
"children": [
{
"name": "wayparam",
"type": "url",
"url": "https://github.com/aleff-github/wayparam"
},
{
"name": "SearchDiggity (T)",
"type": "url",
"url": "https://bishopfox.com/resources"
},
{
"name": "Scanner-inurlbr (T)",
"type": "url",
"url": "https://github.com/googleinurl/SCANNER-INURLBR"
},
{
"name": "Google Alerts",
"type": "url",
"url": "https://www.google.com/alerts"
},
{
"name": "Google Custom Search Engine",
"type": "url",
"url": "https://cse.google.com/cse/"
},
{
"name": "pagodo - Passive Google Dork (T)",
"type": "url",
"url": "https://github.com/opsdisk/pagodo"
},
{
"name": "Google Trends",
"type": "url",
"url": "https://trends.google.com/trends/"
},
{
"name": "dorksearch.com",
"type": "url",
"url": "https://www.dorksearch.com/"
},
{
"name": "dorkgenerator.pages.dev",
"type": "url",
"url": "https://dorkgenerator.pages.dev/"
},
{
"name": "dorksearch.netlify.app",
"type": "url",
"url": "https://dorksearch.netlify.app/"
}
]
},
{
"name": "Search Engine Guides",
"type": "folder",
"children": [
{
"name": "Google Hacking Database",
"type": "url",
"url": "https://www.exploit-db.com/google-hacking-database"
},
{
"name": "Google Search Operators Guide",
"type": "url",
"url": "https://www.googleguide.com/advanced_operators_reference.html"
},
{
"name": "Google Guide Cheat Sheet",
"type": "url",
"url": "https://www.googleguide.com/help/calculator.html"
}
]
}
]
},
{
"name": "Online Communities",
"type": "folder",
"children": [
{
"name": "Blog Search Engines",
"type": "folder",
"children": [
{
"name": "Live Journal Seek",
"type": "url",
"url": "https://ljseek.com/",
"description": "Search tool for LiveJournal journals and communities across public entries that are indexed.",
"status": "live",
"pricing": "free",
"bestFor": "Finding public LiveJournal entries and historical community discussions",
"input": "Keywords and search terms",
"output": "Matching journal entries with author, date, and snippets",
"opsec": "passive",
"opsecNote": "Searches publicly indexed content and does not contact journal owners directly; queries are likely logged.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Blog Search Engine",
"type": "url",
"url": "https://www.blogsearchengine.org/",
"description": "Blog-focused search engine for discovering blog posts, directories, and RSS-connected content.",
"status": "live",
"pricing": "free",
"bestFor": "Blog discovery and topic-focused blog post searching",
"input": "Keywords and blog topics",
"output": "Matching blog posts, listings, and feed-linked results",
"opsec": "passive",
"opsecNote": "Aggregates publicly indexed blog data without direct user contact to target blogs; queries are logged.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Discord Servers",
"type": "folder",
"children": [
{
"name": "Discord Bot List",
"type": "url",
"url": "https://discord.bots.gg/",
"description": "Searchable directory of Discord bots with listings, categories, and discovery metadata.",
"status": "live",
"pricing": "free",
"bestFor": "Discord bot discovery and ecosystem mapping",
"input": "Bot names, keywords, and categories",
"output": "Bot profiles with descriptions, ratings, and invite metadata",
"opsec": "passive",
"opsecNote": "Enumerates publicly listed bots and does not require direct Discord account interaction for browsing.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "ReconXplorer (T)",
"type": "url",
"url": "https://github.com/root7am/ReconXplorer",
"description": "Open-source reconnaissance toolkit with modules for IP, email, and Discord-focused lookups.",
"status": "live",
"pricing": "free",
"bestFor": "Multi-input OSINT checks from a local scriptable toolkit",
"input": "IP addresses, emails, Discord tokens, and host data",
"output": "Recon results including geolocation, service, and account-related metadata",
"opsec": "active",
"opsecNote": "Runs direct external queries from the operator environment and may trigger service-side detection or logging.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Top.gg",
"type": "url",
"url": "https://top.gg/",
"description": "Large Discord bot and app discovery platform with ranking, filtering, and listing data.",
"status": "live",
"pricing": "free",
"bestFor": "Discord bot ranking analysis and app discovery",
"input": "Bot names, tags, and search filters",
"output": "Bot listings with popularity, server counts, and profile details",
"opsec": "passive",
"opsecNote": "Uses public listing data and does not require direct target interaction for standard browsing.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Forum Search Engines",
"type": "folder",
"children": [
{
"name": "BoardReader",
"type": "url",
"url": "https://boardreader.com/",
"description": "Forum search engine that indexes discussions across message boards and community platforms.",
"status": "live",
"pricing": "free",
"bestFor": "Finding forum threads and topic-centric discussion history",
"input": "Keywords, forum names, and topical queries",
"output": "Indexed posts and thread references with source links",
"opsec": "passive",
"opsecNote": "Searches indexed forum content and avoids direct interaction with target forum users.",
"localInstall": false,
"googleDork": true,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Omgili",
"type": "url",
"url": "https://webz.io/",
"description": "Forum and discussion search capability operated through Webz.io infrastructure and data products.",
"status": "live",
"pricing": "freemium",
"bestFor": "Forum discussion discovery with optional API-driven workflows",
"input": "Keywords and Boolean-style forum queries",
"output": "Discussion posts and thread-level matching results",
"opsec": "passive",
"opsecNote": "Uses indexed discussion datasets from a third-party provider; user-side browsing is passive.",
"localInstall": false,
"googleDork": true,
"registration": false,
"editUrl": true,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Craigslist Forums",
"type": "url",
"url": "https://forums.craigslist.org/",
"description": "Craigslist-hosted forum system for public community discussions and region-oriented threads.",
"status": "live",
"pricing": "free",
"bestFor": "Reviewing Craigslist community discussions and regional forum activity",
"input": "Forum categories, keywords, and regional navigation",
"output": "Forum threads, post content, and timing context",
"opsec": "passive",
"opsecNote": "Reads publicly visible forum content and does not require direct messaging or contact with users.",
"localInstall": false,
"googleDork": true,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Delphi Forum Search",
"type": "url",
"url": "https://www.delphiforums.com/",
"description": "Forum platform with searchable user communities across niche interest categories.",
"status": "live",
"pricing": "freemium",
"bestFor": "Niche forum discovery and historical community thread review",
"input": "Forum names, categories, and keywords",
"output": "Forum listings, thread titles, and message pages",
"opsec": "passive",
"opsecNote": "Public forum browsing is passive; some communities may require registration for deeper access.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Google Groups Search",
"type": "url",
"url": "https://groups.google.com/forum/#!overview",
"description": "Search interface for Google Groups and archived discussion content, including historical threads.",
"status": "live",
"pricing": "free",
"bestFor": "Researching archived mailing-list and discussion-group content",
"input": "Keywords, group names, authors, and date ranges",
"output": "Thread messages and group-level discussion results",
"opsec": "passive",
"opsecNote": "Searches archived public discussions through Google-hosted infrastructure where activity is logged.",
"localInstall": false,
"googleDork": true,
"registration": false,
"editUrl": true,
"api": true,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "IRC Search",
"type": "folder",
"children": [
{
"name": "Mibbit",
"type": "url",
"url": "https://search.mibbit.com/",
"description": "Former web IRC client and channel search service that is no longer operational.",
"status": "down",
"pricing": "free",
"bestFor": "Legacy reference for historical IRC channel search workflows",
"input": "Channel or keyword queries (historical behavior)",
"output": "No current output; service is discontinued",
"opsec": "Unknown",
"opsecNote": "Service shut down on August 30, 2024 and cannot be relied on for active workflows.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": true
},
{
"name": "IRCP (T)",
"type": "url",
"url": "https://github.com/internet-relay-chat/IRCP",
"description": "Python-based IRC probing utility for scanning servers and collecting network/channel metadata.",
"status": "live",
"pricing": "free",
"bestFor": "IRC server enumeration and protocol-level reconnaissance",
"input": "Target ranges, IRC ports, and server parameters",
"output": "Server and channel metadata in machine-readable output",
"opsec": "active",
"opsecNote": "Actively connects to IRC services and may be detectable by network monitoring and server logs.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "ircsnapshot (T)",
"type": "url",
"url": "https://github.com/bwall/ircsnapshot",
"description": "IRC data collection tool that connects bots to servers for user and channel mapping.",
"status": "live",
"pricing": "free",
"bestFor": "IRC topology mapping and user/channel relationship analysis",
"input": "IRC server details, bot config, and channel targets",
"output": "Collected user, hostmask, and channel affiliation data",
"opsec": "active",
"opsecNote": "Requires active network participation via bot accounts and is likely visible to channel operators.",
"localInstall": true,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "netsplit.de",
"type": "url",
"url": "https://netsplit.de/channels/search.php",
"description": "IRC directory and search portal for channel listings, network stats, and discovery workflows.",
"status": "live",
"pricing": "free",
"bestFor": "Passive IRC channel discovery and network trend checks",
"input": "Channel names, keywords, and network filters",
"output": "Channel listings with network and user-count context",
"opsec": "passive",
"opsecNote": "Uses aggregated indexed IRC data and does not require direct IRC server interaction for searches.",
"localInstall": false,
"googleDork": true,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
},
{
"name": "Reddit Communities",
"type": "folder",
"children": [
{
"name": "Arctic Shift",
"type": "url",
"url": "https://arctic-shift.photon-reddit.com/",
"description": "Search and access layer for Reddit datasets with tools for historical content retrieval and analysis.",
"status": "live",
"pricing": "freemium",
"bestFor": "Historical Reddit dataset analysis and subreddit research",
"input": "Search terms, dataset queries, or API-style requests",
"output": "Matching Reddit posts, comments, and metadata from indexed datasets",
"opsec": "passive",
"opsecNote": "Works against archived or indexed data sources without requiring direct engagement with target accounts.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Cama's Reddit Search",
"type": "url",
"url": "https://camas.github.io/reddit-search/",
"description": "Web tool for searching Reddit posts and comments by author, subreddit, text, and time filters.",
"status": "live",
"pricing": "free",
"bestFor": "Reddit user and subreddit content discovery",
"input": "Usernames, subreddits, keywords, and date constraints",
"output": "Filtered post/comment search results with metadata",
"opsec": "passive",
"opsecNote": "Uses public data indexing paths; original GitHub hosting was discontinued but alternative hosting remains available.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": false,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Reveddit",
"type": "url",
"url": "https://www.reveddit.com/",
"description": "Interface for viewing Reddit content removals using archived and moderation-related visibility signals.",
"status": "live",
"pricing": "free",
"bestFor": "Investigating deleted or removed Reddit discussions",
"input": "Reddit URLs, usernames, or subreddit paths",
"output": "Recovered or flagged removed-content views with moderation indicators",
"opsec": "passive",
"opsecNote": "Queries archive-backed sources and public content pathways without direct contact to target users.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": false,
"invitationOnly": false,
"deprecated": false
}
]
}
]
},
{
"name": "Archives",
"type": "folder",
"children": [
{
"name": "Web",
"type": "folder",
"children": [
{
"name": "Internet Archive: Wayback Machine",
"type": "url",
"url": "https://web.archive.org/",
"description": "Web archive providing historical snapshots of websites captured over time.",
"status": "live",
"pricing": "free",
"bestFor": "Historical website analysis, deleted content recovery",
"input": "URL or domain",
"output": "Archived web page snapshots with timestamps",
"opsec": "passive",
"opsecNote": "Queries archived data. Does not contact the target. Searches may be logged by the Internet Archive.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": true,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Archive.is",
"type": "url",
"url": "https://archive.is/"
},
{
"name": "WebCite",
"type": "url",
"url": "https://www.webcitation.org:443/query"
},
{
"name": "Cached View",
"type": "url",
"url": "https://cachedview.com/"
},
{
"name": "Cached Pages",
"type": "url",
"url": "https://www.cachedpages.com/"
},
{
"name": "Textfiles.com",
"type": "url",
"url": "https://textfiles.com/"
},
{
"name": "UK Web Archive",
"type": "url",
"url": "https://www.webarchive.org.uk/ukwa/"
},
{
"name": "Screenshots.com",
"type": "url",
"url": "https://www.screenshots.com/"
},
{
"name": "Common Crawl",
"type": "url",
"url": "https://commoncrawl.org/"
},
{
"name": "Wayback Machine Chrome Extension",
"type": "url",
"url": "https://chrome.google.com/webstore/detail/wayback-machine/fpnmgdkabkmnadcjpehmlllkndpkmiak"
},
{
"name": "PDF My URL",
"type": "url",
"url": "https://pdfmyurl.com/"
},
{
"name": "Common Crawl",
"type": "url",
"url": "https://commoncrawl.org/"
},
{
"name": "Anna's Archive",
"type": "url",
"url": "https://annas-archive.org/"
},
{
"name": "Browsershots",
"type": "url",
"url": "https://browsershots.org/"
},
{
"name": "Waybackpack (T)",
"type": "url",
"url": "https://github.com/jsvine/waybackpack"
},
{
"name": "Web Archive-RU",
"type": "url",
"url": "https://web-arhive.ru/"
}
]
},
{
"name": "Data Leaks",
"type": "folder",
"children": [
{
"name": "Databases.Today",
"type": "url",
"url": "https://databases.today/"
},
{
"name": "Cryptome",
"type": "url",
"url": "https://cryptome.org/"
},
{
"name": "WikiLeaks",
"type": "url",
"url": "https://wikileaks.org/"
}
]
},
{
"name": "Public Datasets",
"type": "folder",
"children": [
{
"name": "Labled Faces in the Wild DB",
"type": "url",
"url": "https://vis-www.cs.umass.edu/lfw/"
},
{
"name": "VisualGenome",
"type": "url",
"url": "https://visualgenome.org/"
},
{
"name": "UCI Spambase Data Set",
"type": "url",
"url": "https://archive.ics.uci.edu/dataset/94/spambase"
},
{
"name": "Stanford Large Network Dataset Collection",
"type": "url",
"url": "https://snap.stanford.edu/data/#amazon"
}
]
},
{
"name": "Other Media",
"type": "folder",
"children": [
{
"name": "TV Closed Caption Search",
"type": "url",
"url": "https://archive.org/details/tv"
}
]
}
]
},
{
"name": "Language Translation",
"type": "folder",
"children": [
{
"name": "Text",
"type": "folder",
"children": [
{
"name": "DeepL Translator",
"type": "url",
"url": "https://www.deepl.com/en"
},
{
"name": "Google Translate",
"type": "url",
"url": "https://translate.google.com/"
},
{
"name": "Google Input Tools",
"type": "url",
"url": "https://www.google.com/inputtools/try/"
},
{
"name": "Bing Translate",
"type": "url",
"url": "https://www.bing.com/translator/"
},
{
"name": "Word Reference",
"type": "url",
"url": "https://www.wordreference.com/"
},
{
"name": "Dictionary.com Translator",
"type": "url",
"url": "https://translate.reference.com/"
},
{
"name": "Free Translation",
"type": "url",
"url": "https://www.freetranslation.com/"
},
{
"name": "Wiktionary",
"type": "url",
"url": "https://www.wiktionary.org/"
},
{
"name": "Slangit - The Slang Dictionary",
"type": "url",
"url": "https://slangit.com/"
},
{
"name": "Slang Dictionary & Translator",
"type": "url",
"url": "https://www.noslang.com/"
},
{
"name": "Urban Dictionary",
"type": "url",
"url": "https://www.urbandictionary.com/"
}
]
},
{
"name": "Pictures",
"type": "folder",
"children": [
{
"name": "Online OCR",
"type": "url",
"url": "https://www.sodapdf.com/pdf-tools/ocr-pdf/"
},
{
"name": "i2OCR",
"type": "url",
"url": "https://www.i2ocr.com/"
},
{
"name": "New OCR",
"type": "url",
"url": "https://www.newocr.com/"
},
{
"name": "Online OCR",
"type": "url",
"url": "https://www.onlineocr.net/"
}
]
},
{
"name": "Videos",
"type": "folder",
"children": []
},
{
"name": "Analysis",
"type": "folder",
"children": [
{
"name": "WhatTheFont",
"type": "url",
"url": "https://www.myfonts.com/pages/whatthefont"
}
]
}
]
},
{
"name": "Mobile OSINT",
"type": "folder",
"children": [
{
"name": "Android",
"type": "folder",
"children": [
{
"name": "Emulation Tools",
"type": "folder",
"children": [
{
"name": "Genymotion (T)",
"type": "url",
"url": "https://www.genymotion.com/"
},
{
"name": "BlueStacks 2 (T)",
"type": "url",
"url": "https://www.bluestacks.com/"
},
{
"name": "Nox App Player",
"type": "url",
"url": "https://www.bignox.com/"
},
{
"name": "Apk Online",
"type": "url",
"url": "https://www.apkonline.net/"
}
]
},
{
"name": "Apps",
"type": "folder",
"children": [
{
"name": "Social Networking",
"type": "folder",
"children": [
{
"name": "Facebook (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=com.facebook.katana"
},
{
"name": "LinkedIn (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=com.linkedin.android"
},
{
"name": "Twitter (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=com.twitter.android"
},
{
"name": "Pinterest (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=com.pinterest"
}
]
},
{
"name": "Instant Messaging",
"type": "folder",
"children": [
{
"name": "Signal Private Messenger (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=org.thoughtcrime.securesms"
},
{
"name": "Riot.im - Communicate, your way (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=im.vector.app"
},
{
"name": "Telegram (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=org.telegram.messenger"
},
{
"name": "Snapchat (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=com.snapchat.android"
},
{
"name": "WhatsApp Messenger (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=com.whatsapp"
},
{
"name": "Kik (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=kik.android"
},
{
"name": "Yik Yak (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=com.yik.yak"
},
{
"name": "LINE (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=jp.naver.line.android"
}
]
},
{
"name": "Pictures",
"type": "folder",
"children": [
{
"name": "Instagram (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=com.instagram.android"
},
{
"name": "Flickr (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=com.yahoo.mobile.client.android.flickr"
}
]
},
{
"name": "Streaming Video",
"type": "folder",
"children": [
{
"name": "Periscope (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=tv.periscope.android"
},
{
"name": "Meerkat (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=co.getair.meerkat"
},
{
"name": "Vine (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=co.vine.android"
}
]
},
{
"name": "Truecaller (T)",
"type": "url",
"url": "https://play.google.com/store/apps/details?id=com.truecaller"
}
]
}
]
},
{
"name": "App Analysis",
"type": "folder",
"children": [
{
"name": "APKLeaks",
"type": "url",
"url": "https://github.com/dwisiswant0/apkleaks"
},
{
"name": "APKtool",
"type": "url",
"url": "https://apktool.org/"
},
{
"name": "JADX",
"type": "url",
"url": "https://github.com/skylot/jadx"
},
{
"name": "MobSF",
"type": "url",
"url": "https://github.com/MobSF/Mobile-Security-Framework-MobSF"
}
]
},
{
"name": "Device Forensics",
"type": "folder",
"children": [
{
"name": "Autopsy",
"type": "url",
"url": "https://www.autopsy.com/"
},
{
"name": "Frida",
"type": "url",
"url": "https://frida.re/"
}
]
},
{
"name": "iOS",
"type": "folder",
"children": [
{
"name": "Charles Proxy",
"type": "url",
"url": "https://www.charlesproxy.com/"
},
{
"name": "Lynxio OSINT",
"type": "url",
"url": "https://apps.apple.com/us/app/lynxio-osint/id6745894335"
},
{
"name": "OSINT Researcher",
"type": "url",
"url": "https://apps.apple.com/gy/app/osint-researcher/id6747302251"
}
]
}
]
},
{
"name": "Dark Web",
"type": "folder",
"children": [
{
"name": "General Info",
"type": "folder",
"children": [
{
"name": "Reddit Deep Web",
"type": "url",
"url": "https://www.reddit.com/r/deepweb/"
},
{
"name": "Reddit Onions",
"type": "url",
"url": "https://www.reddit.com/r/onions/"
},
{
"name": "Reddit Darknet",
"type": "url",
"url": "https://www.reddit.com/r/darknet/"
}
]
},
{
"name": "Clients",
"type": "folder",
"children": [
{
"name": "Tor Download (T)",
"type": "url",
"url": "https://www.torproject.org/download/"
},
{
"name": "Freenet Project (T)",
"type": "url",
"url": "https://freenetproject.org/pages/download.html"
},
{
"name": "I2P Anonymous Network (T)",
"type": "url",
"url": "https://geti2p.net/en/"
}
]
},
{
"name": "Discovery",
"type": "folder",
"children": [
{
"name": "OnionScan",
"type": "url",
"url": "https://github.com/s-rah/onionscan"
},
{
"name": "TorBot",
"type": "url",
"url": "https://github.com/DedSecInside/TorBot"
},
{
"name": "Tor Scan",
"type": "url",
"url": "https://www.torscan.io/"
},
{
"name": "Onioff",
"type": "url",
"url": "https://github.com/k4m4/onioff"
},
{
"name": "Hunchly Hidden Services Report",
"type": "url",
"url": "https://darkweb.hunch.ly/"
},
{
"name": "docker-onion-nmap (T)",
"type": "url",
"url": "https://github.com/milesrichardson/docker-onion-nmap"
},
{
"name": "Onion Investigator",
"type": "url",
"url": "https://oint.ctrlbox.com/"
}
]
},
{
"name": "TOR Search",
"type": "folder",
"children": [
{
"name": "Onion Cab",
"type": "url",
"url": "https://onion.cab/"
},
{
"name": "Ahmia",
"type": "url",
"url": "https://ahmia.fi/"
}
]
},
{
"name": "TOR Directories",
"type": "folder",
"children": [
{
"name": "Hidden Wiki",
"type": "url",
"url": "https://thehiddenwiki.org/"
}
]
},
{
"name": "Web O Proxy",
"type": "url",
"url": "https://weboproxy.com/"
},
{
"name": "IACA Dark Web Investigation Support",
"type": "url",
"url": "https://iaca-darkweb-tools.com/"
}
]
},
{
"name": "Disinformation & Media Verification",
"type": "folder",
"children": [
{
"name": "Deepfake Detection",
"type": "folder",
"children": [
{
"name": "DeepFake-Detect",
"type": "url",
"url": "https://github.com/aaronchong888/DeepFake-Detect"
},
{
"name": "DeepFake-Image-Detection",
"type": "url",
"url": "https://github.com/sky787770/DeepFake-Image-Detection"
},
{
"name": "DeepSafe",
"type": "url",
"url": "https://github.com/siddharthksah/DeepSafe"
},
{
"name": "DeepfakeBench",
"type": "url",
"url": "https://github.com/SCLBD/DeepfakeBench"
},
{
"name": "DeepfakeDetector",
"type": "url",
"url": "https://github.com/TRahulsingh/DeepfakeDetector"
},
{
"name": "FaceForensics++",
"type": "url",
"url": "https://github.com/ondyari/FaceForensics"
},
{
"name": "InVID-WeVerify Verification Plugin",
"type": "url",
"url": "https://chromewebstore.google.com/detail/fake-news-debunker-by-inv/mhccpoafgdgbhnjfhkcmgknndkeenfhe"
},
{
"name": "TruthScan Deepfake Detector",
"type": "url",
"url": "https://truthscan.com/deepfake-detector"
}
]
},
{
"name": "Fact-checking Tools",
"type": "folder",
"children": [
{
"name": "Duke Reporters' Lab",
"type": "url",
"url": "https://reporterslab.org/fact-checking/"
},
{
"name": "Hoaxy",
"type": "url",
"url": "https://hoaxy.iuni.iu.edu/"
},
{
"name": "PolitiFact",
"type": "url",
"url": "https://www.politifact.com/"
},
{
"name": "SciCheck",
"type": "url",
"url": "https://www.factcheck.org:443/scicheck/"
},
{
"name": "Snopes",
"type": "url",
"url": "https://www.snopes.com/"
},
{
"name": "Stop Fake Tools",
"type": "url",
"url": "https://www.stopfake.org/en/category/tools/"
}
]
},
{
"name": "Reverse Media Search",
"type": "folder",
"children": [
{
"name": "ImgOps",
"type": "url",
"url": "https://imgops.com/"
},
{
"name": "TinEye Reverse Image Search",
"type": "url",
"url": "https://tineye.com/"
}
]
},
{
"name": "Source Verification",
"type": "folder",
"children": [
{
"name": "FotoForensics",
"type": "url",
"url": "https://fotoforensics.com/"
},
{
"name": "Verification Handbook",
"type": "url",
"url": "https://verificationhandbook.com/"
},
{
"name": "Verification Junkie",
"type": "url",
"url": "https://verificationjunkie.com/"
}
]
}
]
},
{
"name": "Blockchain & Cryptocurrency",
"type": "folder",
"children": [
{
"name": "Bitcoin",
"type": "folder",
"children": [
{
"name": "Bitcoin Who's Who",
"type": "url",
"url": "https://www.bitcoinwhoswho.com/"
},
{
"name": "BitRef",
"type": "url",
"url": "https://bitref.com/"
},
{
"name": "Blockonomics",
"type": "url",
"url": "https://www.blockonomics.co/"
},
{
"name": "Blockr.io",
"type": "url",
"url": "https://blockr.io/"
},
{
"name": "Blocktrail",
"type": "url",
"url": "https://www.blocktrail.com/BTC"
},
{
"name": "Orbit (T)",
"type": "url",
"url": "https://github.com/s0md3v/Orbit"
},
{
"name": "Wallet Explorer",
"type": "url",
"url": "https://www.walletexplorer.com/"
}
]
},
{
"name": "Chain Analysis Platforms",
"type": "folder",
"children": [
{
"name": "Bitcoin Abuse Database",
"type": "url",
"url": "https://bitcoinabuse.com/"
},
{
"name": "Bitcoin Who's Who",
"type": "url",
"url": "https://www.bitcoinwhoswho.com/"
},
{
"name": "BitRef",
"type": "url",
"url": "https://bitref.com/"
},
{
"name": "Blockchair",
"type": "url",
"url": "https://blockchair.com/"
},
{
"name": "Blockscan",
"type": "url",
"url": "https://blockscan.com/"
},
{
"name": "Etherscan",
"type": "url",
"url": "https://etherscan.io/"
},
{
"name": "OXT.me",
"type": "url",
"url": "https://oxt.me/"
},
{
"name": "Wallet Explorer",
"type": "url",
"url": "https://www.walletexplorer.com/"
}
]
},
{
"name": "DeFi & DEX Tracing",
"type": "folder",
"children": [
{
"name": "DefiLlama",
"type": "url",
"url": "https://defillama.com/"
},
{
"name": "Dune Analytics",
"type": "url",
"url": "https://dune.com/"
}
]
},
{
"name": "Ethereum",
"type": "folder",
"children": [
{
"name": "Etherscan",
"type": "url",
"url": "https://etherscan.io/"
}
]
},
{
"name": "Mixer Tracking",
"type": "folder",
"children": [
{
"name": "Arkham Intelligence",
"type": "url",
"url": "https://intel.arkm.com/"
},
{
"name": "Breadcrumbs.app",
"type": "url",
"url": "https://www.breadcrumbs.app/"
},
{
"name": "MetaSleuth",
"type": "url",
"url": "https://metasleuth.io/"
},
{
"name": "MistTrack",
"type": "url",
"url": "https://misttrack.io/"
},
{
"name": "OFAC Sanctions List Search",
"type": "url",
"url": "https://sanctionssearch.ofac.treas.gov/"
}
]
},
{
"name": "Monero",
"type": "folder",
"children": [
{
"name": "Monero Blocks",
"type": "url",
"url": "https://localmonero.co/blocks/"
},
{
"name": "XMRChain.net",
"type": "url",
"url": "https://xmrchain.net/"
}
]
},
{
"name": "Multi-Chain Explorers",
"type": "folder",
"children": [
{
"name": "Bitquery Explorer",
"type": "url",
"url": "https://explorer.bitquery.io/"
},
{
"name": "Blockchair",
"type": "url",
"url": "https://blockchair.com/"
}
]
},
{
"name": "NFT Provenance",
"type": "folder",
"children": [
{
"name": "Etherscan NFT Tracker",
"type": "url",
"url": "https://etherscan.io/nft"
},
{
"name": "OpenSea",
"type": "url",
"url": "https://opensea.io/"
}
]
},
{
"name": "Privacy Coin Analysis",
"type": "folder",
"children": [
{
"name": "XMRChain.net (Monero)",
"type": "url",
"url": "https://xmrchain.net/"
},
{
"name": "Zcash Block Explorer",
"type": "url",
"url": "https://blockchair.com/zcash"
}
]
},
{
"name": "Wallet Clustering & Address Analysis",
"type": "folder",
"children": [
{
"name": "Blockchair",
"type": "url",
"url": "https://blockchair.com/"
},
{
"name": "Wallet Explorer",
"type": "url",
"url": "https://www.walletexplorer.com/"
}
]
}
]
},
{
"name": "Classifieds",
"type": "folder",
"children": [
{
"name": "Craigslist",
"type": "url",
"url": "https://charlotte.craigslist.org/"
},
{
"name": "Kijiji - Canada Classifieds",
"type": "url",
"url": "https://www.kijiji.ca:443/"
},
{
"name": "Quikr - India Classifieds",
"type": "url",
"url": "https://www.quikr.com/"
},
{
"name": "eBay",
"type": "url",
"url": "https://www.ebay.com/"
},
{
"name": "OfferUp",
"type": "url",
"url": "https://offerup.com/"
},
{
"name": "Goofbid",
"type": "url",
"url": "https://www.goofbid.com/"
},
{
"name": "SearchAllJunk",
"type": "url",
"url": "https://www.searchalljunk.com/"
},
{
"name": "TotalCraigSearch",
"type": "url",
"url": "https://www.totalcraigsearch.com/"
},
{
"name": "Search Tempest",
"type": "url",
"url": "https://www.searchtempest.com/"
},
{
"name": "francais-a-londres.org - French Classifieds",
"type": "url",
"url": "https://francaisalondres.com/"
},
{
"name": "Kleinanzeigen.de",
"type": "url",
"url": "https://www.kleinanzeigen.de/"
}
]
},
{
"name": "Encoding / Decoding",
"type": "folder",
"children": [
{
"name": "Barcodes / QR",
"type": "folder",
"children": [
{
"name": "ClearImage Barcode Reader",
"type": "url",
"url": "https://online-barcode-reader.inliteresearch.com/"
}
]
},
{
"name": "Javascript",
"type": "folder",
"children": [
{
"name": "JS Beautifier",
"type": "url",
"url": "https://beautifier.io/"
},
{
"name": "JS NICE",
"type": "url",
"url": "https://jsnice.org/"
},
{
"name": "Firebug (T)",
"type": "url",
"url": "https://getfirebug.com/downloads/"
},
{
"name": "SpiderMonkey (T)",
"type": "url",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/SpiderMonkey"
},
{
"name": "Kahu Revelo (T)",
"type": "url",
"url": "https://www.kahusecurity.com/tools/"
},
{
"name": "JavaScript Deobfuscator (T)",
"type": "url",
"url": "https://addons.mozilla.org/en-US/firefox/addon/javascript-deobfuscator/"
}
]
},
{
"name": "PHP",
"type": "folder",
"children": [
{
"name": "DDecode - PHP Decoder",
"type": "url",
"url": "https://ddecode.com/phpdecoder/"
}
]
},
{
"name": "XOR",
"type": "folder",
"children": [
{
"name": "Unix",
"type": "folder",
"children": [
{
"name": "XORSearch & XORStrings (T)",
"type": "url",
"url": "https://blog.didierstevens.com/programs/xorsearch/"
},
{
"name": "xortool (T)",
"type": "url",
"url": "https://github.com/hellman/xortool"
},
{
"name": "unxor (T)",
"type": "url",
"url": "https://github.com/tomchop/unxor"
}
]
},
{
"name": "Windows",
"type": "folder",
"children": [
{
"name": "Kahu Converter Utilities (T)",
"type": "url",
"url": "https://www.kahusecurity.com/tools/"
}
]
},
{
"name": "Python",
"type": "folder",
"children": [
{
"name": "iheartxor.py (T)",
"type": "url",
"url": "https://hooked-on-mnemonics.blogspot.com/p/iheartxor.html"
},
{
"name": "XORBruteForcer.py (T)",
"type": "url",
"url": "https://eternal-todo.com/var/scripts/xorbruteforcer"
},
{
"name": "NoMoreXOR.py (T)",
"type": "url",
"url": "https://github.com/hiddenillusion/NoMoreXOR"
},
{
"name": "Balbuzard (T)",
"type": "url",
"url": "https://bitbucket.org/decalage/balbuzard"
}
]
}
]
},
{
"name": "CyberChef",
"type": "url",
"url": "https://gchq.github.io/CyberChef/"
},
{
"name": "Functions Online",
"type": "url",
"url": "https://www.functions-online.com/"
}
]
},
{
"name": "Tools",
"type": "folder",
"children": [
{
"name": "OSINT Automation",
"type": "folder",
"children": [
{
"name": "Vector (T)",
"type": "url",
"url": "https://github.com/thesaderror/vector"
},
{
"name": "DataSploit (T)",
"type": "url",
"url": "https://github.com/datasploit/datasploit/"
},
{
"name": "Omnibus (T)",
"type": "url",
"url": "https://github.com/InQuest/omnibus"
},
{
"name": "Photon (T)",
"type": "url",
"url": "https://github.com/s0md3v/Photon"
},
{
"name": "ReconDog (T)",
"type": "url",
"url": "https://github.com/s0md3v/ReconDog"
},
{
"name": "IFTTT",
"type": "url",
"url": "https://ifttt.com/"
},
{
"name": "Slash",
"type": "url",
"url": "https://github.com/redc86/slash"
},
{
"name": "Stringify",
"type": "url",
"url": "https://www.stringify.com/"
},
{
"name": "OSRFramework (T)",
"type": "url",
"url": "https://github.com/i3visio/osrframework"
},
{
"name": "Inquisitor (T)",
"type": "url",
"url": "https://github.com/penafieljlm/inquisitor"
},
{
"name": "AutoOSINT (T)",
"type": "url",
"url": "https://github.com/bharshbarger/AutOSINT"
},
{
"name": "IntRec-Pack (T)",
"type": "url",
"url": "https://github.com/NullArray/IntRec-Pack"
},
{
"name": "OSINT-SPY (T)",
"type": "url",
"url": "https://github.com/SharadKumar97/OSINT-SPY"
},
{
"name": "Microsoft Flow",
"type": "url",
"url": "https://flow.microsoft.com/en-us/"
},
{
"name": "PhoneInfoga (T)",
"type": "url",
"url": "https://github.com/sundowndev/PhoneInfoga"
},
{
"name": "IntelligenceX",
"type": "url",
"url": "https://intelx.io/"
},
{
"name": "Scrummage (T)",
"type": "url",
"url": "https://github.com/matamorphosis/Scrummage"
},
{
"name": "Analyst Research Tools",
"type": "url",
"url": "https://analystresearchtools.com"
}
]
},
{
"name": "Graph Visualization",
"type": "folder",
"children": [
{
"name": "MIDINS TITAN",
"type": "url",
"url": "https://midins.net/titan"
}
]
},
{
"name": "Pentesting Recon",
"type": "folder",
"children": [
{
"name": "Low Hanging Fruit (T)",
"type": "url",
"url": "https://github.com/blindfuzzy/LHF"
}
]
},
{
"name": "Virtual Machines",
"type": "folder",
"children": [
{
"name": "VMware Workstation Player (T)",
"type": "url",
"url": "https://www.vmware.com/products/player/playerpro-evaluation.html"
},
{
"name": "VirtualBox (T)",
"type": "url",
"url": "https://www.virtualbox.org/"
},
{
"name": "Buscador OS (T)",
"type": "url",
"url": "https://inteltechniques.com/buscador/index.html"
},
{
"name": "Kali Linux OS (T)",
"type": "url",
"url": "https://www.kali.org/"
},
{
"name": "ParrotSec OS (T)",
"type": "url",
"url": "https://www.parrotsec.org/"
},
{
"name": "Microsoft Edge Development OS VMs (T)",
"type": "url",
"url": "https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/"
},
{
"name": "Subgraph OS (T)",
"type": "url",
"url": "https://subgraph.com/index.en.html"
},
{
"name": "Tails Live OS (T)",
"type": "url",
"url": "https://tails.boum.org/"
},
{
"name": "Whonix (T)",
"type": "url",
"url": "https://www.whonix.org/wiki/Main_Page"
}
]
},
{
"name": "Wordlist",
"type": "folder",
"children": [
{
"name": "CeWL (T)",
"type": "url",
"url": "https://github.com/digininja/CeWL"
},
{
"name": "Cupp (T)",
"type": "url",
"url": "https://github.com/Mebus/cupp"
},
{
"name": "OWASP D4N155 (T)",
"type": "url",
"url": "https://github.com/OWASP/D4N155"
},
{
"name": "W Generator",
"type": "url",
"url": "https://app.wgen.io/"
}
]
},
{
"name": "Paterva / Maltego (T)",
"type": "url",
"url": "https://www.maltego.com/",
"description": "Visual link analysis tool for mapping relationships between people, companies, domains, and infrastructure.",
"status": "live",
"pricing": "freemium",
"bestFor": "Link analysis, relationship mapping, entity correlation",
"input": "Domain, email, IP, name, phone number",
"output": "Entity relationship graph, linked records, transform results",
"opsec": "active",
"opsecNote": "Transforms may query targets directly. Some data sources log lookups.",
"localInstall": true,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Overview",
"type": "url",
"url": "https://www.overviewdocs.com/"
},
{
"name": "Online Nikto scanner",
"type": "url",
"url": "https://nikto.online/"
}
]
},
{
"name": "AI Tools",
"type": "folder",
"children": [
{
"name": "AI or Not",
"type": "url",
"url": "https://www.aiornot.com/"
},
{
"name": "Copyleaks",
"type": "url",
"url": "https://copyleaks.com/"
},
{
"name": "Decopy AI Image Detector",
"type": "url",
"url": "https://decopy.ai/ai-image-detector/"
},
{
"name": "DeepAI AI Image Detector",
"type": "url",
"url": "https://deepai.org/ai-image-detector"
},
{
"name": "DeepSeek",
"type": "url",
"url": "https://www.deepseek.com/"
},
{
"name": "DocMind AI",
"type": "url",
"url": "https://github.com/BjornMelin/docmind-ai-llm"
},
{
"name": "DuckDuckGo AI Chat",
"type": "url",
"url": "https://duckduckgo.com/aichat"
},
{
"name": "GPTZero",
"type": "url",
"url": "https://gptzero.me/"
},
{
"name": "Grammarly AI Detector",
"type": "url",
"url": "https://www.grammarly.com/ai-detector"
},
{
"name": "Hive AI Generated Content Detection",
"type": "url",
"url": "https://hivemoderation.com/ai-generated-content-detection"
},
{
"name": "Hugging Face AI Detector",
"type": "url",
"url": "https://huggingface.co/spaces/umm-maybe/AI_Detector"
},
{
"name": "Illuminarty",
"type": "url",
"url": "https://app.illuminarty.ai/"
},
{
"name": "Microsoft Copilot",
"type": "url",
"url": "https://copilot.microsoft.com/"
},
{
"name": "Ollama",
"type": "url",
"url": "https://ollama.com/"
},
{
"name": "OSINT Analyser",
"type": "url",
"url": "https://github.com/joestanding/osint-analyser"
},
{
"name": "TrueMedia",
"type": "url",
"url": "https://www.truemedia.org/"
},
{
"name": "WasItAI",
"type": "url",
"url": "https://wasitai.com/"
},
{
"name": "World Monitor",
"type": "url",
"url": "https://www.worldmonitor.app/"
},
{
"name": "You.com",
"type": "url",
"url": "https://you.com/"
}
]
},
{
"name": "Malicious File Analysis",
"type": "folder",
"children": [
{
"name": "Search",
"type": "folder",
"children": [
{
"name": "Decalage Malware Search",
"type": "url",
"url": "https://decalage.info/en/mwsearch"
},
{
"name": "VirusShare.com",
"type": "url",
"url": "https://virusshare.com/"
},
{
"name": "#totalhash",
"type": "url",
"url": "https://totalhash.cymru.com/"
},
{
"name": "VX Vault",
"type": "url",
"url": "https://vxvault.net/ViriList.php"
},
{
"name": "ID Ransomware",
"type": "url",
"url": "https://id-ransomware.malwarehunterteam.com/"
},
{
"name": "National Software Reference Library",
"type": "url",
"url": "https://nsrl.hashsets.com/national_software_reference_library1_search.php"
}
]
},
{
"name": "Hosted Automated Analysis",
"type": "folder",
"children": [
{
"name": "Office Files",
"type": "folder",
"children": [
{
"name": "TYLabs QuickSand Framework",
"type": "url",
"url": "https://scan.tylabs.com/"
},
{
"name": "JoeSandbox Document Analyzer",
"type": "url",
"url": "https://www.joesandbox.com/"
}
]
},
{
"name": "PDFs",
"type": "folder",
"children": [
{
"name": "TYLabs QuickSand Framework",
"type": "url",
"url": "https://scan.tylabs.com/"
}
]
},
{
"name": "Android",
"type": "folder",
"children": [
{
"name": "Akana Android Malware",
"type": "url",
"url": "https://akana.mobiseclab.org/"
},
{
"name": "Joe APK Analyzer",
"type": "url",
"url": "https://www.apk-analyzer.net/"
}
]
},
{
"name": "VirusTotal",
"type": "url",
"url": "https://www.virustotal.com/gui/",
"description": "Multi-engine file and URL scanner that aggregates results from 70+ antivirus engines and threat feeds.",
"status": "live",
"pricing": "freemium",
"bestFor": "Malware analysis, URL reputation, file hash lookups",
"input": "File, file hash, URL, domain, IP address",
"output": "Detection results, behavioral analysis, community comments, related indicators",
"opsec": "passive",
"opsecNote": "Uploaded files become visible to other VirusTotal users. Hash lookups are private.",
"localInstall": false,
"googleDork": false,
"registration": true,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "OPSWAT Meta Defender",
"type": "url",
"url": "https://metadefender.opswat.com/#!/"
},
{
"name": "Hybrid Analysis",
"type": "url",
"url": "https://hybrid-analysis.com/"
},
{
"name": "Malware Config",
"type": "url",
"url": "https://malwareconfig.com/"
},
{
"name": "MetaDefender",
"type": "url",
"url": "https://metadefender.opswat.com/"
},
{
"name": "Ether",
"type": "url",
"url": "https://ether.gtisc.gatech.edu/web_unpack/"
},
{
"name": "Jotti's Malware Scanner",
"type": "url",
"url": "https://virusscan.jotti.org/en-US/scan-file"
},
{
"name": "Valkyrie File Analysis",
"type": "url",
"url": "https://consumer.valkyrie.comodo.com/"
},
{
"name": "detux Linux Sandbox",
"type": "url",
"url": "https://detux.org/"
},
{
"name": "Joe File Analyzer",
"type": "url",
"url": "https://www.file-analyzer.net/"
},
{
"name": "Pikker.ee Cuckoo Sandbox",
"type": "url",
"url": "https://sandbox.pikker.ee/"
},
{
"name": "Koodous",
"type": "url",
"url": "https://koodous.com"
},
{
"name": "Any Run",
"type": "url",
"url": "https://app.any.run/"
},
{
"name": "Uncover It",
"type": "url",
"url": "https://www.uncoverit.org/"
}
]
},
{
"name": "Office Files",
"type": "folder",
"children": [
{
"name": "Office Mal Scanner (T)",
"type": "url",
"url": "https://www.reconstructer.org/"
},
{
"name": "OffVis (T)",
"type": "url",
"url": "https://download.microsoft.com/download/1/2/7/127ba59a-4fe1-4acd-ba47-513ceef85a85/OffVis.zip"
}
]
},
{
"name": "PDFs",
"type": "folder",
"children": [
{
"name": "PDF Tools (T)",
"type": "url",
"url": "https://blog.didierstevens.com/programs/pdf-tools/"
},
{
"name": "Origami Framework (T)",
"type": "url",
"url": "https://code.google.com/archive/p/origami-pdf/"
}
]
},
{
"name": "PCAPs",
"type": "folder",
"children": [
{
"name": "Malware-Traffic-Analysis.net",
"type": "url",
"url": "https://www.malware-traffic-analysis.net/index.html"
}
]
},
{
"name": "Ghidra (T)",
"type": "url",
"url": "https://github.com/NationalSecurityAgency/ghidra"
},
{
"name": "Malware Analysis Tools",
"type": "url",
"url": "https://malwareanalysis.tools/"
},
{
"name": "virustotal",
"type": "url",
"url": "https://www.virustotal.com/gui/home/upload"
}
]
},
{
"name": "Exploits & Advisories",
"type": "folder",
"children": [
{
"name": "Default Passwords",
"type": "folder",
"children": [
{
"name": "Default Passwords DB",
"type": "url",
"url": "https://cirt.net/passwords/"
},
{
"name": "Default passwords list",
"type": "url",
"url": "https://default-password.info/"
},
{
"name": "Default Password Lookup Utility",
"type": "url",
"url": "https://fortypoundhead.com/tools_dpw.asp"
},
{
"name": "Phenoelit Default Password List",
"type": "url",
"url": "https://phenoelit.org/dpl/dpl.html"
},
{
"name": "Default Router Passwords",
"type": "url",
"url": "https://www.routerpasswords.com/"
},
{
"name": "Open Sez Me Default Passwords",
"type": "url",
"url": "https://open-sez.me/"
},
{
"name": "Hashes.org",
"type": "url",
"url": "https://hashes.org/"
}
]
},
{
"name": "Vulert: Updated Open Source Vulnerability Database",
"type": "url",
"url": "https://vulert.com/vuln-db"
},
{
"name": "MITRE ATT&CK",
"type": "url",
"url": "https://attack.mitre.org/"
},
{
"name": "Exploit DB",
"type": "url",
"url": "https://www.exploit-db.com/"
},
{
"name": "Packet Storm",
"type": "url",
"url": "https://packetstormsecurity.com/"
},
{
"name": "SecurityFocus",
"type": "url",
"url": "https://www.securityfocus.com/bid"
},
{
"name": "NVD - NIST",
"type": "url",
"url": "https://nvd.nist.gov/"
},
{
"name": "OSV Vulnerability Library",
"type": "url",
"url": "https://osv.dev/list"
},
{
"name": "CVE Details",
"type": "url",
"url": "https://www.cvedetails.com/"
},
{
"name": "CVE - MITRE",
"type": "url",
"url": "https://www.cve.org/"
},
{
"name": "OWASP",
"type": "url",
"url": "https://www.owasp.org/index.php/Main_Page"
},
{
"name": "Secunia",
"type": "url",
"url": "https://secuniaresearch.flexerasoftware.com/community/research/"
},
{
"name": "Australian Cyber Security Centre",
"type": "url",
"url": "https://www.cyber.gov.au/"
},
{
"name": "Canadian Centre for Cyber Security",
"type": "url",
"url": "https://www.cyber.gc.ca/"
}
]
},
{
"name": "Threat Intelligence",
"type": "folder",
"children": [
{
"name": "Phishing",
"type": "folder",
"children": [
{
"name": "SecAI.ai",
"type": "url",
"url": "https://secai.ai/research"
},
{
"name": "https://openphish.com/feed.txt",
"type": "url",
"url": "https://openphish.com/feed.txt"
},
{
"name": "PhishTank",
"type": "url",
"url": "https://www.phishtank.com/"
},
{
"name": "PhishStats",
"type": "url",
"url": "https://phishstats.info/"
}
]
},
{
"name": "IOC Tools",
"type": "folder",
"children": [
{
"name": "Jager",
"type": "url",
"url": "https://github.com/sroberts/jager"
},
{
"name": "IOC Parser",
"type": "url",
"url": "https://github.com/armbues/ioc_parser"
},
{
"name": "Cacador",
"type": "url",
"url": "https://github.com/sroberts/cacador"
},
{
"name": "ThreatPinch Lookup",
"type": "url",
"url": "https://github.com/cloudtracer/ThreatPinchLookup"
},
{
"name": "Mimir",
"type": "url",
"url": "https://github.com/NullArray/Mimir"
},
{
"name": "iocextract (T)",
"type": "url",
"url": "https://github.com/InQuest/iocextract"
},
{
"name": "ThreatIngestor (T)",
"type": "url",
"url": "https://github.com/InQuest/ThreatIngestor"
}
]
},
{
"name": "TTPs",
"type": "folder",
"children": [
{
"name": "Malware Exploit TTP Database",
"type": "url",
"url": "https://www.pwnmalw.re/"
},
{
"name": "Mitre TTPs",
"type": "url",
"url": "https://attack.mitre.org/wiki/All_Techniques"
}
]
},
{
"name": "Terrorism & Extremism",
"type": "folder",
"children": [
{
"name": "Academic Research",
"type": "folder",
"children": [
{
"name": "Global Terrorism Database",
"type": "url",
"url": "https://www.start.umd.edu/research-projects/global-terrorism-database-gtd"
},
{
"name": "START Consortium for the Study of Terrorism and Responses to Terrorism",
"type": "url",
"url": "https://www.start.umd.edu/"
}
]
},
{
"name": "Research Centers",
"type": "folder",
"children": [
{
"name": "CSIS Warfare, Irregular Threats, and Terrorism Program",
"type": "url",
"url": "https://www.csis.org/programs/warfare-irregular-threats-and-terrorism-program"
},
{
"name": "Institute for Strategic Dialogue",
"type": "url",
"url": "https://www.isdglobal.org/"
},
{
"name": "RAND Terrorism Research",
"type": "url",
"url": "https://www.rand.org/topics/terrorism.html"
}
]
},
{
"name": "Sanctions & Watchlists",
"type": "folder",
"children": [
{
"name": "OFAC Sanctions List Search",
"type": "url",
"url": "https://sanctionssearch.ofac.treas.gov/"
},
{
"name": "OpenSanctions",
"type": "url",
"url": "https://www.opensanctions.org/"
},
{
"name": "UN Security Council Consolidated List",
"type": "url",
"url": "https://main.un.org/securitycouncil/en/content/un-sc-consolidated-list"
}
]
},
{
"name": "Terrorist Financing",
"type": "folder",
"children": [
{
"name": "Terrorist Finance Tracking Program",
"type": "url",
"url": "https://home.treasury.gov/policy-issues/terrorism-and-illicit-finance/terrorist-finance-tracking-program-tftp"
}
]
}
]
},
{
"name": "IBM X-Force Exchange",
"type": "url",
"url": "https://exchange.xforce.ibmcloud.com/new"
},
{
"name": "Malware Information Sharing Platform",
"type": "url",
"url": "https://www.misp-project.org/"
},
{
"name": "Malware Patrol",
"type": "url",
"url": "https://www.malwarepatrol.net/integrations-formats-threat-intelligence-feed-integration/"
},
{
"name": "AlienVault OTX",
"type": "url",
"url": "https://otx.alienvault.com/"
},
{
"name": "FireHOL IP Lists ",
"type": "url",
"url": "https://iplists.firehol.org/",
"description": "Collection of firewall-friendly IP lists for blocking malicious and spam sources.",
"status": "live",
"pricing": "free",
"bestFor": "Block malicious/spam IP sources",
"input": "IP address or list download",
"output": "Blacklist membership status",
"opsec": "passive",
"opsecNote": "Passive lookup of public IP reputation lists.",
"localInstall": false,
"googleDork": false,
"registration": false,
"editUrl": false,
"api": true,
"invitationOnly": false,
"deprecated": false
},
{
"name": "Maltiverse",
"type": "url",
"url": "https://maltiverse.com/start"
},
{
"name": "Malpedia",
"type": "url",
"url": "https://malpedia.caad.fkie.fraunhofer.de/library"
},
{
"name": "Project Honey Pot",
"type": "url",
"url": "https://www.projecthoneypot.org/"
},
{
"name": "Cymon Open Threat Intelligence",
"type": "url",
"url": "https://cymon.io/"
},
{
"name": "mlsecproject / combine",
"type": "url",
"url": "https://github.com/mlsecproject/combine"
},
{
"name": "hostintel - keithjjones Github",
"type": "url",
"url": "https://github.com/keithjjones/hostintel"
},
{
"name": "massive-octo-spice - csirtgadgets Github",
"type": "url",
"url": "https://github.com/csirtgadgets/massive-octo-spice"
},
{
"name": "Scam Database",
"type": "url",
"url": "https://www.scamdb.net"
},
{
"name": "Bot Scout",
"type": "url",
"url": "https://botscout.com/"
},
{
"name": "APTnotes",
"type": "url",
"url": "https://github.com/aptnotes/data"
},
{
"name": "HoneyDB",
"type": "url",
"url": "https://riskdiscovery.com/honeydb/"
},
{
"name": "Pulsedive",
"type": "url",
"url": "https://pulsedive.com"
},
{
"name": "Mr.Looquer IOC Feed - 1st Dual Stack Threat Feed",
"type": "url",
"url": "https://iocfeed.mrlooquer.com"
},
{
"name": "REScure Cyber Threat Intelligence Project",
"type": "url",
"url": "https://rescure.me/feeds.html"
},
{
"name": "Attack Surface / Security Testing",
"type": "folder",
"children": [
{
"name": "ImmuniWeb",
"type": "url",
"url": "https://www.immuniweb.com/"
}
]
}
]
},
{
"name": "OpSec",
"type": "folder",
"children": [
{
"name": "Persona Creation",
"type": "folder",
"children": [
{
"name": "Fake Name Generator",
"type": "url",
"url": "https://www.fakenamegenerator.com/"
},
{
"name": "Fake Identity Generator",
"type": "url",
"url": "https://backgroundchecks.org/justdeleteme/fake-identity-generator/"
},
{
"name": "This Person Does Not Exist",
"type": "url",
"url": "https://thispersondoesnotexist.com/"
},
{
"name": "Random User Generator",
"type": "url",
"url": "https://randomuser.me/"
},
{
"name": "Faker.js",
"type": "url",
"url": "https://cdn.rawgit.com/Marak/faker.js/master/examples/browser/index.html"
}
]
},
{
"name": "Anonymous Browsing",
"type": "folder",
"children": [
{
"name": "TOR",
"type": "folder",
"children": [
{
"name": "Tor Download (T)",
"type": "url",
"url": "https://www.torproject.org/download/"
},
{
"name": "Freenet Project (T)",
"type": "url",
"url": "https://freenetproject.org/pages/download.html"
},
{
"name": "I2P Anonymous Network (T)",
"type": "url",
"url": "https://geti2p.net/en/"
}
]
},
{
"name": "Anonymous VPNs",
"type": "folder",
"children": [
{
"name": "VPN Comparisons - That One Privacy Site",
"type": "url",
"url": "https://thatoneprivacysite.net/"
}
]
},
{
"name": "Spoof User-Agent",
"type": "folder",
"children": [
{
"name": "UserAgentString.com",
"type": "url",
"url": "https://www.useragentstring.com/pages/useragentstring.php"
},
{
"name": "WhatIsMyBrowser.com",
"type": "url",
"url": "https://www.whatismybrowser.com/"
},
{
"name": "User Agent String Decoder",
"type": "url",
"url": "https://tools.tracemyip.org/user-agent-string-decoder/"
}
]
},
{
"name": "VPN Tests",
"type": "folder",
"children": [
{
"name": "IP / DNS Leak Detection",
"type": "url",
"url": "https://ipleak.net/"
},
{
"name": "JonDonym",
"type": "url",
"url": "https://ip-check.info/?lang=en"
},
{
"name": "DNS leak test",
"type": "url",
"url": "https://www.dnsleaktest.com/"
},
{
"name": "DNS Leak Tests",
"type": "url",
"url": "https://dnsleak.com/"
},
{
"name": "IPv6 Leak Tests",
"type": "url",
"url": "https://ipv6leak.com/"
},
{
"name": "Email Leak Tests",
"type": "url",
"url": "https://emailipleak.com/"
},
{
"name": "Perfect Privacy",
"type": "url",
"url": "https://www.perfect-privacy.com/check-ip/"
},
{
"name": "WebRTC Leak Test",
"type": "url",
"url": "https://www.perfect-privacy.com/webrtc-leaktest/"
},
{
"name": "LetMeCheck.it",
"type": "url",
"url": "https://letmecheck.it/"
},
{
"name": "Trace My IP",
"type": "url",
"url": "https://www.tracemyip.org/"
}
]
},
{
"name": "Browser Tests",
"type": "folder",
"children": [
{
"name": "Browser Statistics",
"type": "url",
"url": "https://www.w3schools.com/browsers/default.asp"
},
{
"name": "WhatsMyBrowser.org",
"type": "url",
"url": "https://www.whatsmybrowser.org/"
},
{
"name": "What browser am I using.co",
"type": "url",
"url": "https://www.whatbrowseramiusing.co/"
},
{
"name": "What Browser?",
"type": "url",
"url": "https://whatbrowser.org/"
}
]
},
{
"name": "Proxy Tests",
"type": "folder",
"children": [
{
"name": "IP2Proxy",
"type": "url",
"url": "https://www.ip2proxy.com/"
}
]
},
{
"name": "NoScript (T)",
"type": "url",
"url": "https://noscript.net/"
},
{
"name": "Firefox-debloat",
"type": "url",
"url": "https://github.com/amq/firefox-debloat"
},
{
"name": "Browser Leaks",
"type": "url",
"url": "https://browserleaks.com/"
},
{
"name": "Self-Destructing Cookies (T)",
"type": "url",
"url": "https://addons.mozilla.org/en-US/firefox/addon/self-destructing-cookies/"
},
{
"name": "BrowserSpy.dk",
"type": "url",
"url": "https://browserspy.dk/"
},
{
"name": "LocaBrowser.com",
"type": "url",
"url": "https://www.locabrowser.com/"
}
]
},
{
"name": "Privacy / Clean Up",
"type": "folder",
"children": [
{
"name": "Privacy Guides",
"type": "url",
"url": "https://www.privacyguides.org/en/"
},
{
"name": "Just Delete Me",
"type": "url",
"url": "https://backgroundchecks.org/justdeleteme/"
},
{
"name": "OptOut Credit Prescreen",
"type": "url",
"url": "https://www.optoutprescreen.com/?rf=t"
},
{
"name": "Credit Freeze",
"type": "url",
"url": "https://inteltechniques.com/blog/2018/09/28/complete-credit-freeze-tutorial-update/"
},
{
"name": "Fake US Identities",
"type": "url",
"url": "https://xdd2.org/"
},
{
"name": "Social Media Fingerprint",
"type": "url",
"url": "https://robinlinus.github.io/socialmedia-leak/"
},
{
"name": "Privacy Tools",
"type": "url",
"url": "https://www.privacytools.io/"
},
{
"name": "Panopticlick",
"type": "url",
"url": "https://panopticlick.eff.org/"
},
{
"name": "Intel Techniques - Hiding from the Internet",
"type": "url",
"url": "https://inteltechniques.com/data/workbook.pdf"
},
{
"name": "The Many Hats Club - Privacy Resources",
"type": "url",
"url": "https://themanyhats.club/centralised-place-for-privacy-resources/"
},
{
"name": "The Hitchhiker\u2019s Guide to Online Anonymity",
"type": "url",
"url": "https://anonymousplanet.org/guide/"
},
{
"name": "Awesome Opt-Out Guide 2026",
"type": "url",
"url": "https://github.com/thumpersecure/opt-out-manual-2026"
}
]
},
{
"name": "Metadata / Style",
"type": "folder",
"children": [
{
"name": "Anonymouth - Document Anonymization (T)",
"type": "url",
"url": "https://github.com/psal/anonymouth"
},
{
"name": "MAT2 (T)",
"type": "url",
"url": "https://0xacab.org/jvoisin/mat2"
}
]
}
]
},
{
"name": "Documentation / Evidence Capture",
"type": "folder",
"children": [
{
"name": "Web Browsing",
"type": "folder",
"children": [
{
"name": "Forensic OSINT (T)",
"type": "url",
"url": "https://www.forensicosint.com/"
},
{
"name": "Fiddler (T)",
"type": "url",
"url": "https://www.telerik.com/download/fiddler"
},
{
"name": "Burp Suite (T)",
"type": "url",
"url": "https://portswigger.net/burp/download.html"
},
{
"name": "Page2Images (T)",
"type": "url",
"url": "https://www.page2images.com/URL-Live-Website-Screenshot-Generator"
},
{
"name": "Archive.is",
"type": "url",
"url": "https://archive.is/"
},
{
"name": "Web Page Saver",
"type": "url",
"url": "https://www.magnetforensics.com/resources/web-page-saver/"
},
{
"name": "Snapper (T)",
"type": "url",
"url": "https://github.com/dxa4481/Snapper"
},
{
"name": "Full Page Screen Capture Chrome Extension (T)",
"type": "url",
"url": "https://github.com/mrcoles/full-page-screen-capture-chrome-extension"
},
{
"name": "EZR OSINT Sidebar (T)",
"type": "url",
"url": "https://chromewebstore.google.com/detail/ezr-osint-sidebar/joagbbgciboooipadijeaoidjjigdmof"
}
]
},
{
"name": "Screen Capture",
"type": "folder",
"children": [
{
"name": "FRAPS (T)",
"type": "url",
"url": "https://fraps.com/"
},
{
"name": "ShareX (T)",
"type": "url",
"url": "https://getsharex.com/"
},
{
"name": "Greenshot (T)",
"type": "url",
"url": "https://getgreenshot.org/"
}
]
},
{
"name": "Map Locations",
"type": "folder",
"children": [
{
"name": "Google Street View - Hyperlapse",
"type": "url",
"url": "https://github.com/TeehanLax/Hyperlapse.js"
},
{
"name": "ZeeMaps",
"type": "url",
"url": "https://www.zeemaps.com/"
}
]
},
{
"name": "Timeline JS3",
"type": "url",
"url": "https://timeline.knightlab.com/"
}
]
},
{
"name": "Training",
"type": "folder",
"children": [
{
"name": "Games",
"type": "folder",
"children": [
{
"name": "GeoGuesser",
"type": "url",
"url": "https://www.geoguessr.com/"
},
{
"name": "Verif!cation Quiz Bot",
"type": "url",
"url": "https://twitter.com/quiztime"
}
]
},
{
"name": "Forensic OSINT KB Guides",
"type": "url",
"url": "https://www.forensicosint.com/osint-guide"
},
{
"name": "Open Source Intelligence Techniques",
"type": "url",
"url": "https://inteltechniques.com/"
},
{
"name": "Plessas",
"type": "url",
"url": "https://plessas.net/online-training"
},
{
"name": "The OSINTion",
"type": "url",
"url": "https://www.theosintion.com/courses"
},
{
"name": "Smart Questions",
"type": "url",
"url": "https://www.catb.org/esr/faqs/smart-questions.html"
}
]
}
]
}
Reference in New Issue View Git Blame Copy Permalink