20618
Every day I write about #osint (Open Source Intelligence) tools and techniques. Also little bit about forensics and cybersecurity in general. Work in https://t.me/netlas
FREE SHODAN TOOLS
cvedb.shodan.io
internetdb.shodan.io
geonet.shodan.io
entitydb.shodan.io
shdn.io
Browser Plugins
https://blog.shodan.io/5-free-things-for-everybody/
#cybersecurity
BadDNS
#Python #cli tool for detecting domain/subdomain takeovers (all kinds).
- check for dangling CNAME records, NS records, MX records
- enumerate subdomains by NSEC-walking
- check HTML content + TXT record content
https://github.com/blacklanternsecurity/baddns
Story Map
Free online tool for creating map-based visualisations (with captions, markers, photos). A lot of different options and customisations.
https://storymap.knightlab.com/
#geoint #visualisation
PageCached
A simple and free online service for finding old versions of web pages in search engine caches and web archives.
https://pagecached.com/
#osint #socmint
OnionLand
Darknet search engine (work in simple browser) + a series of article-guides on using Tor and other methods to access the .onion domain zone.
https://onionland.io/
SkyTruth
Free online map that help to find oil slicks in satellite imagery (with LLM) and identify vessels/oil platforms that may be responsible for those slicks.
https://cerulean.skytruth.org/
#osint #geoint
Awesome BlackHat Arsenal
Collection of tools featured in Black Hat Arsenal events (2015-2025, Asia, Europe, USA, Canada, MEA):
- Lab Tools
- Web/AppSec
- Red Teaming
- #OSINT
- Blue Team & Detection
- Reverse Engineering
https://github.com/elbraino/awesome-blackhat-arsenal
Subscrape
#Python tool to search subdomains and extract titles, urls, emails, tokens and any other information from the HTML code of their main pages using regular expressions.
https://github.com/cesc0sec/SecResearch
#osint
Domain Hunter
Search domains by keywords and filter by TLD (10M+ domains mapped).
50 results free, export to JSON + quick links to Shodan, VirusTotal, URLScanIO and URLVoid.
domainhunter.pro
Ubikron
You probably know Roelof Temmingh as the man who created Maltego 17 years ago, and who has been working on the Vortimo tool for the last few years.
A few days ago he released Ubikron, a tool for tracking, tagging, and saving web investigations
https://www.ubikron.com/
Search engine for KQL Queries
KQL (Kusto Query Language) is a query language that allows to extract meaningful insights from large datasets. Widely used in the cybersecurity (detecting Social Engineering Attacks, search devices with CVEs and more).
https://www.kqlsearch.com/
YouTube Comments History
Get comment history of any YouTube user (by handle/ID). Search across 20 billion comments.
youtube-tools.lolarchiver.com
Free trial by request - x.com/lol_archiver
#osint #socmint
instaclip.app
Allows to download content from Instagram without account: videos, photos, reels, stories, IGTV.
(convenient when you need to view Instagram content found in Google search results, but don't want to authorize)
#socmint
Aleph Open Search
Check if any of your data is already present on the Dark web. 18M+ and 9K+ IP2 sites indexed.
Search by company name, bitcoin address, keyword etc.
https://open-search.aleph-networks.eu/
Partly hidden search results in free version (+demo access can be requested)
You can also subscribe to Substack (https://cybdetective.substack.com/) so I don't lose you (just enter any email address). I send emails very rarely (only two since the beginning of the year).
Читать полностью…
Blockchain OSINT
- Blockchain Explorers
- Crypto OSINT Analysis & Learning
- APIs & Data Sources
- Compliance, Risk, & AML Resources
- Learning Resources
- Investigation Workflows
https://github.com/codeluu/blockchain-osint
#osint #crypto
VK WATCH
Face photo search tool for the VK social network (over a billion profiles worldwide).
https://vk.watch/
(don't pay to view profiles, just copy ID from VKwatch's URL and open profile by ID in VK)
#osint #socmint
MerkleMap
A tool to search for domains using wildcards. Useful both for phishing and typosquatting investigations and for finding subdomains/linked sites.
Partially free. May work with a slight delay.
merklemap.com
#osint #CTI
Open Measures
Free online tool to analyse keyword post statistics across social media platforms (BlueSky, 4chan, Fediverse, Telegram, VK, Rutube, Rumble Video and others).
public.openmeasures.io
#osint #socmint
GeoGuessr Alternatives
geohub.gg
hideandseek.world
openguessr.com
Tip by x.com/OsintFlow
#geoint
Have LLMs Finally Mastered Geolocation
Test of 20 models against 25 photos, rating each from 0 (red) to 10 (dark green) for accuracy in geolocating the images
https://www.bellingcat.com/resources/how-tos/2025/06/06/have-llms-finally-mastered-geolocation/?utm_source=
#osint #geoint
R00M 101 OSINT Tools Directory
113 + tools (now focused in #socmint)
For social media intelligence, archiving, automation, downloading, monitoring, scraping, searching and more.
https://r00m101.com/tools
HTML Inspector
Chrome extension from x.com/nononsenseintel to search sensitive data in opened tab HTML code:
HTML/JavaScript code comments
File names/paths of images/documents
robots.txt, ads.txt, app-ads.txt
Meta tags/HTML attributes
Sitemap
JSON-LD
https://chromewebstore.google.com/detail/html-inspector/fpaahdcndgfpbbddmgckaifkfljkfkhd
BountyOS
New Linux distro for different #cybersecurity tasks:
- based on Debian 12
- 75+ tools
- simple installation (ISO file)
https://bountyos.github.io/
Creator Sirat Sami (analyz3r) (5K+ reputation on HackerOne!)
Essential OSINT tools for journalists investigating air pollution
- tracking real-time air pollution
- identifying pollution sources
- identifying the polluters
- tracking air pollution over time
https://ijnet.org/en/story/essential-osint-tools-journalists-investigating-air-pollution
Author Renjani Sari
LeakRadar
An online tool to search for data breaches where a domain or email has been found.
leakradar.io
#dataleaks
Top 5 Mistakes When Trying to Geo-Locate a Photo
A short article on typical photo geolocation problems with tools and tips by x.com/ingvarpavlovich
ingvarpavlovich/top-5-mistakes-when-trying-to-geo-locate-a-photo-basic-8bb47f14f6a2" rel="nofollow">https://medium.com/@ingvarpavlovich/top-5-mistakes-when-trying-to-geo-locate-a-photo-basic-8bb47f14f6a2
#osint #geoint
OsintPortal
Select the data you have (e.g. email, domain, cryptocurrency wallet, company name) and get a list of resources and a tool that allows you to find something by that type of entry point to investigate.
https://osintportal.com/
Creator x.com/AaronCTI
#osint
Python OSINT Notebook
- Core Tools & Libraries
- Installation & Configuration
- Using OSINT Tools via CLI
- Python Scripting with OSINT Libraries
- Combining Tools in a Script
- OSINT Data Integration
and more.
https://github.com/tegridydev/python-OSINT-notebook
#osint #python