serigala1337/OSINT-Tools

Resources I use for OSINT

OSINT Tools

Index

• Social network resources and tools
  • Github
  • Google
  • Youtube
  • Twitter
  • Skype
  • Protonmail
• Cloud Storage and File Sharing
  • Mediafire
• Geolocalization
• Search engine services
• Other
• Lists and documentation

Social network resources and tools

Github

• Gitrecon: OSINT tool to get information from a Github and Gitlab profile and find user's email addresses leaked on commits.
• GitStalk: OSINT tool to get information from a Github and Gitlab profile.

Google

• Ghunt: GHunt is an OSINT tool to extract information from any Google Account using an email.
• Epieos Gmail: Get similar results as Ghunt but online!

Once you have a Google ID you can use any of the following URLs to get more information about the account:

• Google Maps: https://www.google.com/maps/contrib/<ID>
• Google Photos: https://get.google.com/albumarchive/<ID>

Youtube

Get info about a Youtube account:

https://www.youtube.com/feeds/videos.xml?user=<username>

Find Youtube accounts:

site:youtube.com/channel intitle:"<fullname>"

Twitter

Check if an email is already registered in Twitter:

https://api.twitter.com/i/users/email_available.json?email=<email>

Skype

• SkypeHunt: A python script to obtain user information using Skype Web API.

Protonmail

https://api.protonmail.ch/pks/lookup?op=index&search=<email>

• ProtOsint

Cloud Storage and File Sharing

Mediafire

• PyrOsint: PyrOsint is a simple python script that uses Mediafire API to obtain the owner of a media file for OSINT purposes.

Geolocalization

• Shade Map: The source of shade data for the planet. View shadows cast across a map of the Earth in real-time. See how shadows fall in specific locations, at specific dates/times.

Search engines services

• spyse - all in one recon service. scans the entire internet using OSINT and collects all the data in its own DB for instant access. Scanned info: ipv4 host, AS, DNS, sub/domains, whois/site info, ports/banners/protocols etc...
• criminalip.io - Criminal IP is a specialized Cyber Threat Intelligence (CTI) search engine that allows users to search for various security-related information such as malicious IP addresses, domains, banners, etc. It can be widely integrated.
• Namechk.sh: Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks.
• shodan: Shodan is a search engine for Internet-connected devices.
• phonebook.cz: Get emails by domain search.
• Spytox: Email search
• shodan.io
• wigle.net
• grep.app
• app.binaryedge.io
• onyphe.io
• viz.greynoise.io
• censys.io
• hunter.io
• fofa.so
• zoomeye.org
• leakix.net
• intelx.io
• app.netlas.io
• searchcode.com
• urlscan.io
• publicwww.com

Other

• DataSploit: An OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.
• OSINT Framework:OSINT framework focused on gathering information from free tools or resources.
• exiftool
• dirb
• nmap

Lists and documentation

• awesome-osint: A curated list of amazingly awesome OSINT.
• IntellTechniques: IntelTechniques Search Tool