appsec.fyi › Open-Source Intelligence (OSINT)

Open-Source Intelligence (OSINT) Resources

Page 3 of 4: resources 101–150 of 170, added Mar 2022 to Apr 2026.

The newest Open-Source Intelligence (OSINT) resources are on the Open-Source Intelligence (OSINT) page. For a reading order instead of a date order, see the Open-Source Intelligence (OSINT) learning path.

Date AddedLinkExcerpt
2026-04-16 2026OSINT Investigation Techniques for Missing Person Cases (Trace Labs) beginnerOSINT Investigation Techniques for Missing Person Cases (Trace Labs)
2026-04-16 2026Automated OSINT Techniques for Digital Asset Discovery and Cyber Risk Assessment intermediateAutomated OSINT Techniques for Digital Asset Discovery and Cyber Risk Assessment
2026-04-16 2026Awesome OSINT - A Curated List of OSINT Resources beginner 58 min readLibrary: A curated list of open-source intelligence (OSINT) tools and resources for cyber threat intelligence, threat hunting, and OSINT practitioners of all levels. It organizes resources into categories like General Search, Google Dorks, Privacy Focused Search Engines, Data Breach Search Engines, Visual Search, Document Search, Social Networks, Domain and IP Research, and Threat Intelligence. Specific tools mentioned include DorkEye, DorkGenius, DorkGPT, and the Google Hacking Database (GHDB) for Google Dorking, alongside various national and privacy-focused search engines.
2026-04-16 2026OSINT Techniques: Complete List for Investigators beginner 41 min readTechniques enumerate 100+ methods for gathering, verifying, and analyzing publicly available information from diverse sources like social media, public records, and multimedia. These passive, non-intrusive OSINT approaches include social media analysis, network mapping, hashtag tracking, profile analysis, and geolocation, focusing on legality, ethics, and transforming raw data into actionable intelligence through verification and cross-referencing.
2026-04-10 2026OWASP OSINT Resources beginner 4 min readLibrary of OSINT tools and techniques for cybersecurity professionals, journalists, and researchers. It details resources like Shodan, Censys, Maltego, TheHarvester, Recon-ng, SpiderFoot, OSINT Framework, and Google Dorking for reconnaissance, threat monitoring, and uncovering exposed assets. The entry also covers metadata analysis and social media intelligence tools, offering a structured approach to defining goals, identifying sources, collecting and analyzing data, and documenting findings.
2026-04-10 2026Top 10 OSINT Tools and Software for 2026 beginnerTop 10 OSINT Tools and Software for 2026
2026-04-10 2026How to Conduct Investigations Using OSINT & Maltego intermediate 10 min readTutorial on using OSINT and Maltego for person of interest investigations. This resource demonstrates how to link disparate leads by building a comprehensive map of a target's digital footprint, integrating data from OSINT, social intelligence, and identity sources. It covers steps like discovering official information, tracing digital trails through website analysis to find email addresses and phone numbers, mapping social media profiles with SOCMINT, and exploring affiliated companies. The tutorial uses specific examples like public individuals Aina and Marc Clotet to illustrate techniques for uncovering aliases and potential private connections.
2026-04-10 20268 Best OSINT Tools (Paid & Free) in 2025 beginner 46 min readLibrary of OSINT tools for cybersecurity professionals, including Maltego for link analysis, OSINT Framework for resource discovery, Babel Street Insights for multilingual monitoring, Google Dorks for advanced search queries, Shodan for device insights, Metasploit for penetration testing, Recon-ng for web reconnaissance, and Aircrack-ng for Wi-Fi security. These tools automate data collection, streamline analysis, and help mitigate information overload for threat intelligence and investigative work.
2026-04-10 2026Best Open Source Windows OSINT Tools 2026 beginner 10 min readGuide to Open Source OSINT Tools, this collection highlights free, collaborative software for intelligence gathering. It details capabilities like web searching, live monitoring, geolocation tracking, image analysis, reverse image searching, and automated scanning. The guide categorizes tools including search engines, social media platforms, databases, mapping platforms, metadata analysis tools, Maltego Transforms, and visualization software, emphasizing benefits like cost savings, customization, collaboration, security, and accessibility for users such as journalists.
2026-04-10 2026Top 10 OSINT Tools 2026 - DevOpsSchool beginner 7 min readLibrary of 10 top Open Source Intelligence (OSINT) tools for 2026, including Maltego for link analysis, Shodan for internet-connected device searching, Spycloud for data breach monitoring, Social-Searcher for social media tracking, Hunchly for automated web data collection, and Recorded Future for threat intelligence. This collection aids cybersecurity professionals, investigators, and researchers in leveraging public data for informed decision-making.
2026-04-10 2026Open Source Intelligence GitHub Topics beginnerOpen Source Intelligence GitHub Topics
2026-04-10 202613 Best OSINT Tools for 2025 beginner 12 min readLibrary for OSINT investigations, this resource provides a curated list of top tools for 2025, including Talkwalker and Hootsuite for AI-powered social media monitoring, Maltego for visualizing connections in cybercrime investigations, OSINT Industries for tracking online identities, Intelligence X for deep searches of darknet and data leaks, and Crimewall by Social Links for comprehensive cybercrime analysis.
2026-04-10 20269 Top OSINT Tools & How to Evaluate Them beginner 10 min readLibrary for OSINT that streamlines threat intelligence gathering by processing publicly available information from various sources. It aids in identifying exposed assets, leaked credentials, and risky domains, offering features like multilingual analysis, dark web monitoring via DarkSearch.io, and metadata extraction from documents with FOCA. Tools like BuiltWith help map attack surfaces, while Intelligence X and Babel X focus on discovering sensitive data and threat actor activity across deep and dark web platforms. → wiz.io
2026-04-10 2026Best OSINT Tools for Intelligence Gathering (2026) beginner 14 min readLibrary of 24 OSINT tools for advanced intelligence gathering, covering both free and paid options. This resource assesses tools based on their integration into real-world OSINT workflows, considering specific use cases for digital investigations and threat intelligence. Featured tools include ShadowDragon® Horizon®, ExifTool, DNSDumpster, VirusTotal, Google Earth Pro, Recorded Future, DeHashed, SpiderFoot, Shodan, Censys, X-Ray Contact, and IRBIS Pro OSINT Profiler.
2026-04-10 2026OSINT Bible: Comprehensive 2026 Guide beginner 26 min readLibrary for responsible OSINT practices, offering a structured 4-step methodology, a tools mind map, and detailed sections on internet search, social networks, geoINT, domain/IP/DNS, and deep/dark web investigations. It covers automation with Python, report templates, legal considerations, and specific tools like Twint-fork, Maigret, Amass, Recon-ng, and SpiderFoot, alongside crucial techniques such as advanced Google Dorking. The resource also includes sections on AI intelligence, facial recognition, data breaches, and cryptocurrency OSINT, with a notable tip to explore Abster Intelligence for local-first evidence organization.
2026-04-06 2026AI-enabled Workflows and Deeper Intelligence beginner 5 min readLibrary of AI-driven blockchain investigation tools featuring Co-Case Agent for natural-language fund tracing and exposure analysis, real-time adverse media summaries synthesized from OSINT, customizable risk monitoring segments for transaction analysis, proactive entity risk alerts, expanded Wallet Screening API for indirect exposure visibility, and a Super Fast Scan mode in Seed Analysis for rapid seed phrase triage, countering the 500% rise in AI-enabled crypto scam activity.
2026-04-06 202610 Best Threat Intelligence Tools In 2026 beginner 11 min readLibrary of threat intelligence tools for 2026, including CloudSEK, Recorded Future, CrowdStrike, Mandiant, and Microsoft, were evaluated for their predictive depth, contextual accuracy, and integration with operational security workflows. These platforms collect, analyze, and contextualize information about emerging cyber threats from various sources, including dark web communities and malware repositories. Key features reviewed include external attack surface monitoring, brand impersonation detection, infrastructure exposure tracking, and integration with SIEM, SOAR, and XDR systems for improved detection and response. → cloudsek.com
2026-04-06 2026Open Source Intelligence (OSINT): AI-Powered Image Geo-Location intermediate 3 min readTool for AI-powered image geolocation using ChatGPT's custom GeoGuessr GPT. This tool synthesizes visual objects from uploaded images, offering probabilistic guesses about locations and providing a framework for reasoning. While not a replacement for traditional OSINT techniques like shadow analysis, it significantly speeds up the initial sorting process by leveraging a vast training dataset of geotagged images and city descriptions. The custom GPT acts as a wrapper around base models, directing general intelligence towards the specific task of image analysis and location estimation.
2026-04-06 2026Top 15 OSINT Tools For Cybersecurity In 2026 beginner 9 min readTools offering open-source intelligence (OSINT) aid cybersecurity professionals in gathering data from public sources. These tools are vital for threat detection, vulnerability assessment, and incident response, with applications extending to brand monitoring, law enforcement, and competitive analysis. Specific tools like Maltego facilitate visual data mapping, Shodan discovers internet-connected devices, and Cyble ODIN scans internet assets for vulnerabilities and exposed information. The evolution of OSINT includes advanced web scraping, social media analytics, and geospatial intelligence, emphasizing the importance of balancing intelligence gathering with operational security (OPSEC) and adhering to legal and ethical guidelines like GDPR and CCPA.
2026-04-03 2026Bug Bounty 101: Top 10 Reconnaissance Tools | Netlas beginner 18 min read ReconReference of top reconnaissance tools for bug bounty hunters, detailing passive and active techniques. Highlights include Netlas.io for mapping internet infrastructure, discovering domains, subdomains, and open ports, and Waybackurls for extracting historical URLs from the Wayback Machine, uncovering past pages, login panels, and APIs.
2026-04-03 2026Top 10 OSINT Tools Everyone Should Know | SMIIT CyberAI beginner 5 min readTools for Open Source Intelligence (OSINT) gathering are detailed, including Maltego for link analysis, Shodan for internet-connected device discovery, Recon-ng for web reconnaissance, SpiderFoot for automating data collection from over 100 sources, theHarvester for domain information, FOCA and Metagoofil for metadata extraction from documents, Datasploit as an automated OSINT framework, the OSINT Framework as a categorized resource collection, and Google Dorks for advanced search queries.
2026-04-03 2026Top 10 OSINT Tools in 2025 Cyber Analysts Trust beginner 4 min readLibrary of OSINT tools for 2025 cybersecurity analysis, including SpiderFoot HX for automated reconnaissance, Maltego for link analysis, Shodan for IoT indexing, Intelligence X for data leaks, Recon-ng for modular web reconnaissance, OSINT Dojo Toolkit for skill-building, TheHarvester for data gathering, Mitaka with SecurityTrails for rapid pivoting, DarkSearch.io for dark web indexing, and Sherlock for username tracking. These tools are essential for analysts, red teamers, and investigators seeking precision and speed in uncovering public data.
2026-04-03 202610 Best Open Source Intelligence (OSINT) Tools Of 2025 beginner 5 min readTools providing Open Source Intelligence (OSINT) such as Maltego, Shodan, theHarvester, SpiderFoot, Recon-ng, FOCA, BinGoo, Datasploit, OSINT Framework, and Metagoofil aid web professionals in security assessment, digital footprint mapping, and vulnerability identification by aggregating and analyzing data from public sources like domain registrations, DNS records, and social media. These instruments help reveal an organization's attack surface, identify exposed assets, and understand the threat landscape for WordPress sites.
2026-04-03 2026What is OSINT? Tools, Techniques and Framework Explained beginnerWhat is OSINT? Tools, Techniques and Framework Explained
2026-04-03 202615 Best OSINT Tools in 2026 | Lampyre beginner 9 min readReference list detailing 15 essential OSINT tools for 2026, including Lampyre, Maltego, Shodan, Intelligence X, and SpiderFoot. These tools aid in gathering and analyzing publicly available data for cybersecurity, threat intelligence, and investigative research. The entry highlights their features, pros, and cons, emphasizing their roles in network reconnaissance, data leakage detection, and uncovering digital intelligence.
2026-04-03 2026Open Source Intelligence Tools and Resources Collection beginner 5 min readCollection of Open Source Intelligence tools and resources designed for gathering and analyzing publicly available information. It includes a comprehensive meta-resource, the OSINT Framework, linking to various free tools such as MISP for threat intelligence sharing, SpiderFoot for automating OSINT, Shodan for internet-connected device discovery, urlscan.io for website analysis, Maltego for link analysis, Recon-ng for web reconnaissance, IntelOwl for threat intelligence management, DNS Twister for anti-phishing, Insecam for surveillance camera directories, IP Logger for IP tracking, That's Them for people search, and ImgOps for image analysis.
2026-04-03 2026OSINT for Threat Enrichment: Deep Dive with Maltego, SpiderFoot, IntelX, Recon-ng intermediateOSINT for Threat Enrichment: Deep Dive with Maltego, SpiderFoot, IntelX, Recon-ng
2026-04-03 2026Top 15 Free OSINT Tools To Collect Data From Open Sources beginner 13 min readLibrary of 15 free OSINT tools aids in intelligence gathering, covering areas like web scraping, social media analytics, and network scanning. Tools such as OSINT Framework, Google Dorks, and theharvester facilitate efficient data collection. Recorded Future's Vulnerability Database and Triage Malware Sandbox offer specific insights into CVEs and malware analysis, respectively, supporting cybersecurity investigations and threat intelligence. Mitaka and Recorded Future's Browser Extension provide browser-based reconnaissance capabilities.
2026-04-02 2026Build Your Own OSINT APIs for Pen Testers intermediate 5 min readLibrary for building custom OSINT APIs using NodeJS and MongoDB. This resource demonstrates indexing large datasets from Rapid7's Project Sonar for efficient domain and subdomain searches, bypassing limitations of existing tools like Whoxy and HackerTarget. It details processing raw DNS records, utilizing MongoDB's multikey indexing, and exposing data via a simple API, enabling custom searches similar to Shodan's core features without rate limits.
2026-04-02 2026AI vs dirty money: Using opensource intelligence to expose illicit financial flows beginner 4 min readAnalysis of AI-powered open-source intelligence (OSINT) techniques for exposing illicit financial flows, including money laundering and sanctions evasion. The article highlights the increasing scale of financial crime penalties imposed by regulators like the FCA, FinCEN, and INTERPOL, and details how AI OSINT can analyze vast datasets from social media, dark web, and cryptocurrency exchanges to identify criminal networks and suspicious activities, aiding financial institutions in compliance and risk management against threats like romance fraud.
2026-03-18 2026ljagiello/ctf-skills: Claude Code skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more beginnerClaude Code skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more - ljagiello/ctf-skills
2025-12-01 2025GitHub - kaifcodec/user-scanner: Scan a username across multiple social, developer, and creator platforms to see if it’s available. Perfect for finding a unique username across GitHub, Twitter, Reddit, Instagram, Telegram and more, all in one command. beginner 3 min readTool for OSINT reconnaissance, the user-scanner identifies digital footprints by checking email registrations and username availability across over 195 platforms, including social media, developer sites, and creator networks like GitHub, X, and Reddit. It supports single and bulk scanning, modular platform additions, proxy rotation, and outputs results in console, JSON, or CSV formats. Advanced features include wildcard username permutations and checking for exposure in infostealer malware logs via the `--hudson` flag.
2025-11-21 2025WebRecon from @D4rk_Intel is another OSINT multi-tool worth knowing about. 🧠 intermediate ReconIt automates web crawling, tech stack detection, DNS & WHOIS intel, email harvesting, Wayback lookups, and exports clean JSON reports. Try it here: https://t.co/6inbXMqnsZ
2025-11-12 2025reconurge/flowsint: A graph manager to help you save time in your cyber investigations. beginner 4 min readTool for OSINT graph exploration, Flowsint aids cybersecurity researchers, journalists, and investigators by visualizing relationships between entities. It supports numerous automated enrichers for domains, IPs, social media (including Maigret), cryptocurrency, websites, and individuals, enhancing reconnaissance and transparency. The application emphasizes local data storage for privacy and follows a modular structure for extensibility.
2025-08-14 2025IVMachiavelli/OSINT_Team_Links: Links for the OSINT Team beginner 6 min readLibrary of curated links for OSINT practitioners, covering diverse categories such as intel techniques, media verification, mapping, video search, image metadata analysis, translation, web archiving, keyword tools, IP intelligence, domain research, professional networking, business directories, expert sourcing, email verification, phone lookup, people search, and social media analysis. The collection emphasizes usability, requiring full URLs to search features and excluding paid services or software requiring downloads. Updates to the repository are encouraged.
2025-08-14 2025DataSploit/datasploit: An #OSINT Framework to perform various recon techniq beginner 1 min readFramework for performing automated OSINT on domains, emails, usernames, and phone numbers. It gathers information from various sources, correlating and consolidating results to identify credentials, API keys, tokens, subdomains, domain history, and legacy portals. The tool supports active scans on collected data and generates reports in HTML, JSON, and text formats, with options for processing single targets or lists.
2025-08-14 2025OSINT Framework beginnerFramework categorizing over 1000 OSINT tools and resources, marked with indicators for local installation (T), Google Dorking (D), registration requirements (R), or manual URL editing (M). Originally for information security, it now encompasses diverse disciplines, welcoming community contributions for comprehensive coverage.
2025-08-14 2025Hunchly - Better Online Investigations beginnerTool for collecting and storing web page data during online investigations. Hunchly automatically captures URLs, timestamps, and page content, offering secure, offline access to research findings. It integrates with Kasm Workspaces for cloud storage, empowering investigators to preserve information effectively.
2025-08-14 2025Automating OSINT Blog beginnerThe content provided is a title mentioning an "Automating OSINT Blog." It appears to be a brief reference to a blog focused on automating Open Source Intelligence (OSINT) processes. The blog likely discusses tools, techniques, and strategies for automating the collection and analysis of publicly available information for investigative purposes. It may offer insights into streamlining OSINT workflows and enhancing efficiency in gathering intelligence from various online sources.
2025-08-14 2025Thingful - a search engine for the Internet of Things beginner 2 min readLibrary: Thingful indexed thousands of IoT platforms, infrastructures, and resources, enabling users to search for devices, datasets, and real-time data by geolocation. It facilitated discovery of connected objects like energy monitors, seismographs, and animal trackers, and enabled data permissions management for connected car infrastructure. Thingful was a key component in H2020 projects such as DECODE and GROW Observatory, and sunsetted in 2022.
2025-04-04 202510 Rare and Worthy Websites and Services for Security Professionals beginnerWhile platforms like Shodan, OWASP, and VirusTotal are staples for security professionals, there are many lesser-known websites and services that offer equally valuable tools and resources. These… → osintteam.blog
2025-03-18 2025‘Dogequest’ Site Claims to Dox Tesla Owners Across the U.S. newsWriteup detailing the "DOGEQUEST" website, which purports to dox Tesla owners across the U.S. by displaying their names, addresses, phone numbers, and email addresses on a searchable map. The site offers data removal upon proof of vehicle sale and also lists Tesla dealership addresses and employee information. While some data points were verified by 404 Media, the overall veracity remains uncertain.
2024-12-29 2024Python for Dark Web OSINT: Automate Threat Monitoring intermediate PythonLearn how to use Python to automate monitoring of dark web forums, leak sites, and marketplaces for actionable threat intelligence.
2024-12-29 2024Dark Web Monitoring Using Python - Code With C intermediate 5 min readLibrary for dark web monitoring in Python, demonstrating how to use libraries like Beautiful Soup, Scrapy, Pandas, and Matplotlib for web scraping and data analysis. It includes code examples for setting up a Python environment, implementing web scraping, and leveraging cybersecurity measures like encryption and secure communication protocols for proactive threat identification and monitoring.
2024-08-27 2024Thousands of Corporate Secrets Were Left Exposed. This Guy Found Them All news 6 min read SecretsLibrary for automating the discovery of hard-coded secrets and dangling subdomain vulnerabilities. This research leverages unconventional datasets like VirusTotal's Retrohunt feature and passive DNS replication data to systematically identify thousands of exposed API keys, passwords, and authentication tokens, as well as vulnerable websites. The library aims to find trivial vulnerability classes at scale, enabling proactive security measures against potential data breaches and system compromises. → wired.com
2023-06-08 2023Google dork cheatsheet beginner 1 min read ReconCheatsheet of Google Dorking techniques, including operators like `intext:"index of /"`, `intitle:`, `filetype:`, `inurl:`, `ext:`, `~`, and `*`. The examples demonstrate effective searches for specific file types, sensitive information like salaries and budgets, and even locating unauthorized access points within websites.
2023-06-08 2023kargisimos/offensive-bookmarks beginner 1 min read Bug Bounty ReconCollection of browser bookmarks for penetration testers and bug bounty hunters, categorized into OSINT, cheat sheets, malware development and analysis, shells, obfuscation, privilege escalation, password tools, practice labs, blogs, and forums.
2022-04-25 2022Favorite tweet by @JasonFord beginner Python ReconFavorite tweet: I'm continuing to work on my python skills to gather data using threat intel APIs. I've shared this script on GitHub that you can use (with your own API key) to query @EmergingThreats...
2022-03-26 2022Favorite tweet by @0xAsm0d3us newsFavorite tweet: ALL IN ONE Hacking Tool For Hackers https://t.co/sz38nhsZXS #cybersecurity #hacking #osint #bughunting https://t.co/xRAhG6yZDJ — Devansh (⚡, 🥷) (@0xAsm0d3us) Mar 25, 2022
2022-03-14 2022Favorite tweet by @harshbothra_ beginner ReconFavorite tweet: 17 Search Engines every Security Professional Must Know 🧵 — Harsh Bothra (@harshbothra_) Mar 14, 2022