A searchable directory of open-source intelligence tools with categories, short descriptions, and direct links.
This page is designed as a quick starting point for investigation, infrastructure, and security workflows in OSINT research.
| Category | Tool | Description |
|---|---|---|
| Internet-Wide Scanners | Censys | A search engine for hosts and networks that provides deep metadata on every public IP and service. |
| Internet-Wide Scanners | Shodan | The "search engine for the Internet of Things." Finds servers, webcams, industrial systems, and more. |
| Internet-Wide Scanners | FOFA | A cyberspace mapping engine similar to Shodan, widely used for finding specific asset fingerprints. |
| Internet-Wide Scanners | Netlas.io | A global internet scanner for discovering and monitoring assets, including apps, IoT, and certificates. |
| Internet-Wide Scanners | ZoomEye | Often called the "Chinese Shodan," a powerful cyberspace search engine that frequently indexes vulnerable devices others miss. |
| Internet-Wide Scanners | Awesome Shodan Queries | A curated collection of advanced Shodan search filters for finding specific (and often vulnerable) hardware. |
| DNS & IP Intelligence | SecurityTrails | The industry standard for historical DNS records, subdomains, and IP address history. |
| DNS & IP Intelligence | DomainTools | The premier enterprise-grade platform for WHOIS history, reverse IP lookups, and infrastructure pivoting. |
| DNS & IP Intelligence | BGPView | Essential for investigating ASN (Autonomous System Number) routing, IP block ownership, and network peers. |
| DNS & IP Intelligence | DNSHistory.org | A straightforward archive for looking up historical A, NS, and MX records for any domain. |
| DNS & IP Intelligence | WhoisFreaks | Provides a massive database for WHOIS lookups, historical records, and domain monitoring. |
| DNS & IP Intelligence | ViewDNS.info | A "Swiss Army Knife" for DNS; includes reverse IP lookups, port scanners, and DNS propagation checks. |
| DNS & IP Intelligence | DNS Checker | Quickly verifies DNS propagation across global servers and provides IP/WHOIS lookups. |
| DNS & IP Intelligence | IPinfo.io | Specialized in precise IP geolocation, ASN data, and identifying the organization owning an IP. |
| DNS & IP Intelligence | WhoISrequest | Excellent for tracking NameServer history and reverse WHOIS lookups back to 2002. |
| DNS & IP Intelligence | DNSlytics | Maps infrastructure by connecting domains via IPs, Mail servers, and Analytics/AdSense IDs. |
| DNS & IP Intelligence | Complete DNS | A massive repository for DNS history and monitoring changes in a domain's technical setup. |
| DNS & IP Intelligence | DNSDumpster | A domain research tool that maps out subdomains and visualizes the target's attack surface. |
| Website, Tech & OSINT Analysis | BuiltWith | Identifies the entire tech stack of a site (CMS, tracking scripts, CDNs, and ecommerce tools). |
| Website, Tech & OSINT Analysis | Wappalyzer | A popular browser extension and web tool for identifying web technologies and software versions. |
| Website, Tech & OSINT Analysis | NerdyData | A source code search engine. Search for specific HTML/JS snippets or Analytics IDs across the web. |
| Website, Tech & OSINT Analysis | SpyOnWeb | Finds related websites by searching for shared Google Analytics, AdSense, or IP addresses. |
| Website, Tech & OSINT Analysis | Maltego | A powerful visual link-analysis tool that maps relationships between domains, IPs, organizations, and people. |
| Website, Tech & OSINT Analysis | SpiderFoot | Automates OSINT collection by querying over 100 public sources to profile domains, IPs, and emails. |
| Website, Tech & OSINT Analysis | theHarvester | A classic reconnaissance tool used to gather emails, subdomains, and employee names from public sources. |
| Website, Tech & OSINT Analysis | OSINT Framework | A massive, interactive web directory that organizes hundreds of OSINT resources by data type. |
| Website, Tech & OSINT Analysis | Urlscan.io | A "sandbox" for websites. It browses a URL and records every request, script, and DOM change. |
| Website, Tech & OSINT Analysis | HackerTarget | Offers a suite of "IP Tools" including port scanners, reverse IP lookups, and web tech identification. |
| Security & Archives | VirusTotal | Analyzes files, domains, and IPs to detect malware and see how multiple security vendors rate them. |
| Security & Archives | Have I Been Pwned | The gold standard for checking if email addresses, phone numbers, or domains appear in leaked data breaches. |
| Security & Archives | AlienVault OTX | A community-driven threat intelligence platform excellent for checking IP and domain reputation. |
| Security & Archives | Crt.sh | A search engine for Certificate Transparency logs; used to find historical SSL/TLS certificates. |
| Security & Archives | Wayback Machine | The Internet Archive's tool for viewing "snapshots" of how a website looked in the past. |
| Security & Archives | Archive.is | A personal "time capsule" for web pages; takes a snapshot of a URL that remains even if the site dies. |