2025 OSINT Resource List

This a collection of resources I have gathered this year. I have not used all of these, but discovered them from podcasts and blogs and gathered them as a resource for myself and others to share.

🗂️ General Frameworks & Tool Collections

Aggregators that link to hundreds of other tools.

• IntelTechniques: The industry standard for OSINT workflows and search tools by Michael Bazzell.
• Start.me Collections:
  • ZME8nR/OSINT: A highly popular, curated dashboard.
  • m6XQ08/OSINT: Another extensive collection of research links.
  • rxE68b/OpSec: Specifically focused on Operational Security.
  • rLGmnn/Images: Focused on image verification and IMINT.
• OSINT Framework: Directory of tools broken down by data type.
• All-in-One OSINT (Web-Check): A powerful tool that runs multiple checks (DNS, SSL, Whois, Headers) on a URL instantly.
• Limitless OSINT: A blog and tool repository.
• OSINT Combine / Tools: Professional training and a collection of free software utilities.
• GitHub Collections:
  • Awesome OSINT: The "master list" of open-source intelligence tools.
  • Cipher387 / Cheatsheets: Username logic and interactive tool lists.
  • The OSINT Toolbox: A repository of scripts.
  • TCM Security Resources: Resources from their OSINT course.
• Investigators Toolbox: Resource hub for professional investigators.
• GoOSINT: Directory of open-source intelligence tools.

👥 People, Usernames & Email Intelligence

Tools to find people, check usernames across platforms, and verify contact info.

• Username Enumeration (Web-based):
  • NameVine: Instantly checks username availability across major platforms.
  • Instant Username: Fast search for usernames on 100+ sites.
  • WhatsMyName (Python): The gold standard script for finding where a username is used.
  • User-Searcher: Scans massive lists of websites for username presence.
• Username Enumeration (Command Line/Scripts):
  • Maigret: Powerful tool to collect a dossier on a person by username.
  • Sherlock: Hunt down social media accounts by username.
  • Blackbird: Rapid username scanner.
• Identity & Contact Info:
  • CyberBackgroundChecks: US people search (address, phone, relatives).
  • Epieos: Reverse email search (Google Maps/Calendar link) and phone lookup.
  • GHunt: Advanced investigation of Google accounts (extracts services, photos, reviews).
  • Phonebook.cz: Lists all domains and emails associated with a target domain.
  • FaceCheck.id: Facial recognition search engine.
  • Doing Fed Time: Specific resources regarding federal inmates and prisons.
  • Spy Dialers/WakeUpDialer: Tools for reverse phone lookup or voicemail checking.
  • CallMyLostPhone: Verify if a number is active.
  • Phone Reputation Score: Checks the "spam score" of a phone number.

🌍 Geospatial Intelligence (GEOINT)

Tools for maps, sun analysis, WiFi, and tracking.

• Mapping & Street View:
  • KartaView: Open-source street level imagery (alternative to Google).
  • F4 Map: 3D rendering of OpenStreetMap data.
  • Dual Maps (WhatIsWhere): Combine Google Maps, Street View, and Bing Maps in one window.
  • OSM Search (Bellingcat): Search OpenStreetMap for specific features (e.g., "bars near hospitals").
• WiFi & Electronics:
  • WiGLE: Database of wireless networks worldwide. searchable by SSID or BSSID.
  • Geowifi: Tool to locate WiFi BSSIDs.
  • NetSpot: WiFi site survey software.
• Sun & Shadows (Chronolocation):
  • SunPath3D: 3D visualization of the sun's path for shadow analysis.
  • ShadowMap / ShadeMap: Visualizes shadows on a map at any specific date/time.
• Location Inference:
  • GeoSpy.ai: AI tool that guesses the location of a photo based on visual clues.
  • GeoHints: Reference guide for distinguishing countries/regions in photos.
  • Geocell: Mobile network location services.
  • Ocean Trackers: Tracking marine vessels.
  • NOAA Imagery: Real-time satellite imagery.
• Live Cams:
  • CamStreamer / WebcamTaxi: Directories of live surveillance/webcams.
  • Watching The World: Webcams from around the globe.

📱 Social Media Intelligence (SOCMINT)

Platform-specific analysis.

• Twitter/X & BlueSky:
  • Twiiit: A unified interface to search Twitter easily.
  • Nitter: Privacy front-end for Twitter.
  • BlueSky Directory: Search for users on the BlueSky platform.
• YouTube:
  • Filmot: Search video subtitles.
  • YouTube Metadata: Extracts exact upload times, tags, and hidden details.
• TikTok & Other:
  • Toutatis: Tool to extract information from TikTok accounts (email, phone, ID).
  • Backmoji: Analyzes Bitmojis (Snapchat) to find user details.
• General:
  • Argos: Social media tracking tool.
  • HandleHawk: Checks username handle availability.

💻 Domain, IP & Infrastructure

Analyzing websites, servers, and digital connections.

• Whois & DNS:
  • Whoxy: Reverse Whois API (find all domains owned by "John Smith").
  • OSINT.sh: Suite of tools (Reverse Whois, Analytics lookup).
  • SecurityTrails: Massive database of current and historical DNS records.
  • DNS Dumpster: Visualizes DNS maps.
• Scanners & Lookups:
  • Urlscan.io: Scans a website and takes a screenshot without you visiting it directly.
  • CentralOps: "Swiss Army Knife" for network diagnostics (Ping, Traceroute, Whois).
  • Redirect Detective: Shows the path of redirect links.
  • Host.io: Domain relationship mapping.
  • CRT.sh: Search for SSL/TLS certificates (often reveals subdomains).
• IoT & Search Engines:
  • ZoomEye: Search engine for specific devices, servers, and IoT connected to the internet.
  • CriminalIP: Threat intelligence search engine.
  • Netlas: Scans and indexes internet assets.
  • Cloudflare Radar: URL scanner and internet traffic trends.
• Expired/Old Domains:
  • ExpiredDomains.net: Searchable database of dropped domains.
  • Traffickk: Expired domain research.
• Google Dorking:
  • DorkSearch: Visual builder for advanced Google search queries.

☠️ Cyber Security, Dark Web & Breaches

Threat intel, ransomware tracking, and leak databases.

• Breach Data:
  • Breach Directory: Search known data breaches.
  • HaveIBeenSold: Checks if your data is in data broker databases.
  • OSINT Industries: Email and phone breach intelligence.
  • SOCRadar Labs: Breach and dark web monitoring.
  • Postleaks: Tool to monitor Pastebin-like sites for leaks.
  • CyberNews Leak Check: Personal data leak checker.
• Dark Web & Ransomware:
  • Dark.fail: Directory of live .onion (Tor) links.
  • DarkOwl: Darknet data intelligence.
  • Ransomlook: Tracks ransomware group activities and victim lists.
  • Dark Web Daily: News and updates on dark web activity.
  • Tor Proxy: Access Tor sites via a standard browser.
• Threat Intelligence:
  • GreyLens Phish: Phishing analysis.
  • KeyFindings: Cybersecurity blog.
  • ShadowDragon: Enterprise investigation platform.

🎭 OpSec & Persona Creation (Sock Puppets)

Tools to protect yourself and create fake identities for research.

• Generators:
  • Fake Name Generator: Create full fake identities.
  • This Person Does Not Exist: (Implied by context) AI face generation.
  • FakeID (Businer): ID card generator (for novelty/verification bypass testing).
• Communication:
  • JMP.chat: XMPP to SMS gateway.
  • TextFree: Web-based SMS and calling.
  • Temp-Mail: Disposable email addresses.
  • SMS Verification: Service for receiving OTPs.
• Anonymity:
  • Kali Anonsurf: Route all traffic through Tor on Kali Linux.
  • Personal Security Checklist: Guide to securing your digital life.
  • ProxyScrape: List of free proxies.

⚖️ Business, Finance & Documents

Corporate records and legal documents.

• OCCRP Aleph: Organized Crime and Corruption Reporting Project database.
• Offshore Leaks (ICIJ): Search the Panama Papers and other offshore leaks.
• JudyRecords: US Court cases search.
• Bankrupt11: US Bankruptcy records.
• AcreValue: Land ownership and soil data.

📷 Image, Video & File Tools

• Cleanup.pictures: AI tool to remove objects/people from images.
• Favihash: Calculate the hash of a favicon (useful for finding phishing sites using the same icon).
• Carnet.ai: AI that identifies the make/model/year of a car from a photo.
• 29a.ch Photo Forensics: Image manipulation detection.
• DeDigger: Search for files on Google Drive.

🎓 Training, Blogs & Communities

• My OSINT Training: Comprehensive courses.
• OSINT Dojo: Gamified learning path.
• Bellingcat Resources: Guides on how to investigate payment gateways, maps, etc.
• Hacktoria: CTFs and "contracts" to practice OSINT skills.
• Skull Games: Community leveraging OSINT to fight human trafficking.
• Antisyphon Training: InfoSec training courses.
• Forensic OSINT: Blog and tutorials.
• Oh Shint!: OSINT blog and resource list.
• Bullshit Hunting: Investigative journalism blog.

🛠️ Miscellaneous / Specific Utilities

• MailStore Home: Email archiving software.
• Grype: A vulnerability scanner for container images and filesystems.
• Tookie OSINT: Multi-tool script.
• LazyEgg: A script to automate some reconnaissance.
• Website Informer: General website stats.
• Tiny Scan: URL scanner.
• KeepTrack: Satellite tracking.
• Recon Village: DEFCON community for reconnaissance.
• Ashok: All-in-one OSINT reconnaissance tool.
• Ronin Recon: Ruby-based recon tool.

Download the PDF here: