🔎 The Ultimate OSINT Arsenal for Cybersecurity, Digital Investigation & Research
OSINT (Open-Source Intelligence) means collecting, correlating, verifying, and analyzing publicly available information to produce useful intelligence.
Whether you work in Cybersecurity 🔐, Threat Intelligence 🛡️, Digital Investigation 🕵️, Geolocation 🌍, Image Analysis 🖼️, Reconnaissance 🔎, or Research 📚, these 75 OSINT tools can significantly strengthen your investigation toolkit.
🏆 TOP OSINT TOOLS
🥇 1. Maltego
🔗 Use: Link analysis, entity relationships & complex investigations
⭐ Rating: 9.8/10
🌐 URL: https://www.maltego.com/
🥈 2. Shodan
🔗 Use: Internet-exposed devices, services & infrastructure discovery
⭐ Rating: 9.7/10
🌐 URL: https://www.shodan.io/
🥉 3. SpiderFoot
🔗 Use: Automated OSINT collection & reconnaissance
⭐ Rating: 9.6/10
🌐 URL: https://github.com/smicallef/spiderfoot
4. theHarvester
🔗 Use: Emails, hosts, domains & subdomain footprinting
⭐ Rating: 9.5/10
🌐 URL: https://github.com/laramies/theHarvester
5. Censys
🔗 Use: Internet hosts, certificates & infrastructure discovery
⭐ Rating: 9.5/10
🌐 URL: https://search.censys.io/
6. Sherlock
🔗 Use: Username search across online platforms
⭐ Rating: 9.4/10
🌐 URL: https://github.com/sherlock-project/sherlock
7. Maigret
🔗 Use: Large-scale username/account enumeration
⭐ Rating: 9.3/10
🌐 URL: https://github.com/soxoj/maigret
8. ShadowDragon
🔗 Use: Professional link analysis & social intelligence
⭐ Rating: 9.2/10
🌐 URL: https://shadowdragon.io/
9. Bellingcat Toolkit
🔗 Use: Geolocation, maps, imagery, social & archive research
⭐ Rating: 9.2/10
🌐 URL: https://bellingcat.gitbook.io/toolkit
10. Have I Been Pwned
🔗 Use: Check known data-breach exposure of an email
⭐ Rating: 9.2/10
🌐 URL: https://haveibeenpwned.com/
🌐 RECON & INFRASTRUCTURE
11. OWASP Amass
🔗 Use: Attack-surface mapping & asset discovery
⭐ Rating: 9.2/10
🌐 URL: https://github.com/owasp-amass/amass
12. IntelTechniques Tools
🔗 Use: Curated OSINT search tools & investigation queries
⭐ Rating: 9.0/10
🌐 URL: https://inteltechniques.com/tools/
13. crt.sh
🔗 Use: Certificate transparency & subdomain discovery
⭐ Rating: 9.1/10
🌐 URL: https://crt.sh/
14. VirusTotal
🔗 Use: File, URL, domain & IP threat intelligence
⭐ Rating: 9.5/10
🌐 URL: https://www.virustotal.com/
15. ProjectDiscovery
🔗 Use: Modern reconnaissance & attack-surface discovery tools
⭐ Rating: 9.4/10
🌐 URL: https://projectdiscovery.io/
16. Wayback Machine
🔗 Use: Historical websites, pages & archived content
⭐ Rating: 9.4/10
🌐 URL: https://web.archive.org/
17. GreyNoise
🔗 Use: Internet scanner & IP intelligence
⭐ Rating: 9.1/10
🌐 URL: https://www.greynoise.io/
18. Recon-ng
🔗 Use: Modular web reconnaissance framework
⭐ Rating: 9.0/10
🌐 URL: https://github.com/lanmaster53/recon-ng
19. URLScan.io
🔗 Use: Website scanning, URLs & infrastructure analysis
⭐ Rating: 9.3/10
🌐 URL: https://urlscan.io/
20. SecurityTrails
🔗 Use: DNS, domains, IPs & infrastructure intelligence
⭐ Rating: 9.2/10
🌐 URL: https://securitytrails.com/
🌍 GEOLOCATION, IDENTITY & IMAGE INTELLIGENCE
21. Sentinel Hub EO Browser
🔗 Use: Satellite imagery & geographic investigation
⭐ Rating: 9.0/10
🌐 URL: https://apps.sentinel-hub.com/eo-browser/
22. Epieos
🔗 Use: Email & phone-related OSINT investigation
⭐ Rating: 8.9/10
🌐 URL: https://epieos.com/
23. Holehe
🔗 Use: Check whether an email is registered on online services
⭐ Rating: 8.8/10
🌐 URL: https://github.com/megadose/holehe
24. Recorded Future
🔗 Use: Threat intelligence & risk intelligence
⭐ Rating: 9.2/10
🌐 URL: https://www.recordedfuture.com/
25. Google Earth Pro
🔗 Use: Historical imagery, geography & visual verification
⭐ Rating: 9.1/10
🌐 URL: https://www.google.com/earth/
26. GHunt
🔗 Use: Public Google-account related OSINT
⭐ Rating: 8.8/10
🌐 URL: https://github.com/mxrch/GHunt
27. TinEye
🔗 Use: Reverse-image search & image-source discovery
⭐ Rating: 9.0/10
🌐 URL: https://tineye.com/
28. ExifTool
🔗 Use: Image/file metadata extraction & analysis
⭐ Rating: 9.3/10
🌐 URL: https://exiftool.org/
29. Criminal IP
🔗 Use: IP risk intelligence & internet-asset search
⭐ Rating: 8.8/10
🌐 URL: https://www.criminalip.io/
30. OCCRP Aleph
🔗 Use: Public records, companies & document research
⭐ Rating: 9.1/10
🌐 URL: https://aleph.occrp.org/
🔎 DNS, SEARCH & PUBLIC RECORDS
31. DNSDumpster
🔗 Use: DNS, subdomains & infrastructure mapping
⭐ Rating: 8.9/10
🌐 URL: https://dnsdumpster.com/
32. Intelligence X
🔗 Use: Historical/public datasets & indexed information
⭐ Rating: 9.0/10
🌐 URL: https://intelx.io/
33. OpenSanctions
🔗 Use: Sanctions, PEP & watchlist research
⭐ Rating: 8.9/10
🌐 URL: https://www.opensanctions.org/
34. SunCalc
🔗 Use: Sun/shadow analysis for photo & video timing
⭐ Rating: 8.7/10
🌐 URL: https://www.suncalc.org/
35. FOFA
🔗 Use: Internet-connected asset & service discovery
⭐ Rating: 8.8/10
🌐 URL: https://fofa.info/
36. ZoomEye
🔗 Use: Host & exposed-service discovery
⭐ Rating: 8.8/10
🌐 URL: https://www.zoomeye.ai/
37. BuiltWith
🔗 Use: Website technology-stack profiling
⭐ Rating: 8.9/10
🌐 URL: https://builtwith.com/
38. Netlas
🔗 Use: Internet asset, host & service discovery
⭐ Rating: 8.8/10
🌐 URL: https://netlas.io/
39. OpenCorporates
🔗 Use: Company registration & corporate research
⭐ Rating: 9.0/10
🌐 URL: https://opencorporates.com/
40. Shadowserver
🔗 Use: Internet exposure & threat reports
⭐ Rating: 8.9/10
🌐 URL: https://www.shadowserver.org/
🌐 NETWORK & WEB INTELLIGENCE
41. BGPView
🔗 Use: ASN, BGP, IP & network relationships
⭐ Rating: 8.5/10
🌐 URL: https://bgpview.io/
42. ViewDNS
🔗 Use: DNS, reverse DNS, WHOIS & domain utilities
⭐ Rating: 8.6/10
🌐 URL: https://viewdns.info/
43. Hudson Rock
🔗 Use: Infostealer-exposure intelligence
⭐ Rating: 8.8/10
🌐 URL: https://www.hudsonrock.com/
44. LeakIX
🔗 Use: Exposed-host & leak intelligence
⭐ Rating: 8.8/10
🌐 URL: https://leakix.net/
45. Overpass Turbo
🔗 Use: OpenStreetMap queries & geolocation research
⭐ Rating: 8.9/10
🌐 URL: https://overpass-turbo.eu/
46. Yandex Images
🔗 Use: Reverse-image matching
⭐ Rating: 8.9/10
🌐 URL: https://yandex.com/images/
47. AbuseIPDB
🔗 Use: IP reputation & abuse reports
⭐ Rating: 9.0/10
🌐 URL: https://www.abuseipdb.com/
48. AlienVault OTX
🔗 Use: Threat indicators & community threat intelligence
⭐ Rating: 9.0/10
🌐 URL: https://otx.alienvault.com/
49. archive.today
🔗 Use: Webpage archiving & historical snapshots
⭐ Rating: 8.7/10
🌐 URL: https://archive.today/
50. MXToolbox
🔗 Use: DNS, email, blacklist & domain diagnostics
⭐ Rating: 8.7/10
🌐 URL: https://mxtoolbox.com/
🕵️ SOCIAL, EMAIL & DIGITAL INTELLIGENCE
51. Hunter
🔗 Use: Professional email discovery & verification
⭐ Rating: 8.8/10
🌐 URL: https://hunter.io/
52. WiGLE
🔗 Use: Wireless network & Wi-Fi intelligence
⭐ Rating: 8.6/10
🌐 URL: https://wigle.net/
53. Pulsedive
🔗 Use: Threat intelligence & indicator analysis
⭐ Rating: 8.5/10
🌐 URL: https://pulsedive.com/
54. ADS-B Exchange
🔗 Use: Aircraft tracking & aviation OSINT
⭐ Rating: 8.7/10
🌐 URL: https://www.adsbexchange.com/
55. Hunchly
🔗 Use: Capture, organize & preserve web investigation evidence
⭐ Rating: 8.9/10
🌐 URL: https://www.hunch.ly/
56. OSINT Framework
🔗 Use: Directory of OSINT resources & investigation tools
⭐ Rating: 9.1/10
🌐 URL: https://osintframework.com/
57. Social-Analyzer
🔗 Use: Social-media username & profile analysis
⭐ Rating: 8.5/10
🌐 URL: https://github.com/qeeqbox/social-analyzer
58. WhatsMyName
🔗 Use: Username discovery across websites
⭐ Rating: 9.0/10
🌐 URL: https://whatsmyname.app/
59. Social Searcher
🔗 Use: Social-media search & monitoring
⭐ Rating: 8.4/10
🌐 URL: https://www.social-searcher.com/
60. Lenso.ai
🔗 Use: AI-powered reverse image search
⭐ Rating: 8.6/10
🌐 URL: https://lenso.ai/
🖼️ IMAGE, METADATA & ADVANCED OSINT
61. FaceCheck.ID
🔗 Use: Face-based image search & identity research
⭐ Rating: 8.2/10
🌐 URL: https://facecheck.id/
62. ExifInfo
🔗 Use: Image metadata & EXIF analysis
⭐ Rating: 8.3/10
🌐 URL: https://exifinfo.org/
63. Google Lens
🔗 Use: Visual search, image matching & object recognition
⭐ Rating: 9.3/10
🌐 URL: https://lens.google.com/
64. Fingerprint
🔗 Use: Digital footprint & online identity research
⭐ Rating: 8.3/10
🌐 URL: https://fingerprint.com/
65. Intelb
🔗 Use: OSINT search & intelligence research
⭐ Rating: 7.8/10
🌐 URL: https://intelx.io/
66. Exploit-DB / GHDB
🔗 Use: Security research, exploit references & Google dorks
⭐ Rating: 9.0/10
🌐 URL: https://www.exploit-db.com/
67. Whois.com
🔗 Use: Domain WHOIS & registration research
⭐ Rating: 8.5/10
🌐 URL: https://www.whois.com/
68. Mail Meteor
🔗 Use: Email intelligence & OSINT research
⭐ Rating: 7.8/10
🌐 URL: https://mailmeteor.com/
69. DarkOwl
🔗 Use: Dark-web intelligence & threat research
⭐ Rating: 8.8/10
🌐 URL: https://www.darkowl.com/
70. PhoneInfoga
🔗 Use: Phone-number OSINT & reconnaissance
⭐ Rating: 8.5/10
🌐 URL: https://github.com/sundowndev/phoneinfoga
⚡ MORE POWERFUL OSINT TOOLS
71. Blackbird
🔗 Use: Username reconnaissance across online platforms
⭐ Rating: 8.5/10
🌐 URL: https://github.com/p1ngul1n0/blackbird
72. Photon
🔗 Use: Web crawling & reconnaissance
⭐ Rating: 8.4/10
🌐 URL: https://github.com/s0md3v/Photon
73. reconFTW
🔗 Use: Automated reconnaissance & attack-surface discovery
⭐ Rating: 8.8/10
🌐 URL: https://github.com/six2dez/reconftw
74. WhatsMyName.io
🔗 Use: Username and social-profile discovery
⭐ Rating: 7.5/10
🌐 URL: https://whatsmyname.io/
75. Fingerprint.to
🔗 Use: Digital fingerprinting & online identity research
⭐ Rating: 7.4/10
🌐 URL: https://fingerprint.to/
🧭 THE OSINT WORKFLOW
🔍 01 — DISCOVER
Start with publicly available information such as domains, usernames, emails, IP addresses, images and public records.
🧩 02 — CORRELATE
Connect information using tools such as Maltego, SpiderFoot, Amass and Recon-ng.
🌍 03 — INVESTIGATE
Use Shodan, Censys, DNS tools, image search, GEOINT and archives to expand your leads.
✅ 04 — VERIFY
Never treat a single result as final truth. Verify important findings using independent sources.
📑 05 — DOCUMENT
Preserve source URLs, timestamps, screenshots and relevant evidence properly.
🔥 THE GOLDEN OSINT RULE
“One source gives you a lead. Multiple independent sources give you confidence.”
The real power of OSINT is not simply having 75 tools. It is knowing which tool to use for the right problem and properly verifying the information you discover.
🛡️ RESPONSIBLE USE
⚠️ Use publicly available information responsibly.
⚠️ Respect privacy and applicable laws.
⚠️ Do not test unauthorized systems or accounts.
⚠️ Avoid unnecessarily collecting or publishing sensitive information.
⚠️ Independently verify important findings before relying on them.
🚀 SAVE • SHARE • INVESTIGATE
🔖 Bookmark this list
📤 Share it with your Cybersecurity & OSINT community
💬 Which OSINT tool is missing from this list?