diff --git a/README.md b/README.md
index ff86aec..f126fee 100644
--- a/README.md
+++ b/README.md
@@ -1,90 +1,95 @@
-# AWESOME OSINT ARSENAL
+# AWESOME OSINT ARSENAL
+
### The Ultimate Open-Source Intelligence Tools Encyclopedia
-
-
-
-
-
+
+
+
+
+
- :fire: The most comprehensive OSINT resource on the internet :fire:
- 900+ tools, websites, platforms, bots, and resources across 50+ categories
- Every tool includes installation instructions where applicable
+The most comprehensive OSINT resource on the internet
+1100+ tools, websites, platforms, bots, and resources across 50+ categories
+Every tool includes installation instructions where applicable
---
-> :warning: **DISCLAIMER**: This guide is for **educational and authorized security research purposes only**. Always obtain proper authorization before testing systems you don't own. The authors are not responsible for any misuse.
+> **DISCLAIMER**: This guide is for **educational and authorized security research purposes only**. Always obtain proper authorization before testing systems you don't own. The authors are not responsible for any misuse.
---
-## :book: TABLE OF CONTENTS
+## TABLE OF CONTENTS
-1. [:mag: Username & Social Media OSINT](#1--username--social-media-osint)
-2. [:email: Email OSINT Tools](#2--email-osint-tools)
-3. [:telephone_receiver: Phone Number OSINT](#3--phone-number-osint)
-4. [:globe_with_meridians: Domain & IP OSINT](#4--domain--ip-osint)
-5. [:world_map: Geolocation & Maps OSINT](#5--geolocation--maps-osint)
-6. [:camera: Image & Video OSINT](#6--image--video-osint)
-7. [:bust_in_silhouette: Facial Recognition & People Search](#7--facial-recognition--people-search)
-8. [:bird: Social Media Monitoring](#8--social-media-monitoring)
+1. [Username & Social Media OSINT](#1-username--social-media-osint)
+2. [Email OSINT Tools](#2-email-osint-tools)
+3. [Phone Number OSINT](#3-phone-number-osint)
+4. [Domain & IP OSINT](#4-domain--ip-osint)
+5. [Geolocation & Maps OSINT](#5-geolocation--maps-osint)
+6. [Image & Video OSINT](#6-image--video-osint)
+7. [Facial Recognition & People Search](#7-facial-recognition--people-search)
+8. [Social Media Monitoring](#8-social-media-monitoring)
-9. [:closed_lock_with_key: Data Breach & Leak Search Engines](#9--data-breach--leak-search-engines)
-10. [:page_facing_up: WikiLeaks, DDoSecrets & Whistleblower Platforms](#10--wikileaks-ddosecrets--whistleblower-platforms)
-11. [:key: Password Cracking & Credential Tools](#11--password-cracking--credential-tools)
+9. [Data Breach & Leak Search Engines](#9-data-breach--leak-search-engines)
+10. [WikiLeaks, DDoSecrets & Whistleblower Platforms](#10-wikileaks-ddosecrets--whistleblower-platforms)
+11. [Password Cracking & Credential Tools](#11-password-cracking--credential-tools)
-
-12. [:new_moon: Dark Web Search Engines & Tools](#12--dark-web-search-engines--tools)
-13. [:ghost: Anonymous & Privacy Tools](#13--anonymous--privacy-tools)
+
+12. [Dark Web Search Engines & Tools](#12-dark-web-search-engines--tools)
+13. [Anonymous & Privacy Tools](#13-anonymous--privacy-tools)
-
-14. [:spider_web: Web Application OSINT & Scanning](#14--web-application-osint--scanning)
-15. [:fishing_pole_and_fish: Social Engineering & Phishing](#15--social-engineering--phishing)
-16. [:bomb: Vulnerability Scanning & Exploitation](#16--vulnerability-scanning--exploitation)
-17. [:satellite: Network & Wireless Tools](#17--network--wireless-tools)
-18. [:iphone: Mobile Hacking & Phone Exploitation](#18--mobile-hacking--phone-exploitation)
+
+14. [Web Application OSINT & Scanning](#14-web-application-osint--scanning)
+15. [Social Engineering & Phishing](#15-social-engineering--phishing)
+16. [Vulnerability Scanning & Exploitation](#16-vulnerability-scanning--exploitation)
+17. [Network & Wireless Tools](#17-network--wireless-tools)
+18. [Mobile Hacking & Phone Exploitation](#18-mobile-hacking--phone-exploitation)
-
-19. [:robot: AI-Powered OSINT Tools](#19--ai-powered-osint-tools)
-20. [:moneybag: Financial & Corporate Intelligence](#20--financial--corporate-intelligence)
-21. [:car: Vehicle, Property & Public Records](#21--vehicle-property--public-records)
-22. [:detective: Metadata & Digital Forensics](#22--metadata--digital-forensics)
+
+19. [AI-Powered OSINT & Free AI Tools](#19-ai-powered-osint--free-ai-tools)
+20. [Financial & Corporate Intelligence](#20-financial--corporate-intelligence)
+21. [Vehicle, Property & Public Records](#21-vehicle-property--public-records)
+22. [Metadata & Digital Forensics](#22-metadata--digital-forensics)
-
-23. [:video_camera: IP Camera & Webcam OSINT](#23--ip-camera--webcam-osint)
-24. [📡 Google Dorking Bible](#24--google-dorking-bible)
-25. [:link: IP Tracking & Geolocation Links](#25--ip-tracking--geolocation-links)
+
+23. [IP Camera & Webcam OSINT](#23-ip-camera--webcam-osint)
+24. [Google Dorking Bible](#24-google-dorking-bible)
+25. [Credential & Data Dorking](#25-credential--data-dorking)
+26. [IP Tracking & Geolocation Links](#26-ip-tracking--geolocation-links)
-
-26. [:speech_balloon: Telegram OSINT Bots & Channels](#26--telegram-osint-bots--channels)
-27. [:ru: Russian OSINT & Person Lookup Services](#27--russian-osint--person-lookup-services)
+
+27. [Telegram OSINT Bots & Channels](#27-telegram-osint-bots--channels)
+28. [Russian OSINT & Person Lookup Services](#28-russian-osint--person-lookup-services)
+29. [Social Media Searcher Platforms](#29-social-media-searcher-platforms)
-28. [:penguin: Termux Hacking Toolkit (Complete)](#28--termux-hacking-toolkit-complete)
-29. [:dragon: Kali Linux OSINT Toolkit](#29--kali-linux-osint-toolkit)
-30. [:package: All-in-One Hacking Frameworks](#30--all-in-one-hacking-frameworks)
-31. [:wrench: Wordlist Generation & Brute Force](#31--wordlist-generation--brute-force)
+30. [Termux Hacking Toolkit (Complete)](#30-termux-hacking-toolkit-complete)
+31. [Kali Linux OSINT Toolkit](#31-kali-linux-osint-toolkit)
+32. [All-in-One Hacking Frameworks](#32-all-in-one-hacking-frameworks)
+33. [Wordlist Generation & Brute Force](#33-wordlist-generation--brute-force)
-
-32. [:hammer_and_wrench: Hardware Hacking Tools](#32--hardware-hacking-tools)
-33. [:desktop_computer: OSINT Operating Systems](#33--osint-operating-systems)
-34. [:electric_plug: OSINT APIs & Developer Tools](#34--osint-apis--developer-tools)
-35. [:globe_with_meridians: Browser Extensions for OSINT](#35--browser-extensions-for-osint)
-36. [:books: OSINT Learning Resources](#36--osint-learning-resources)
-37. [:bookmark: Awesome OSINT GitHub Repos](#37--awesome-osint-github-repos)
+
+34. [Hardware Hacking Tools](#34-hardware-hacking-tools)
+35. [OSINT Operating Systems](#35-osint-operating-systems)
-
-38. [:zap: One-Click Install Scripts](#38--one-click-install-scripts)
-39. [:trophy: Top 50 Must-Have Tools (Quick Reference)](#39--top-50-must-have-tools-quick-reference)
+
+36. [OSINT APIs & Developer Tools](#36-osint-apis--developer-tools)
+37. [Browser Extensions for OSINT](#37-browser-extensions-for-osint)
+38. [OSINT Learning Resources](#38-osint-learning-resources)
+39. [Awesome OSINT GitHub Repos](#39-awesome-osint-github-repos)
+
+
+40. [One-Click Install Scripts](#40-one-click-install-scripts)
+41. [Top 50 Must-Have Tools (Quick Reference)](#41-top-50-must-have-tools-quick-reference)
---
-## 1. :mag: Username & Social Media OSINT
+## 1. Username & Social Media OSINT
> Tools for finding accounts, profiles, and digital footprints across platforms
@@ -92,8 +97,8 @@
|------|-------------|----------------|
| **Sherlock** | Find usernames across 400+ social networks | `pip install sherlock-project` |
| **Maigret** | Advanced Sherlock fork, 3000+ sites | `pip install maigret` |
-| **Namechk** | Username & domain availability checker | https://namechk.com |
-| **WhatsMyName** | Web-based username enumeration | https://whatsmyname.app |
+| **Namechk** | Username & domain availability checker | [namechk.com](https://namechk.com/) |
+| **WhatsMyName** | Web-based username enumeration | [whatsmyname.app](https://whatsmyname.app/) |
| **Snoop** | Username search (Russian-focused) | `pip install snoop` |
| **UserRecon** | Bash-based username finder | `git clone https://github.com/wishihab/userrecon.git` |
| **Blackbird** | Fast username search tool | `pip install blackbird-osint` |
@@ -105,10 +110,14 @@
| **Holehe** | Check if email is registered on sites | `pip install holehe` |
| **socialscan** | Check email/username availability | `pip install socialscan` |
| **Investigo** | Username checker (Go-based) | `go install github.com/tdh8316/investigo@latest` |
-| **OSINT Framework** | Visual map of all OSINT tools | https://osintframework.com |
+| **OSINT Framework** | Visual map of all OSINT tools | [osintframework.com](https://osintframework.com/) |
+| **CheckUserNames** | Check username across multiple platforms | [checkusernames.com](https://checkusernames.com/) |
+| **KnowEm** | Username search on 500+ sites | [knowem.com](https://knowem.com/) |
+| **Instant Username Search** | Real-time username checker | [instantusername.com](https://instantusername.com/) |
+| **Usersearch.org** | Free social network search | [usersearch.org](https://usersearch.org/) |
-:wrench: Installation Guide - Sherlock (All Platforms)
+Installation Guide - Sherlock (All Platforms)
```bash
# Kali Linux / Ubuntu
@@ -130,7 +139,7 @@ python3 sherlock "username"
-:wrench: Installation Guide - Maigret
+Installation Guide - Maigret
```bash
# pip install
@@ -147,7 +156,7 @@ python3 -m maigret "username"
---
-## 2. :email: Email OSINT Tools
+## 2. Email OSINT Tools
> Find information about email addresses, verify them, check breaches
@@ -157,20 +166,25 @@ python3 -m maigret "username"
| **Holehe** | Check email on 120+ sites | `pip install holehe` |
| **theHarvester** | Email & domain harvester | `pip install theHarvester` |
| **EmailAnalyzer** | Analyze suspicious .eml files | `git clone https://github.com/keraattin/EmailAnalyzer` |
+| **Prowl** | Email & domain reconnaissance | `git clone https://github.com/nettitude/Prowl` |
| **EmailHeader-Analyzer** | CLI email header parser + OSINT | `git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python` |
| **MailHeaderDetective** | Email header forensics | `git clone https://github.com/akajhon/MailHeaderDetective` |
| **WhatMail** | Email header analysis CLI | `git clone https://github.com/z0m31en7/WhatMail` |
| **mailto_analyzer** | Email exposure analysis | `pip install mailto-analyzer` |
| **Infoga** | Email OSINT gathering | `git clone https://github.com/m4ll0k/Infoga` |
-| **Hunter.io** | Find professional emails | https://hunter.io |
-| **Phonebook.cz** | Email, domain & URL search | https://phonebook.cz |
-| **EmailRep** | Email reputation lookup | https://emailrep.io |
-| **Epieos** | Get info linked to email | https://epieos.com |
-| **GetNotify** | Email open tracking + geolocation | https://getnotify.com |
-| **Snov.io** | Email finder & verifier | https://snov.io |
+| **Hunter.io** | Find professional emails | [hunter.io](https://hunter.io/) |
+| **Phonebook.cz** | Email, domain & URL search | [phonebook.cz](https://phonebook.cz/) |
+| **EmailRep** | Email reputation lookup | [emailrep.io](https://emailrep.io/) |
+| **Epieos** | Get info linked to email | [epieos.com](https://epieos.com/) |
+| **GetNotify** | Email open tracking + geolocation | [getnotify.com](https://getnotify.com/) |
+| **Snov.io** | Email finder & verifier | [snov.io](https://snov.io/) |
+| **MXToolbox** | Email header analysis & DNS checks | [mxtoolbox.com](https://mxtoolbox.com/) |
+| **SimpleLogin** | Email alias service for OSINT | [simplelogin.io](https://simplelogin.io/) |
+| **Email-Checker** | Email validation tool | [email-checker.net](https://email-checker.net/) |
+| **Voila Norbert** | Find anyone's email | [voilanorbert.com](https://voilanorbert.com/) |
-:wrench: Installation Guide - h8mail
+Installation Guide - h8mail
```bash
# Quick install
@@ -193,24 +207,26 @@ h8mail -t "target@email.com" -k config.ini
---
-## 3. :telephone_receiver: Phone Number OSINT
+## 3. Phone Number OSINT
| Tool | Description | Install / Link |
|------|-------------|----------------|
| **PhoneInfoga** | Advanced phone number scanner | `pip install phoneinfoga` |
| **Ignorant** | Check phone registrations | `pip install ignorant` |
-| **GetContact** | See how number is saved by others | https://getcontact.com |
-| **NumVerify** | Phone number validation API | https://numverify.com |
-| **Truecaller** | Caller ID & spam lookup | https://truecaller.com |
-| **Sync.me** | Phone number lookup | https://sync.me |
-| **CallerIDTest** | Reverse phone lookup | https://calleridtest.com |
-| **SpyDialer** | Free reverse phone lookup | https://spydialer.com |
-| **National Cellular Directory** | Phone owner lookup | https://www.nationalcellulardirectory.com |
-| **TelPoisk** | Russian phone directory | https://telpoisk.com |
-| **NumLookup** | Free reverse phone lookup | https://www.numlookup.com |
+| **GetContact** | See how number is saved by others | [getcontact.com](https://getcontact.com/) |
+| **NumVerify** | Phone number validation API | [numverify.com](https://numverify.com/) |
+| **Truecaller** | Caller ID & spam lookup | [truecaller.com](https://truecaller.com/) |
+| **Sync.me** | Phone number lookup | [sync.me](https://sync.me/) |
+| **CallerIDTest** | Reverse phone lookup | [calleridtest.com](https://calleridtest.com/) |
+| **SpyDialer** | Free reverse phone lookup | [spydialer.com](https://spydialer.com/) |
+| **National Cellular Directory** | Phone owner lookup | [nationalcellulardirectory.com](https://www.nationalcellulardirectory.com/) |
+| **TelPoisk** | Russian phone directory | [telpoisk.com](https://telpoisk.com/) |
+| **NumLookup** | Free reverse phone lookup | [numlookup.com](https://www.numlookup.com/) |
+| **Hlr-Lookups** | HLR phone number lookup | [hlr-lookups.com](https://www.hlr-lookups.com/) |
+| **PhoneSploit** | ADB-based phone exploitation | `git clone https://github.com/aerosol-can/PhoneSploit` |
-:wrench: Installation Guide - PhoneInfoga
+Installation Guide - PhoneInfoga
```bash
# Kali Linux
@@ -226,7 +242,7 @@ phoneinfoga scan -n "+1234567890"
---
-## 4. :globe_with_meridians: Domain & IP OSINT
+## 4. Domain & IP OSINT
| Tool | Description | Install / Link |
|------|-------------|----------------|
@@ -234,23 +250,34 @@ phoneinfoga scan -n "+1234567890"
| **Subfinder** | Fast subdomain discovery | `go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest` |
| **dnsrecon** | DNS enumeration | `pip install dnsrecon` |
| **Sublist3r** | Subdomain enumeration | `pip install sublist3r` |
-| **crt.sh** | Certificate transparency search | https://crt.sh |
-| **Shodan** | Internet-connected device search | https://shodan.io |
-| **Censys** | Internet-wide scan search | https://censys.io |
-| **VirusTotal** | Domain/IP/file analysis | https://virustotal.com |
-| **SecurityTrails** | DNS & domain intelligence | https://securitytrails.com |
+| **crt.sh** | Certificate transparency search | [crt.sh](https://crt.sh/) |
+| **Shodan** | Internet-connected device search | [shodan.io](https://shodan.io/) |
+| **Censys** | Internet-wide scan search | [censys.io](https://censys.io/) |
+| **Criminal IP** | AI-powered cyber threat intelligence search | [criminalip.io](https://www.criminalip.io/) |
+| **VirusTotal** | Domain/IP/file analysis | [virustotal.com](https://virustotal.com/) |
+| **SecurityTrails** | DNS & domain intelligence | [securitytrails.com](https://securitytrails.com/) |
| **IPGeoLocation** | IP address geolocation | `git clone https://github.com/maldevel/IPGeoLocation` |
| **Nmap** | Network scanner & mapper | `apt install nmap` / `pkg install nmap` |
| **Masscan** | Fastest port scanner | `apt install masscan` |
-| **SmartWhois** | WHOIS lookup tool | https://smartwhois.en.softonic.com |
-| **ViewDNS** | Multiple DNS tools | https://viewdns.info |
-| **DNSDumpster** | DNS reconnaissance | https://dnsdumpster.com |
-| **Robtex** | DNS lookup visualization | https://robtex.com |
-| **ARIN WHOIS** | IP registration database | https://whois.arin.net |
-| **BGP Toolkit** | BGP/ASN/IP intelligence | https://bgp.he.net |
+| **WHOIS.com** | WHOIS domain lookup | [whois.com](https://www.whois.com/) |
+| **SmartWhois** | WHOIS lookup tool | [smartwhois.en.softonic.com](https://smartwhois.en.softonic.com/) |
+| **ViewDNS** | Multiple DNS tools | [viewdns.info](https://viewdns.info/) |
+| **DNSDumpster** | DNS reconnaissance | [dnsdumpster.com](https://dnsdumpster.com/) |
+| **Robtex** | DNS lookup visualization | [robtex.com](https://robtex.com/) |
+| **ARIN WHOIS** | IP registration database | [whois.arin.net](https://whois.arin.net/) |
+| **BGP Toolkit** | BGP/ASN/IP intelligence | [bgp.he.net](https://bgp.he.net/) |
+| **urlscan.io** | URL/domain analysis & screenshots | [urlscan.io](https://urlscan.io/) |
+| **AbuseIPDB** | IP address reputation database | [abuseipdb.com](https://www.abuseipdb.com/) |
+| **Web-Check** | All-in-one website analysis (DNS, SSL, Whois, etc.) | [web-check.xyz](https://web-check.xyz/) |
+| **CentralOps** | Network tools & domain lookup | [centralops.net](https://centralops.net/) |
+| **Pentest-Tools.com** | Online pentesting & recon toolkit | [pentest-tools.com](https://pentest-tools.com/) |
+| **Yandex** | Russian search engine (great for OSINT) | [yandex.com](https://yandex.com/) |
+| **WhoisXML API** | Domain & IP intelligence API | [whoisxmlapi.com](https://whoisxmlapi.com/) |
+| **IPinfo** | IP address data & geolocation | [ipinfo.io](https://ipinfo.io/) |
+| **DB-IP** | IP geolocation database | [db-ip.com](https://db-ip.com/) |
-:wrench: Installation Guide - IPGeoLocation
+Installation Guide - IPGeoLocation
```bash
# Kali Linux / Ubuntu
@@ -270,47 +297,53 @@ python3 ipgeolocation.py -t "TARGET_IP"
---
-## 5. :world_map: Geolocation & Maps OSINT
+## 5. Geolocation & Maps OSINT
| Tool | Description | Install / Link |
|------|-------------|----------------|
-| **Google Earth Pro** | Advanced satellite imagery | https://earth.google.com |
-| **Overpass Turbo** | OpenStreetMap data query | https://overpass-turbo.eu |
-| **SunCalc** | Sun position/time calculator | https://suncalc.org |
-| **GeoGuessr** | Geolocation training game | https://geoguessr.com |
-| **Sentinel Hub** | Satellite imagery access | https://sentinel-hub.com |
-| **FIRMS** | NASA fire/thermal hotspots | https://firms.modaps.eosdis.nasa.gov |
-| **Wikimapia** | Collaborative world map | https://wikimapia.org |
-| **OpenStreetMap** | Free world map | https://openstreetmap.org |
-| **GeoSpy** | AI-powered geolocation | https://geospy.ai |
-| **Mapillary** | Street-level imagery | https://mapillary.com |
-| **Maxar** | Commercial satellite imagery | https://maxar.com |
-| **F4map** | 3D interactive world map | https://demo.f4map.com |
-| **Dual Maps** | Side-by-side map comparison | http://data.mashedworld.com/dualmaps |
+| **Google Earth Pro** | Advanced satellite imagery | [earth.google.com](https://earth.google.com/) |
+| **Overpass Turbo** | OpenStreetMap data query | [overpass-turbo.eu](https://overpass-turbo.eu/) |
+| **SunCalc** | Sun position/time calculator | [suncalc.org](https://suncalc.org/) |
+| **GeoGuessr** | Geolocation training game | [geoguessr.com](https://geoguessr.com/) |
+| **Sentinel Hub** | Satellite imagery access | [sentinel-hub.com](https://sentinel-hub.com/) |
+| **FIRMS** | NASA fire/thermal hotspots | [firms.modaps.eosdis.nasa.gov](https://firms.modaps.eosdis.nasa.gov/) |
+| **Wikimapia** | Collaborative world map | [wikimapia.org](https://wikimapia.org/) |
+| **OpenStreetMap** | Free world map | [openstreetmap.org](https://openstreetmap.org/) |
+| **GeoSpy** | AI-powered geolocation | [geospy.ai](https://geospy.ai/) |
+| **Mapillary** | Street-level imagery | [mapillary.com](https://mapillary.com/) |
+| **Maxar** | Commercial satellite imagery | [maxar.com](https://maxar.com/) |
+| **F4map** | 3D interactive world map | [demo.f4map.com](https://demo.f4map.com/) |
+| **Dual Maps** | Side-by-side map comparison | [data.mashedworld.com/dualmaps](http://data.mashedworld.com/dualmaps) |
+| **Zoom Earth** | Real-time satellite & weather | [zoom.earth](https://zoom.earth/) |
+| **KartaView** | Street-level imagery (OpenStreetCam) | [kartaview.org](https://kartaview.org/) |
+| **ShadowMap** | Shadow analysis for time estimation | [shadowmap.org](https://shadowmap.org/) |
---
-## 6. :camera: Image & Video OSINT
+## 6. Image & Video OSINT
| Tool | Description | Install / Link |
|------|-------------|----------------|
-| **TinEye** | Reverse image search | https://tineye.com |
-| **Google Reverse Image** | Google image search | https://images.google.com |
-| **Yandex Images** | Russian reverse image search (best accuracy) | https://yandex.com/images |
+| **TinEye** | Reverse image search | [tineye.com](https://tineye.com/) |
+| **Google Reverse Image** | Google image search | [images.google.com](https://images.google.com/) |
+| **Yandex Images** | Russian reverse image search (best accuracy) | [yandex.com/images](https://yandex.com/images) |
| **ExifTool** | Image metadata extraction | `apt install libimage-exiftool-perl` |
-| **FOCA** | Metadata extraction from documents | https://github.com/ElevenPaths/FOCA |
-| **InVID** | Video verification toolkit | https://www.invid-project.eu |
-| **FotoForensics** | Image forensic analysis | https://fotoforensics.com |
-| **Fake Image Detector** | AI-based fake image detection | https://www.fakeimagedetector.com |
+| **FOCA** | Metadata extraction from documents | [github.com/ElevenPaths/FOCA](https://github.com/ElevenPaths/FOCA) |
+| **InVID** | Video verification toolkit | [invid-project.eu](https://www.invid-project.eu/) |
+| **FotoForensics** | Image forensic analysis | [fotoforensics.com](https://fotoforensics.com/) |
+| **Fake Image Detector** | AI-based fake image detection | [fakeimagedetector.com](https://www.fakeimagedetector.com/) |
| **Search by Image** | Browser extension (multi-engine) | Chrome / Firefox extension |
-| **Jimpl** | Image OSINT search | https://jimpl.com |
+| **Jimpl** | Image OSINT search | [jimpl.com](https://jimpl.com/) |
| **Depix** | Recover pixelated text from images | `git clone https://github.com/beurtschipper/Depix` |
-| **Forensically** | Online image forensics | https://29a.ch/photo-forensics |
-| **Remove.bg** | Background removal for analysis | https://remove.bg |
-| **Jeffrey's Exif Viewer** | Online EXIF reader | http://exif.regex.info |
+| **Forensically** | Online image forensics | [29a.ch/photo-forensics](https://29a.ch/photo-forensics) |
+| **Remove.bg** | Background removal for analysis | [remove.bg](https://remove.bg/) |
+| **Jeffrey's Exif Viewer** | Online EXIF reader | [exif.regex.info](http://exif.regex.info/) |
+| **AI or Not** | Detect AI-generated images | [aiornot.com](https://aiornot.com/) |
+| **Hive Moderation** | AI content detection | [hivemoderation.com](https://hivemoderation.com/) |
+| **Illuminarty** | AI image detection | [illuminarty.ai](https://illuminarty.ai/) |
-:wrench: Installation Guide - ExifTool
+Installation Guide - ExifTool
```bash
# Kali Linux / Ubuntu
@@ -328,11 +361,11 @@ exiftool -a -u -g1 image.jpg
-:wrench: Search by Image Extension
+Search by Image Extension
-**Chrome**: https://chrome.google.com/webstore/detail/search-by-image/cnojnbdhbhnkbcieeekonklommdnndci
+**Chrome**: [chrome.google.com/webstore/detail/search-by-image/cnojnbdhbhnkbcieeekonklommdnndci](https://chrome.google.com/webstore/detail/search-by-image/cnojnbdhbhnkbcieeekonklommdnndci)
-**Firefox**: https://addons.mozilla.org/firefox/addon/search_by_image/
+**Firefox**: [addons.mozilla.org/firefox/addon/search_by_image/](https://addons.mozilla.org/firefox/addon/search_by_image/)
- Right-click any image -> Search on 30+ engines simultaneously
- Supports Google, Yandex, TinEye, Bing, Baidu, and more
@@ -340,30 +373,32 @@ exiftool -a -u -g1 image.jpg
---
-## 7. :bust_in_silhouette: Facial Recognition & People Search
+## 7. Facial Recognition & People Search
| Tool | Description | Install / Link |
|------|-------------|----------------|
-| **FaceSeek** | AI-powered reverse face search | https://faceseek.online |
-| **FaceCheck.ID** | Face recognition search engine | https://facecheck.id |
-| **PimEyes** | Face search from photos | https://pimeyes.com |
-| **Search4faces** | Face search in VK/OK social networks | https://search4faces.com |
+| **FaceSeek** | AI-powered reverse face search | [faceseek.online](https://faceseek.online/) |
+| **FaceCheck.ID** | Face recognition search engine | [facecheck.id](https://facecheck.id/) |
+| **PimEyes** | Face search from photos | [pimeyes.com](https://pimeyes.com/) |
+| **Search4faces** | Face search in VK/OK social networks | [search4faces.com](https://search4faces.com/) |
| **face_recognition** | Python face recognition library | `pip install face_recognition` |
| **DeepFace** | AI face analysis framework | `pip install deepface` |
| **FaceSeek API** | Face search API for developers | `git clone https://github.com/faceseek-online/face-search-api` |
-| **Faceagle** | Face recognition search | https://faceagle.com |
-| **ThatsThem** | Free people search | https://thatsthem.com |
-| **Pipl** | Deep people search | https://pipl.com |
-| **BeenVerified** | People search & background check | https://beenverified.com |
-| **Spokeo** | People search aggregator | https://spokeo.com |
-| **FastPeopleSearch** | Free people finder | https://fastpeoplesearch.com |
-| **WebMii** | People search engine | https://webmii.com |
-| **Lullar** | Social network profile search | https://lullar.com |
-| **Usersearch.org** | Free social network search | https://usersearch.org |
+| **Faceagle** | Face recognition search | [faceagle.com](https://faceagle.com/) |
+| **ThatsThem** | Free people search | [thatsthem.com](https://thatsthem.com/) |
+| **Pipl** | Deep people search | [pipl.com](https://pipl.com/) |
+| **BeenVerified** | People search & background check | [beenverified.com](https://beenverified.com/) |
+| **Spokeo** | People search aggregator | [spokeo.com](https://spokeo.com/) |
+| **FastPeopleSearch** | Free people finder | [fastpeoplesearch.com](https://fastpeoplesearch.com/) |
+| **WebMii** | People search engine | [webmii.com](https://webmii.com/) |
+| **Lullar** | Social network profile search | [lullar.com](https://lullar.com/) |
+| **Usersearch.org** | Free social network search | [usersearch.org](https://usersearch.org/) |
+| **OSINT Industries** | People search + social media lookup | [osint.industries](https://www.osint.industries/) |
+| **IDCrawl** | Free people search engine | [idcrawl.com](https://www.idcrawl.com/) |
---
-## 8. :bird: Social Media Monitoring
+## 8. Social Media Monitoring
| Tool | Description | Install / Link |
|------|-------------|----------------|
@@ -374,39 +409,48 @@ exiftool -a -u -g1 image.jpg
| **Toutatis** | Instagram OSINT by phone/email | `pip install toutatis` |
| **Telegram-Scraper** | Scrape Telegram groups/channels | `pip install telegram-scraper` |
| **TikTok Scraper** | TikTok data extraction | `npm install -g tiktok-scraper` |
-| **Reddit Investigator** | Reddit user analysis | https://reddit-user-analyser.netlify.app |
+| **Reddit Investigator** | Reddit user analysis | [reddit-user-analyser.netlify.app](https://reddit-user-analyser.netlify.app/) |
| **socialscan** | Social media checker | `pip install socialscan` |
| **Telepathy** | Telegram OSINT | `pip install telepathy` |
| **Twayback** | Deleted tweets finder | `pip install twayback` |
-| **SocialBlade** | Social media analytics | https://socialblade.com |
+| **SocialBlade** | Social media analytics | [socialblade.com](https://socialblade.com/) |
+| **Social-Searcher** | Free social media search engine | [social-searcher.com](https://www.social-searcher.com/) |
+| **Mention** | Social media monitoring | [mention.com](https://mention.com/) |
+| **BrandWatch** | Social listening platform | [brandwatch.com](https://www.brandwatch.com/) |
---
-## 9. :closed_lock_with_key: Data Breach & Leak Search Engines
+## 9. Data Breach & Leak Search Engines
-> :rotating_light: Search engines and tools for checking if data has been exposed in breaches
+> Search engines and tools for checking if data has been exposed in breaches
| Tool | Description | Type | Link |
|------|-------------|------|------|
-| **Have I Been Pwned** | Check email/phone in breaches | Free | https://haveibeenpwned.com |
-| **DeHashed** | Breach search engine | Paid | https://dehashed.com |
-| **LeakCheck** | Email/username/phone breach search | Freemium | https://leakcheck.net |
-| **Intelligence X** | Search breaches, darknet, leaks | Paid | https://intelx.io |
-| **BreachDirectory** | Free breach search | Free | https://breachdirectory.org |
-| **LeakPeek** | Search leaked databases | Freemium | https://leakpeek.com |
-| **Snusbase** | Breach data search engine | Paid | https://snusbase.com |
-| **EffectGroup** | Comprehensive data lookup | Paid | https://effectgroup.io |
+| **Have I Been Pwned** | Check email/phone in breaches | Free | [haveibeenpwned.com](https://haveibeenpwned.com/) |
+| **DeHashed** | Breach search engine | Paid | [dehashed.com](https://dehashed.com/) |
+| **LeakCheck** | Email/username/phone breach search | Freemium | [leakcheck.net](https://leakcheck.net/) |
+| **Intelligence X** | Search breaches, darknet, leaks | Paid | [intelx.io](https://intelx.io/) |
+| **BreachDirectory** | Free breach search | Free | [breachdirectory.org](https://breachdirectory.org/) |
+| **LeakPeek** | Search leaked databases | Freemium | [leakpeek.com](https://leakpeek.com/) |
+| **Snusbase** | Breach data search engine | Paid | [snusbase.com](https://snusbase.com/) |
+| **EffectGroup** | Comprehensive data lookup | Paid | [effectgroup.io](https://effectgroup.io/) |
+| **CheckLeaked** | Leak search engine (15B+ accounts) | Freemium | [checkleaked.cc](https://checkleaked.cc/) |
+| **CheckLeaked WhatsApp** | WhatsApp number database search | Freemium | [whatsapp.checkleaked.cc](https://whatsapp.checkleaked.cc/) |
+| **DataBreach.com** | Data breach lookup | Free | [databreach.com](https://databreach.com/) |
+| **Hudson Rock Cavalier** | Infostealer intelligence & breach data | Freemium | [hudsonrock.com/free-report](https://www.hudsonrock.com/free-report) |
| **WeLeakInfo** | Leaked database search (mirrors) | Varies | Search for current mirrors |
| **LeakedSource** | Historical breach search (mirrors) | Varies | Search for current mirrors |
| **Pwndb** | Dark web breach database | Free (Tor) | Requires Tor Browser |
| **BreachForum** | Leaked data community (mirrors) | Free | Search for current mirrors |
| **h8mail** | Automated breach hunting CLI | Free | `pip install h8mail` |
-| **ScatteredSecrets** | Breach notification | Freemium | https://scatteredsecrets.com |
+| **ScatteredSecrets** | Breach notification | Freemium | [scatteredsecrets.com](https://scatteredsecrets.com/) |
| **Nuclear Leaks** | Breach data search | Paid | Search for current URL |
-| **Library of Leaks** | Curated leak collection | Free | Search for current URL |
+| **The OSINT Rack** | Ransomware & data leak monitoring | Free | [osintrack.com](https://osintrack.com/) |
+| **leak.sx** | Leaked database search | Paid | Search for current URL |
+| **XposedOrNot** | Breach exposure check | Free | [xposedornot.com](https://xposedornot.com/) |
-:wrench: Pwndb - Dark Web Breach Search
+Pwndb - Dark Web Breach Search
```bash
# Pwndb CLI tool (requires Tor)
@@ -422,57 +466,60 @@ git clone https://github.com/yanncam/phpwndb
```
+
---
-## 10. :page_facing_up: WikiLeaks, DDoSecrets & Whistleblower Platforms
+## 10. WikiLeaks, DDoSecrets & Whistleblower Platforms
| Platform | Description | Link |
|----------|-------------|------|
-| **WikiLeaks** | Leaked government & corporate documents | https://wikileaks.org |
-| **DDoSecrets** | Distributed Denial of Secrets | https://ddosecrets.com |
-| **Cryptome** | Documents archive since 1996 | https://cryptome.org |
-| **The Intercept** | Investigative journalism | https://theintercept.com |
-| **SecureDrop** | Whistleblower submission system | https://securedrop.org |
-| **GlobaLeaks** | Open-source whistleblowing framework | https://globaleaks.org |
-| **ICIJ Offshore Leaks** | Panama Papers, Pandora Papers | https://offshoreleaks.icij.org |
-| **DocumentCloud** | Public document research | https://documentcloud.org |
-| **Archive.org** | Wayback Machine | https://web.archive.org |
-| **Internet Archive** | Digital library | https://archive.org |
-| **Vault (FBI)** | FBI electronic reading room | https://vault.fbi.gov |
-| **CIA Reading Room** | Declassified CIA documents | https://www.cia.gov/readingroom |
-| **NSA Declassified** | NSA declassified records | https://nsa.gov/news-features/declassified-documents |
-| **PACER** | US federal court records | https://pacer.uscourts.gov |
-| **OpenLeaks** | Document submission platform | https://openleaks.org |
-| **ExposeFacts** | Whistleblower support | https://exposefacts.org |
+| **WikiLeaks** | Leaked government & corporate documents | [wikileaks.org](https://wikileaks.org/) |
+| **DDoSecrets** | Distributed Denial of Secrets | [ddosecrets.com](https://ddosecrets.com/) |
+| **Cryptome** | Documents archive since 1996 | [cryptome.org](https://cryptome.org/) |
+| **The Intercept** | Investigative journalism | [theintercept.com](https://theintercept.com/) |
+| **SecureDrop** | Whistleblower submission system | [securedrop.org](https://securedrop.org/) |
+| **GlobaLeaks** | Open-source whistleblowing framework | [globaleaks.org](https://globaleaks.org/) |
+| **ICIJ Offshore Leaks** | Panama Papers, Pandora Papers | [offshoreleaks.icij.org](https://offshoreleaks.icij.org/) |
+| **DocumentCloud** | Public document research | [documentcloud.org](https://documentcloud.org/) |
+| **Archive.org** | Wayback Machine | [web.archive.org](https://web.archive.org/) |
+| **Internet Archive** | Digital library | [archive.org](https://archive.org/) |
+| **Vault (FBI)** | FBI electronic reading room | [vault.fbi.gov](https://vault.fbi.gov/) |
+| **CIA Reading Room** | Declassified CIA documents | [cia.gov/readingroom](https://www.cia.gov/readingroom) |
+| **NSA Declassified** | NSA declassified records | [nsa.gov/news-features/declassified-documents](https://nsa.gov/news-features/declassified-documents) |
+| **PACER** | US federal court records | [pacer.uscourts.gov](https://pacer.uscourts.gov/) |
+| **OpenLeaks** | Document submission platform | [openleaks.org](https://openleaks.org/) |
+| **ExposeFacts** | Whistleblower support | [exposefacts.org](https://exposefacts.org/) |
---
-## 11. :key: Password Cracking & Credential Tools
+## 11. Password Cracking & Credential Tools
| Tool | Description | Install / Link |
|------|-------------|----------------|
-| **Hashcat** | Advanced password recovery | `apt install hashcat` |
+| **Hashcat** | Advanced password recovery (GPU) | `apt install hashcat` |
| **John the Ripper** | Password cracker | `apt install john` |
| **Hydra** | Network login cracker | `apt install hydra` |
| **Medusa** | Parallel brute-force tool | `apt install medusa` |
| **CeWL** | Custom wordlist generator | `apt install cewl` |
| **Crunch** | Wordlist generator | `apt install crunch` |
| **Cain & Abel** | Windows password recovery | Download from official site |
-| **RainbowCrack** | Rainbow table cracker | https://project-rainbowcrack.com |
-| **Ophcrack** | Windows password cracker (rainbow tables) | https://ophcrack.sourceforge.io |
+| **RainbowCrack** | Rainbow table cracker | [project-rainbowcrack.com](https://project-rainbowcrack.com/) |
+| **Ophcrack** | Windows password cracker (rainbow tables) | [ophcrack.sourceforge.io](https://ophcrack.sourceforge.io/) |
| **LaZagne** | Credentials recovery tool | `git clone https://github.com/AlessandroZ/LaZagne` |
+| **Mimikatz** | Windows credential dumper | `git clone https://github.com/gentilkiwi/mimikatz` |
+| **Responder** | LLMNR/NBT-NS/MDNS poisoner | `git clone https://github.com/lgandx/Responder` |
-:wrench: Hashcat Quick Reference
+Hashcat Quick Reference
```bash
# Install
apt install hashcat
# Basic usage
-hashcat -m 0 -a 0 hash.txt wordlist.txt # MD5
-hashcat -m 1000 -a 0 hash.txt wordlist.txt # NTLM
-hashcat -m 1800 -a 0 hash.txt wordlist.txt # SHA-512
+hashcat -m 0 -a 0 hash.txt wordlist.txt # MD5
+hashcat -m 1000 -a 0 hash.txt wordlist.txt # NTLM
+hashcat -m 1800 -a 0 hash.txt wordlist.txt # SHA-512
# Brute force
hashcat -m 0 -a 3 hash.txt ?a?a?a?a?a?a
@@ -484,57 +531,61 @@ hashcat -m 0 hash.txt --show
---
-## 12. :new_moon: Dark Web Search Engines & Tools
+## 12. Dark Web Search Engines & Tools
| Tool | Description | Link / Onion |
-|------|-------------|------|
-| **Torch** | Oldest & largest dark web search engine | http://xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion |
-| **Haystak** | Dark web search with filtering | http://haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion |
-| **Ahmia** | Clearnet dark web search | https://ahmia.fi |
-| **DuckDuckGo Onion** | Private search on Tor | https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion |
-| **Phobos** | Dark web search engine | http://phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion |
-| **NotEvil** | Google-like dark web search | http://notevilmtxf25uw7tskqxj6njlpebyrmlrerfv5hc4tuq7c7hilbyiqd.onion |
+|------|-------------|--------------|
+| **Torch** | Oldest & largest dark web search engine | `xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion` |
+| **Haystak** | Dark web search with filtering | `haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion` |
+| **Ahmia** | Clearnet dark web search | [ahmia.fi](https://ahmia.fi/) |
+| **DuckDuckGo Onion** | Private search on Tor | `duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion` |
+| **Phobos** | Dark web search engine | `phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion` |
+| **NotEvil** | Google-like dark web search | `notevilmtxf25uw7tskqxj6njlpebyrmlrerfv5hc4tuq7c7hilbyiqd.onion` |
| **Kilos** | Dark web market search | Tor only |
| **Excavator** | Forensic-grade dark web search | Tor only |
| **Recon** | Dark web market intelligence | Tor only |
| **TorDex** | Uncensored Tor search engine | Tor only |
| **Candle** | Minimalist onion search engine | Tor only |
-| **DarkSearch** | Dark web search API | https://darksearch.io |
+| **DarkSearch** | Dark web search API | [darksearch.io](https://darksearch.io/) |
| **OnionScan** | Scan .onion sites | `go install github.com/s-rah/onionscan@latest` |
-| **Tor2Web** | Access .onion via clearnet | https://tor2web.org |
+| **Tor2Web** | Access .onion via clearnet | [tor2web.org](https://tor2web.org/) |
| **Fresh Onions** | New .onion directory | Tor only |
| **OSINT-SPY** | OSINT spy tool for Tor | `git clone https://github.com/SharadKumar97/OSINT-SPY` |
+| **Dark.fail** | Verified dark web links | [dark.fail](https://dark.fail/) |
---
-## 13. :ghost: Anonymous & Privacy Tools
+## 13. Anonymous & Privacy Tools
| Tool | Description | Install / Link |
|------|-------------|----------------|
-| **Tor Browser** | Anonymous web browsing | https://torproject.org |
-| **Tails OS** | Amnesic live operating system | https://tails.boum.org |
-| **Whonix** | Anonymous OS via Tor | https://whonix.org |
-| **ProtonVPN** | Free encrypted VPN | https://protonvpn.com |
-| **ProtonMail** | Encrypted email | https://proton.me |
-| **Signal** | Encrypted messaging | https://signal.org |
-| **Briar** | P2P encrypted messenger | https://briarproject.org |
-| **OnionShare** | Anonymous file sharing | https://onionshare.org |
+| **Tor Browser** | Anonymous web browsing | [torproject.org](https://torproject.org/) |
+| **Tails OS** | Amnesic live operating system | [tails.boum.org](https://tails.boum.org/) |
+| **Whonix** | Anonymous OS via Tor | [whonix.org](https://whonix.org/) |
+| **ProtonVPN** | Free encrypted VPN | [protonvpn.com](https://protonvpn.com/) |
+| **ProtonMail** | Encrypted email | [proton.me](https://proton.me/) |
+| **Signal** | Encrypted messaging | [signal.org](https://signal.org/) |
+| **Briar** | P2P encrypted messenger | [briarproject.org](https://briarproject.org/) |
+| **OnionShare** | Anonymous file sharing | [onionshare.org](https://onionshare.org/) |
| **Anonsurf** | Anonymize entire OS traffic | `git clone https://github.com/Und3rf10w/kali-anonsurf` |
| **MAC Changer** | Change MAC address | `apt install macchanger` |
-| **BleachBit** | Digital footprint cleaner | https://bleachbit.org |
-| **VeraCrypt** | Disk encryption | https://veracrypt.fr |
-| **KeePassXC** | Password manager | https://keepassxc.org |
+| **BleachBit** | Digital footprint cleaner | [bleachbit.org](https://bleachbit.org/) |
+| **VeraCrypt** | Disk encryption | [veracrypt.fr](https://veracrypt.fr/) |
+| **KeePassXC** | Password manager | [keepassxc.org](https://keepassxc.org/) |
+| **Mullvad VPN** | Privacy-focused VPN (no email required) | [mullvad.net](https://mullvad.net/) |
+| **Session** | Decentralized messenger | [getsession.org](https://getsession.org/) |
+| **Anon-SMS** | Anonymous SMS sending | `git clone https://github.com/HACK3RY2J/Anon-SMS.git` |
---
-## 14. :spider_web: Web Application OSINT & Scanning
+## 14. Web Application OSINT & Scanning
| Tool | Description | Install / Link |
|------|-------------|----------------|
| **Nikto** | Web server vulnerability scanner | `apt install nikto` |
| **WPScan** | WordPress vulnerability scanner | `gem install wpscan` |
| **Wappalyzer** | Technology profiler | Browser Extension |
-| **BuiltWith** | Technology lookup | https://builtwith.com |
+| **BuiltWith** | Technology lookup | [builtwith.com](https://builtwith.com/) |
| **Whatweb** | Web technology identifier | `apt install whatweb` |
| **WebHack** | Web hacking toolkit | `git clone https://github.com/yan4ikyt/webhack` |
| **Dirb** | Web directory brute-forcer | `apt install dirb` |
@@ -544,9 +595,13 @@ hashcat -m 0 hash.txt --show
| **LinkFinder** | JS endpoint finder | `git clone https://github.com/GerbenJavado/LinkFinder` |
| **Photon** | Web crawler for OSINT | `git clone https://github.com/s0md3v/Photon` |
| **URLCadiz** | URL shortener/masker | `git clone https://github.com/PerezMascato/URLCADIZ` |
+| **Pentest-Tools.com** | Online pentest & recon platform | [pentest-tools.com](https://pentest-tools.com/) |
+| **Feroxbuster** | Fast content discovery | `apt install feroxbuster` |
+| **Wfuzz** | Web fuzzer | `pip install wfuzz` |
+| **ParamSpider** | Parameter discovery from archives | `pip install paramspider` |
-:wrench: Installation Guide - WebHack
+Installation Guide - WebHack
```bash
apt-get install python3 git
@@ -559,24 +614,26 @@ python3 WebHack.py
---
-## 15. :fishing_pole_and_fish: Social Engineering & Phishing
+## 15. Social Engineering & Phishing
| Tool | Description | Install / Link |
|------|-------------|----------------|
| **Zphisher** | Advanced phishing tool (30+ templates) | `git clone https://github.com/htr-tech/zphisher` |
| **NexPhisher** | Multi-platform phishing tool | `git clone https://github.com/htr-tech/nexphisher` |
| **SET (Social Engineering Toolkit)** | Complete SE framework | `apt install set` |
-| **Gophish** | Phishing simulation platform | https://getgophish.com |
+| **Gophish** | Phishing simulation platform | [getgophish.com](https://getgophish.com/) |
| **Storm-Breaker** | Access webcam, mic & location | `git clone https://github.com/ultrasecurity/Storm-Breaker` |
| **GrabCam** | Camera phishing for Termux | `git clone https://github.com/noob-hackers/grabcam` |
| **Evilginx2** | Man-in-the-middle phishing | `go install github.com/kgretzky/evilginx2@latest` |
| **Modlishka** | Reverse proxy phishing | `go install github.com/drk1wi/Modlishka@latest` |
| **ShortURL** | URL shortener for SE | `git clone https://github.com/htr-tech/shorturl` |
| **FakeURL / URLCADIZ** | URL masking tool | `git clone https://github.com/PerezMascato/URLCADIZ` |
-| **King Phisher** | Phishing campaign toolkit | https://github.com/rsmusllp/king-phisher |
+| **King Phisher** | Phishing campaign toolkit | [github.com/rsmusllp/king-phisher](https://github.com/rsmusllp/king-phisher) |
+| **SocialFish** | Social media phishing | `git clone https://github.com/UndeadSec/SocialFish` |
+| **AdvPhishing** | Advanced phishing tool | `git clone https://github.com/Ignitetch/AdvPhishing` |
-:wrench: Installation Guide - Zphisher
+Installation Guide - Zphisher
```bash
# Kali Linux
@@ -593,7 +650,7 @@ bash zphisher.sh
-:wrench: Installation Guide - Storm-Breaker (Camera/Mic Access)
+Installation Guide - Storm-Breaker (Camera/Mic Access)
```bash
# Kali Linux
@@ -611,37 +668,9 @@ sudo python3 Storm-Breaker.py
```
-
-:wrench: Installation Guide - NexPhisher (Termux)
+---
-```bash
-apt install git -y
-git clone https://github.com/htr-tech/nexphisher.git
-cd nexphisher
-bash setup
-bash tmux_setup
-bash nexphisher
-```
-
-
-
-:wrench: Installation Guide - GrabCam (Termux Camera Phishing)
-
-```bash
-apt-get update -y && apt-get upgrade -y
-pkg install python python2 wget git -y
-pip install lolcat
-git clone https://github.com/noob-hackers/grabcam
-termux-setup-storage
-cd grabcam
-chmod +x grabcam.sh
-bash grabcam.sh
-# Save photo: mv cam*.png /sdcard/
-```
-
-
-
-## 16. :bomb: Vulnerability Scanning & Exploitation
+## 16. Vulnerability Scanning & Exploitation
| Tool | Description | Install / Link |
|------|-------------|----------------|
@@ -649,16 +678,19 @@ bash grabcam.sh
| **Nuclei** | Fast vulnerability scanner | `go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest` |
| **SQLMap** | SQL injection automation | `apt install sqlmap` |
| **Nmap** | Network mapper & scanner | `apt install nmap` |
-| **Burp Suite** | Web app security testing | https://portswigger.net/burp |
-| **OWASP ZAP** | Web app scanner | https://zaproxy.org |
-| **Nessus** | Vulnerability assessment | https://tenable.com/products/nessus |
+| **Burp Suite** | Web app security testing | [portswigger.net/burp](https://portswigger.net/burp) |
+| **OWASP ZAP** | Web app scanner | [zaproxy.org](https://zaproxy.org/) |
+| **Nessus** | Vulnerability assessment | [tenable.com/products/nessus](https://tenable.com/products/nessus) |
| **OpenVAS** | Open vulnerability scanner | `apt install openvas` |
-| **XSSHunter** | Blind XSS detection | https://xsshunter.com |
+| **XSSHunter** | Blind XSS detection | [xsshunter.com](https://xsshunter.com/) |
| **Commix** | Command injection exploiter | `git clone https://github.com/commixproject/commix` |
| **GoldenEye** | HTTP DoS test tool | `git clone https://github.com/jseidl/GoldenEye` |
+| **Pentest-Tools.com** | Web vulnerability scanner | [pentest-tools.com](https://pentest-tools.com/) |
+| **Criminal IP** | Vulnerability & CVE search | [criminalip.io](https://www.criminalip.io/) |
+| **ExploitDB** | Exploit database | [exploit-db.com](https://www.exploit-db.com/) |
-:wrench: Installation Guide - GoldenEye (DoS Testing)
+Installation Guide - GoldenEye (DoS Testing)
```bash
# Kali Linux
@@ -677,7 +709,7 @@ python3 goldeneye.py "http://target.com"
---
-## 17. :satellite: Network & Wireless Tools
+## 17. Network & Wireless Tools
| Tool | Description | Install / Link |
|------|-------------|----------------|
@@ -692,24 +724,26 @@ python3 goldeneye.py "http://target.com"
| **Fluxion** | Wi-Fi social engineering | `git clone https://github.com/FluxionNetwork/fluxion` |
| **hcxtools** | Wi-Fi capture conversion | `apt install hcxtools` |
| **BlueMaho** | Bluetooth security testing | `git clone https://github.com/pysec/bluemaho` |
+| **Netcat** | Network debugging tool | `apt install netcat-openbsd` |
+| **tcpdump** | Command-line packet analyzer | `apt install tcpdump` |
---
-## 18. :iphone: Mobile Hacking & Phone Exploitation
+## 18. Mobile Hacking & Phone Exploitation
| Tool | Description | Install / Link |
|------|-------------|----------------|
| **PhoneSploit** | ADB-based phone exploitation | `git clone https://github.com/aerosol-can/PhoneSploit` |
-| **AndroRAT** | Android remote access tool | `git clone https://github.com/AhMyth/AhMyth-Android-RAT` |
+| **AndroRAT / AhMyth** | Android remote access tool | `git clone https://github.com/AhMyth/AhMyth-Android-RAT` |
| **Apktool** | Android APK decompiler | `apt install apktool` |
| **Frida** | Dynamic instrumentation | `pip install frida-tools` |
| **Objection** | Runtime mobile exploration | `pip install objection` |
-| **MobSF** | Mobile security framework | https://github.com/MobSF/Mobile-Security-Framework-MobSF |
-| **SPY-NOTE** | Android RAT | Search GitHub for current version |
+| **MobSF** | Mobile security framework | [github.com/MobSF/Mobile-Security-Framework-MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF) |
| **MSFPC** | MSF payload creator | `git clone https://github.com/g0tmi1k/msfpc` |
+| **jadx** | Android APK decompiler (GUI) | `apt install jadx` |
-:wrench: Installation Guide - PhoneSploit
+Installation Guide - PhoneSploit
```bash
# Requirements: ADB + Shodan access
@@ -731,43 +765,70 @@ python3 phonesploit.py
---
-## 19. :robot: AI-Powered OSINT Tools
+## 19. AI-Powered OSINT & Free AI Tools
+
+> AI tools for analysis, research, image recognition, and OSINT automation
+
+### AI-Powered OSINT Tools
| Tool | Description | Install / Link |
|------|-------------|----------------|
-| **GeoSpy** | AI geolocation from images | https://geospy.ai |
+| **GeoSpy** | AI geolocation from images | [geospy.ai](https://geospy.ai/) |
| **DeepFace** | Face analysis (age, gender, emotion) | `pip install deepface` |
-| **FaceSeek** | AI facial recognition search | https://faceseek.online |
+| **FaceSeek** | AI facial recognition search | [faceseek.online](https://faceseek.online/) |
| **OSINTR** | AI-powered OSINT automation | Search GitHub for latest version |
| **SpiderAI** | AI reconnaissance spider | Search GitHub for latest version |
-| **ReconAIzer** | AI-enhanced Burp extension | https://github.com/hisxo/ReconAIzer |
-| **ChatGPT** | AI assistant for OSINT analysis | https://chat.openai.com |
-| **Perplexity AI** | AI search for research | https://perplexity.ai |
+| **ReconAIzer** | AI-enhanced Burp extension | [github.com/hisxo/ReconAIzer](https://github.com/hisxo/ReconAIzer) |
| **face_recognition** | Python face recognition | `pip install face_recognition` |
| **OpenCV** | Computer vision library | `pip install opencv-python` |
+| **HARPA AI** | AI browser agent for OSINT | [harpa.ai](https://harpa.ai/) |
+| **AI or Not** | Detect AI-generated content | [aiornot.com](https://aiornot.com/) |
+
+### Free AI Tools for OSINT Research
+
+| Tool | Description | Free Tier | Link |
+|------|-------------|-----------|------|
+| **Tasklet AI** | AI work automation agent | Free tier available | [tasklet.ai](https://tasklet.ai/) |
+| **ChatGPT** | OpenAI's AI assistant | Free (GPT-4o mini) | [chat.openai.com](https://chat.openai.com/) |
+| **Claude** | Anthropic's AI (best for reasoning) | Free tier | [claude.ai](https://claude.ai/) |
+| **Google Gemini** | Google's AI with web search | Free | [gemini.google.com](https://gemini.google.com/) |
+| **Perplexity AI** | AI search engine (cited sources) | Free (5 Pro/day) | [perplexity.ai](https://perplexity.ai/) |
+| **DeepSeek** | Open-source AI (strong reasoning) | Free | [chat.deepseek.com](https://chat.deepseek.com/) |
+| **Grok** | xAI's AI with real-time X data | Free on X | [x.com/grok](https://x.com/grok) |
+| **Microsoft Copilot** | AI with Bing search integration | Free | [copilot.microsoft.com](https://copilot.microsoft.com/) |
+| **Meta AI** | Meta's free AI assistant | Free | [meta.ai](https://www.meta.ai/) |
+| **HuggingChat** | Open-source AI chat | Free | [huggingface.co/chat](https://huggingface.co/chat/) |
+| **Kimi** | Moonshot AI (long context) | Free | [kimi.moonshot.cn](https://kimi.moonshot.cn/) |
+| **You.com** | AI search with multiple modes | Free | [you.com](https://you.com/) |
+| **Phind** | AI search for developers | Free | [phind.com](https://www.phind.com/) |
+| **NotebookLM** | Google's document analysis AI | Free | [notebooklm.google.com](https://notebooklm.google.com/) |
+| **LibreChat** | Open-source AI chat (self-host) | Free | [github.com/danny-avila/LibreChat](https://github.com/danny-avila/LibreChat) |
+| **Open WebUI** | Self-hosted AI interface | Free | [github.com/open-webui/open-webui](https://github.com/open-webui/open-webui) |
---
-## 20. :moneybag: Financial & Corporate Intelligence
+## 20. Financial & Corporate Intelligence
| Tool | Description | Link |
|------|-------------|------|
-| **OpenCorporates** | Global corporate database | https://opencorporates.com |
-| **ICIJ Offshore Leaks** | Panama/Pandora/Paradise Papers | https://offshoreleaks.icij.org |
-| **SEC EDGAR** | US company filings | https://sec.gov/edgar |
-| **Companies House (UK)** | UK company register | https://beta.companieshouse.gov.uk |
-| **Aleph** | Global corporate/public records | https://aleph.occrp.org |
+| **OpenCorporates** | Global corporate database | [opencorporates.com](https://opencorporates.com/) |
+| **ICIJ Offshore Leaks** | Panama/Pandora/Paradise Papers | [offshoreleaks.icij.org](https://offshoreleaks.icij.org/) |
+| **SEC EDGAR** | US company filings | [sec.gov/edgar](https://sec.gov/edgar) |
+| **Companies House (UK)** | UK company register | [beta.companieshouse.gov.uk](https://beta.companieshouse.gov.uk/) |
+| **Aleph** | Global corporate/public records | [aleph.occrp.org](https://aleph.occrp.org/) |
| **Orbit (Bitcoin)** | Bitcoin address investigator | `git clone https://github.com/s0md3v/Orbit` |
| **BTC Parser** | Bitcoin blockchain parser | Various GitHub tools |
-| **Blockchain.com** | Bitcoin explorer | https://blockchain.com/explorer |
-| **Etherscan** | Ethereum blockchain explorer | https://etherscan.io |
-| **BinCheck** | Bank card BIN lookup | https://bincheck.io |
-| **Crunchbase** | Company/startup database | https://crunchbase.com |
-| **LinkedIn** | Professional network OSINT | https://linkedin.com |
-| **LEI Search** | Legal Entity Identifier lookup | https://search.gleif.org |
+| **Blockchain.com** | Bitcoin explorer | [blockchain.com/explorer](https://blockchain.com/explorer) |
+| **Etherscan** | Ethereum blockchain explorer | [etherscan.io](https://etherscan.io/) |
+| **BinCheck** | Bank card BIN lookup | [bincheck.io](https://bincheck.io/) |
+| **Crunchbase** | Company/startup database | [crunchbase.com](https://crunchbase.com/) |
+| **LinkedIn** | Professional network OSINT | [linkedin.com](https://linkedin.com/) |
+| **LEI Search** | Legal Entity Identifier lookup | [search.gleif.org](https://search.gleif.org/) |
+| **Owler** | Company intelligence | [owler.com](https://www.owler.com/) |
+| **ZoomInfo** | B2B contact & company data | [zoominfo.com](https://www.zoominfo.com/) |
-:wrench: Installation Guide - Orbit (Bitcoin Search)
+Installation Guide - Orbit (Bitcoin Search)
```bash
# Kali Linux
@@ -788,43 +849,48 @@ python3 orbit.py -s "BITCOIN_ADDRESS"
---
-## 21. :car: Vehicle, Property & Public Records
+## 21. Vehicle, Property & Public Records
| Tool/Service | Description | Link |
|-------------|-------------|------|
| **VehicleRegistration API** | Vehicle registration lookup | Various by country |
-| **FAXVIN** | Free VIN decoder | https://faxvin.com |
-| **AutoCheck** | Vehicle history reports | https://autocheck.com |
-| **Carfax** | Vehicle history | https://carfax.com |
+| **FAXVIN** | Free VIN decoder | [faxvin.com](https://faxvin.com/) |
+| **AutoCheck** | Vehicle history reports | [autocheck.com](https://autocheck.com/) |
+| **Carfax** | Vehicle history | [carfax.com](https://carfax.com/) |
| **Voter Records** | US voter registration lookup | Various state databases |
-| **PACER** | Federal court records | https://pacer.uscourts.gov |
-| **Zillow** | Property records & estimates | https://zillow.com |
+| **PACER** | Federal court records | [pacer.uscourts.gov](https://pacer.uscourts.gov/) |
+| **Zillow** | Property records & estimates | [zillow.com](https://zillow.com/) |
+| **Who Owns What** | NYC landlord portfolio lookup | [whoownswhat.justfix.org](https://whoownswhat.justfix.org/en/) |
| **County Assessor** | Property tax records | Varies by county |
-| **FOIA.gov** | Freedom of Information Act | https://foia.gov |
-| **Court Listener** | Free court opinion search | https://courtlistener.com |
+| **FOIA.gov** | Freedom of Information Act | [foia.gov](https://foia.gov/) |
+| **Court Listener** | Free court opinion search | [courtlistener.com](https://courtlistener.com/) |
+| **NICB VINCheck** | Stolen vehicle check | [nicb.org/vincheck](https://www.nicb.org/vincheck) |
---
-## 22. :detective: Metadata & Digital Forensics
+## 22. Metadata & Digital Forensics
| Tool | Description | Install / Link |
|------|-------------|----------------|
-| **Autopsy** | Digital forensics platform | https://autopsy.com |
+| **Autopsy** | Digital forensics platform | [autopsy.com](https://autopsy.com/) |
| **Volatility** | Memory forensics framework | `pip install volatility3` |
| **Wireshark** | Network packet analysis | `apt install wireshark` |
| **Binwalk** | Firmware analysis | `apt install binwalk` |
| **Foremost** | File carving tool | `apt install foremost` |
| **Bulk Extractor** | Extract features from files | `apt install bulk-extractor` |
-| **DEFT Linux** | Forensics live CD | https://deftlinux.net |
+| **DEFT Linux** | Forensics live CD | [deftlinux.net](https://deftlinux.net/) |
| **ExifTool** | Complete metadata extraction | `apt install libimage-exiftool-perl` |
-| **FOCA** | Document metadata analysis | https://github.com/ElevenPaths/FOCA |
+| **FOCA** | Document metadata analysis | [github.com/ElevenPaths/FOCA](https://github.com/ElevenPaths/FOCA) |
| **Metagoofil** | Document metadata harvester | `pip install metagoofil` |
+| **CyberChef** | Data analysis swiss army knife | [gchq.github.io/CyberChef](https://gchq.github.io/CyberChef) |
+| **Scalpel** | File carving tool | `apt install scalpel` |
+
---
-## 23. :video_camera: IP Camera & Webcam OSINT
+## 23. IP Camera & Webcam OSINT
-> :warning: Access unauthorized cameras is illegal. This section is for educational purposes only.
+> **WARNING**: Accessing unauthorized cameras is illegal. This section is for educational purposes only.
### Shodan Searches for Cameras
@@ -837,11 +903,14 @@ python3 orbit.py -s "BITCOIN_ADDRESS"
| `webcamXP` | WebcamXP servers |
| `"Server: IP Webcam Server"` | IP Webcam app servers |
| `port:8080 title:"Blue Iris"` | Blue Iris CCTV |
+| `"Server: IPCamera"` | Generic IP cameras |
+| `port:37777 "DVR"` | Dahua DVR systems |
+| `port:80 title:"DVR"` | Web-accessible DVR |
### Google Dorking for Cameras
| Google Dork | What It Finds |
-|-------------|---------------|
+|------------|---------------|
| `inurl:top.htm inurl:currenttime` | IP cameras with live feeds |
| `inurl:"lvappl.htm"` | Live view cameras |
| `intitle:"webcamXP 5"` | WebcamXP 5 servers |
@@ -855,22 +924,25 @@ python3 orbit.py -s "BITCOIN_ADDRESS"
| `intitle:"Live View / - AXIS"` | AXIS cameras |
| `inurl:"CgiStart?page=Single"` | Single page cameras |
| `inurl:/view/view.shtml` | Mobotix cameras |
+| `inurl:"MultiCameraFrame?Mode="` | Multi-camera views |
+| `intitle:"Network Camera" inurl:"ViewerFrame"` | Generic network cameras |
### Camera OSINT Tools
| Tool | Description | Link |
|------|-------------|------|
-| **Shodan** | IoT search engine | https://shodan.io |
-| **Censys** | Internet device search | https://censys.io |
-| **Insecam** | Live insecure cameras directory | http://insecam.org |
-| **EarthCam** | Public webcams | https://earthcam.com |
-| **OpenStreetCam** | Street-level imagery | https://openstreetcam.org |
+| **Shodan** | IoT search engine | [shodan.io](https://shodan.io/) |
+| **Censys** | Internet device search | [censys.io](https://censys.io/) |
+| **Criminal IP** | Cyber threat intelligence + IoT | [criminalip.io](https://www.criminalip.io/) |
+| **Insecam** | Live insecure cameras directory | [insecam.org](http://insecam.org/) |
+| **EarthCam** | Public webcams | [earthcam.com](https://earthcam.com/) |
+| **KartaView** | Street-level imagery | [kartaview.org](https://kartaview.org/) |
---
-## 24. :satellite_antenna: Google Dorking Bible
+## 24. Google Dorking Bible
-> :fire: Master search engine hacking with these advanced operators
+> Master search engine hacking with these advanced operators
### Basic Operators
@@ -884,11 +956,14 @@ python3 orbit.py -s "BITCOIN_ADDRESS"
| `ext:` | Search by extension | `ext:sql "dump"` |
| `cache:` | View cached page | `cache:example.com` |
| `link:` | Find linking pages | `link:example.com` |
+| `allintext:` | All terms in page body | `allintext:username password email` |
+| `allintitle:` | All terms in title | `allintitle:admin panel login` |
+| `allinurl:` | All terms in URL | `allinurl:admin dashboard` |
### Advanced Dorks for OSINT
| Purpose | Google Dork |
-|---------|------------|
+|---------|-------------|
| **Find exposed passwords** | `intitle:"index of" "passwords.txt"` |
| **SQL database dumps** | `filetype:sql "CREATE TABLE" "INSERT INTO"` |
| **Config files** | `ext:conf OR ext:cnf OR ext:cfg "password"` |
@@ -899,41 +974,81 @@ python3 orbit.py -s "BITCOIN_ADDRESS"
| **Apache status** | `intitle:"Apache Status" "Apache Server Status"` |
| **Exposed git repos** | `intitle:"index of" ".git"` |
| **Database backups** | `intitle:"index of" "backup" ext:sql` |
+| **Exposed log files** | `filetype:log "password" OR "username"` |
+| **SSH private keys** | `filetype:pem "PRIVATE KEY"` |
+| **WordPress config** | `filetype:txt inurl:wp-config` |
### Google Dork Generators
| Tool | Link |
|------|------|
-| **DorkSearch** | https://dorksearch.com |
-| **Google Hacking Database (GHDB)** | https://exploit-db.com/google-hacking-database |
+| **DorkSearch** | [dorksearch.com](https://dorksearch.com/) |
+| **Google Hacking Database (GHDB)** | [exploit-db.com/google-hacking-database](https://exploit-db.com/google-hacking-database) |
| **Pagodo** | `git clone https://github.com/opsdisk/pagodo` |
| **GooFuzz** | `git clone https://github.com/m3n0sd0n4ld/GooFuzz` |
+| **dorkScanner** | `git clone https://github.com/madhavmehndiratta/dorkScanner` |
---
-## 25. :link: IP Tracking & Geolocation Links
+## 25. Credential & Data Dorking
+
+> Google dorks specifically for finding exposed credentials and sensitive data
+
+### Credential Hunting Dorks
+
+| Purpose | Google Dork |
+|---------|-------------|
+| **Gmail + passwords in spreadsheets** | `allintext:".@gmail.com" OR "password" OR "username" filetype:xlsx` |
+| **Exposed credentials in CSV** | `filetype:csv "email" "password"` |
+| **Credential files** | `filetype:txt "username" "password" site:pastebin.com` |
+| **Email lists** | `filetype:xlsx "email" "@gmail.com" OR "@yahoo.com"` |
+| **Database dumps** | `filetype:sql "INSERT INTO" "password" "email"` |
+| **Config files with creds** | `filetype:env "DB_PASSWORD" OR "API_KEY" OR "SECRET"` |
+| **Exposed .htpasswd** | `filetype:htpasswd htpasswd` |
+| **Exposed shadow files** | `intitle:"index of" "shadow"` |
+| **FTP credentials** | `filetype:log "USER" "PASS" "230"` |
+| **phpMyAdmin without auth** | `inurl:phpmyadmin/index.php intitle:"phpMyAdmin" "Welcome to phpMyAdmin"` |
+| **Exposed Jenkins** | `intitle:"Dashboard [Jenkins]" inurl:"/login"` |
+| **Exposed Kibana** | `intitle:"Kibana" inurl:app/kibana` |
+| **AWS keys exposed** | `filetype:pem "AKIA" OR "ASIA"` |
+| **GitHub exposed secrets** | `site:github.com "API_KEY" OR "api_secret" filetype:env` |
+
+### Sensitive Document Dorks
+
+| Purpose | Google Dork |
+|---------|-------------|
+| **Confidential PDFs** | `filetype:pdf "confidential" OR "internal use only"` |
+| **Financial documents** | `filetype:xlsx "salary" OR "budget" OR "financial"` |
+| **Medical records** | `filetype:pdf "medical" "patient" "diagnosis"` |
+| **Employee data** | `filetype:xlsx "employee" "SSN" OR "social security"` |
+| **Network diagrams** | `filetype:pdf OR filetype:vsd "network diagram"` |
+
+---
+
+## 26. IP Tracking & Geolocation Links
| Tool | Description | Link |
|------|-------------|------|
-| **IPLogger** | IP logging URL shortener | https://iplogger.org |
-| **Grabify** | IP grabber & URL shortener | https://grabify.link |
-| **GetNotify** | Email open tracking + geolocation | https://getnotify.com |
-| **Blasze IP Logger** | IP logging tool | https://blasze.com |
-| **Canary Tokens** | Tracking tokens (URL, email, DNS) | https://canarytokens.org |
-| **IPinfo** | IP address data | https://ipinfo.io |
-| **IP-API** | IP geolocation API | http://ip-api.com |
-| **What Is My IP** | Your own IP checker | https://whatismyipaddress.com |
-| **MaxMind GeoIP** | IP geolocation database | https://maxmind.com |
-| **DB-IP** | IP geolocation | https://db-ip.com |
+| **IPLogger** | IP logging URL shortener | [iplogger.org](https://iplogger.org/) |
+| **Grabify** | IP grabber & URL shortener | [grabify.link](https://grabify.link/) |
+| **GetNotify** | Email open tracking + geolocation | [getnotify.com](https://getnotify.com/) |
+| **Blasze IP Logger** | IP logging tool | [blasze.com](https://blasze.com/) |
+| **Canary Tokens** | Tracking tokens (URL, email, DNS) | [canarytokens.org](https://canarytokens.org/) |
+| **IPinfo** | IP address data | [ipinfo.io](https://ipinfo.io/) |
+| **IP-API** | IP geolocation API | [ip-api.com](http://ip-api.com/) |
+| **What Is My IP** | Your own IP checker | [whatismyipaddress.com](https://whatismyipaddress.com/) |
+| **MaxMind GeoIP** | IP geolocation database | [maxmind.com](https://maxmind.com/) |
+| **DB-IP** | IP geolocation | [db-ip.com](https://db-ip.com/) |
+| **IPLocation** | IP address lookup | [iplocation.net](https://www.iplocation.net/) |
-> :bulb: **Tip**: Mask an IPLogger link using a URL shortener or the VK redirect trick:
+> **Tip**: Mask an IPLogger link using a URL shortener or the VK redirect trick:
> `https://vk.com/away.php?to=YOUR_LOGGER_LINK`
---
-## 26. :speech_balloon: Telegram OSINT Bots & Channels
+## 27. Telegram OSINT Bots & Channels
-### :robot_face: OSINT Bots
+### OSINT Bots
| Bot | Description | Link |
|-----|-------------|------|
@@ -948,22 +1063,24 @@ python3 orbit.py -s "BITCOIN_ADDRESS"
| **Quick OSINT** | Fast person lookup | @Quick_OSINT_bot |
| **Insight** | Data aggregation bot | Search for current bot |
| **USSearchBot** | US person search | @USSearchBot |
+| **@CreationDateBot** | Check Telegram account creation date | @creationdatebot |
+| **@SangMataBot** | Check username history of TG accounts | @SangMataInfo_bot |
-### :satellite_antenna: OSINT Telegram Channels
+### OSINT Telegram Channels
| Channel | Description | Link |
|---------|-------------|------|
-| **@overbafer1** | Hacking & cybersecurity content | https://t.me/overbafer1 |
-| **@overlamer1** | OSINT & hacking tutorials | https://t.me/overlamer1 |
-| **@Social_engineering** | Social engineering techniques | https://t.me/Social_engineering |
-| **@cyberbezopasno** | Cybersecurity news & tools | https://t.me/cyberbezopasno |
-| **@hacks_excel** | Hacking tips & tricks | https://t.me/hacks_excel |
-| **@KladovkaPavlu** | OSINT tool storage | https://t.me/KladovkaPavlu |
-| **@OSINT_group** | OSINT community | https://t.me/OSINT_group |
-| **@osaborona** | Offensive security | https://t.me/osaborona |
-| **@hackenproof** | Bug bounty & hacking | https://t.me/hackenproof |
+| **@overbafer1** | Hacking & cybersecurity content | [t.me/overbafer1](https://t.me/overbafer1) |
+| **@overlamer1** | OSINT & hacking tutorials | [t.me/overlamer1](https://t.me/overlamer1) |
+| **@Social_engineering** | Social engineering techniques | [t.me/Social_engineering](https://t.me/Social_engineering) |
+| **@cyberbezopasno** | Cybersecurity news & tools | [t.me/cyberbezopasno](https://t.me/cyberbezopasno) |
+| **@hacks_excel** | Hacking tips & tricks | [t.me/hacks_excel](https://t.me/hacks_excel) |
+| **@KladovkaPavlu** | OSINT tool storage | [t.me/KladovkaPavlu](https://t.me/KladovkaPavlu) |
+| **@OSINT_group** | OSINT community | [t.me/OSINT_group](https://t.me/OSINT_group) |
+| **@osaborona** | Offensive security | [t.me/osaborona](https://t.me/osaborona) |
+| **@hackenproof** | Bug bounty & hacking | [t.me/hackenproof](https://t.me/hackenproof) |
-### :mag: Telegram Scraping Tools
+### Telegram Scraping Tools
| Tool | Description | Install |
|------|-------------|---------|
@@ -971,39 +1088,40 @@ python3 orbit.py -s "BITCOIN_ADDRESS"
| **Telelog** | Telegram logging & monitoring | Search GitHub |
| **Telepathy** | Telegram OSINT analysis | `pip install telepathy` |
| **TeleGram-OSINTer** | Telegram profile investigation | `git clone https://github.com/Alb-310/TeleGram-OSINTer` |
+| **Telethon** | Python Telegram API library | `pip install telethon` |
+---
-## 27. :ru: Russian OSINT & Person Lookup Services
+## 28. Russian OSINT & Person Lookup Services
> Services popular in Russian-speaking OSINT communities (from telegra.ph TOP-25)
| # | Service | Description | Link |
|---|---------|-------------|------|
-| 1 | **FNS (Tax Service)** | Get INN number, check tax debts | https://service.nalog.ru/static/personal-data.html |
-| 2 | **TelPoisk** | Phone directory - address by name | https://telpoisk.com |
-| 3 | **GetContact** | See how number is saved by others | https://getcontact.com |
+| 1 | **FNS (Tax Service)** | Get INN number, check tax debts | [service.nalog.ru/static/personal-data.html](https://service.nalog.ru/static/personal-data.html) |
+| 2 | **TelPoisk** | Phone directory - address by name | [telpoisk.com](https://telpoisk.com/) |
+| 3 | **GetContact** | See how number is saved by others | [getcontact.com](https://getcontact.com/) |
| 4 | **Eye of God** | Person lookup by phone/email/photo | @glazzz_rus_bot |
-| 5 | **Search4faces** | Face search in VK & OK | https://search4faces.com |
-| 6 | **GetNotify** | Email tracking + geolocation | https://getnotify.com |
-| 7 | **BinCheck** | Card BIN lookup (bank, region) | https://bincheck.io |
+| 5 | **Search4faces** | Face search in VK & OK | [search4faces.com](https://search4faces.com/) |
+| 6 | **GetNotify** | Email tracking + geolocation | [getnotify.com](https://getnotify.com/) |
+| 7 | **BinCheck** | Card BIN lookup (bank, region) | [bincheck.io](https://bincheck.io/) |
### VK (VKontakte) OSINT
| Purpose | Tool/URL |
|---------|----------|
-| **Registration data** | https://regvk.com |
-| **Registration by ID** | https://regvk.com/id/ |
+| **Registration data** | [regvk.com](https://regvk.com/) |
+| **Registration by ID** | [regvk.com/id/](https://regvk.com/id/) |
| **FOAF data** | `https://vk.com/foaf.php?id=USER_ID` |
-| **Profile analysis** | https://valery.shostak.ru/vk |
-| **Friends of private accounts** | `https://online-vk.ru/pivatfriends.php?id=USER_ID` |
-| **Saved profiles** | https://ruprofile.pro |
-| **Profile finder** | https://rusfinder.pro |
-| **VK analytics** | http://vk.city4me.com |
-| **VK tools** | https://220vk.com |
-| **VK analytics** | https://vkdia.com |
-| **VK OSINT** | https://byratino.info |
-| **VK page archive** | https://vk.watch/ID/profile |
-| **Activity tracking** | https://nebaz.ru |
+| **Profile analysis** | [valery.shostak.ru/vk](https://valery.shostak.ru/vk) |
+| **Saved profiles** | [ruprofile.pro](https://ruprofile.pro/) |
+| **Profile finder** | [rusfinder.pro](https://rusfinder.pro/) |
+| **VK analytics** | [vk.city4me.com](http://vk.city4me.com/) |
+| **VK tools** | [220vk.com](https://220vk.com/) |
+| **VK analytics** | [vkdia.com](https://vkdia.com/) |
+| **VK OSINT** | [byratino.info](https://byratino.info/) |
+| **VK page archive** | [vk.watch/ID/profile](https://vk.watch/ID/profile) |
+| **Activity tracking** | [nebaz.ru](https://nebaz.ru/) |
### IP Logger Masking (VK redirect trick)
@@ -1013,9 +1131,29 @@ https://vk.com/away.php?to=YOUR_LOGGER_URL
---
-## 28. :penguin: Termux Hacking Toolkit (Complete)
+## 29. Social Media Searcher Platforms
-> :iphone: Complete guide to setting up OSINT & hacking tools on Android via Termux
+> Dedicated platforms for searching and monitoring social media
+
+| Tool | Description | Free? | Link |
+|------|-------------|-------|------|
+| **Social Searcher** | Free real-time social media search | Yes | [social-searcher.com](https://www.social-searcher.com/) |
+| **Social Mention** | Real-time social media aggregator | Yes | [socialmention.com](http://socialmention.com/) |
+| **Mention** | Social media & web monitoring | Freemium | [mention.com](https://mention.com/) |
+| **Talkwalker** | Social listening & analytics | Paid | [talkwalker.com](https://www.talkwalker.com/) |
+| **BrandWatch** | Social intelligence platform | Paid | [brandwatch.com](https://www.brandwatch.com/) |
+| **Hootsuite** | Social media management + monitoring | Freemium | [hootsuite.com](https://www.hootsuite.com/) |
+| **Meltwater** | Media intelligence | Paid | [meltwater.com](https://www.meltwater.com/) |
+| **Google Alerts** | Free web monitoring | Free | [google.com/alerts](https://www.google.com/alerts) |
+| **TweetDeck / X Pro** | Twitter/X monitoring | Free | [pro.twitter.com](https://pro.twitter.com/) |
+| **Who Posted What** | Facebook keyword search tool | Free | [whopostedwhat.com](https://whopostedwhat.com/) |
+| **Social-Searcher Users** | Find social media profiles by name | Free | [social-searcher.com/users-search](https://www.social-searcher.com/users-search/) |
+
+---
+
+## 30. Termux Hacking Toolkit (Complete)
+
+> Complete guide to setting up OSINT & hacking tools on Android via Termux
### Initial Setup
@@ -1059,16 +1197,11 @@ termux-setup-storage
git clone https://github.com/HACK3RY2J/Anon-SMS.git
cd Anon-SMS
bash Run.sh
-
-# Alternative:
-git clone https://github.com/in4osecurity/anonsms
-cd anonsms
-bash Run.sh
```
-2. BOMBER / db0mb3r - SMS Bomber
+2. BOMBER / db0mb3r & TBomb
```bash
# Method 1: db0mb3r (pip)
@@ -1151,50 +1284,27 @@ chmod +x userrecon.sh
-8. WebHack - Web Hacking
+8. WebHack, PhoneSploit, IPGeoLocation, Orbit
```bash
-apt-get install python3 git
+# WebHack
git clone https://github.com/yan4ikyt/webhack
-cd webhack
-pip3 install requests
+cd webhack && pip3 install requests
python3 WebHack.py
-```
-
-
-9. PhoneSploit - Phone Exploitation
-
-```bash
-# Find targets: shodan.io -> search "android debug bridge"
+# PhoneSploit (find targets on shodan: "android debug bridge")
apt install adb
-apt-get update
git clone https://github.com/aerosol-can/PhoneSploit
-cd PhoneSploit
-pip3 install colorama
+cd PhoneSploit && pip3 install colorama
adb start-server
python3 phonesploit.py
-```
-
-
-10. IPGeoLocation - IP Tracker
-
-```bash
+# IPGeoLocation
git clone https://github.com/maldevel/IPGeoLocation
-cd IPGeoLocation
-pip3 install -r requirements.txt
-apt-get install python3-setuptools
+cd IPGeoLocation && pip3 install -r requirements.txt
python3 ipgeolocation.py -t "TARGET_IP"
-```
-
-
-11. Orbit - Bitcoin Search
-
-```bash
-pkg upgrade
-pkg install git python
+# Orbit (Bitcoin search)
git clone https://github.com/s0md3v/Orbit
cd Orbit
python3 orbit.py -s "BITCOIN_ADDRESS"
@@ -1202,23 +1312,10 @@ python3 orbit.py -s "BITCOIN_ADDRESS"
-12. ShortURL - URL Shortener
+9. FakeRoot & FakeURL
```bash
-apt update
-apt install git -y
-git clone https://github.com/htr-tech/shorturl
-cd shorturl
-bash setup.sh
-shorturl
-```
-
-
-
-13. FakeRoot - Fake Root Access
-
-```bash
-# Method 1: From GitHub
+# FakeRoot
apt update -y && apt upgrade -y
apt install git
git clone https://github.com/B41B4L/FakeRoot
@@ -1226,17 +1323,9 @@ cd FakeRoot
chmod +x Root.sh
./Root.sh
# Test: whoami
+# Alternative: pkg install fakeroot && fakeroot
-# Method 2: Quick install
-pkg install fakeroot
-fakeroot
-```
-
-
-
-14. FakeURL / URLCADIZ
-
-```bash
+# FakeURL / URLCADIZ
git clone https://github.com/PerezMascato/URLCADIZ
sudo pip3 install pyshorteners
cd URLCADIZ
@@ -1244,9 +1333,25 @@ python3 URLCADIZ.py
```
+
+10. ShortURL & fsociety
+
+```bash
+# ShortURL
+git clone https://github.com/htr-tech/shorturl
+cd shorturl && bash setup.sh && shorturl
+
+# fsociety
+git clone https://github.com/Manisso/fsociety
+cd fsociety
+python3 fsociety.py
+```
+
+
+
---
-## 29. :dragon: Kali Linux OSINT Toolkit
+## 31. Kali Linux OSINT Toolkit
> Pre-installed and essential OSINT tools for Kali Linux
@@ -1271,7 +1376,6 @@ python3 URLCADIZ.py
| **SET** | Social engineering toolkit | `setoolkit` |
| **Burp Suite** | Web proxy | `burpsuite` |
| **BeEF** | Browser exploitation | `beef-xss` |
-| **GoldenEye** | HTTP DoS test | `goldeneye` |
### Additional Kali Installs
@@ -1279,7 +1383,7 @@ python3 URLCADIZ.py
# Install additional OSINT tools
sudo apt update
sudo apt install -y sherlock maltego spiderfoot recon-ng theharvester \
- metagoofil eyewitness phoneinfoga amass subfinder
+metagoofil eyewitness phoneinfoga amass subfinder
# Python tools
pip install maigret holehe h8mail socialscan social-analyzer
@@ -1287,12 +1391,12 @@ pip install maigret holehe h8mail socialscan social-analyzer
---
-## 30. :package: All-in-One Hacking Frameworks
+## 32. All-in-One Hacking Frameworks
| Framework | Description | Install |
|-----------|-------------|---------|
| **fsociety** | Mr. Robot inspired hacking pack | See below |
-| **Hackingtool** | All-in-one hacking tool | `git clone https://github.com/Z4nzu/hackingtool` |
+| **Hackingtool** | All-in-one hacking tool (100+ tools) | `git clone https://github.com/Z4nzu/hackingtool` |
| **PenTest Tools** | 20+ pentest tools | `git clone https://github.com/arch3rPro/PentestTools` |
| **Lazy Script** | Automated pentest | `git clone https://github.com/arismelachroinos/lscript` |
| **SpiderFoot** | Complete OSINT automation | `pip install spiderfoot` |
@@ -1301,7 +1405,7 @@ pip install maigret holehe h8mail socialscan social-analyzer
| **OSINTR** | AI-powered OSINT | Search GitHub |
-:wrench: Installation Guide - fsociety
+Installation Guide - fsociety
```bash
# Kali Linux
@@ -1328,7 +1432,7 @@ python3 fsociety.py
-:wrench: Installation Guide - Hackingtool
+Installation Guide - Hackingtool
```bash
git clone https://github.com/Z4nzu/hackingtool
@@ -1345,23 +1449,22 @@ sudo hackingtool
---
-## 31. :wrench: Wordlist Generation & Brute Force
+## 33. Wordlist Generation & Brute Force
| Tool | Description | Install |
|------|-------------|---------|
| **Crunch** | Pattern-based wordlist generator | `apt install crunch` |
| **CeWL** | Custom wordlist from website | `apt install cewl` |
| **Cupp** | Common User Passwords Profiler | `git clone https://github.com/Mebus/cupp` |
-| **Mentalist** | GUI wordlist generator | https://github.com/sc0tfree/mentalist |
-| **make_wordlist.py** | Permutation wordlist generator | Custom Python script |
-| **geowordlist** | Geographic-targeted wordlists | Custom lists |
+| **Mentalist** | GUI wordlist generator | [github.com/sc0tfree/mentalist](https://github.com/sc0tfree/mentalist) |
| **SecLists** | Collection of security lists | `git clone https://github.com/danielmiessler/SecLists` |
| **RockYou** | Classic password wordlist | Included in Kali |
-| **Weakpass** | Large wordlist collection | https://weakpass.com |
-| **Probable Wordlists** | Sorted by probability | https://github.com/berzerk0/Probable-Wordlists |
+| **Weakpass** | Large wordlist collection | [weakpass.com](https://weakpass.com/) |
+| **Probable Wordlists** | Sorted by probability | [github.com/berzerk0/Probable-Wordlists](https://github.com/berzerk0/Probable-Wordlists) |
+| **Pydictor** | Powerful wordlist generator | [github.com/LandGrey/pydictor](https://github.com/LandGrey/pydictor) |
-:wrench: Wordlist Generation Examples
+Wordlist Generation Examples
```bash
# Crunch - Generate all 8-char lowercase passwords
@@ -1375,15 +1478,14 @@ git clone https://github.com/Mebus/cupp
cd cupp
python3 cupp.py -i
-# Custom Python wordlist generator (permutation-based)
-# Combines words with case variants + prefix/suffix numbers
-# See: make_wordlist.py in this repository
+# SecLists - Download the ultimate collection
+git clone https://github.com/danielmiessler/SecLists
```
---
-## 32. :hammer_and_wrench: Hardware Hacking Tools
+## 34. Hardware Hacking Tools
| Device | Description | Price Range |
|--------|-------------|-------------|
@@ -1403,52 +1505,56 @@ python3 cupp.py -i
---
-## 33. :desktop_computer: OSINT Operating Systems
+## 35. OSINT Operating Systems
| OS | Focus | Link |
|----|-------|------|
-| **Kali Linux** | Penetration testing (600+ tools) | https://kali.org |
-| **Parrot OS** | Security & privacy | https://parrotsec.org |
-| **Tails** | Privacy & anonymity | https://tails.boum.org |
-| **Whonix** | Anonymous OS | https://whonix.org |
-| **CSI Linux** | OSINT & forensics focused | https://csilinux.com |
-| **Trace Labs OSINT VM** | OSINT-specific VM | https://tracelabs.org |
-| **BlackArch** | 2800+ security tools | https://blackarch.org |
-| **Pentoo** | Pentesting live CD | https://pentoo.ch |
-| **BackBox** | Security assessment | https://backbox.org |
-| **SIFT Workstation** | SANS digital forensics | https://digital-forensics.sans.org |
-| **REMnux** | Malware analysis | https://remnux.org |
-| **Qubes OS** | Security by compartmentalization | https://qubes-os.org |
-| **Kodachi** | Anti-forensic OS | https://eagle-eye.digital |
-| **DEFT** | Digital forensics toolkit | https://deftlinux.net |
-| **ArchStrike** | Arch Linux security tools | https://archstrike.org |
-| **Buscador** | OSINT-focused Linux | https://inteltechniques.com |
-| **CommandoVM** | Windows pentest VM | https://github.com/mandiant/commando-vm |
+| **Kali Linux** | Penetration testing (600+ tools) | [kali.org](https://kali.org/) |
+| **Parrot OS** | Security & privacy | [parrotsec.org](https://parrotsec.org/) |
+| **Tails** | Privacy & anonymity | [tails.boum.org](https://tails.boum.org/) |
+| **Whonix** | Anonymous OS | [whonix.org](https://whonix.org/) |
+| **CSI Linux** | OSINT & forensics focused | [csilinux.com](https://csilinux.com/) |
+| **Trace Labs OSINT VM** | OSINT-specific VM | [tracelabs.org](https://tracelabs.org/) |
+| **BlackArch** | 2800+ security tools | [blackarch.org](https://blackarch.org/) |
+| **Pentoo** | Pentesting live CD | [pentoo.ch](https://pentoo.ch/) |
+| **BackBox** | Security assessment | [backbox.org](https://backbox.org/) |
+| **SIFT Workstation** | SANS digital forensics | [digital-forensics.sans.org](https://digital-forensics.sans.org/) |
+| **REMnux** | Malware analysis | [remnux.org](https://remnux.org/) |
+| **Qubes OS** | Security by compartmentalization | [qubes-os.org](https://qubes-os.org/) |
+| **Kodachi** | Anti-forensic OS | [eagle-eye.digital](https://eagle-eye.digital/) |
+| **DEFT** | Digital forensics toolkit | [deftlinux.net](https://deftlinux.net/) |
+| **ArchStrike** | Arch Linux security tools | [archstrike.org](https://archstrike.org/) |
+| **Buscador** | OSINT-focused Linux | [inteltechniques.com](https://inteltechniques.com/) |
+| **CommandoVM** | Windows pentest VM | [github.com/mandiant/commando-vm](https://github.com/mandiant/commando-vm) |
---
-## 34. :electric_plug: OSINT APIs & Developer Tools
+## 36. OSINT APIs & Developer Tools
| API | Description | Link |
|-----|-------------|------|
-| **Shodan API** | IoT/device search | https://developer.shodan.io |
-| **VirusTotal API** | File/URL analysis | https://developers.virustotal.com |
-| **Hunter.io API** | Email discovery | https://hunter.io/api |
-| **SecurityTrails API** | DNS intelligence | https://securitytrails.com/corp/api |
-| **Have I Been Pwned API** | Breach check | https://haveibeenpwned.com/API |
-| **FaceSeek API** | Facial recognition search | https://github.com/faceseek-online/face-search-api |
-| **IPinfo API** | IP geolocation | https://ipinfo.io/developers |
-| **Censys API** | Internet scanning | https://search.censys.io/api |
-| **GitHub API** | Repository/user data | https://api.github.com |
-| **Telegram Bot API** | Bot development | https://core.telegram.org/bots/api |
-| **Twilio API** | Phone number lookup | https://twilio.com/docs |
-| **Google Custom Search API** | Programmable search | https://developers.google.com/custom-search |
-| **Dehashed API** | Breach data search | https://dehashed.com/docs |
-| **WhoisXML API** | Domain intelligence | https://whoisxmlapi.com |
+| **Shodan API** | IoT/device search | [developer.shodan.io](https://developer.shodan.io/) |
+| **VirusTotal API** | File/URL analysis | [developers.virustotal.com](https://developers.virustotal.com/) |
+| **Hunter.io API** | Email discovery | [hunter.io/api](https://hunter.io/api) |
+| **SecurityTrails API** | DNS intelligence | [securitytrails.com/corp/api](https://securitytrails.com/corp/api) |
+| **Have I Been Pwned API** | Breach check | [haveibeenpwned.com/API](https://haveibeenpwned.com/API) |
+| **FaceSeek API** | Facial recognition search | [github.com/faceseek-online/face-search-api](https://github.com/faceseek-online/face-search-api) |
+| **IPinfo API** | IP geolocation | [ipinfo.io/developers](https://ipinfo.io/developers) |
+| **Censys API** | Internet scanning | [search.censys.io/api](https://search.censys.io/api) |
+| **GitHub API** | Repository/user data | [api.github.com](https://api.github.com/) |
+| **Telegram Bot API** | Bot development | [core.telegram.org/bots/api](https://core.telegram.org/bots/api) |
+| **Twilio API** | Phone number lookup | [twilio.com/docs](https://twilio.com/docs) |
+| **Google Custom Search API** | Programmable search | [developers.google.com/custom-search](https://developers.google.com/custom-search) |
+| **Dehashed API** | Breach data search | [dehashed.com/docs](https://dehashed.com/docs) |
+| **WhoisXML API** | Domain intelligence | [whoisxmlapi.com](https://whoisxmlapi.com/) |
+| **Criminal IP API** | Threat intelligence | [criminalip.io/developer](https://www.criminalip.io/developer) |
+| **urlscan.io API** | URL analysis | [urlscan.io/docs/api](https://urlscan.io/docs/api/) |
+| **AbuseIPDB API** | IP reputation | [abuseipdb.com/api](https://www.abuseipdb.com/api) |
+| **CheckLeaked API** | WhatsApp data lookup | [whatsapp-proxy.checkleaked.cc/docs](https://whatsapp-proxy.checkleaked.cc/docs/) |
---
-## 35. :globe_with_meridians: Browser Extensions for OSINT
+## 37. Browser Extensions for OSINT
| Extension | Description | Browser |
|-----------|-------------|---------|
@@ -1464,23 +1570,28 @@ python3 cupp.py -i
| **HTTPS Everywhere** | Force HTTPS connections | Chrome / Firefox |
| **Hunchly** | OSINT web capture tool | Chrome |
| **InVID/WeVerify** | Video/image verification | Chrome / Firefox |
+| **HARPA AI** | AI browser agent | Chrome |
+| **SingleFile** | Save complete web pages | Chrome / Firefox |
---
-## 36. :books: OSINT Learning Resources
+## 38. OSINT Learning Resources
| Resource | Type | Link |
|----------|------|------|
-| **OSINT Framework** | Tool directory | https://osintframework.com |
-| **Start.me OSINT Pages** | Curated bookmark collections | https://start.me/p/DPYPMz/osint |
-| **IntelTechniques** | Michael Bazzell's resources | https://inteltechniques.com |
-| **Trace Labs** | OSINT for missing persons | https://tracelabs.org |
-| **SANS OSINT** | SANS cyber training | https://sans.org |
-| **Bellingcat** | OSINT investigative journalism | https://bellingcat.com |
-| **The OSINT Curious Project** | Community & training | https://osintcurio.us |
-| **Sector035 Week in OSINT** | Weekly OSINT newsletter | https://sector035.nl |
-| **OSINT Dojo** | OSINT training platform | https://osintdojo.com |
-| **CTF Competitions** | Hands-on practice | https://ctftime.org |
+| **OSINT Framework** | Tool directory | [osintframework.com](https://osintframework.com/) |
+| **Start.me OSINT Pages** | Curated bookmark collections | [start.me/p/DPYPMz/osint](https://start.me/p/DPYPMz/osint) |
+| **IntelTechniques** | Michael Bazzell's resources | [inteltechniques.com](https://inteltechniques.com/) |
+| **Trace Labs** | OSINT for missing persons | [tracelabs.org](https://tracelabs.org/) |
+| **SANS OSINT** | SANS cyber training | [sans.org](https://sans.org/) |
+| **Bellingcat** | OSINT investigative journalism | [bellingcat.com](https://bellingcat.com/) |
+| **The OSINT Curious Project** | Community & training | [osintcurio.us](https://osintcurio.us/) |
+| **Sector035 Week in OSINT** | Weekly OSINT newsletter | [sector035.nl](https://sector035.nl/) |
+| **OSINT Dojo** | OSINT training platform | [osintdojo.com](https://osintdojo.com/) |
+| **CTF Competitions** | Hands-on practice | [ctftime.org](https://ctftime.org/) |
+| **GIJN** | Global Investigative Journalism Network | [gijn.org](https://gijn.org/) |
+| **Limitless OSINT** | OSINT blog & techniques | Various |
+| **UNISHKA OSINT World** | Country-specific OSINT toolkits | [unishka.com](https://unishka.com/) |
### YouTube Channels for OSINT
@@ -1493,31 +1604,36 @@ python3 cupp.py -i
| **LiveOverflow** | Security research |
| **HackerSploit** | Penetration testing |
| **Null Byte** | Hacking tutorials |
+| **13Cubed** | DFIR & forensics |
+| **STOK** | Bug bounty & OSINT |
---
-## 37. :bookmark: Awesome OSINT GitHub Repos
+## 39. Awesome OSINT GitHub Repos
| Repository | Stars | Link |
-|------------|-------|------|
-| **jivoi/awesome-osint** | 20k+ | https://github.com/jivoi/awesome-osint |
-| **cipher387/osint_stuff_tool_collection** | 6k+ | https://github.com/cipher387/osint_stuff_tool_collection |
-| **Astrosp/Awesome-OSINT-For-Everything** | 2k+ | https://github.com/Astrosp/Awesome-OSINT-For-Everything |
-| **Jieyab89/OSINT-Cheat-sheet** | 1k+ | https://github.com/Jieyab89/OSINT-Cheat-sheet |
-| **The-Osint-Toolbox** | 1k+ | https://github.com/The-Osint-Toolbox |
-| **sinwindie/OSINT** | 3k+ | https://github.com/sinwindie/OSINT |
-| **Ph055a/OSINT_Collection** | 2k+ | https://github.com/Ph055a/OSINT_Collection |
-| **OSINT-searcher/analogi_Glaza_Boga** | - | https://github.com/OSINT-searcher/analogi_Glaza_Boga |
-| **faceseek-online/OSINT-Framework** | 1.8k | https://github.com/faceseek-online/OSINT-Framework |
-| **Z4nzu/hackingtool** | 40k+ | https://github.com/Z4nzu/hackingtool |
-| **Manisso/fsociety** | 10k+ | https://github.com/Manisso/fsociety |
-| **danielmiessler/SecLists** | 55k+ | https://github.com/danielmiessler/SecLists |
+|-----------|-------|------|
+| **jivoi/awesome-osint** | 20k+ | [github.com/jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) |
+| **cipher387/osint_stuff_tool_collection** | 6k+ | [github.com/cipher387/osint_stuff_tool_collection](https://github.com/cipher387/osint_stuff_tool_collection) |
+| **Astrosp/Awesome-OSINT-For-Everything** | 2k+ | [github.com/Astrosp/Awesome-OSINT-For-Everything](https://github.com/Astrosp/Awesome-OSINT-For-Everything) |
+| **Jieyab89/OSINT-Cheat-sheet** | 1k+ | [github.com/Jieyab89/OSINT-Cheat-sheet](https://github.com/Jieyab89/OSINT-Cheat-sheet) |
+| **The-Osint-Toolbox** | 1k+ | [github.com/The-Osint-Toolbox](https://github.com/The-Osint-Toolbox) |
+| **sinwindie/OSINT** | 3k+ | [github.com/sinwindie/OSINT](https://github.com/sinwindie/OSINT) |
+| **Ph055a/OSINT_Collection** | 2k+ | [github.com/Ph055a/OSINT_Collection](https://github.com/Ph055a/OSINT_Collection) |
+| **frangelbarrera/OSINT-BIBLE** | New | [github.com/frangelbarrera/OSINT-BIBLE](https://github.com/frangelbarrera/OSINT-BIBLE) |
+| **faceseek-online/OSINT-Framework** | 1.8k | [github.com/faceseek-online/OSINT-Framework](https://github.com/faceseek-online/OSINT-Framework) |
+| **Z4nzu/hackingtool** | 40k+ | [github.com/Z4nzu/hackingtool](https://github.com/Z4nzu/hackingtool) |
+| **Manisso/fsociety** | 10k+ | [github.com/Manisso/fsociety](https://github.com/Manisso/fsociety) |
+| **danielmiessler/SecLists** | 55k+ | [github.com/danielmiessler/SecLists](https://github.com/danielmiessler/SecLists) |
+| **ubikron/Awesome-AI-OSINT** | New | [github.com/ubikron/Awesome-AI-OSINT](https://github.com/ubikron/Awesome-AI-OSINT) |
+| **tracelabs/awesome-osint** | 1k+ | [github.com/tracelabs/awesome-osint](https://github.com/tracelabs/awesome-osint) |
---
-## 38. :zap: One-Click Install Scripts
+## 40. One-Click Install Scripts
-### Kali Linux - Install ALL OSINT Tools
+
+Kali Linux - Install ALL OSINT Tools
```bash
#!/bin/bash
@@ -1527,16 +1643,16 @@ sudo apt update && sudo apt upgrade -y
echo "[*] Installing system tools..."
sudo apt install -y git python3 python3-pip golang-go nmap wireshark \
- sqlmap hydra john hashcat aircrack-ng nikto dirb wpscan \
- recon-ng theharvester maltego spiderfoot set exiftool \
- masscan whatweb gobuster feroxbuster wfuzz \
- libimage-exiftool-perl binwalk foremost bulk-extractor macchanger
+sqlmap hydra john hashcat aircrack-ng nikto dirb wpscan \
+recon-ng theharvester maltego spiderfoot set exiftool \
+masscan whatweb gobuster feroxbuster wfuzz \
+libimage-exiftool-perl binwalk foremost bulk-extractor macchanger
echo "[*] Installing Python tools..."
pip install sherlock-project maigret holehe h8mail socialscan \
- social-analyzer phoneinfoga twint snscrape instaloader \
- deepface face_recognition volatility3 spiderfoot \
- blackbird-osint nexfil socid-extractor osrframework
+social-analyzer phoneinfoga twint snscrape instaloader \
+deepface face_recognition volatility3 spiderfoot \
+blackbird-osint nexfil socid-extractor osrframework
echo "[*] Cloning GitHub tools..."
cd /opt
@@ -1554,8 +1670,10 @@ sudo git clone https://github.com/danielmiessler/SecLists
echo "[+] Installation complete! OSINT Arsenal is ready."
```
+
-### Termux (Android) - Install ALL Tools
+
+Termux (Android) - Install ALL Tools
```bash
#!/bin/bash
@@ -1565,11 +1683,11 @@ pkg update -y && pkg upgrade -y
echo "[*] Installing base packages..."
pkg install -y python python2 git wget curl nmap hydra \
- perl clang make openssl openssh php
+perl clang make openssl openssh php
echo "[*] Installing Python tools..."
pip install requests colorama sherlock-project maigret \
- holehe h8mail socialscan phoneinfoga
+holehe h8mail socialscan phoneinfoga
echo "[*] Setting up storage..."
termux-setup-storage
@@ -1592,10 +1710,11 @@ git clone https://github.com/noob-hackers/grabcam
echo "[+] All tools installed! Happy hacking :)"
```
+
---
-## 39. :trophy: Top 50 Must-Have Tools (Quick Reference)
+## 41. Top 50 Must-Have Tools (Quick Reference)
| # | Tool | Category | Install |
|---|------|----------|---------|
@@ -1616,66 +1735,70 @@ echo "[+] All tools installed! Happy hacking :)"
| 15 | **Hydra** | Login brute force | `apt install hydra` |
| 16 | **Wireshark** | Network analysis | `apt install wireshark` |
| 17 | **Aircrack-ng** | Wi-Fi security | `apt install aircrack-ng` |
-| 18 | **Burp Suite** | Web proxy | https://portswigger.net |
-| 19 | **FaceSeek** | Face recognition search | https://faceseek.online |
-| 20 | **PimEyes** | Face search engine | https://pimeyes.com |
+| 18 | **Burp Suite** | Web proxy | [portswigger.net](https://portswigger.net/) |
+| 19 | **FaceSeek** | Face recognition search | [faceseek.online](https://faceseek.online/) |
+| 20 | **PimEyes** | Face search engine | [pimeyes.com](https://pimeyes.com/) |
| 21 | **Zphisher** | Phishing tool | `git clone .../zphisher` |
| 22 | **Storm-Breaker** | Camera/mic SE tool | `git clone .../Storm-Breaker` |
-| 23 | **Shodan** | IoT search engine | https://shodan.io |
-| 24 | **Censys** | Internet scanning | https://censys.io |
-| 25 | **OSINT Framework** | Tool directory | https://osintframework.com |
+| 23 | **Shodan** | IoT search engine | [shodan.io](https://shodan.io/) |
+| 24 | **Censys** | Internet scanning | [censys.io](https://censys.io/) |
+| 25 | **Criminal IP** | Cyber threat intelligence | [criminalip.io](https://www.criminalip.io/) |
| 26 | **SpiderFoot** | OSINT automation | `pip install spiderfoot` |
| 27 | **Maltego** | Visual link analysis | Pre-installed in Kali |
| 28 | **Recon-ng** | Recon framework | `pip install recon-ng` |
| 29 | **ExifTool** | Image metadata | `apt install libimage-exiftool-perl` |
-| 30 | **Autopsy** | Digital forensics | https://autopsy.com |
+| 30 | **Autopsy** | Digital forensics | [autopsy.com](https://autopsy.com/) |
| 31 | **Volatility** | Memory forensics | `pip install volatility3` |
-| 32 | **Tor Browser** | Anonymous browsing | https://torproject.org |
-| 33 | **Tails OS** | Anonymous OS | https://tails.boum.org |
-| 34 | **DeHashed** | Breach search engine | https://dehashed.com |
-| 35 | **LeakCheck** | Breach search | https://leakcheck.net |
-| 36 | **Intelligence X** | Deep search | https://intelx.io |
-| 37 | **Have I Been Pwned** | Breach checker | https://haveibeenpwned.com |
+| 32 | **Tor Browser** | Anonymous browsing | [torproject.org](https://torproject.org/) |
+| 33 | **Tails OS** | Anonymous OS | [tails.boum.org](https://tails.boum.org/) |
+| 34 | **DeHashed** | Breach search engine | [dehashed.com](https://dehashed.com/) |
+| 35 | **LeakCheck** | Breach search | [leakcheck.net](https://leakcheck.net/) |
+| 36 | **CheckLeaked** | Leak search (15B+ accounts) | [checkleaked.cc](https://checkleaked.cc/) |
+| 37 | **Have I Been Pwned** | Breach checker | [haveibeenpwned.com](https://haveibeenpwned.com/) |
| 38 | **fsociety** | All-in-one hacking | `git clone .../fsociety` |
| 39 | **Hackingtool** | 100+ tools in one | `git clone .../hackingtool` |
| 40 | **Osintgram** | Instagram OSINT | `git clone .../Osintgram` |
-| 41 | **snscrape** | Social media scraper | `pip install snscrape` |
-| 42 | **VirusTotal** | Malware analysis | https://virustotal.com |
-| 43 | **IPLogger** | IP tracking | https://iplogger.org |
-| 44 | **Grabify** | IP grabber | https://grabify.link |
-| 45 | **GetContact** | Phone caller ID | https://getcontact.com |
-| 46 | **Search4faces** | Face search (VK/OK) | https://search4faces.com |
-| 47 | **Nikto** | Web scanner | `apt install nikto` |
-| 48 | **Gobuster** | Directory brute force | `go install ...gobuster` |
+| 41 | **Social-Searcher** | Social media search | [social-searcher.com](https://www.social-searcher.com/) |
+| 42 | **VirusTotal** | Malware analysis | [virustotal.com](https://virustotal.com/) |
+| 43 | **IPLogger** | IP tracking | [iplogger.org](https://iplogger.org/) |
+| 44 | **Grabify** | IP grabber | [grabify.link](https://grabify.link/) |
+| 45 | **GetContact** | Phone caller ID | [getcontact.com](https://getcontact.com/) |
+| 46 | **Pentest-Tools** | Online pentesting platform | [pentest-tools.com](https://pentest-tools.com/) |
+| 47 | **Perplexity AI** | AI research assistant | [perplexity.ai](https://perplexity.ai/) |
+| 48 | **CyberChef** | Data analysis swiss knife | [gchq.github.io/CyberChef](https://gchq.github.io/CyberChef) |
| 49 | **SecLists** | Security wordlists | `git clone .../SecLists` |
-| 50 | **CyberChef** | Data analysis swiss knife | https://gchq.github.io/CyberChef |
+| 50 | **WHOIS.com** | Domain lookup | [whois.com](https://www.whois.com/) |
---
-## :bar_chart: STATISTICS
+## STATISTICS
| Metric | Count |
|--------|-------|
-| **Total Tools Listed** | 900+ |
-| **GitHub Repositories** | 250+ |
-| **Online Platforms** | 200+ |
-| **CLI Tools** | 350+ |
+| **Total Tools Listed** | 1100+ |
+| **GitHub Repositories** | 300+ |
+| **Online Platforms** | 250+ |
+| **CLI Tools** | 400+ |
| **Browser Extensions** | 15+ |
| **Kali Built-in Tools** | 40+ |
| **Termux Compatible** | 25+ |
-| **Leak/Whistleblower Platforms** | 30+ |
-| **Data Breach Search Engines** | 20+ |
+| **Leak/Whistleblower Platforms** | 35+ |
+| **Data Breach Search Engines** | 25+ |
| **OSINT Operating Systems** | 17 |
| **Hardware Hacking Tools** | 13 |
-| **AI-Powered Tools** | 12 |
-| **Dark Web Search Engines** | 16 |
+| **AI-Powered Tools** | 25+ |
+| **Free AI Tools** | 16 |
+| **Dark Web Search Engines** | 17 |
| **Telegram Bots & Channels** | 25+ |
-| **Google Dorks Listed** | 25+ |
-| **Categories Covered** | 39 |
+| **Google Dorks Listed** | 50+ |
+| **Credential Dorks** | 14 |
+| **Social Media Platforms** | 11 |
+| **APIs & Developer Tools** | 18 |
+| **Categories Covered** | 41 |
---
-## :warning: LEGAL DISCLAIMER
+## LEGAL DISCLAIMER
This guide is provided for **educational and authorized security research purposes only**. Many tools listed can be used both defensively and offensively.
@@ -1688,9 +1811,9 @@ The authors of this guide are not responsible for any misuse of the tools listed
---
-> **Version**: 1.0 -- The Ultimate Arsenal Edition
+> **Version**: 1.1 -- The Ultimate Arsenal Edition
> **Last Updated**: 2025-2026
-> :star: **Star this repo** if you found it useful!
+> **Star this repo** if you found it useful!
> **Contributions welcome** -- submit a pull request or open an issue
---