From 7ce118086c27d151ff882eba5c35a7a09c583fd9 Mon Sep 17 00:00:00 2001 From: barni <68239032+rawfilejson@users.noreply.github.com> Date: Sun, 12 Apr 2026 22:22:56 +0100 Subject: [PATCH] Update fmt.Println message to 'Goodbye World' --- README.md | 1181 +++++++++++++++++++++++++++++------------------------ 1 file changed, 652 insertions(+), 529 deletions(-) diff --git a/README.md b/README.md index ff86aec..f126fee 100644 --- a/README.md +++ b/README.md @@ -1,90 +1,95 @@ -# AWESOME OSINT ARSENAL +# AWESOME OSINT ARSENAL + ### The Ultimate Open-Source Intelligence Tools Encyclopedia

- - - - - + + + + +

- :fire: The most comprehensive OSINT resource on the internet :fire:
- 900+ tools, websites, platforms, bots, and resources across 50+ categories
- Every tool includes installation instructions where applicable +The most comprehensive OSINT resource on the internet
+1100+ tools, websites, platforms, bots, and resources across 50+ categories
+Every tool includes installation instructions where applicable

--- -> :warning: **DISCLAIMER**: This guide is for **educational and authorized security research purposes only**. Always obtain proper authorization before testing systems you don't own. The authors are not responsible for any misuse. +> **DISCLAIMER**: This guide is for **educational and authorized security research purposes only**. Always obtain proper authorization before testing systems you don't own. The authors are not responsible for any misuse. --- -## :book: TABLE OF CONTENTS +## TABLE OF CONTENTS -1. [:mag: Username & Social Media OSINT](#1--username--social-media-osint) -2. [:email: Email OSINT Tools](#2--email-osint-tools) -3. [:telephone_receiver: Phone Number OSINT](#3--phone-number-osint) -4. [:globe_with_meridians: Domain & IP OSINT](#4--domain--ip-osint) -5. [:world_map: Geolocation & Maps OSINT](#5--geolocation--maps-osint) -6. [:camera: Image & Video OSINT](#6--image--video-osint) -7. [:bust_in_silhouette: Facial Recognition & People Search](#7--facial-recognition--people-search) -8. [:bird: Social Media Monitoring](#8--social-media-monitoring) +1. [Username & Social Media OSINT](#1-username--social-media-osint) +2. [Email OSINT Tools](#2-email-osint-tools) +3. [Phone Number OSINT](#3-phone-number-osint) +4. [Domain & IP OSINT](#4-domain--ip-osint) +5. [Geolocation & Maps OSINT](#5-geolocation--maps-osint) +6. [Image & Video OSINT](#6-image--video-osint) +7. [Facial Recognition & People Search](#7-facial-recognition--people-search) +8. [Social Media Monitoring](#8-social-media-monitoring) -9. [:closed_lock_with_key: Data Breach & Leak Search Engines](#9--data-breach--leak-search-engines) -10. [:page_facing_up: WikiLeaks, DDoSecrets & Whistleblower Platforms](#10--wikileaks-ddosecrets--whistleblower-platforms) -11. [:key: Password Cracking & Credential Tools](#11--password-cracking--credential-tools) +9. [Data Breach & Leak Search Engines](#9-data-breach--leak-search-engines) +10. [WikiLeaks, DDoSecrets & Whistleblower Platforms](#10-wikileaks-ddosecrets--whistleblower-platforms) +11. [Password Cracking & Credential Tools](#11-password-cracking--credential-tools) - -12. [:new_moon: Dark Web Search Engines & Tools](#12--dark-web-search-engines--tools) -13. [:ghost: Anonymous & Privacy Tools](#13--anonymous--privacy-tools) + +12. [Dark Web Search Engines & Tools](#12-dark-web-search-engines--tools) +13. [Anonymous & Privacy Tools](#13-anonymous--privacy-tools) - -14. [:spider_web: Web Application OSINT & Scanning](#14--web-application-osint--scanning) -15. [:fishing_pole_and_fish: Social Engineering & Phishing](#15--social-engineering--phishing) -16. [:bomb: Vulnerability Scanning & Exploitation](#16--vulnerability-scanning--exploitation) -17. [:satellite: Network & Wireless Tools](#17--network--wireless-tools) -18. [:iphone: Mobile Hacking & Phone Exploitation](#18--mobile-hacking--phone-exploitation) + +14. [Web Application OSINT & Scanning](#14-web-application-osint--scanning) +15. [Social Engineering & Phishing](#15-social-engineering--phishing) +16. [Vulnerability Scanning & Exploitation](#16-vulnerability-scanning--exploitation) +17. [Network & Wireless Tools](#17-network--wireless-tools) +18. [Mobile Hacking & Phone Exploitation](#18-mobile-hacking--phone-exploitation) - -19. [:robot: AI-Powered OSINT Tools](#19--ai-powered-osint-tools) -20. [:moneybag: Financial & Corporate Intelligence](#20--financial--corporate-intelligence) -21. [:car: Vehicle, Property & Public Records](#21--vehicle-property--public-records) -22. [:detective: Metadata & Digital Forensics](#22--metadata--digital-forensics) + +19. [AI-Powered OSINT & Free AI Tools](#19-ai-powered-osint--free-ai-tools) +20. [Financial & Corporate Intelligence](#20-financial--corporate-intelligence) +21. [Vehicle, Property & Public Records](#21-vehicle-property--public-records) +22. [Metadata & Digital Forensics](#22-metadata--digital-forensics) - -23. [:video_camera: IP Camera & Webcam OSINT](#23--ip-camera--webcam-osint) -24. [📡 Google Dorking Bible](#24--google-dorking-bible) -25. [:link: IP Tracking & Geolocation Links](#25--ip-tracking--geolocation-links) + +23. [IP Camera & Webcam OSINT](#23-ip-camera--webcam-osint) +24. [Google Dorking Bible](#24-google-dorking-bible) +25. [Credential & Data Dorking](#25-credential--data-dorking) +26. [IP Tracking & Geolocation Links](#26-ip-tracking--geolocation-links) - -26. [:speech_balloon: Telegram OSINT Bots & Channels](#26--telegram-osint-bots--channels) -27. [:ru: Russian OSINT & Person Lookup Services](#27--russian-osint--person-lookup-services) + +27. [Telegram OSINT Bots & Channels](#27-telegram-osint-bots--channels) +28. [Russian OSINT & Person Lookup Services](#28-russian-osint--person-lookup-services) +29. [Social Media Searcher Platforms](#29-social-media-searcher-platforms) -28. [:penguin: Termux Hacking Toolkit (Complete)](#28--termux-hacking-toolkit-complete) -29. [:dragon: Kali Linux OSINT Toolkit](#29--kali-linux-osint-toolkit) -30. [:package: All-in-One Hacking Frameworks](#30--all-in-one-hacking-frameworks) -31. [:wrench: Wordlist Generation & Brute Force](#31--wordlist-generation--brute-force) +30. [Termux Hacking Toolkit (Complete)](#30-termux-hacking-toolkit-complete) +31. [Kali Linux OSINT Toolkit](#31-kali-linux-osint-toolkit) +32. [All-in-One Hacking Frameworks](#32-all-in-one-hacking-frameworks) +33. [Wordlist Generation & Brute Force](#33-wordlist-generation--brute-force) - -32. [:hammer_and_wrench: Hardware Hacking Tools](#32--hardware-hacking-tools) -33. [:desktop_computer: OSINT Operating Systems](#33--osint-operating-systems) -34. [:electric_plug: OSINT APIs & Developer Tools](#34--osint-apis--developer-tools) -35. [:globe_with_meridians: Browser Extensions for OSINT](#35--browser-extensions-for-osint) -36. [:books: OSINT Learning Resources](#36--osint-learning-resources) -37. [:bookmark: Awesome OSINT GitHub Repos](#37--awesome-osint-github-repos) + +34. [Hardware Hacking Tools](#34-hardware-hacking-tools) +35. [OSINT Operating Systems](#35-osint-operating-systems) - -38. [:zap: One-Click Install Scripts](#38--one-click-install-scripts) -39. [:trophy: Top 50 Must-Have Tools (Quick Reference)](#39--top-50-must-have-tools-quick-reference) + +36. [OSINT APIs & Developer Tools](#36-osint-apis--developer-tools) +37. [Browser Extensions for OSINT](#37-browser-extensions-for-osint) +38. [OSINT Learning Resources](#38-osint-learning-resources) +39. [Awesome OSINT GitHub Repos](#39-awesome-osint-github-repos) + + +40. [One-Click Install Scripts](#40-one-click-install-scripts) +41. [Top 50 Must-Have Tools (Quick Reference)](#41-top-50-must-have-tools-quick-reference) --- -## 1. :mag: Username & Social Media OSINT +## 1. Username & Social Media OSINT > Tools for finding accounts, profiles, and digital footprints across platforms @@ -92,8 +97,8 @@ |------|-------------|----------------| | **Sherlock** | Find usernames across 400+ social networks | `pip install sherlock-project` | | **Maigret** | Advanced Sherlock fork, 3000+ sites | `pip install maigret` | -| **Namechk** | Username & domain availability checker | https://namechk.com | -| **WhatsMyName** | Web-based username enumeration | https://whatsmyname.app | +| **Namechk** | Username & domain availability checker | [namechk.com](https://namechk.com/) | +| **WhatsMyName** | Web-based username enumeration | [whatsmyname.app](https://whatsmyname.app/) | | **Snoop** | Username search (Russian-focused) | `pip install snoop` | | **UserRecon** | Bash-based username finder | `git clone https://github.com/wishihab/userrecon.git` | | **Blackbird** | Fast username search tool | `pip install blackbird-osint` | @@ -105,10 +110,14 @@ | **Holehe** | Check if email is registered on sites | `pip install holehe` | | **socialscan** | Check email/username availability | `pip install socialscan` | | **Investigo** | Username checker (Go-based) | `go install github.com/tdh8316/investigo@latest` | -| **OSINT Framework** | Visual map of all OSINT tools | https://osintframework.com | +| **OSINT Framework** | Visual map of all OSINT tools | [osintframework.com](https://osintframework.com/) | +| **CheckUserNames** | Check username across multiple platforms | [checkusernames.com](https://checkusernames.com/) | +| **KnowEm** | Username search on 500+ sites | [knowem.com](https://knowem.com/) | +| **Instant Username Search** | Real-time username checker | [instantusername.com](https://instantusername.com/) | +| **Usersearch.org** | Free social network search | [usersearch.org](https://usersearch.org/) |
-:wrench: Installation Guide - Sherlock (All Platforms) +Installation Guide - Sherlock (All Platforms) ```bash # Kali Linux / Ubuntu @@ -130,7 +139,7 @@ python3 sherlock "username"
-:wrench: Installation Guide - Maigret +Installation Guide - Maigret ```bash # pip install @@ -147,7 +156,7 @@ python3 -m maigret "username" --- -## 2. :email: Email OSINT Tools +## 2. Email OSINT Tools > Find information about email addresses, verify them, check breaches @@ -157,20 +166,25 @@ python3 -m maigret "username" | **Holehe** | Check email on 120+ sites | `pip install holehe` | | **theHarvester** | Email & domain harvester | `pip install theHarvester` | | **EmailAnalyzer** | Analyze suspicious .eml files | `git clone https://github.com/keraattin/EmailAnalyzer` | +| **Prowl** | Email & domain reconnaissance | `git clone https://github.com/nettitude/Prowl` | | **EmailHeader-Analyzer** | CLI email header parser + OSINT | `git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python` | | **MailHeaderDetective** | Email header forensics | `git clone https://github.com/akajhon/MailHeaderDetective` | | **WhatMail** | Email header analysis CLI | `git clone https://github.com/z0m31en7/WhatMail` | | **mailto_analyzer** | Email exposure analysis | `pip install mailto-analyzer` | | **Infoga** | Email OSINT gathering | `git clone https://github.com/m4ll0k/Infoga` | -| **Hunter.io** | Find professional emails | https://hunter.io | -| **Phonebook.cz** | Email, domain & URL search | https://phonebook.cz | -| **EmailRep** | Email reputation lookup | https://emailrep.io | -| **Epieos** | Get info linked to email | https://epieos.com | -| **GetNotify** | Email open tracking + geolocation | https://getnotify.com | -| **Snov.io** | Email finder & verifier | https://snov.io | +| **Hunter.io** | Find professional emails | [hunter.io](https://hunter.io/) | +| **Phonebook.cz** | Email, domain & URL search | [phonebook.cz](https://phonebook.cz/) | +| **EmailRep** | Email reputation lookup | [emailrep.io](https://emailrep.io/) | +| **Epieos** | Get info linked to email | [epieos.com](https://epieos.com/) | +| **GetNotify** | Email open tracking + geolocation | [getnotify.com](https://getnotify.com/) | +| **Snov.io** | Email finder & verifier | [snov.io](https://snov.io/) | +| **MXToolbox** | Email header analysis & DNS checks | [mxtoolbox.com](https://mxtoolbox.com/) | +| **SimpleLogin** | Email alias service for OSINT | [simplelogin.io](https://simplelogin.io/) | +| **Email-Checker** | Email validation tool | [email-checker.net](https://email-checker.net/) | +| **Voila Norbert** | Find anyone's email | [voilanorbert.com](https://voilanorbert.com/) |
-:wrench: Installation Guide - h8mail +Installation Guide - h8mail ```bash # Quick install @@ -193,24 +207,26 @@ h8mail -t "target@email.com" -k config.ini --- -## 3. :telephone_receiver: Phone Number OSINT +## 3. Phone Number OSINT | Tool | Description | Install / Link | |------|-------------|----------------| | **PhoneInfoga** | Advanced phone number scanner | `pip install phoneinfoga` | | **Ignorant** | Check phone registrations | `pip install ignorant` | -| **GetContact** | See how number is saved by others | https://getcontact.com | -| **NumVerify** | Phone number validation API | https://numverify.com | -| **Truecaller** | Caller ID & spam lookup | https://truecaller.com | -| **Sync.me** | Phone number lookup | https://sync.me | -| **CallerIDTest** | Reverse phone lookup | https://calleridtest.com | -| **SpyDialer** | Free reverse phone lookup | https://spydialer.com | -| **National Cellular Directory** | Phone owner lookup | https://www.nationalcellulardirectory.com | -| **TelPoisk** | Russian phone directory | https://telpoisk.com | -| **NumLookup** | Free reverse phone lookup | https://www.numlookup.com | +| **GetContact** | See how number is saved by others | [getcontact.com](https://getcontact.com/) | +| **NumVerify** | Phone number validation API | [numverify.com](https://numverify.com/) | +| **Truecaller** | Caller ID & spam lookup | [truecaller.com](https://truecaller.com/) | +| **Sync.me** | Phone number lookup | [sync.me](https://sync.me/) | +| **CallerIDTest** | Reverse phone lookup | [calleridtest.com](https://calleridtest.com/) | +| **SpyDialer** | Free reverse phone lookup | [spydialer.com](https://spydialer.com/) | +| **National Cellular Directory** | Phone owner lookup | [nationalcellulardirectory.com](https://www.nationalcellulardirectory.com/) | +| **TelPoisk** | Russian phone directory | [telpoisk.com](https://telpoisk.com/) | +| **NumLookup** | Free reverse phone lookup | [numlookup.com](https://www.numlookup.com/) | +| **Hlr-Lookups** | HLR phone number lookup | [hlr-lookups.com](https://www.hlr-lookups.com/) | +| **PhoneSploit** | ADB-based phone exploitation | `git clone https://github.com/aerosol-can/PhoneSploit` |
-:wrench: Installation Guide - PhoneInfoga +Installation Guide - PhoneInfoga ```bash # Kali Linux @@ -226,7 +242,7 @@ phoneinfoga scan -n "+1234567890" --- -## 4. :globe_with_meridians: Domain & IP OSINT +## 4. Domain & IP OSINT | Tool | Description | Install / Link | |------|-------------|----------------| @@ -234,23 +250,34 @@ phoneinfoga scan -n "+1234567890" | **Subfinder** | Fast subdomain discovery | `go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest` | | **dnsrecon** | DNS enumeration | `pip install dnsrecon` | | **Sublist3r** | Subdomain enumeration | `pip install sublist3r` | -| **crt.sh** | Certificate transparency search | https://crt.sh | -| **Shodan** | Internet-connected device search | https://shodan.io | -| **Censys** | Internet-wide scan search | https://censys.io | -| **VirusTotal** | Domain/IP/file analysis | https://virustotal.com | -| **SecurityTrails** | DNS & domain intelligence | https://securitytrails.com | +| **crt.sh** | Certificate transparency search | [crt.sh](https://crt.sh/) | +| **Shodan** | Internet-connected device search | [shodan.io](https://shodan.io/) | +| **Censys** | Internet-wide scan search | [censys.io](https://censys.io/) | +| **Criminal IP** | AI-powered cyber threat intelligence search | [criminalip.io](https://www.criminalip.io/) | +| **VirusTotal** | Domain/IP/file analysis | [virustotal.com](https://virustotal.com/) | +| **SecurityTrails** | DNS & domain intelligence | [securitytrails.com](https://securitytrails.com/) | | **IPGeoLocation** | IP address geolocation | `git clone https://github.com/maldevel/IPGeoLocation` | | **Nmap** | Network scanner & mapper | `apt install nmap` / `pkg install nmap` | | **Masscan** | Fastest port scanner | `apt install masscan` | -| **SmartWhois** | WHOIS lookup tool | https://smartwhois.en.softonic.com | -| **ViewDNS** | Multiple DNS tools | https://viewdns.info | -| **DNSDumpster** | DNS reconnaissance | https://dnsdumpster.com | -| **Robtex** | DNS lookup visualization | https://robtex.com | -| **ARIN WHOIS** | IP registration database | https://whois.arin.net | -| **BGP Toolkit** | BGP/ASN/IP intelligence | https://bgp.he.net | +| **WHOIS.com** | WHOIS domain lookup | [whois.com](https://www.whois.com/) | +| **SmartWhois** | WHOIS lookup tool | [smartwhois.en.softonic.com](https://smartwhois.en.softonic.com/) | +| **ViewDNS** | Multiple DNS tools | [viewdns.info](https://viewdns.info/) | +| **DNSDumpster** | DNS reconnaissance | [dnsdumpster.com](https://dnsdumpster.com/) | +| **Robtex** | DNS lookup visualization | [robtex.com](https://robtex.com/) | +| **ARIN WHOIS** | IP registration database | [whois.arin.net](https://whois.arin.net/) | +| **BGP Toolkit** | BGP/ASN/IP intelligence | [bgp.he.net](https://bgp.he.net/) | +| **urlscan.io** | URL/domain analysis & screenshots | [urlscan.io](https://urlscan.io/) | +| **AbuseIPDB** | IP address reputation database | [abuseipdb.com](https://www.abuseipdb.com/) | +| **Web-Check** | All-in-one website analysis (DNS, SSL, Whois, etc.) | [web-check.xyz](https://web-check.xyz/) | +| **CentralOps** | Network tools & domain lookup | [centralops.net](https://centralops.net/) | +| **Pentest-Tools.com** | Online pentesting & recon toolkit | [pentest-tools.com](https://pentest-tools.com/) | +| **Yandex** | Russian search engine (great for OSINT) | [yandex.com](https://yandex.com/) | +| **WhoisXML API** | Domain & IP intelligence API | [whoisxmlapi.com](https://whoisxmlapi.com/) | +| **IPinfo** | IP address data & geolocation | [ipinfo.io](https://ipinfo.io/) | +| **DB-IP** | IP geolocation database | [db-ip.com](https://db-ip.com/) |
-:wrench: Installation Guide - IPGeoLocation +Installation Guide - IPGeoLocation ```bash # Kali Linux / Ubuntu @@ -270,47 +297,53 @@ python3 ipgeolocation.py -t "TARGET_IP" --- -## 5. :world_map: Geolocation & Maps OSINT +## 5. Geolocation & Maps OSINT | Tool | Description | Install / Link | |------|-------------|----------------| -| **Google Earth Pro** | Advanced satellite imagery | https://earth.google.com | -| **Overpass Turbo** | OpenStreetMap data query | https://overpass-turbo.eu | -| **SunCalc** | Sun position/time calculator | https://suncalc.org | -| **GeoGuessr** | Geolocation training game | https://geoguessr.com | -| **Sentinel Hub** | Satellite imagery access | https://sentinel-hub.com | -| **FIRMS** | NASA fire/thermal hotspots | https://firms.modaps.eosdis.nasa.gov | -| **Wikimapia** | Collaborative world map | https://wikimapia.org | -| **OpenStreetMap** | Free world map | https://openstreetmap.org | -| **GeoSpy** | AI-powered geolocation | https://geospy.ai | -| **Mapillary** | Street-level imagery | https://mapillary.com | -| **Maxar** | Commercial satellite imagery | https://maxar.com | -| **F4map** | 3D interactive world map | https://demo.f4map.com | -| **Dual Maps** | Side-by-side map comparison | http://data.mashedworld.com/dualmaps | +| **Google Earth Pro** | Advanced satellite imagery | [earth.google.com](https://earth.google.com/) | +| **Overpass Turbo** | OpenStreetMap data query | [overpass-turbo.eu](https://overpass-turbo.eu/) | +| **SunCalc** | Sun position/time calculator | [suncalc.org](https://suncalc.org/) | +| **GeoGuessr** | Geolocation training game | [geoguessr.com](https://geoguessr.com/) | +| **Sentinel Hub** | Satellite imagery access | [sentinel-hub.com](https://sentinel-hub.com/) | +| **FIRMS** | NASA fire/thermal hotspots | [firms.modaps.eosdis.nasa.gov](https://firms.modaps.eosdis.nasa.gov/) | +| **Wikimapia** | Collaborative world map | [wikimapia.org](https://wikimapia.org/) | +| **OpenStreetMap** | Free world map | [openstreetmap.org](https://openstreetmap.org/) | +| **GeoSpy** | AI-powered geolocation | [geospy.ai](https://geospy.ai/) | +| **Mapillary** | Street-level imagery | [mapillary.com](https://mapillary.com/) | +| **Maxar** | Commercial satellite imagery | [maxar.com](https://maxar.com/) | +| **F4map** | 3D interactive world map | [demo.f4map.com](https://demo.f4map.com/) | +| **Dual Maps** | Side-by-side map comparison | [data.mashedworld.com/dualmaps](http://data.mashedworld.com/dualmaps) | +| **Zoom Earth** | Real-time satellite & weather | [zoom.earth](https://zoom.earth/) | +| **KartaView** | Street-level imagery (OpenStreetCam) | [kartaview.org](https://kartaview.org/) | +| **ShadowMap** | Shadow analysis for time estimation | [shadowmap.org](https://shadowmap.org/) | --- -## 6. :camera: Image & Video OSINT +## 6. Image & Video OSINT | Tool | Description | Install / Link | |------|-------------|----------------| -| **TinEye** | Reverse image search | https://tineye.com | -| **Google Reverse Image** | Google image search | https://images.google.com | -| **Yandex Images** | Russian reverse image search (best accuracy) | https://yandex.com/images | +| **TinEye** | Reverse image search | [tineye.com](https://tineye.com/) | +| **Google Reverse Image** | Google image search | [images.google.com](https://images.google.com/) | +| **Yandex Images** | Russian reverse image search (best accuracy) | [yandex.com/images](https://yandex.com/images) | | **ExifTool** | Image metadata extraction | `apt install libimage-exiftool-perl` | -| **FOCA** | Metadata extraction from documents | https://github.com/ElevenPaths/FOCA | -| **InVID** | Video verification toolkit | https://www.invid-project.eu | -| **FotoForensics** | Image forensic analysis | https://fotoforensics.com | -| **Fake Image Detector** | AI-based fake image detection | https://www.fakeimagedetector.com | +| **FOCA** | Metadata extraction from documents | [github.com/ElevenPaths/FOCA](https://github.com/ElevenPaths/FOCA) | +| **InVID** | Video verification toolkit | [invid-project.eu](https://www.invid-project.eu/) | +| **FotoForensics** | Image forensic analysis | [fotoforensics.com](https://fotoforensics.com/) | +| **Fake Image Detector** | AI-based fake image detection | [fakeimagedetector.com](https://www.fakeimagedetector.com/) | | **Search by Image** | Browser extension (multi-engine) | Chrome / Firefox extension | -| **Jimpl** | Image OSINT search | https://jimpl.com | +| **Jimpl** | Image OSINT search | [jimpl.com](https://jimpl.com/) | | **Depix** | Recover pixelated text from images | `git clone https://github.com/beurtschipper/Depix` | -| **Forensically** | Online image forensics | https://29a.ch/photo-forensics | -| **Remove.bg** | Background removal for analysis | https://remove.bg | -| **Jeffrey's Exif Viewer** | Online EXIF reader | http://exif.regex.info | +| **Forensically** | Online image forensics | [29a.ch/photo-forensics](https://29a.ch/photo-forensics) | +| **Remove.bg** | Background removal for analysis | [remove.bg](https://remove.bg/) | +| **Jeffrey's Exif Viewer** | Online EXIF reader | [exif.regex.info](http://exif.regex.info/) | +| **AI or Not** | Detect AI-generated images | [aiornot.com](https://aiornot.com/) | +| **Hive Moderation** | AI content detection | [hivemoderation.com](https://hivemoderation.com/) | +| **Illuminarty** | AI image detection | [illuminarty.ai](https://illuminarty.ai/) |
-:wrench: Installation Guide - ExifTool +Installation Guide - ExifTool ```bash # Kali Linux / Ubuntu @@ -328,11 +361,11 @@ exiftool -a -u -g1 image.jpg
-:wrench: Search by Image Extension +Search by Image Extension -**Chrome**: https://chrome.google.com/webstore/detail/search-by-image/cnojnbdhbhnkbcieeekonklommdnndci +**Chrome**: [chrome.google.com/webstore/detail/search-by-image/cnojnbdhbhnkbcieeekonklommdnndci](https://chrome.google.com/webstore/detail/search-by-image/cnojnbdhbhnkbcieeekonklommdnndci) -**Firefox**: https://addons.mozilla.org/firefox/addon/search_by_image/ +**Firefox**: [addons.mozilla.org/firefox/addon/search_by_image/](https://addons.mozilla.org/firefox/addon/search_by_image/) - Right-click any image -> Search on 30+ engines simultaneously - Supports Google, Yandex, TinEye, Bing, Baidu, and more @@ -340,30 +373,32 @@ exiftool -a -u -g1 image.jpg --- -## 7. :bust_in_silhouette: Facial Recognition & People Search +## 7. Facial Recognition & People Search | Tool | Description | Install / Link | |------|-------------|----------------| -| **FaceSeek** | AI-powered reverse face search | https://faceseek.online | -| **FaceCheck.ID** | Face recognition search engine | https://facecheck.id | -| **PimEyes** | Face search from photos | https://pimeyes.com | -| **Search4faces** | Face search in VK/OK social networks | https://search4faces.com | +| **FaceSeek** | AI-powered reverse face search | [faceseek.online](https://faceseek.online/) | +| **FaceCheck.ID** | Face recognition search engine | [facecheck.id](https://facecheck.id/) | +| **PimEyes** | Face search from photos | [pimeyes.com](https://pimeyes.com/) | +| **Search4faces** | Face search in VK/OK social networks | [search4faces.com](https://search4faces.com/) | | **face_recognition** | Python face recognition library | `pip install face_recognition` | | **DeepFace** | AI face analysis framework | `pip install deepface` | | **FaceSeek API** | Face search API for developers | `git clone https://github.com/faceseek-online/face-search-api` | -| **Faceagle** | Face recognition search | https://faceagle.com | -| **ThatsThem** | Free people search | https://thatsthem.com | -| **Pipl** | Deep people search | https://pipl.com | -| **BeenVerified** | People search & background check | https://beenverified.com | -| **Spokeo** | People search aggregator | https://spokeo.com | -| **FastPeopleSearch** | Free people finder | https://fastpeoplesearch.com | -| **WebMii** | People search engine | https://webmii.com | -| **Lullar** | Social network profile search | https://lullar.com | -| **Usersearch.org** | Free social network search | https://usersearch.org | +| **Faceagle** | Face recognition search | [faceagle.com](https://faceagle.com/) | +| **ThatsThem** | Free people search | [thatsthem.com](https://thatsthem.com/) | +| **Pipl** | Deep people search | [pipl.com](https://pipl.com/) | +| **BeenVerified** | People search & background check | [beenverified.com](https://beenverified.com/) | +| **Spokeo** | People search aggregator | [spokeo.com](https://spokeo.com/) | +| **FastPeopleSearch** | Free people finder | [fastpeoplesearch.com](https://fastpeoplesearch.com/) | +| **WebMii** | People search engine | [webmii.com](https://webmii.com/) | +| **Lullar** | Social network profile search | [lullar.com](https://lullar.com/) | +| **Usersearch.org** | Free social network search | [usersearch.org](https://usersearch.org/) | +| **OSINT Industries** | People search + social media lookup | [osint.industries](https://www.osint.industries/) | +| **IDCrawl** | Free people search engine | [idcrawl.com](https://www.idcrawl.com/) | --- -## 8. :bird: Social Media Monitoring +## 8. Social Media Monitoring | Tool | Description | Install / Link | |------|-------------|----------------| @@ -374,39 +409,48 @@ exiftool -a -u -g1 image.jpg | **Toutatis** | Instagram OSINT by phone/email | `pip install toutatis` | | **Telegram-Scraper** | Scrape Telegram groups/channels | `pip install telegram-scraper` | | **TikTok Scraper** | TikTok data extraction | `npm install -g tiktok-scraper` | -| **Reddit Investigator** | Reddit user analysis | https://reddit-user-analyser.netlify.app | +| **Reddit Investigator** | Reddit user analysis | [reddit-user-analyser.netlify.app](https://reddit-user-analyser.netlify.app/) | | **socialscan** | Social media checker | `pip install socialscan` | | **Telepathy** | Telegram OSINT | `pip install telepathy` | | **Twayback** | Deleted tweets finder | `pip install twayback` | -| **SocialBlade** | Social media analytics | https://socialblade.com | +| **SocialBlade** | Social media analytics | [socialblade.com](https://socialblade.com/) | +| **Social-Searcher** | Free social media search engine | [social-searcher.com](https://www.social-searcher.com/) | +| **Mention** | Social media monitoring | [mention.com](https://mention.com/) | +| **BrandWatch** | Social listening platform | [brandwatch.com](https://www.brandwatch.com/) | --- -## 9. :closed_lock_with_key: Data Breach & Leak Search Engines +## 9. Data Breach & Leak Search Engines -> :rotating_light: Search engines and tools for checking if data has been exposed in breaches +> Search engines and tools for checking if data has been exposed in breaches | Tool | Description | Type | Link | |------|-------------|------|------| -| **Have I Been Pwned** | Check email/phone in breaches | Free | https://haveibeenpwned.com | -| **DeHashed** | Breach search engine | Paid | https://dehashed.com | -| **LeakCheck** | Email/username/phone breach search | Freemium | https://leakcheck.net | -| **Intelligence X** | Search breaches, darknet, leaks | Paid | https://intelx.io | -| **BreachDirectory** | Free breach search | Free | https://breachdirectory.org | -| **LeakPeek** | Search leaked databases | Freemium | https://leakpeek.com | -| **Snusbase** | Breach data search engine | Paid | https://snusbase.com | -| **EffectGroup** | Comprehensive data lookup | Paid | https://effectgroup.io | +| **Have I Been Pwned** | Check email/phone in breaches | Free | [haveibeenpwned.com](https://haveibeenpwned.com/) | +| **DeHashed** | Breach search engine | Paid | [dehashed.com](https://dehashed.com/) | +| **LeakCheck** | Email/username/phone breach search | Freemium | [leakcheck.net](https://leakcheck.net/) | +| **Intelligence X** | Search breaches, darknet, leaks | Paid | [intelx.io](https://intelx.io/) | +| **BreachDirectory** | Free breach search | Free | [breachdirectory.org](https://breachdirectory.org/) | +| **LeakPeek** | Search leaked databases | Freemium | [leakpeek.com](https://leakpeek.com/) | +| **Snusbase** | Breach data search engine | Paid | [snusbase.com](https://snusbase.com/) | +| **EffectGroup** | Comprehensive data lookup | Paid | [effectgroup.io](https://effectgroup.io/) | +| **CheckLeaked** | Leak search engine (15B+ accounts) | Freemium | [checkleaked.cc](https://checkleaked.cc/) | +| **CheckLeaked WhatsApp** | WhatsApp number database search | Freemium | [whatsapp.checkleaked.cc](https://whatsapp.checkleaked.cc/) | +| **DataBreach.com** | Data breach lookup | Free | [databreach.com](https://databreach.com/) | +| **Hudson Rock Cavalier** | Infostealer intelligence & breach data | Freemium | [hudsonrock.com/free-report](https://www.hudsonrock.com/free-report) | | **WeLeakInfo** | Leaked database search (mirrors) | Varies | Search for current mirrors | | **LeakedSource** | Historical breach search (mirrors) | Varies | Search for current mirrors | | **Pwndb** | Dark web breach database | Free (Tor) | Requires Tor Browser | | **BreachForum** | Leaked data community (mirrors) | Free | Search for current mirrors | | **h8mail** | Automated breach hunting CLI | Free | `pip install h8mail` | -| **ScatteredSecrets** | Breach notification | Freemium | https://scatteredsecrets.com | +| **ScatteredSecrets** | Breach notification | Freemium | [scatteredsecrets.com](https://scatteredsecrets.com/) | | **Nuclear Leaks** | Breach data search | Paid | Search for current URL | -| **Library of Leaks** | Curated leak collection | Free | Search for current URL | +| **The OSINT Rack** | Ransomware & data leak monitoring | Free | [osintrack.com](https://osintrack.com/) | +| **leak.sx** | Leaked database search | Paid | Search for current URL | +| **XposedOrNot** | Breach exposure check | Free | [xposedornot.com](https://xposedornot.com/) |
-:wrench: Pwndb - Dark Web Breach Search +Pwndb - Dark Web Breach Search ```bash # Pwndb CLI tool (requires Tor) @@ -422,57 +466,60 @@ git clone https://github.com/yanncam/phpwndb ```
+ --- -## 10. :page_facing_up: WikiLeaks, DDoSecrets & Whistleblower Platforms +## 10. WikiLeaks, DDoSecrets & Whistleblower Platforms | Platform | Description | Link | |----------|-------------|------| -| **WikiLeaks** | Leaked government & corporate documents | https://wikileaks.org | -| **DDoSecrets** | Distributed Denial of Secrets | https://ddosecrets.com | -| **Cryptome** | Documents archive since 1996 | https://cryptome.org | -| **The Intercept** | Investigative journalism | https://theintercept.com | -| **SecureDrop** | Whistleblower submission system | https://securedrop.org | -| **GlobaLeaks** | Open-source whistleblowing framework | https://globaleaks.org | -| **ICIJ Offshore Leaks** | Panama Papers, Pandora Papers | https://offshoreleaks.icij.org | -| **DocumentCloud** | Public document research | https://documentcloud.org | -| **Archive.org** | Wayback Machine | https://web.archive.org | -| **Internet Archive** | Digital library | https://archive.org | -| **Vault (FBI)** | FBI electronic reading room | https://vault.fbi.gov | -| **CIA Reading Room** | Declassified CIA documents | https://www.cia.gov/readingroom | -| **NSA Declassified** | NSA declassified records | https://nsa.gov/news-features/declassified-documents | -| **PACER** | US federal court records | https://pacer.uscourts.gov | -| **OpenLeaks** | Document submission platform | https://openleaks.org | -| **ExposeFacts** | Whistleblower support | https://exposefacts.org | +| **WikiLeaks** | Leaked government & corporate documents | [wikileaks.org](https://wikileaks.org/) | +| **DDoSecrets** | Distributed Denial of Secrets | [ddosecrets.com](https://ddosecrets.com/) | +| **Cryptome** | Documents archive since 1996 | [cryptome.org](https://cryptome.org/) | +| **The Intercept** | Investigative journalism | [theintercept.com](https://theintercept.com/) | +| **SecureDrop** | Whistleblower submission system | [securedrop.org](https://securedrop.org/) | +| **GlobaLeaks** | Open-source whistleblowing framework | [globaleaks.org](https://globaleaks.org/) | +| **ICIJ Offshore Leaks** | Panama Papers, Pandora Papers | [offshoreleaks.icij.org](https://offshoreleaks.icij.org/) | +| **DocumentCloud** | Public document research | [documentcloud.org](https://documentcloud.org/) | +| **Archive.org** | Wayback Machine | [web.archive.org](https://web.archive.org/) | +| **Internet Archive** | Digital library | [archive.org](https://archive.org/) | +| **Vault (FBI)** | FBI electronic reading room | [vault.fbi.gov](https://vault.fbi.gov/) | +| **CIA Reading Room** | Declassified CIA documents | [cia.gov/readingroom](https://www.cia.gov/readingroom) | +| **NSA Declassified** | NSA declassified records | [nsa.gov/news-features/declassified-documents](https://nsa.gov/news-features/declassified-documents) | +| **PACER** | US federal court records | [pacer.uscourts.gov](https://pacer.uscourts.gov/) | +| **OpenLeaks** | Document submission platform | [openleaks.org](https://openleaks.org/) | +| **ExposeFacts** | Whistleblower support | [exposefacts.org](https://exposefacts.org/) | --- -## 11. :key: Password Cracking & Credential Tools +## 11. Password Cracking & Credential Tools | Tool | Description | Install / Link | |------|-------------|----------------| -| **Hashcat** | Advanced password recovery | `apt install hashcat` | +| **Hashcat** | Advanced password recovery (GPU) | `apt install hashcat` | | **John the Ripper** | Password cracker | `apt install john` | | **Hydra** | Network login cracker | `apt install hydra` | | **Medusa** | Parallel brute-force tool | `apt install medusa` | | **CeWL** | Custom wordlist generator | `apt install cewl` | | **Crunch** | Wordlist generator | `apt install crunch` | | **Cain & Abel** | Windows password recovery | Download from official site | -| **RainbowCrack** | Rainbow table cracker | https://project-rainbowcrack.com | -| **Ophcrack** | Windows password cracker (rainbow tables) | https://ophcrack.sourceforge.io | +| **RainbowCrack** | Rainbow table cracker | [project-rainbowcrack.com](https://project-rainbowcrack.com/) | +| **Ophcrack** | Windows password cracker (rainbow tables) | [ophcrack.sourceforge.io](https://ophcrack.sourceforge.io/) | | **LaZagne** | Credentials recovery tool | `git clone https://github.com/AlessandroZ/LaZagne` | +| **Mimikatz** | Windows credential dumper | `git clone https://github.com/gentilkiwi/mimikatz` | +| **Responder** | LLMNR/NBT-NS/MDNS poisoner | `git clone https://github.com/lgandx/Responder` |
-:wrench: Hashcat Quick Reference +Hashcat Quick Reference ```bash # Install apt install hashcat # Basic usage -hashcat -m 0 -a 0 hash.txt wordlist.txt # MD5 -hashcat -m 1000 -a 0 hash.txt wordlist.txt # NTLM -hashcat -m 1800 -a 0 hash.txt wordlist.txt # SHA-512 +hashcat -m 0 -a 0 hash.txt wordlist.txt # MD5 +hashcat -m 1000 -a 0 hash.txt wordlist.txt # NTLM +hashcat -m 1800 -a 0 hash.txt wordlist.txt # SHA-512 # Brute force hashcat -m 0 -a 3 hash.txt ?a?a?a?a?a?a @@ -484,57 +531,61 @@ hashcat -m 0 hash.txt --show --- -## 12. :new_moon: Dark Web Search Engines & Tools +## 12. Dark Web Search Engines & Tools | Tool | Description | Link / Onion | -|------|-------------|------| -| **Torch** | Oldest & largest dark web search engine | http://xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion | -| **Haystak** | Dark web search with filtering | http://haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion | -| **Ahmia** | Clearnet dark web search | https://ahmia.fi | -| **DuckDuckGo Onion** | Private search on Tor | https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion | -| **Phobos** | Dark web search engine | http://phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion | -| **NotEvil** | Google-like dark web search | http://notevilmtxf25uw7tskqxj6njlpebyrmlrerfv5hc4tuq7c7hilbyiqd.onion | +|------|-------------|--------------| +| **Torch** | Oldest & largest dark web search engine | `xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion` | +| **Haystak** | Dark web search with filtering | `haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion` | +| **Ahmia** | Clearnet dark web search | [ahmia.fi](https://ahmia.fi/) | +| **DuckDuckGo Onion** | Private search on Tor | `duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion` | +| **Phobos** | Dark web search engine | `phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion` | +| **NotEvil** | Google-like dark web search | `notevilmtxf25uw7tskqxj6njlpebyrmlrerfv5hc4tuq7c7hilbyiqd.onion` | | **Kilos** | Dark web market search | Tor only | | **Excavator** | Forensic-grade dark web search | Tor only | | **Recon** | Dark web market intelligence | Tor only | | **TorDex** | Uncensored Tor search engine | Tor only | | **Candle** | Minimalist onion search engine | Tor only | -| **DarkSearch** | Dark web search API | https://darksearch.io | +| **DarkSearch** | Dark web search API | [darksearch.io](https://darksearch.io/) | | **OnionScan** | Scan .onion sites | `go install github.com/s-rah/onionscan@latest` | -| **Tor2Web** | Access .onion via clearnet | https://tor2web.org | +| **Tor2Web** | Access .onion via clearnet | [tor2web.org](https://tor2web.org/) | | **Fresh Onions** | New .onion directory | Tor only | | **OSINT-SPY** | OSINT spy tool for Tor | `git clone https://github.com/SharadKumar97/OSINT-SPY` | +| **Dark.fail** | Verified dark web links | [dark.fail](https://dark.fail/) | --- -## 13. :ghost: Anonymous & Privacy Tools +## 13. Anonymous & Privacy Tools | Tool | Description | Install / Link | |------|-------------|----------------| -| **Tor Browser** | Anonymous web browsing | https://torproject.org | -| **Tails OS** | Amnesic live operating system | https://tails.boum.org | -| **Whonix** | Anonymous OS via Tor | https://whonix.org | -| **ProtonVPN** | Free encrypted VPN | https://protonvpn.com | -| **ProtonMail** | Encrypted email | https://proton.me | -| **Signal** | Encrypted messaging | https://signal.org | -| **Briar** | P2P encrypted messenger | https://briarproject.org | -| **OnionShare** | Anonymous file sharing | https://onionshare.org | +| **Tor Browser** | Anonymous web browsing | [torproject.org](https://torproject.org/) | +| **Tails OS** | Amnesic live operating system | [tails.boum.org](https://tails.boum.org/) | +| **Whonix** | Anonymous OS via Tor | [whonix.org](https://whonix.org/) | +| **ProtonVPN** | Free encrypted VPN | [protonvpn.com](https://protonvpn.com/) | +| **ProtonMail** | Encrypted email | [proton.me](https://proton.me/) | +| **Signal** | Encrypted messaging | [signal.org](https://signal.org/) | +| **Briar** | P2P encrypted messenger | [briarproject.org](https://briarproject.org/) | +| **OnionShare** | Anonymous file sharing | [onionshare.org](https://onionshare.org/) | | **Anonsurf** | Anonymize entire OS traffic | `git clone https://github.com/Und3rf10w/kali-anonsurf` | | **MAC Changer** | Change MAC address | `apt install macchanger` | -| **BleachBit** | Digital footprint cleaner | https://bleachbit.org | -| **VeraCrypt** | Disk encryption | https://veracrypt.fr | -| **KeePassXC** | Password manager | https://keepassxc.org | +| **BleachBit** | Digital footprint cleaner | [bleachbit.org](https://bleachbit.org/) | +| **VeraCrypt** | Disk encryption | [veracrypt.fr](https://veracrypt.fr/) | +| **KeePassXC** | Password manager | [keepassxc.org](https://keepassxc.org/) | +| **Mullvad VPN** | Privacy-focused VPN (no email required) | [mullvad.net](https://mullvad.net/) | +| **Session** | Decentralized messenger | [getsession.org](https://getsession.org/) | +| **Anon-SMS** | Anonymous SMS sending | `git clone https://github.com/HACK3RY2J/Anon-SMS.git` | --- -## 14. :spider_web: Web Application OSINT & Scanning +## 14. Web Application OSINT & Scanning | Tool | Description | Install / Link | |------|-------------|----------------| | **Nikto** | Web server vulnerability scanner | `apt install nikto` | | **WPScan** | WordPress vulnerability scanner | `gem install wpscan` | | **Wappalyzer** | Technology profiler | Browser Extension | -| **BuiltWith** | Technology lookup | https://builtwith.com | +| **BuiltWith** | Technology lookup | [builtwith.com](https://builtwith.com/) | | **Whatweb** | Web technology identifier | `apt install whatweb` | | **WebHack** | Web hacking toolkit | `git clone https://github.com/yan4ikyt/webhack` | | **Dirb** | Web directory brute-forcer | `apt install dirb` | @@ -544,9 +595,13 @@ hashcat -m 0 hash.txt --show | **LinkFinder** | JS endpoint finder | `git clone https://github.com/GerbenJavado/LinkFinder` | | **Photon** | Web crawler for OSINT | `git clone https://github.com/s0md3v/Photon` | | **URLCadiz** | URL shortener/masker | `git clone https://github.com/PerezMascato/URLCADIZ` | +| **Pentest-Tools.com** | Online pentest & recon platform | [pentest-tools.com](https://pentest-tools.com/) | +| **Feroxbuster** | Fast content discovery | `apt install feroxbuster` | +| **Wfuzz** | Web fuzzer | `pip install wfuzz` | +| **ParamSpider** | Parameter discovery from archives | `pip install paramspider` |
-:wrench: Installation Guide - WebHack +Installation Guide - WebHack ```bash apt-get install python3 git @@ -559,24 +614,26 @@ python3 WebHack.py --- -## 15. :fishing_pole_and_fish: Social Engineering & Phishing +## 15. Social Engineering & Phishing | Tool | Description | Install / Link | |------|-------------|----------------| | **Zphisher** | Advanced phishing tool (30+ templates) | `git clone https://github.com/htr-tech/zphisher` | | **NexPhisher** | Multi-platform phishing tool | `git clone https://github.com/htr-tech/nexphisher` | | **SET (Social Engineering Toolkit)** | Complete SE framework | `apt install set` | -| **Gophish** | Phishing simulation platform | https://getgophish.com | +| **Gophish** | Phishing simulation platform | [getgophish.com](https://getgophish.com/) | | **Storm-Breaker** | Access webcam, mic & location | `git clone https://github.com/ultrasecurity/Storm-Breaker` | | **GrabCam** | Camera phishing for Termux | `git clone https://github.com/noob-hackers/grabcam` | | **Evilginx2** | Man-in-the-middle phishing | `go install github.com/kgretzky/evilginx2@latest` | | **Modlishka** | Reverse proxy phishing | `go install github.com/drk1wi/Modlishka@latest` | | **ShortURL** | URL shortener for SE | `git clone https://github.com/htr-tech/shorturl` | | **FakeURL / URLCADIZ** | URL masking tool | `git clone https://github.com/PerezMascato/URLCADIZ` | -| **King Phisher** | Phishing campaign toolkit | https://github.com/rsmusllp/king-phisher | +| **King Phisher** | Phishing campaign toolkit | [github.com/rsmusllp/king-phisher](https://github.com/rsmusllp/king-phisher) | +| **SocialFish** | Social media phishing | `git clone https://github.com/UndeadSec/SocialFish` | +| **AdvPhishing** | Advanced phishing tool | `git clone https://github.com/Ignitetch/AdvPhishing` |
-:wrench: Installation Guide - Zphisher +Installation Guide - Zphisher ```bash # Kali Linux @@ -593,7 +650,7 @@ bash zphisher.sh
-:wrench: Installation Guide - Storm-Breaker (Camera/Mic Access) +Installation Guide - Storm-Breaker (Camera/Mic Access) ```bash # Kali Linux @@ -611,37 +668,9 @@ sudo python3 Storm-Breaker.py ```
-
-:wrench: Installation Guide - NexPhisher (Termux) +--- -```bash -apt install git -y -git clone https://github.com/htr-tech/nexphisher.git -cd nexphisher -bash setup -bash tmux_setup -bash nexphisher -``` -
- -
-:wrench: Installation Guide - GrabCam (Termux Camera Phishing) - -```bash -apt-get update -y && apt-get upgrade -y -pkg install python python2 wget git -y -pip install lolcat -git clone https://github.com/noob-hackers/grabcam -termux-setup-storage -cd grabcam -chmod +x grabcam.sh -bash grabcam.sh -# Save photo: mv cam*.png /sdcard/ -``` -
- - -## 16. :bomb: Vulnerability Scanning & Exploitation +## 16. Vulnerability Scanning & Exploitation | Tool | Description | Install / Link | |------|-------------|----------------| @@ -649,16 +678,19 @@ bash grabcam.sh | **Nuclei** | Fast vulnerability scanner | `go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest` | | **SQLMap** | SQL injection automation | `apt install sqlmap` | | **Nmap** | Network mapper & scanner | `apt install nmap` | -| **Burp Suite** | Web app security testing | https://portswigger.net/burp | -| **OWASP ZAP** | Web app scanner | https://zaproxy.org | -| **Nessus** | Vulnerability assessment | https://tenable.com/products/nessus | +| **Burp Suite** | Web app security testing | [portswigger.net/burp](https://portswigger.net/burp) | +| **OWASP ZAP** | Web app scanner | [zaproxy.org](https://zaproxy.org/) | +| **Nessus** | Vulnerability assessment | [tenable.com/products/nessus](https://tenable.com/products/nessus) | | **OpenVAS** | Open vulnerability scanner | `apt install openvas` | -| **XSSHunter** | Blind XSS detection | https://xsshunter.com | +| **XSSHunter** | Blind XSS detection | [xsshunter.com](https://xsshunter.com/) | | **Commix** | Command injection exploiter | `git clone https://github.com/commixproject/commix` | | **GoldenEye** | HTTP DoS test tool | `git clone https://github.com/jseidl/GoldenEye` | +| **Pentest-Tools.com** | Web vulnerability scanner | [pentest-tools.com](https://pentest-tools.com/) | +| **Criminal IP** | Vulnerability & CVE search | [criminalip.io](https://www.criminalip.io/) | +| **ExploitDB** | Exploit database | [exploit-db.com](https://www.exploit-db.com/) |
-:wrench: Installation Guide - GoldenEye (DoS Testing) +Installation Guide - GoldenEye (DoS Testing) ```bash # Kali Linux @@ -677,7 +709,7 @@ python3 goldeneye.py "http://target.com" --- -## 17. :satellite: Network & Wireless Tools +## 17. Network & Wireless Tools | Tool | Description | Install / Link | |------|-------------|----------------| @@ -692,24 +724,26 @@ python3 goldeneye.py "http://target.com" | **Fluxion** | Wi-Fi social engineering | `git clone https://github.com/FluxionNetwork/fluxion` | | **hcxtools** | Wi-Fi capture conversion | `apt install hcxtools` | | **BlueMaho** | Bluetooth security testing | `git clone https://github.com/pysec/bluemaho` | +| **Netcat** | Network debugging tool | `apt install netcat-openbsd` | +| **tcpdump** | Command-line packet analyzer | `apt install tcpdump` | --- -## 18. :iphone: Mobile Hacking & Phone Exploitation +## 18. Mobile Hacking & Phone Exploitation | Tool | Description | Install / Link | |------|-------------|----------------| | **PhoneSploit** | ADB-based phone exploitation | `git clone https://github.com/aerosol-can/PhoneSploit` | -| **AndroRAT** | Android remote access tool | `git clone https://github.com/AhMyth/AhMyth-Android-RAT` | +| **AndroRAT / AhMyth** | Android remote access tool | `git clone https://github.com/AhMyth/AhMyth-Android-RAT` | | **Apktool** | Android APK decompiler | `apt install apktool` | | **Frida** | Dynamic instrumentation | `pip install frida-tools` | | **Objection** | Runtime mobile exploration | `pip install objection` | -| **MobSF** | Mobile security framework | https://github.com/MobSF/Mobile-Security-Framework-MobSF | -| **SPY-NOTE** | Android RAT | Search GitHub for current version | +| **MobSF** | Mobile security framework | [github.com/MobSF/Mobile-Security-Framework-MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF) | | **MSFPC** | MSF payload creator | `git clone https://github.com/g0tmi1k/msfpc` | +| **jadx** | Android APK decompiler (GUI) | `apt install jadx` |
-:wrench: Installation Guide - PhoneSploit +Installation Guide - PhoneSploit ```bash # Requirements: ADB + Shodan access @@ -731,43 +765,70 @@ python3 phonesploit.py --- -## 19. :robot: AI-Powered OSINT Tools +## 19. AI-Powered OSINT & Free AI Tools + +> AI tools for analysis, research, image recognition, and OSINT automation + +### AI-Powered OSINT Tools | Tool | Description | Install / Link | |------|-------------|----------------| -| **GeoSpy** | AI geolocation from images | https://geospy.ai | +| **GeoSpy** | AI geolocation from images | [geospy.ai](https://geospy.ai/) | | **DeepFace** | Face analysis (age, gender, emotion) | `pip install deepface` | -| **FaceSeek** | AI facial recognition search | https://faceseek.online | +| **FaceSeek** | AI facial recognition search | [faceseek.online](https://faceseek.online/) | | **OSINTR** | AI-powered OSINT automation | Search GitHub for latest version | | **SpiderAI** | AI reconnaissance spider | Search GitHub for latest version | -| **ReconAIzer** | AI-enhanced Burp extension | https://github.com/hisxo/ReconAIzer | -| **ChatGPT** | AI assistant for OSINT analysis | https://chat.openai.com | -| **Perplexity AI** | AI search for research | https://perplexity.ai | +| **ReconAIzer** | AI-enhanced Burp extension | [github.com/hisxo/ReconAIzer](https://github.com/hisxo/ReconAIzer) | | **face_recognition** | Python face recognition | `pip install face_recognition` | | **OpenCV** | Computer vision library | `pip install opencv-python` | +| **HARPA AI** | AI browser agent for OSINT | [harpa.ai](https://harpa.ai/) | +| **AI or Not** | Detect AI-generated content | [aiornot.com](https://aiornot.com/) | + +### Free AI Tools for OSINT Research + +| Tool | Description | Free Tier | Link | +|------|-------------|-----------|------| +| **Tasklet AI** | AI work automation agent | Free tier available | [tasklet.ai](https://tasklet.ai/) | +| **ChatGPT** | OpenAI's AI assistant | Free (GPT-4o mini) | [chat.openai.com](https://chat.openai.com/) | +| **Claude** | Anthropic's AI (best for reasoning) | Free tier | [claude.ai](https://claude.ai/) | +| **Google Gemini** | Google's AI with web search | Free | [gemini.google.com](https://gemini.google.com/) | +| **Perplexity AI** | AI search engine (cited sources) | Free (5 Pro/day) | [perplexity.ai](https://perplexity.ai/) | +| **DeepSeek** | Open-source AI (strong reasoning) | Free | [chat.deepseek.com](https://chat.deepseek.com/) | +| **Grok** | xAI's AI with real-time X data | Free on X | [x.com/grok](https://x.com/grok) | +| **Microsoft Copilot** | AI with Bing search integration | Free | [copilot.microsoft.com](https://copilot.microsoft.com/) | +| **Meta AI** | Meta's free AI assistant | Free | [meta.ai](https://www.meta.ai/) | +| **HuggingChat** | Open-source AI chat | Free | [huggingface.co/chat](https://huggingface.co/chat/) | +| **Kimi** | Moonshot AI (long context) | Free | [kimi.moonshot.cn](https://kimi.moonshot.cn/) | +| **You.com** | AI search with multiple modes | Free | [you.com](https://you.com/) | +| **Phind** | AI search for developers | Free | [phind.com](https://www.phind.com/) | +| **NotebookLM** | Google's document analysis AI | Free | [notebooklm.google.com](https://notebooklm.google.com/) | +| **LibreChat** | Open-source AI chat (self-host) | Free | [github.com/danny-avila/LibreChat](https://github.com/danny-avila/LibreChat) | +| **Open WebUI** | Self-hosted AI interface | Free | [github.com/open-webui/open-webui](https://github.com/open-webui/open-webui) | --- -## 20. :moneybag: Financial & Corporate Intelligence +## 20. Financial & Corporate Intelligence | Tool | Description | Link | |------|-------------|------| -| **OpenCorporates** | Global corporate database | https://opencorporates.com | -| **ICIJ Offshore Leaks** | Panama/Pandora/Paradise Papers | https://offshoreleaks.icij.org | -| **SEC EDGAR** | US company filings | https://sec.gov/edgar | -| **Companies House (UK)** | UK company register | https://beta.companieshouse.gov.uk | -| **Aleph** | Global corporate/public records | https://aleph.occrp.org | +| **OpenCorporates** | Global corporate database | [opencorporates.com](https://opencorporates.com/) | +| **ICIJ Offshore Leaks** | Panama/Pandora/Paradise Papers | [offshoreleaks.icij.org](https://offshoreleaks.icij.org/) | +| **SEC EDGAR** | US company filings | [sec.gov/edgar](https://sec.gov/edgar) | +| **Companies House (UK)** | UK company register | [beta.companieshouse.gov.uk](https://beta.companieshouse.gov.uk/) | +| **Aleph** | Global corporate/public records | [aleph.occrp.org](https://aleph.occrp.org/) | | **Orbit (Bitcoin)** | Bitcoin address investigator | `git clone https://github.com/s0md3v/Orbit` | | **BTC Parser** | Bitcoin blockchain parser | Various GitHub tools | -| **Blockchain.com** | Bitcoin explorer | https://blockchain.com/explorer | -| **Etherscan** | Ethereum blockchain explorer | https://etherscan.io | -| **BinCheck** | Bank card BIN lookup | https://bincheck.io | -| **Crunchbase** | Company/startup database | https://crunchbase.com | -| **LinkedIn** | Professional network OSINT | https://linkedin.com | -| **LEI Search** | Legal Entity Identifier lookup | https://search.gleif.org | +| **Blockchain.com** | Bitcoin explorer | [blockchain.com/explorer](https://blockchain.com/explorer) | +| **Etherscan** | Ethereum blockchain explorer | [etherscan.io](https://etherscan.io/) | +| **BinCheck** | Bank card BIN lookup | [bincheck.io](https://bincheck.io/) | +| **Crunchbase** | Company/startup database | [crunchbase.com](https://crunchbase.com/) | +| **LinkedIn** | Professional network OSINT | [linkedin.com](https://linkedin.com/) | +| **LEI Search** | Legal Entity Identifier lookup | [search.gleif.org](https://search.gleif.org/) | +| **Owler** | Company intelligence | [owler.com](https://www.owler.com/) | +| **ZoomInfo** | B2B contact & company data | [zoominfo.com](https://www.zoominfo.com/) |
-:wrench: Installation Guide - Orbit (Bitcoin Search) +Installation Guide - Orbit (Bitcoin Search) ```bash # Kali Linux @@ -788,43 +849,48 @@ python3 orbit.py -s "BITCOIN_ADDRESS" --- -## 21. :car: Vehicle, Property & Public Records +## 21. Vehicle, Property & Public Records | Tool/Service | Description | Link | |-------------|-------------|------| | **VehicleRegistration API** | Vehicle registration lookup | Various by country | -| **FAXVIN** | Free VIN decoder | https://faxvin.com | -| **AutoCheck** | Vehicle history reports | https://autocheck.com | -| **Carfax** | Vehicle history | https://carfax.com | +| **FAXVIN** | Free VIN decoder | [faxvin.com](https://faxvin.com/) | +| **AutoCheck** | Vehicle history reports | [autocheck.com](https://autocheck.com/) | +| **Carfax** | Vehicle history | [carfax.com](https://carfax.com/) | | **Voter Records** | US voter registration lookup | Various state databases | -| **PACER** | Federal court records | https://pacer.uscourts.gov | -| **Zillow** | Property records & estimates | https://zillow.com | +| **PACER** | Federal court records | [pacer.uscourts.gov](https://pacer.uscourts.gov/) | +| **Zillow** | Property records & estimates | [zillow.com](https://zillow.com/) | +| **Who Owns What** | NYC landlord portfolio lookup | [whoownswhat.justfix.org](https://whoownswhat.justfix.org/en/) | | **County Assessor** | Property tax records | Varies by county | -| **FOIA.gov** | Freedom of Information Act | https://foia.gov | -| **Court Listener** | Free court opinion search | https://courtlistener.com | +| **FOIA.gov** | Freedom of Information Act | [foia.gov](https://foia.gov/) | +| **Court Listener** | Free court opinion search | [courtlistener.com](https://courtlistener.com/) | +| **NICB VINCheck** | Stolen vehicle check | [nicb.org/vincheck](https://www.nicb.org/vincheck) | --- -## 22. :detective: Metadata & Digital Forensics +## 22. Metadata & Digital Forensics | Tool | Description | Install / Link | |------|-------------|----------------| -| **Autopsy** | Digital forensics platform | https://autopsy.com | +| **Autopsy** | Digital forensics platform | [autopsy.com](https://autopsy.com/) | | **Volatility** | Memory forensics framework | `pip install volatility3` | | **Wireshark** | Network packet analysis | `apt install wireshark` | | **Binwalk** | Firmware analysis | `apt install binwalk` | | **Foremost** | File carving tool | `apt install foremost` | | **Bulk Extractor** | Extract features from files | `apt install bulk-extractor` | -| **DEFT Linux** | Forensics live CD | https://deftlinux.net | +| **DEFT Linux** | Forensics live CD | [deftlinux.net](https://deftlinux.net/) | | **ExifTool** | Complete metadata extraction | `apt install libimage-exiftool-perl` | -| **FOCA** | Document metadata analysis | https://github.com/ElevenPaths/FOCA | +| **FOCA** | Document metadata analysis | [github.com/ElevenPaths/FOCA](https://github.com/ElevenPaths/FOCA) | | **Metagoofil** | Document metadata harvester | `pip install metagoofil` | +| **CyberChef** | Data analysis swiss army knife | [gchq.github.io/CyberChef](https://gchq.github.io/CyberChef) | +| **Scalpel** | File carving tool | `apt install scalpel` | + --- -## 23. :video_camera: IP Camera & Webcam OSINT +## 23. IP Camera & Webcam OSINT -> :warning: Access unauthorized cameras is illegal. This section is for educational purposes only. +> **WARNING**: Accessing unauthorized cameras is illegal. This section is for educational purposes only. ### Shodan Searches for Cameras @@ -837,11 +903,14 @@ python3 orbit.py -s "BITCOIN_ADDRESS" | `webcamXP` | WebcamXP servers | | `"Server: IP Webcam Server"` | IP Webcam app servers | | `port:8080 title:"Blue Iris"` | Blue Iris CCTV | +| `"Server: IPCamera"` | Generic IP cameras | +| `port:37777 "DVR"` | Dahua DVR systems | +| `port:80 title:"DVR"` | Web-accessible DVR | ### Google Dorking for Cameras | Google Dork | What It Finds | -|-------------|---------------| +|------------|---------------| | `inurl:top.htm inurl:currenttime` | IP cameras with live feeds | | `inurl:"lvappl.htm"` | Live view cameras | | `intitle:"webcamXP 5"` | WebcamXP 5 servers | @@ -855,22 +924,25 @@ python3 orbit.py -s "BITCOIN_ADDRESS" | `intitle:"Live View / - AXIS"` | AXIS cameras | | `inurl:"CgiStart?page=Single"` | Single page cameras | | `inurl:/view/view.shtml` | Mobotix cameras | +| `inurl:"MultiCameraFrame?Mode="` | Multi-camera views | +| `intitle:"Network Camera" inurl:"ViewerFrame"` | Generic network cameras | ### Camera OSINT Tools | Tool | Description | Link | |------|-------------|------| -| **Shodan** | IoT search engine | https://shodan.io | -| **Censys** | Internet device search | https://censys.io | -| **Insecam** | Live insecure cameras directory | http://insecam.org | -| **EarthCam** | Public webcams | https://earthcam.com | -| **OpenStreetCam** | Street-level imagery | https://openstreetcam.org | +| **Shodan** | IoT search engine | [shodan.io](https://shodan.io/) | +| **Censys** | Internet device search | [censys.io](https://censys.io/) | +| **Criminal IP** | Cyber threat intelligence + IoT | [criminalip.io](https://www.criminalip.io/) | +| **Insecam** | Live insecure cameras directory | [insecam.org](http://insecam.org/) | +| **EarthCam** | Public webcams | [earthcam.com](https://earthcam.com/) | +| **KartaView** | Street-level imagery | [kartaview.org](https://kartaview.org/) | --- -## 24. :satellite_antenna: Google Dorking Bible +## 24. Google Dorking Bible -> :fire: Master search engine hacking with these advanced operators +> Master search engine hacking with these advanced operators ### Basic Operators @@ -884,11 +956,14 @@ python3 orbit.py -s "BITCOIN_ADDRESS" | `ext:` | Search by extension | `ext:sql "dump"` | | `cache:` | View cached page | `cache:example.com` | | `link:` | Find linking pages | `link:example.com` | +| `allintext:` | All terms in page body | `allintext:username password email` | +| `allintitle:` | All terms in title | `allintitle:admin panel login` | +| `allinurl:` | All terms in URL | `allinurl:admin dashboard` | ### Advanced Dorks for OSINT | Purpose | Google Dork | -|---------|------------| +|---------|-------------| | **Find exposed passwords** | `intitle:"index of" "passwords.txt"` | | **SQL database dumps** | `filetype:sql "CREATE TABLE" "INSERT INTO"` | | **Config files** | `ext:conf OR ext:cnf OR ext:cfg "password"` | @@ -899,41 +974,81 @@ python3 orbit.py -s "BITCOIN_ADDRESS" | **Apache status** | `intitle:"Apache Status" "Apache Server Status"` | | **Exposed git repos** | `intitle:"index of" ".git"` | | **Database backups** | `intitle:"index of" "backup" ext:sql` | +| **Exposed log files** | `filetype:log "password" OR "username"` | +| **SSH private keys** | `filetype:pem "PRIVATE KEY"` | +| **WordPress config** | `filetype:txt inurl:wp-config` | ### Google Dork Generators | Tool | Link | |------|------| -| **DorkSearch** | https://dorksearch.com | -| **Google Hacking Database (GHDB)** | https://exploit-db.com/google-hacking-database | +| **DorkSearch** | [dorksearch.com](https://dorksearch.com/) | +| **Google Hacking Database (GHDB)** | [exploit-db.com/google-hacking-database](https://exploit-db.com/google-hacking-database) | | **Pagodo** | `git clone https://github.com/opsdisk/pagodo` | | **GooFuzz** | `git clone https://github.com/m3n0sd0n4ld/GooFuzz` | +| **dorkScanner** | `git clone https://github.com/madhavmehndiratta/dorkScanner` | --- -## 25. :link: IP Tracking & Geolocation Links +## 25. Credential & Data Dorking + +> Google dorks specifically for finding exposed credentials and sensitive data + +### Credential Hunting Dorks + +| Purpose | Google Dork | +|---------|-------------| +| **Gmail + passwords in spreadsheets** | `allintext:".@gmail.com" OR "password" OR "username" filetype:xlsx` | +| **Exposed credentials in CSV** | `filetype:csv "email" "password"` | +| **Credential files** | `filetype:txt "username" "password" site:pastebin.com` | +| **Email lists** | `filetype:xlsx "email" "@gmail.com" OR "@yahoo.com"` | +| **Database dumps** | `filetype:sql "INSERT INTO" "password" "email"` | +| **Config files with creds** | `filetype:env "DB_PASSWORD" OR "API_KEY" OR "SECRET"` | +| **Exposed .htpasswd** | `filetype:htpasswd htpasswd` | +| **Exposed shadow files** | `intitle:"index of" "shadow"` | +| **FTP credentials** | `filetype:log "USER" "PASS" "230"` | +| **phpMyAdmin without auth** | `inurl:phpmyadmin/index.php intitle:"phpMyAdmin" "Welcome to phpMyAdmin"` | +| **Exposed Jenkins** | `intitle:"Dashboard [Jenkins]" inurl:"/login"` | +| **Exposed Kibana** | `intitle:"Kibana" inurl:app/kibana` | +| **AWS keys exposed** | `filetype:pem "AKIA" OR "ASIA"` | +| **GitHub exposed secrets** | `site:github.com "API_KEY" OR "api_secret" filetype:env` | + +### Sensitive Document Dorks + +| Purpose | Google Dork | +|---------|-------------| +| **Confidential PDFs** | `filetype:pdf "confidential" OR "internal use only"` | +| **Financial documents** | `filetype:xlsx "salary" OR "budget" OR "financial"` | +| **Medical records** | `filetype:pdf "medical" "patient" "diagnosis"` | +| **Employee data** | `filetype:xlsx "employee" "SSN" OR "social security"` | +| **Network diagrams** | `filetype:pdf OR filetype:vsd "network diagram"` | + +--- + +## 26. IP Tracking & Geolocation Links | Tool | Description | Link | |------|-------------|------| -| **IPLogger** | IP logging URL shortener | https://iplogger.org | -| **Grabify** | IP grabber & URL shortener | https://grabify.link | -| **GetNotify** | Email open tracking + geolocation | https://getnotify.com | -| **Blasze IP Logger** | IP logging tool | https://blasze.com | -| **Canary Tokens** | Tracking tokens (URL, email, DNS) | https://canarytokens.org | -| **IPinfo** | IP address data | https://ipinfo.io | -| **IP-API** | IP geolocation API | http://ip-api.com | -| **What Is My IP** | Your own IP checker | https://whatismyipaddress.com | -| **MaxMind GeoIP** | IP geolocation database | https://maxmind.com | -| **DB-IP** | IP geolocation | https://db-ip.com | +| **IPLogger** | IP logging URL shortener | [iplogger.org](https://iplogger.org/) | +| **Grabify** | IP grabber & URL shortener | [grabify.link](https://grabify.link/) | +| **GetNotify** | Email open tracking + geolocation | [getnotify.com](https://getnotify.com/) | +| **Blasze IP Logger** | IP logging tool | [blasze.com](https://blasze.com/) | +| **Canary Tokens** | Tracking tokens (URL, email, DNS) | [canarytokens.org](https://canarytokens.org/) | +| **IPinfo** | IP address data | [ipinfo.io](https://ipinfo.io/) | +| **IP-API** | IP geolocation API | [ip-api.com](http://ip-api.com/) | +| **What Is My IP** | Your own IP checker | [whatismyipaddress.com](https://whatismyipaddress.com/) | +| **MaxMind GeoIP** | IP geolocation database | [maxmind.com](https://maxmind.com/) | +| **DB-IP** | IP geolocation | [db-ip.com](https://db-ip.com/) | +| **IPLocation** | IP address lookup | [iplocation.net](https://www.iplocation.net/) | -> :bulb: **Tip**: Mask an IPLogger link using a URL shortener or the VK redirect trick: +> **Tip**: Mask an IPLogger link using a URL shortener or the VK redirect trick: > `https://vk.com/away.php?to=YOUR_LOGGER_LINK` --- -## 26. :speech_balloon: Telegram OSINT Bots & Channels +## 27. Telegram OSINT Bots & Channels -### :robot_face: OSINT Bots +### OSINT Bots | Bot | Description | Link | |-----|-------------|------| @@ -948,22 +1063,24 @@ python3 orbit.py -s "BITCOIN_ADDRESS" | **Quick OSINT** | Fast person lookup | @Quick_OSINT_bot | | **Insight** | Data aggregation bot | Search for current bot | | **USSearchBot** | US person search | @USSearchBot | +| **@CreationDateBot** | Check Telegram account creation date | @creationdatebot | +| **@SangMataBot** | Check username history of TG accounts | @SangMataInfo_bot | -### :satellite_antenna: OSINT Telegram Channels +### OSINT Telegram Channels | Channel | Description | Link | |---------|-------------|------| -| **@overbafer1** | Hacking & cybersecurity content | https://t.me/overbafer1 | -| **@overlamer1** | OSINT & hacking tutorials | https://t.me/overlamer1 | -| **@Social_engineering** | Social engineering techniques | https://t.me/Social_engineering | -| **@cyberbezopasno** | Cybersecurity news & tools | https://t.me/cyberbezopasno | -| **@hacks_excel** | Hacking tips & tricks | https://t.me/hacks_excel | -| **@KladovkaPavlu** | OSINT tool storage | https://t.me/KladovkaPavlu | -| **@OSINT_group** | OSINT community | https://t.me/OSINT_group | -| **@osaborona** | Offensive security | https://t.me/osaborona | -| **@hackenproof** | Bug bounty & hacking | https://t.me/hackenproof | +| **@overbafer1** | Hacking & cybersecurity content | [t.me/overbafer1](https://t.me/overbafer1) | +| **@overlamer1** | OSINT & hacking tutorials | [t.me/overlamer1](https://t.me/overlamer1) | +| **@Social_engineering** | Social engineering techniques | [t.me/Social_engineering](https://t.me/Social_engineering) | +| **@cyberbezopasno** | Cybersecurity news & tools | [t.me/cyberbezopasno](https://t.me/cyberbezopasno) | +| **@hacks_excel** | Hacking tips & tricks | [t.me/hacks_excel](https://t.me/hacks_excel) | +| **@KladovkaPavlu** | OSINT tool storage | [t.me/KladovkaPavlu](https://t.me/KladovkaPavlu) | +| **@OSINT_group** | OSINT community | [t.me/OSINT_group](https://t.me/OSINT_group) | +| **@osaborona** | Offensive security | [t.me/osaborona](https://t.me/osaborona) | +| **@hackenproof** | Bug bounty & hacking | [t.me/hackenproof](https://t.me/hackenproof) | -### :mag: Telegram Scraping Tools +### Telegram Scraping Tools | Tool | Description | Install | |------|-------------|---------| @@ -971,39 +1088,40 @@ python3 orbit.py -s "BITCOIN_ADDRESS" | **Telelog** | Telegram logging & monitoring | Search GitHub | | **Telepathy** | Telegram OSINT analysis | `pip install telepathy` | | **TeleGram-OSINTer** | Telegram profile investigation | `git clone https://github.com/Alb-310/TeleGram-OSINTer` | +| **Telethon** | Python Telegram API library | `pip install telethon` | +--- -## 27. :ru: Russian OSINT & Person Lookup Services +## 28. Russian OSINT & Person Lookup Services > Services popular in Russian-speaking OSINT communities (from telegra.ph TOP-25) | # | Service | Description | Link | |---|---------|-------------|------| -| 1 | **FNS (Tax Service)** | Get INN number, check tax debts | https://service.nalog.ru/static/personal-data.html | -| 2 | **TelPoisk** | Phone directory - address by name | https://telpoisk.com | -| 3 | **GetContact** | See how number is saved by others | https://getcontact.com | +| 1 | **FNS (Tax Service)** | Get INN number, check tax debts | [service.nalog.ru/static/personal-data.html](https://service.nalog.ru/static/personal-data.html) | +| 2 | **TelPoisk** | Phone directory - address by name | [telpoisk.com](https://telpoisk.com/) | +| 3 | **GetContact** | See how number is saved by others | [getcontact.com](https://getcontact.com/) | | 4 | **Eye of God** | Person lookup by phone/email/photo | @glazzz_rus_bot | -| 5 | **Search4faces** | Face search in VK & OK | https://search4faces.com | -| 6 | **GetNotify** | Email tracking + geolocation | https://getnotify.com | -| 7 | **BinCheck** | Card BIN lookup (bank, region) | https://bincheck.io | +| 5 | **Search4faces** | Face search in VK & OK | [search4faces.com](https://search4faces.com/) | +| 6 | **GetNotify** | Email tracking + geolocation | [getnotify.com](https://getnotify.com/) | +| 7 | **BinCheck** | Card BIN lookup (bank, region) | [bincheck.io](https://bincheck.io/) | ### VK (VKontakte) OSINT | Purpose | Tool/URL | |---------|----------| -| **Registration data** | https://regvk.com | -| **Registration by ID** | https://regvk.com/id/ | +| **Registration data** | [regvk.com](https://regvk.com/) | +| **Registration by ID** | [regvk.com/id/](https://regvk.com/id/) | | **FOAF data** | `https://vk.com/foaf.php?id=USER_ID` | -| **Profile analysis** | https://valery.shostak.ru/vk | -| **Friends of private accounts** | `https://online-vk.ru/pivatfriends.php?id=USER_ID` | -| **Saved profiles** | https://ruprofile.pro | -| **Profile finder** | https://rusfinder.pro | -| **VK analytics** | http://vk.city4me.com | -| **VK tools** | https://220vk.com | -| **VK analytics** | https://vkdia.com | -| **VK OSINT** | https://byratino.info | -| **VK page archive** | https://vk.watch/ID/profile | -| **Activity tracking** | https://nebaz.ru | +| **Profile analysis** | [valery.shostak.ru/vk](https://valery.shostak.ru/vk) | +| **Saved profiles** | [ruprofile.pro](https://ruprofile.pro/) | +| **Profile finder** | [rusfinder.pro](https://rusfinder.pro/) | +| **VK analytics** | [vk.city4me.com](http://vk.city4me.com/) | +| **VK tools** | [220vk.com](https://220vk.com/) | +| **VK analytics** | [vkdia.com](https://vkdia.com/) | +| **VK OSINT** | [byratino.info](https://byratino.info/) | +| **VK page archive** | [vk.watch/ID/profile](https://vk.watch/ID/profile) | +| **Activity tracking** | [nebaz.ru](https://nebaz.ru/) | ### IP Logger Masking (VK redirect trick) @@ -1013,9 +1131,29 @@ https://vk.com/away.php?to=YOUR_LOGGER_URL --- -## 28. :penguin: Termux Hacking Toolkit (Complete) +## 29. Social Media Searcher Platforms -> :iphone: Complete guide to setting up OSINT & hacking tools on Android via Termux +> Dedicated platforms for searching and monitoring social media + +| Tool | Description | Free? | Link | +|------|-------------|-------|------| +| **Social Searcher** | Free real-time social media search | Yes | [social-searcher.com](https://www.social-searcher.com/) | +| **Social Mention** | Real-time social media aggregator | Yes | [socialmention.com](http://socialmention.com/) | +| **Mention** | Social media & web monitoring | Freemium | [mention.com](https://mention.com/) | +| **Talkwalker** | Social listening & analytics | Paid | [talkwalker.com](https://www.talkwalker.com/) | +| **BrandWatch** | Social intelligence platform | Paid | [brandwatch.com](https://www.brandwatch.com/) | +| **Hootsuite** | Social media management + monitoring | Freemium | [hootsuite.com](https://www.hootsuite.com/) | +| **Meltwater** | Media intelligence | Paid | [meltwater.com](https://www.meltwater.com/) | +| **Google Alerts** | Free web monitoring | Free | [google.com/alerts](https://www.google.com/alerts) | +| **TweetDeck / X Pro** | Twitter/X monitoring | Free | [pro.twitter.com](https://pro.twitter.com/) | +| **Who Posted What** | Facebook keyword search tool | Free | [whopostedwhat.com](https://whopostedwhat.com/) | +| **Social-Searcher Users** | Find social media profiles by name | Free | [social-searcher.com/users-search](https://www.social-searcher.com/users-search/) | + +--- + +## 30. Termux Hacking Toolkit (Complete) + +> Complete guide to setting up OSINT & hacking tools on Android via Termux ### Initial Setup @@ -1059,16 +1197,11 @@ termux-setup-storage git clone https://github.com/HACK3RY2J/Anon-SMS.git cd Anon-SMS bash Run.sh - -# Alternative: -git clone https://github.com/in4osecurity/anonsms -cd anonsms -bash Run.sh ```
-2. BOMBER / db0mb3r - SMS Bomber +2. BOMBER / db0mb3r & TBomb ```bash # Method 1: db0mb3r (pip) @@ -1151,50 +1284,27 @@ chmod +x userrecon.sh
-8. WebHack - Web Hacking +8. WebHack, PhoneSploit, IPGeoLocation, Orbit ```bash -apt-get install python3 git +# WebHack git clone https://github.com/yan4ikyt/webhack -cd webhack -pip3 install requests +cd webhack && pip3 install requests python3 WebHack.py -``` -
-
-9. PhoneSploit - Phone Exploitation - -```bash -# Find targets: shodan.io -> search "android debug bridge" +# PhoneSploit (find targets on shodan: "android debug bridge") apt install adb -apt-get update git clone https://github.com/aerosol-can/PhoneSploit -cd PhoneSploit -pip3 install colorama +cd PhoneSploit && pip3 install colorama adb start-server python3 phonesploit.py -``` -
-
-10. IPGeoLocation - IP Tracker - -```bash +# IPGeoLocation git clone https://github.com/maldevel/IPGeoLocation -cd IPGeoLocation -pip3 install -r requirements.txt -apt-get install python3-setuptools +cd IPGeoLocation && pip3 install -r requirements.txt python3 ipgeolocation.py -t "TARGET_IP" -``` -
-
-11. Orbit - Bitcoin Search - -```bash -pkg upgrade -pkg install git python +# Orbit (Bitcoin search) git clone https://github.com/s0md3v/Orbit cd Orbit python3 orbit.py -s "BITCOIN_ADDRESS" @@ -1202,23 +1312,10 @@ python3 orbit.py -s "BITCOIN_ADDRESS"
-12. ShortURL - URL Shortener +9. FakeRoot & FakeURL ```bash -apt update -apt install git -y -git clone https://github.com/htr-tech/shorturl -cd shorturl -bash setup.sh -shorturl -``` -
- -
-13. FakeRoot - Fake Root Access - -```bash -# Method 1: From GitHub +# FakeRoot apt update -y && apt upgrade -y apt install git git clone https://github.com/B41B4L/FakeRoot @@ -1226,17 +1323,9 @@ cd FakeRoot chmod +x Root.sh ./Root.sh # Test: whoami +# Alternative: pkg install fakeroot && fakeroot -# Method 2: Quick install -pkg install fakeroot -fakeroot -``` -
- -
-14. FakeURL / URLCADIZ - -```bash +# FakeURL / URLCADIZ git clone https://github.com/PerezMascato/URLCADIZ sudo pip3 install pyshorteners cd URLCADIZ @@ -1244,9 +1333,25 @@ python3 URLCADIZ.py ```
+
+10. ShortURL & fsociety + +```bash +# ShortURL +git clone https://github.com/htr-tech/shorturl +cd shorturl && bash setup.sh && shorturl + +# fsociety +git clone https://github.com/Manisso/fsociety +cd fsociety +python3 fsociety.py +``` +
+ + --- -## 29. :dragon: Kali Linux OSINT Toolkit +## 31. Kali Linux OSINT Toolkit > Pre-installed and essential OSINT tools for Kali Linux @@ -1271,7 +1376,6 @@ python3 URLCADIZ.py | **SET** | Social engineering toolkit | `setoolkit` | | **Burp Suite** | Web proxy | `burpsuite` | | **BeEF** | Browser exploitation | `beef-xss` | -| **GoldenEye** | HTTP DoS test | `goldeneye` | ### Additional Kali Installs @@ -1279,7 +1383,7 @@ python3 URLCADIZ.py # Install additional OSINT tools sudo apt update sudo apt install -y sherlock maltego spiderfoot recon-ng theharvester \ - metagoofil eyewitness phoneinfoga amass subfinder +metagoofil eyewitness phoneinfoga amass subfinder # Python tools pip install maigret holehe h8mail socialscan social-analyzer @@ -1287,12 +1391,12 @@ pip install maigret holehe h8mail socialscan social-analyzer --- -## 30. :package: All-in-One Hacking Frameworks +## 32. All-in-One Hacking Frameworks | Framework | Description | Install | |-----------|-------------|---------| | **fsociety** | Mr. Robot inspired hacking pack | See below | -| **Hackingtool** | All-in-one hacking tool | `git clone https://github.com/Z4nzu/hackingtool` | +| **Hackingtool** | All-in-one hacking tool (100+ tools) | `git clone https://github.com/Z4nzu/hackingtool` | | **PenTest Tools** | 20+ pentest tools | `git clone https://github.com/arch3rPro/PentestTools` | | **Lazy Script** | Automated pentest | `git clone https://github.com/arismelachroinos/lscript` | | **SpiderFoot** | Complete OSINT automation | `pip install spiderfoot` | @@ -1301,7 +1405,7 @@ pip install maigret holehe h8mail socialscan social-analyzer | **OSINTR** | AI-powered OSINT | Search GitHub |
-:wrench: Installation Guide - fsociety +Installation Guide - fsociety ```bash # Kali Linux @@ -1328,7 +1432,7 @@ python3 fsociety.py
-:wrench: Installation Guide - Hackingtool +Installation Guide - Hackingtool ```bash git clone https://github.com/Z4nzu/hackingtool @@ -1345,23 +1449,22 @@ sudo hackingtool --- -## 31. :wrench: Wordlist Generation & Brute Force +## 33. Wordlist Generation & Brute Force | Tool | Description | Install | |------|-------------|---------| | **Crunch** | Pattern-based wordlist generator | `apt install crunch` | | **CeWL** | Custom wordlist from website | `apt install cewl` | | **Cupp** | Common User Passwords Profiler | `git clone https://github.com/Mebus/cupp` | -| **Mentalist** | GUI wordlist generator | https://github.com/sc0tfree/mentalist | -| **make_wordlist.py** | Permutation wordlist generator | Custom Python script | -| **geowordlist** | Geographic-targeted wordlists | Custom lists | +| **Mentalist** | GUI wordlist generator | [github.com/sc0tfree/mentalist](https://github.com/sc0tfree/mentalist) | | **SecLists** | Collection of security lists | `git clone https://github.com/danielmiessler/SecLists` | | **RockYou** | Classic password wordlist | Included in Kali | -| **Weakpass** | Large wordlist collection | https://weakpass.com | -| **Probable Wordlists** | Sorted by probability | https://github.com/berzerk0/Probable-Wordlists | +| **Weakpass** | Large wordlist collection | [weakpass.com](https://weakpass.com/) | +| **Probable Wordlists** | Sorted by probability | [github.com/berzerk0/Probable-Wordlists](https://github.com/berzerk0/Probable-Wordlists) | +| **Pydictor** | Powerful wordlist generator | [github.com/LandGrey/pydictor](https://github.com/LandGrey/pydictor) |
-:wrench: Wordlist Generation Examples +Wordlist Generation Examples ```bash # Crunch - Generate all 8-char lowercase passwords @@ -1375,15 +1478,14 @@ git clone https://github.com/Mebus/cupp cd cupp python3 cupp.py -i -# Custom Python wordlist generator (permutation-based) -# Combines words with case variants + prefix/suffix numbers -# See: make_wordlist.py in this repository +# SecLists - Download the ultimate collection +git clone https://github.com/danielmiessler/SecLists ```
--- -## 32. :hammer_and_wrench: Hardware Hacking Tools +## 34. Hardware Hacking Tools | Device | Description | Price Range | |--------|-------------|-------------| @@ -1403,52 +1505,56 @@ python3 cupp.py -i --- -## 33. :desktop_computer: OSINT Operating Systems +## 35. OSINT Operating Systems | OS | Focus | Link | |----|-------|------| -| **Kali Linux** | Penetration testing (600+ tools) | https://kali.org | -| **Parrot OS** | Security & privacy | https://parrotsec.org | -| **Tails** | Privacy & anonymity | https://tails.boum.org | -| **Whonix** | Anonymous OS | https://whonix.org | -| **CSI Linux** | OSINT & forensics focused | https://csilinux.com | -| **Trace Labs OSINT VM** | OSINT-specific VM | https://tracelabs.org | -| **BlackArch** | 2800+ security tools | https://blackarch.org | -| **Pentoo** | Pentesting live CD | https://pentoo.ch | -| **BackBox** | Security assessment | https://backbox.org | -| **SIFT Workstation** | SANS digital forensics | https://digital-forensics.sans.org | -| **REMnux** | Malware analysis | https://remnux.org | -| **Qubes OS** | Security by compartmentalization | https://qubes-os.org | -| **Kodachi** | Anti-forensic OS | https://eagle-eye.digital | -| **DEFT** | Digital forensics toolkit | https://deftlinux.net | -| **ArchStrike** | Arch Linux security tools | https://archstrike.org | -| **Buscador** | OSINT-focused Linux | https://inteltechniques.com | -| **CommandoVM** | Windows pentest VM | https://github.com/mandiant/commando-vm | +| **Kali Linux** | Penetration testing (600+ tools) | [kali.org](https://kali.org/) | +| **Parrot OS** | Security & privacy | [parrotsec.org](https://parrotsec.org/) | +| **Tails** | Privacy & anonymity | [tails.boum.org](https://tails.boum.org/) | +| **Whonix** | Anonymous OS | [whonix.org](https://whonix.org/) | +| **CSI Linux** | OSINT & forensics focused | [csilinux.com](https://csilinux.com/) | +| **Trace Labs OSINT VM** | OSINT-specific VM | [tracelabs.org](https://tracelabs.org/) | +| **BlackArch** | 2800+ security tools | [blackarch.org](https://blackarch.org/) | +| **Pentoo** | Pentesting live CD | [pentoo.ch](https://pentoo.ch/) | +| **BackBox** | Security assessment | [backbox.org](https://backbox.org/) | +| **SIFT Workstation** | SANS digital forensics | [digital-forensics.sans.org](https://digital-forensics.sans.org/) | +| **REMnux** | Malware analysis | [remnux.org](https://remnux.org/) | +| **Qubes OS** | Security by compartmentalization | [qubes-os.org](https://qubes-os.org/) | +| **Kodachi** | Anti-forensic OS | [eagle-eye.digital](https://eagle-eye.digital/) | +| **DEFT** | Digital forensics toolkit | [deftlinux.net](https://deftlinux.net/) | +| **ArchStrike** | Arch Linux security tools | [archstrike.org](https://archstrike.org/) | +| **Buscador** | OSINT-focused Linux | [inteltechniques.com](https://inteltechniques.com/) | +| **CommandoVM** | Windows pentest VM | [github.com/mandiant/commando-vm](https://github.com/mandiant/commando-vm) | --- -## 34. :electric_plug: OSINT APIs & Developer Tools +## 36. OSINT APIs & Developer Tools | API | Description | Link | |-----|-------------|------| -| **Shodan API** | IoT/device search | https://developer.shodan.io | -| **VirusTotal API** | File/URL analysis | https://developers.virustotal.com | -| **Hunter.io API** | Email discovery | https://hunter.io/api | -| **SecurityTrails API** | DNS intelligence | https://securitytrails.com/corp/api | -| **Have I Been Pwned API** | Breach check | https://haveibeenpwned.com/API | -| **FaceSeek API** | Facial recognition search | https://github.com/faceseek-online/face-search-api | -| **IPinfo API** | IP geolocation | https://ipinfo.io/developers | -| **Censys API** | Internet scanning | https://search.censys.io/api | -| **GitHub API** | Repository/user data | https://api.github.com | -| **Telegram Bot API** | Bot development | https://core.telegram.org/bots/api | -| **Twilio API** | Phone number lookup | https://twilio.com/docs | -| **Google Custom Search API** | Programmable search | https://developers.google.com/custom-search | -| **Dehashed API** | Breach data search | https://dehashed.com/docs | -| **WhoisXML API** | Domain intelligence | https://whoisxmlapi.com | +| **Shodan API** | IoT/device search | [developer.shodan.io](https://developer.shodan.io/) | +| **VirusTotal API** | File/URL analysis | [developers.virustotal.com](https://developers.virustotal.com/) | +| **Hunter.io API** | Email discovery | [hunter.io/api](https://hunter.io/api) | +| **SecurityTrails API** | DNS intelligence | [securitytrails.com/corp/api](https://securitytrails.com/corp/api) | +| **Have I Been Pwned API** | Breach check | [haveibeenpwned.com/API](https://haveibeenpwned.com/API) | +| **FaceSeek API** | Facial recognition search | [github.com/faceseek-online/face-search-api](https://github.com/faceseek-online/face-search-api) | +| **IPinfo API** | IP geolocation | [ipinfo.io/developers](https://ipinfo.io/developers) | +| **Censys API** | Internet scanning | [search.censys.io/api](https://search.censys.io/api) | +| **GitHub API** | Repository/user data | [api.github.com](https://api.github.com/) | +| **Telegram Bot API** | Bot development | [core.telegram.org/bots/api](https://core.telegram.org/bots/api) | +| **Twilio API** | Phone number lookup | [twilio.com/docs](https://twilio.com/docs) | +| **Google Custom Search API** | Programmable search | [developers.google.com/custom-search](https://developers.google.com/custom-search) | +| **Dehashed API** | Breach data search | [dehashed.com/docs](https://dehashed.com/docs) | +| **WhoisXML API** | Domain intelligence | [whoisxmlapi.com](https://whoisxmlapi.com/) | +| **Criminal IP API** | Threat intelligence | [criminalip.io/developer](https://www.criminalip.io/developer) | +| **urlscan.io API** | URL analysis | [urlscan.io/docs/api](https://urlscan.io/docs/api/) | +| **AbuseIPDB API** | IP reputation | [abuseipdb.com/api](https://www.abuseipdb.com/api) | +| **CheckLeaked API** | WhatsApp data lookup | [whatsapp-proxy.checkleaked.cc/docs](https://whatsapp-proxy.checkleaked.cc/docs/) | --- -## 35. :globe_with_meridians: Browser Extensions for OSINT +## 37. Browser Extensions for OSINT | Extension | Description | Browser | |-----------|-------------|---------| @@ -1464,23 +1570,28 @@ python3 cupp.py -i | **HTTPS Everywhere** | Force HTTPS connections | Chrome / Firefox | | **Hunchly** | OSINT web capture tool | Chrome | | **InVID/WeVerify** | Video/image verification | Chrome / Firefox | +| **HARPA AI** | AI browser agent | Chrome | +| **SingleFile** | Save complete web pages | Chrome / Firefox | --- -## 36. :books: OSINT Learning Resources +## 38. OSINT Learning Resources | Resource | Type | Link | |----------|------|------| -| **OSINT Framework** | Tool directory | https://osintframework.com | -| **Start.me OSINT Pages** | Curated bookmark collections | https://start.me/p/DPYPMz/osint | -| **IntelTechniques** | Michael Bazzell's resources | https://inteltechniques.com | -| **Trace Labs** | OSINT for missing persons | https://tracelabs.org | -| **SANS OSINT** | SANS cyber training | https://sans.org | -| **Bellingcat** | OSINT investigative journalism | https://bellingcat.com | -| **The OSINT Curious Project** | Community & training | https://osintcurio.us | -| **Sector035 Week in OSINT** | Weekly OSINT newsletter | https://sector035.nl | -| **OSINT Dojo** | OSINT training platform | https://osintdojo.com | -| **CTF Competitions** | Hands-on practice | https://ctftime.org | +| **OSINT Framework** | Tool directory | [osintframework.com](https://osintframework.com/) | +| **Start.me OSINT Pages** | Curated bookmark collections | [start.me/p/DPYPMz/osint](https://start.me/p/DPYPMz/osint) | +| **IntelTechniques** | Michael Bazzell's resources | [inteltechniques.com](https://inteltechniques.com/) | +| **Trace Labs** | OSINT for missing persons | [tracelabs.org](https://tracelabs.org/) | +| **SANS OSINT** | SANS cyber training | [sans.org](https://sans.org/) | +| **Bellingcat** | OSINT investigative journalism | [bellingcat.com](https://bellingcat.com/) | +| **The OSINT Curious Project** | Community & training | [osintcurio.us](https://osintcurio.us/) | +| **Sector035 Week in OSINT** | Weekly OSINT newsletter | [sector035.nl](https://sector035.nl/) | +| **OSINT Dojo** | OSINT training platform | [osintdojo.com](https://osintdojo.com/) | +| **CTF Competitions** | Hands-on practice | [ctftime.org](https://ctftime.org/) | +| **GIJN** | Global Investigative Journalism Network | [gijn.org](https://gijn.org/) | +| **Limitless OSINT** | OSINT blog & techniques | Various | +| **UNISHKA OSINT World** | Country-specific OSINT toolkits | [unishka.com](https://unishka.com/) | ### YouTube Channels for OSINT @@ -1493,31 +1604,36 @@ python3 cupp.py -i | **LiveOverflow** | Security research | | **HackerSploit** | Penetration testing | | **Null Byte** | Hacking tutorials | +| **13Cubed** | DFIR & forensics | +| **STOK** | Bug bounty & OSINT | --- -## 37. :bookmark: Awesome OSINT GitHub Repos +## 39. Awesome OSINT GitHub Repos | Repository | Stars | Link | -|------------|-------|------| -| **jivoi/awesome-osint** | 20k+ | https://github.com/jivoi/awesome-osint | -| **cipher387/osint_stuff_tool_collection** | 6k+ | https://github.com/cipher387/osint_stuff_tool_collection | -| **Astrosp/Awesome-OSINT-For-Everything** | 2k+ | https://github.com/Astrosp/Awesome-OSINT-For-Everything | -| **Jieyab89/OSINT-Cheat-sheet** | 1k+ | https://github.com/Jieyab89/OSINT-Cheat-sheet | -| **The-Osint-Toolbox** | 1k+ | https://github.com/The-Osint-Toolbox | -| **sinwindie/OSINT** | 3k+ | https://github.com/sinwindie/OSINT | -| **Ph055a/OSINT_Collection** | 2k+ | https://github.com/Ph055a/OSINT_Collection | -| **OSINT-searcher/analogi_Glaza_Boga** | - | https://github.com/OSINT-searcher/analogi_Glaza_Boga | -| **faceseek-online/OSINT-Framework** | 1.8k | https://github.com/faceseek-online/OSINT-Framework | -| **Z4nzu/hackingtool** | 40k+ | https://github.com/Z4nzu/hackingtool | -| **Manisso/fsociety** | 10k+ | https://github.com/Manisso/fsociety | -| **danielmiessler/SecLists** | 55k+ | https://github.com/danielmiessler/SecLists | +|-----------|-------|------| +| **jivoi/awesome-osint** | 20k+ | [github.com/jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) | +| **cipher387/osint_stuff_tool_collection** | 6k+ | [github.com/cipher387/osint_stuff_tool_collection](https://github.com/cipher387/osint_stuff_tool_collection) | +| **Astrosp/Awesome-OSINT-For-Everything** | 2k+ | [github.com/Astrosp/Awesome-OSINT-For-Everything](https://github.com/Astrosp/Awesome-OSINT-For-Everything) | +| **Jieyab89/OSINT-Cheat-sheet** | 1k+ | [github.com/Jieyab89/OSINT-Cheat-sheet](https://github.com/Jieyab89/OSINT-Cheat-sheet) | +| **The-Osint-Toolbox** | 1k+ | [github.com/The-Osint-Toolbox](https://github.com/The-Osint-Toolbox) | +| **sinwindie/OSINT** | 3k+ | [github.com/sinwindie/OSINT](https://github.com/sinwindie/OSINT) | +| **Ph055a/OSINT_Collection** | 2k+ | [github.com/Ph055a/OSINT_Collection](https://github.com/Ph055a/OSINT_Collection) | +| **frangelbarrera/OSINT-BIBLE** | New | [github.com/frangelbarrera/OSINT-BIBLE](https://github.com/frangelbarrera/OSINT-BIBLE) | +| **faceseek-online/OSINT-Framework** | 1.8k | [github.com/faceseek-online/OSINT-Framework](https://github.com/faceseek-online/OSINT-Framework) | +| **Z4nzu/hackingtool** | 40k+ | [github.com/Z4nzu/hackingtool](https://github.com/Z4nzu/hackingtool) | +| **Manisso/fsociety** | 10k+ | [github.com/Manisso/fsociety](https://github.com/Manisso/fsociety) | +| **danielmiessler/SecLists** | 55k+ | [github.com/danielmiessler/SecLists](https://github.com/danielmiessler/SecLists) | +| **ubikron/Awesome-AI-OSINT** | New | [github.com/ubikron/Awesome-AI-OSINT](https://github.com/ubikron/Awesome-AI-OSINT) | +| **tracelabs/awesome-osint** | 1k+ | [github.com/tracelabs/awesome-osint](https://github.com/tracelabs/awesome-osint) | --- -## 38. :zap: One-Click Install Scripts +## 40. One-Click Install Scripts -### Kali Linux - Install ALL OSINT Tools +
+Kali Linux - Install ALL OSINT Tools ```bash #!/bin/bash @@ -1527,16 +1643,16 @@ sudo apt update && sudo apt upgrade -y echo "[*] Installing system tools..." sudo apt install -y git python3 python3-pip golang-go nmap wireshark \ - sqlmap hydra john hashcat aircrack-ng nikto dirb wpscan \ - recon-ng theharvester maltego spiderfoot set exiftool \ - masscan whatweb gobuster feroxbuster wfuzz \ - libimage-exiftool-perl binwalk foremost bulk-extractor macchanger +sqlmap hydra john hashcat aircrack-ng nikto dirb wpscan \ +recon-ng theharvester maltego spiderfoot set exiftool \ +masscan whatweb gobuster feroxbuster wfuzz \ +libimage-exiftool-perl binwalk foremost bulk-extractor macchanger echo "[*] Installing Python tools..." pip install sherlock-project maigret holehe h8mail socialscan \ - social-analyzer phoneinfoga twint snscrape instaloader \ - deepface face_recognition volatility3 spiderfoot \ - blackbird-osint nexfil socid-extractor osrframework +social-analyzer phoneinfoga twint snscrape instaloader \ +deepface face_recognition volatility3 spiderfoot \ +blackbird-osint nexfil socid-extractor osrframework echo "[*] Cloning GitHub tools..." cd /opt @@ -1554,8 +1670,10 @@ sudo git clone https://github.com/danielmiessler/SecLists echo "[+] Installation complete! OSINT Arsenal is ready." ``` +
-### Termux (Android) - Install ALL Tools +
+Termux (Android) - Install ALL Tools ```bash #!/bin/bash @@ -1565,11 +1683,11 @@ pkg update -y && pkg upgrade -y echo "[*] Installing base packages..." pkg install -y python python2 git wget curl nmap hydra \ - perl clang make openssl openssh php +perl clang make openssl openssh php echo "[*] Installing Python tools..." pip install requests colorama sherlock-project maigret \ - holehe h8mail socialscan phoneinfoga +holehe h8mail socialscan phoneinfoga echo "[*] Setting up storage..." termux-setup-storage @@ -1592,10 +1710,11 @@ git clone https://github.com/noob-hackers/grabcam echo "[+] All tools installed! Happy hacking :)" ``` +
--- -## 39. :trophy: Top 50 Must-Have Tools (Quick Reference) +## 41. Top 50 Must-Have Tools (Quick Reference) | # | Tool | Category | Install | |---|------|----------|---------| @@ -1616,66 +1735,70 @@ echo "[+] All tools installed! Happy hacking :)" | 15 | **Hydra** | Login brute force | `apt install hydra` | | 16 | **Wireshark** | Network analysis | `apt install wireshark` | | 17 | **Aircrack-ng** | Wi-Fi security | `apt install aircrack-ng` | -| 18 | **Burp Suite** | Web proxy | https://portswigger.net | -| 19 | **FaceSeek** | Face recognition search | https://faceseek.online | -| 20 | **PimEyes** | Face search engine | https://pimeyes.com | +| 18 | **Burp Suite** | Web proxy | [portswigger.net](https://portswigger.net/) | +| 19 | **FaceSeek** | Face recognition search | [faceseek.online](https://faceseek.online/) | +| 20 | **PimEyes** | Face search engine | [pimeyes.com](https://pimeyes.com/) | | 21 | **Zphisher** | Phishing tool | `git clone .../zphisher` | | 22 | **Storm-Breaker** | Camera/mic SE tool | `git clone .../Storm-Breaker` | -| 23 | **Shodan** | IoT search engine | https://shodan.io | -| 24 | **Censys** | Internet scanning | https://censys.io | -| 25 | **OSINT Framework** | Tool directory | https://osintframework.com | +| 23 | **Shodan** | IoT search engine | [shodan.io](https://shodan.io/) | +| 24 | **Censys** | Internet scanning | [censys.io](https://censys.io/) | +| 25 | **Criminal IP** | Cyber threat intelligence | [criminalip.io](https://www.criminalip.io/) | | 26 | **SpiderFoot** | OSINT automation | `pip install spiderfoot` | | 27 | **Maltego** | Visual link analysis | Pre-installed in Kali | | 28 | **Recon-ng** | Recon framework | `pip install recon-ng` | | 29 | **ExifTool** | Image metadata | `apt install libimage-exiftool-perl` | -| 30 | **Autopsy** | Digital forensics | https://autopsy.com | +| 30 | **Autopsy** | Digital forensics | [autopsy.com](https://autopsy.com/) | | 31 | **Volatility** | Memory forensics | `pip install volatility3` | -| 32 | **Tor Browser** | Anonymous browsing | https://torproject.org | -| 33 | **Tails OS** | Anonymous OS | https://tails.boum.org | -| 34 | **DeHashed** | Breach search engine | https://dehashed.com | -| 35 | **LeakCheck** | Breach search | https://leakcheck.net | -| 36 | **Intelligence X** | Deep search | https://intelx.io | -| 37 | **Have I Been Pwned** | Breach checker | https://haveibeenpwned.com | +| 32 | **Tor Browser** | Anonymous browsing | [torproject.org](https://torproject.org/) | +| 33 | **Tails OS** | Anonymous OS | [tails.boum.org](https://tails.boum.org/) | +| 34 | **DeHashed** | Breach search engine | [dehashed.com](https://dehashed.com/) | +| 35 | **LeakCheck** | Breach search | [leakcheck.net](https://leakcheck.net/) | +| 36 | **CheckLeaked** | Leak search (15B+ accounts) | [checkleaked.cc](https://checkleaked.cc/) | +| 37 | **Have I Been Pwned** | Breach checker | [haveibeenpwned.com](https://haveibeenpwned.com/) | | 38 | **fsociety** | All-in-one hacking | `git clone .../fsociety` | | 39 | **Hackingtool** | 100+ tools in one | `git clone .../hackingtool` | | 40 | **Osintgram** | Instagram OSINT | `git clone .../Osintgram` | -| 41 | **snscrape** | Social media scraper | `pip install snscrape` | -| 42 | **VirusTotal** | Malware analysis | https://virustotal.com | -| 43 | **IPLogger** | IP tracking | https://iplogger.org | -| 44 | **Grabify** | IP grabber | https://grabify.link | -| 45 | **GetContact** | Phone caller ID | https://getcontact.com | -| 46 | **Search4faces** | Face search (VK/OK) | https://search4faces.com | -| 47 | **Nikto** | Web scanner | `apt install nikto` | -| 48 | **Gobuster** | Directory brute force | `go install ...gobuster` | +| 41 | **Social-Searcher** | Social media search | [social-searcher.com](https://www.social-searcher.com/) | +| 42 | **VirusTotal** | Malware analysis | [virustotal.com](https://virustotal.com/) | +| 43 | **IPLogger** | IP tracking | [iplogger.org](https://iplogger.org/) | +| 44 | **Grabify** | IP grabber | [grabify.link](https://grabify.link/) | +| 45 | **GetContact** | Phone caller ID | [getcontact.com](https://getcontact.com/) | +| 46 | **Pentest-Tools** | Online pentesting platform | [pentest-tools.com](https://pentest-tools.com/) | +| 47 | **Perplexity AI** | AI research assistant | [perplexity.ai](https://perplexity.ai/) | +| 48 | **CyberChef** | Data analysis swiss knife | [gchq.github.io/CyberChef](https://gchq.github.io/CyberChef) | | 49 | **SecLists** | Security wordlists | `git clone .../SecLists` | -| 50 | **CyberChef** | Data analysis swiss knife | https://gchq.github.io/CyberChef | +| 50 | **WHOIS.com** | Domain lookup | [whois.com](https://www.whois.com/) | --- -## :bar_chart: STATISTICS +## STATISTICS | Metric | Count | |--------|-------| -| **Total Tools Listed** | 900+ | -| **GitHub Repositories** | 250+ | -| **Online Platforms** | 200+ | -| **CLI Tools** | 350+ | +| **Total Tools Listed** | 1100+ | +| **GitHub Repositories** | 300+ | +| **Online Platforms** | 250+ | +| **CLI Tools** | 400+ | | **Browser Extensions** | 15+ | | **Kali Built-in Tools** | 40+ | | **Termux Compatible** | 25+ | -| **Leak/Whistleblower Platforms** | 30+ | -| **Data Breach Search Engines** | 20+ | +| **Leak/Whistleblower Platforms** | 35+ | +| **Data Breach Search Engines** | 25+ | | **OSINT Operating Systems** | 17 | | **Hardware Hacking Tools** | 13 | -| **AI-Powered Tools** | 12 | -| **Dark Web Search Engines** | 16 | +| **AI-Powered Tools** | 25+ | +| **Free AI Tools** | 16 | +| **Dark Web Search Engines** | 17 | | **Telegram Bots & Channels** | 25+ | -| **Google Dorks Listed** | 25+ | -| **Categories Covered** | 39 | +| **Google Dorks Listed** | 50+ | +| **Credential Dorks** | 14 | +| **Social Media Platforms** | 11 | +| **APIs & Developer Tools** | 18 | +| **Categories Covered** | 41 | --- -## :warning: LEGAL DISCLAIMER +## LEGAL DISCLAIMER This guide is provided for **educational and authorized security research purposes only**. Many tools listed can be used both defensively and offensively. @@ -1688,9 +1811,9 @@ The authors of this guide are not responsible for any misuse of the tools listed --- -> **Version**: 1.0 -- The Ultimate Arsenal Edition +> **Version**: 1.1 -- The Ultimate Arsenal Edition > **Last Updated**: 2025-2026 -> :star: **Star this repo** if you found it useful! +> **Star this repo** if you found it useful! > **Contributions welcome** -- submit a pull request or open an issue ---