AWESOME OSINT ARSENAL
The Ultimate Open-Source Intelligence Tools Encyclopedia
The most comprehensive OSINT resource on the internet
1100+ tools, websites, platforms, bots, and resources across 50+ categories
Every tool includes installation instructions where applicable
DISCLAIMER: This guide is for educational and authorized security research purposes only. Always obtain proper authorization before testing systems you don't own. The authors are not responsible for any misuse.
TABLE OF CONTENTS
- Username & Social Media OSINT
- Email OSINT Tools
- Phone Number OSINT
- Domain & IP OSINT
- Geolocation & Maps OSINT
- Image & Video OSINT
- Facial Recognition & People Search
- Social Media Monitoring
- Data Breach & Leak Search Engines
- WikiLeaks, DDoSecrets & Whistleblower Platforms
- Password Cracking & Credential Tools
- Dark Web Search Engines & Tools
- Anonymous & Privacy Tools
- Web Application OSINT & Scanning
- Social Engineering & Phishing
- Vulnerability Scanning & Exploitation
- Network & Wireless Tools
- Mobile Hacking & Phone Exploitation
- AI-Powered OSINT & Free AI Tools
- Financial & Corporate Intelligence
- Vehicle, Property & Public Records
- Metadata & Digital Forensics
- IP Camera & Webcam OSINT
- Google Dorking Bible
- Credential & Data Dorking
- IP Tracking & Geolocation Links
- Telegram OSINT Bots & Channels
- Russian OSINT & Person Lookup Services
- Social Media Searcher Platforms
- Termux Hacking Toolkit (Complete)
- Kali Linux OSINT Toolkit
- All-in-One Hacking Frameworks
- Wordlist Generation & Brute Force
- Hardware Hacking Tools
- OSINT Operating Systems
- OSINT APIs & Developer Tools
- Browser Extensions for OSINT
- OSINT Learning Resources
- Awesome OSINT GitHub Repos
- One-Click Install Scripts
- Top 50 Must-Have Tools (Quick Reference)
1. Username & Social Media OSINT
Tools for finding accounts, profiles, and digital footprints across platforms
| Tool |
Description |
Install / Link |
| Sherlock |
Find usernames across 400+ social networks |
pip install sherlock-project |
| Maigret |
Advanced Sherlock fork, 3000+ sites |
pip install maigret |
| Namechk |
Username & domain availability checker |
namechk.com |
| WhatsMyName |
Web-based username enumeration |
whatsmyname.app |
| Snoop |
Username search (Russian-focused) |
pip install snoop |
| UserRecon |
Bash-based username finder |
git clone https://github.com/wishihab/userrecon.git |
| Blackbird |
Fast username search tool |
pip install blackbird-osint |
| Social Analyzer |
API-based social media profiler |
pip install social-analyzer |
| NExfil |
Find profiles by username |
pip install nexfil |
| Socid-extractor |
Extract info from web pages |
pip install socid-extractor |
| Gitrecon |
GitHub OSINT reconnaissance |
pip install gitrecon |
| OSRFramework |
Username research framework |
pip install osrframework |
| Holehe |
Check if email is registered on sites |
pip install holehe |
| socialscan |
Check email/username availability |
pip install socialscan |
| Investigo |
Username checker (Go-based) |
go install github.com/tdh8316/investigo@latest |
| OSINT Framework |
Visual map of all OSINT tools |
osintframework.com |
| CheckUserNames |
Check username across multiple platforms |
checkusernames.com |
| KnowEm |
Username search on 500+ sites |
knowem.com |
| Instant Username Search |
Real-time username checker |
instantusername.com |
| Usersearch.org |
Free social network search |
usersearch.org |
Installation Guide - Sherlock (All Platforms)
# Kali Linux / Ubuntu
pip install sherlock-project
sherlock "username"
# Termux (Android)
pkg update && pkg upgrade
pkg install python git
pip install sherlock-project
sherlock "username"
# From GitHub (latest)
git clone https://github.com/sherlock-project/sherlock.git
cd sherlock
pip install -r requirements.txt
python3 sherlock "username"
Installation Guide - Maigret
# pip install
pip install maigret
maigret "username"
# From source
git clone https://github.com/soxoj/maigret.git
cd maigret
pip install -r requirements.txt
python3 -m maigret "username"
2. Email OSINT Tools
Find information about email addresses, verify them, check breaches
| Tool |
Description |
Install / Link |
| h8mail |
Email OSINT & breach hunting |
pip install h8mail |
| Holehe |
Check email on 120+ sites |
pip install holehe |
| theHarvester |
Email & domain harvester |
pip install theHarvester |
| EmailAnalyzer |
Analyze suspicious .eml files |
git clone https://github.com/keraattin/EmailAnalyzer |
| Prowl |
Email & domain reconnaissance |
git clone https://github.com/nettitude/Prowl |
| EmailHeader-Analyzer |
CLI email header parser + OSINT |
git clone https://github.com/Giritharram/EmailHeader-Analyzer-CLI-Python |
| MailHeaderDetective |
Email header forensics |
git clone https://github.com/akajhon/MailHeaderDetective |
| WhatMail |
Email header analysis CLI |
git clone https://github.com/z0m31en7/WhatMail |
| mailto_analyzer |
Email exposure analysis |
pip install mailto-analyzer |
| Infoga |
Email OSINT gathering |
git clone https://github.com/m4ll0k/Infoga |
| Hunter.io |
Find professional emails |
hunter.io |
| Phonebook.cz |
Email, domain & URL search |
phonebook.cz |
| EmailRep |
Email reputation lookup |
emailrep.io |
| Epieos |
Get info linked to email |
epieos.com |
| GetNotify |
Email open tracking + geolocation |
getnotify.com |
| Snov.io |
Email finder & verifier |
snov.io |
| MXToolbox |
Email header analysis & DNS checks |
mxtoolbox.com |
| SimpleLogin |
Email alias service for OSINT |
simplelogin.io |
| Email-Checker |
Email validation tool |
email-checker.net |
| Voila Norbert |
Find anyone's email |
voilanorbert.com |
Installation Guide - h8mail
# Quick install
pip install h8mail
# Usage
h8mail -t "target@email.com"
# Termux
pkg update && pkg upgrade
pkg install git python
pip install requests
pip install h8mail
h8mail -t "target@email.com"
# With API keys (for breach data)
h8mail -t "target@email.com" -k config.ini
3. Phone Number OSINT
| Tool |
Description |
Install / Link |
| PhoneInfoga |
Advanced phone number scanner |
pip install phoneinfoga |
| Ignorant |
Check phone registrations |
pip install ignorant |
| GetContact |
See how number is saved by others |
getcontact.com |
| NumVerify |
Phone number validation API |
numverify.com |
| Truecaller |
Caller ID & spam lookup |
truecaller.com |
| Sync.me |
Phone number lookup |
sync.me |
| CallerIDTest |
Reverse phone lookup |
calleridtest.com |
| SpyDialer |
Free reverse phone lookup |
spydialer.com |
| National Cellular Directory |
Phone owner lookup |
nationalcellulardirectory.com |
| TelPoisk |
Russian phone directory |
telpoisk.com |
| NumLookup |
Free reverse phone lookup |
numlookup.com |
| Hlr-Lookups |
HLR phone number lookup |
hlr-lookups.com |
| PhoneSploit |
ADB-based phone exploitation |
git clone https://github.com/aerosol-can/PhoneSploit |
Installation Guide - PhoneInfoga
# Kali Linux
curl -sSL https://raw.githubusercontent.com/sundowndev/phoneinfoga/master/support/scripts/install | bash
phoneinfoga serve -p 8080
# Termux
pkg install golang git
go install github.com/sundowndev/phoneinfoga/v2@latest
phoneinfoga scan -n "+1234567890"
4. Domain & IP OSINT
| Tool |
Description |
Install / Link |
| Amass |
In-depth DNS enumeration |
go install github.com/owasp-amass/amass/v4/...@master |
| Subfinder |
Fast subdomain discovery |
go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest |
| dnsrecon |
DNS enumeration |
pip install dnsrecon |
| Sublist3r |
Subdomain enumeration |
pip install sublist3r |
| crt.sh |
Certificate transparency search |
crt.sh |
| Shodan |
Internet-connected device search |
shodan.io |
| Censys |
Internet-wide scan search |
censys.io |
| Criminal IP |
AI-powered cyber threat intelligence search |
criminalip.io |
| VirusTotal |
Domain/IP/file analysis |
virustotal.com |
| SecurityTrails |
DNS & domain intelligence |
securitytrails.com |
| IPGeoLocation |
IP address geolocation |
git clone https://github.com/maldevel/IPGeoLocation |
| Nmap |
Network scanner & mapper |
apt install nmap / pkg install nmap |
| Masscan |
Fastest port scanner |
apt install masscan |
| WHOIS.com |
WHOIS domain lookup |
whois.com |
| SmartWhois |
WHOIS lookup tool |
smartwhois.en.softonic.com |
| ViewDNS |
Multiple DNS tools |
viewdns.info |
| DNSDumpster |
DNS reconnaissance |
dnsdumpster.com |
| Robtex |
DNS lookup visualization |
robtex.com |
| ARIN WHOIS |
IP registration database |
whois.arin.net |
| BGP Toolkit |
BGP/ASN/IP intelligence |
bgp.he.net |
| urlscan.io |
URL/domain analysis & screenshots |
urlscan.io |
| AbuseIPDB |
IP address reputation database |
abuseipdb.com |
| Web-Check |
All-in-one website analysis (DNS, SSL, Whois, etc.) |
web-check.xyz |
| CentralOps |
Network tools & domain lookup |
centralops.net |
| Pentest-Tools.com |
Online pentesting & recon toolkit |
pentest-tools.com |
| Yandex |
Russian search engine (great for OSINT) |
yandex.com |
| WhoisXML API |
Domain & IP intelligence API |
whoisxmlapi.com |
| IPinfo |
IP address data & geolocation |
ipinfo.io |
| DB-IP |
IP geolocation database |
db-ip.com |
Installation Guide - IPGeoLocation
# Kali Linux / Ubuntu
git clone https://github.com/maldevel/IPGeoLocation
cd IPGeoLocation
pip3 install -r requirements.txt
python3 ipgeolocation.py -t "8.8.8.8"
# Termux
pkg install python git
git clone https://github.com/maldevel/IPGeoLocation
cd IPGeoLocation
pip3 install -r requirements.txt
python3 ipgeolocation.py -t "TARGET_IP"
5. Geolocation & Maps OSINT
6. Image & Video OSINT
Installation Guide - ExifTool
# Kali Linux / Ubuntu
apt-get install libimage-exiftool-perl
exiftool image.jpg
# Termux
pkg install perl
cpan Image::ExifTool
exiftool photo.jpg
# List all metadata
exiftool -a -u -g1 image.jpg
Search by Image Extension
Chrome: chrome.google.com/webstore/detail/search-by-image/cnojnbdhbhnkbcieeekonklommdnndci
Firefox: addons.mozilla.org/firefox/addon/search_by_image/
- Right-click any image -> Search on 30+ engines simultaneously
- Supports Google, Yandex, TinEye, Bing, Baidu, and more
7. Facial Recognition & People Search
| Tool |
Description |
Install / Link |
| FaceSeek |
AI-powered reverse face search |
faceseek.online |
| FaceCheck.ID |
Face recognition search engine |
facecheck.id |
| PimEyes |
Face search from photos |
pimeyes.com |
| Search4faces |
Face search in VK/OK social networks |
search4faces.com |
| face_recognition |
Python face recognition library |
pip install face_recognition |
| DeepFace |
AI face analysis framework |
pip install deepface |
| FaceSeek API |
Face search API for developers |
git clone https://github.com/faceseek-online/face-search-api |
| Faceagle |
Face recognition search |
faceagle.com |
| ThatsThem |
Free people search |
thatsthem.com |
| Pipl |
Deep people search |
pipl.com |
| BeenVerified |
People search & background check |
beenverified.com |
| Spokeo |
People search aggregator |
spokeo.com |
| FastPeopleSearch |
Free people finder |
fastpeoplesearch.com |
| WebMii |
People search engine |
webmii.com |
| Lullar |
Social network profile search |
lullar.com |
| Usersearch.org |
Free social network search |
usersearch.org |
| OSINT Industries |
People search + social media lookup |
osint.industries |
| IDCrawl |
Free people search engine |
idcrawl.com |
8. Social Media Monitoring
| Tool |
Description |
Install / Link |
| Osintgram |
Instagram OSINT tool |
git clone https://github.com/Datalux/Osintgram |
| Instaloader |
Instagram data downloader |
pip install instaloader |
| Twint |
Twitter OSINT (no API needed) |
pip install twint |
| snscrape |
Social media scraper |
pip install snscrape |
| Toutatis |
Instagram OSINT by phone/email |
pip install toutatis |
| Telegram-Scraper |
Scrape Telegram groups/channels |
pip install telegram-scraper |
| TikTok Scraper |
TikTok data extraction |
npm install -g tiktok-scraper |
| Reddit Investigator |
Reddit user analysis |
reddit-user-analyser.netlify.app |
| socialscan |
Social media checker |
pip install socialscan |
| Telepathy |
Telegram OSINT |
pip install telepathy |
| Twayback |
Deleted tweets finder |
pip install twayback |
| SocialBlade |
Social media analytics |
socialblade.com |
| Social-Searcher |
Free social media search engine |
social-searcher.com |
| Mention |
Social media monitoring |
mention.com |
| BrandWatch |
Social listening platform |
brandwatch.com |
9. Data Breach & Leak Search Engines
Search engines and tools for checking if data has been exposed in breaches
| Tool |
Description |
Type |
Link |
| Have I Been Pwned |
Check email/phone in breaches |
Free |
haveibeenpwned.com |
| DeHashed |
Breach search engine |
Paid |
dehashed.com |
| LeakCheck |
Email/username/phone breach search |
Freemium |
leakcheck.net |
| Intelligence X |
Search breaches, darknet, leaks |
Paid |
intelx.io |
| BreachDirectory |
Free breach search |
Free |
breachdirectory.org |
| LeakPeek |
Search leaked databases |
Freemium |
leakpeek.com |
| Snusbase |
Breach data search engine |
Paid |
snusbase.com |
| EffectGroup |
Comprehensive data lookup |
Paid |
effectgroup.io |
| CheckLeaked |
Leak search engine (15B+ accounts) |
Freemium |
checkleaked.cc |
| CheckLeaked WhatsApp |
WhatsApp number database search |
Freemium |
whatsapp.checkleaked.cc |
| DataBreach.com |
Data breach lookup |
Free |
databreach.com |
| Hudson Rock Cavalier |
Infostealer intelligence & breach data |
Freemium |
hudsonrock.com/free-report |
| WeLeakInfo |
Leaked database search (mirrors) |
Varies |
Search for current mirrors |
| LeakedSource |
Historical breach search (mirrors) |
Varies |
Search for current mirrors |
| Pwndb |
Dark web breach database |
Free (Tor) |
Requires Tor Browser |
| BreachForum |
Leaked data community (mirrors) |
Free |
Search for current mirrors |
| h8mail |
Automated breach hunting CLI |
Free |
pip install h8mail |
| ScatteredSecrets |
Breach notification |
Freemium |
scatteredsecrets.com |
| Nuclear Leaks |
Breach data search |
Paid |
Search for current URL |
| The OSINT Rack |
Ransomware & data leak monitoring |
Free |
osintrack.com |
| leak.sx |
Leaked database search |
Paid |
Search for current URL |
| XposedOrNot |
Breach exposure check |
Free |
xposedornot.com |
Pwndb - Dark Web Breach Search
# Pwndb CLI tool (requires Tor)
git clone https://github.com/coj337/pwndb
cd pwndb
# Requires Tor running on port 9050
go build -o pwndb
./pwndb -t "email@domain.com"
# PHP version (web interface)
git clone https://github.com/yanncam/phpwndb
# Requires PHP + Tor SOCKS proxy
10. WikiLeaks, DDoSecrets & Whistleblower Platforms
11. Password Cracking & Credential Tools
| Tool |
Description |
Install / Link |
| Hashcat |
Advanced password recovery (GPU) |
apt install hashcat |
| John the Ripper |
Password cracker |
apt install john |
| Hydra |
Network login cracker |
apt install hydra |
| Medusa |
Parallel brute-force tool |
apt install medusa |
| CeWL |
Custom wordlist generator |
apt install cewl |
| Crunch |
Wordlist generator |
apt install crunch |
| Cain & Abel |
Windows password recovery |
Download from official site |
| RainbowCrack |
Rainbow table cracker |
project-rainbowcrack.com |
| Ophcrack |
Windows password cracker (rainbow tables) |
ophcrack.sourceforge.io |
| LaZagne |
Credentials recovery tool |
git clone https://github.com/AlessandroZ/LaZagne |
| Mimikatz |
Windows credential dumper |
git clone https://github.com/gentilkiwi/mimikatz |
| Responder |
LLMNR/NBT-NS/MDNS poisoner |
git clone https://github.com/lgandx/Responder |
Hashcat Quick Reference
# Install
apt install hashcat
# Basic usage
hashcat -m 0 -a 0 hash.txt wordlist.txt # MD5
hashcat -m 1000 -a 0 hash.txt wordlist.txt # NTLM
hashcat -m 1800 -a 0 hash.txt wordlist.txt # SHA-512
# Brute force
hashcat -m 0 -a 3 hash.txt ?a?a?a?a?a?a
# Show cracked
hashcat -m 0 hash.txt --show
12. Dark Web Search Engines & Tools
| Tool |
Description |
Link / Onion |
| Torch |
Oldest & largest dark web search engine |
xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion |
| Haystak |
Dark web search with filtering |
haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion |
| Ahmia |
Clearnet dark web search |
ahmia.fi |
| DuckDuckGo Onion |
Private search on Tor |
duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion |
| Phobos |
Dark web search engine |
phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion |
| NotEvil |
Google-like dark web search |
notevilmtxf25uw7tskqxj6njlpebyrmlrerfv5hc4tuq7c7hilbyiqd.onion |
| Kilos |
Dark web market search |
Tor only |
| Excavator |
Forensic-grade dark web search |
Tor only |
| Recon |
Dark web market intelligence |
Tor only |
| TorDex |
Uncensored Tor search engine |
Tor only |
| Candle |
Minimalist onion search engine |
Tor only |
| DarkSearch |
Dark web search API |
darksearch.io |
| OnionScan |
Scan .onion sites |
go install github.com/s-rah/onionscan@latest |
| Tor2Web |
Access .onion via clearnet |
tor2web.org |
| Fresh Onions |
New .onion directory |
Tor only |
| OSINT-SPY |
OSINT spy tool for Tor |
git clone https://github.com/SharadKumar97/OSINT-SPY |
| Dark.fail |
Verified dark web links |
dark.fail |
13. Anonymous & Privacy Tools
| Tool |
Description |
Install / Link |
| Tor Browser |
Anonymous web browsing |
torproject.org |
| Tails OS |
Amnesic live operating system |
tails.boum.org |
| Whonix |
Anonymous OS via Tor |
whonix.org |
| ProtonVPN |
Free encrypted VPN |
protonvpn.com |
| ProtonMail |
Encrypted email |
proton.me |
| Signal |
Encrypted messaging |
signal.org |
| Briar |
P2P encrypted messenger |
briarproject.org |
| OnionShare |
Anonymous file sharing |
onionshare.org |
| Anonsurf |
Anonymize entire OS traffic |
git clone https://github.com/Und3rf10w/kali-anonsurf |
| MAC Changer |
Change MAC address |
apt install macchanger |
| BleachBit |
Digital footprint cleaner |
bleachbit.org |
| VeraCrypt |
Disk encryption |
veracrypt.fr |
| KeePassXC |
Password manager |
keepassxc.org |
| Mullvad VPN |
Privacy-focused VPN (no email required) |
mullvad.net |
| Session |
Decentralized messenger |
getsession.org |
| Anon-SMS |
Anonymous SMS sending |
git clone https://github.com/HACK3RY2J/Anon-SMS.git |
14. Web Application OSINT & Scanning
| Tool |
Description |
Install / Link |
| Nikto |
Web server vulnerability scanner |
apt install nikto |
| WPScan |
WordPress vulnerability scanner |
gem install wpscan |
| Wappalyzer |
Technology profiler |
Browser Extension |
| BuiltWith |
Technology lookup |
builtwith.com |
| Whatweb |
Web technology identifier |
apt install whatweb |
| WebHack |
Web hacking toolkit |
git clone https://github.com/yan4ikyt/webhack |
| Dirb |
Web directory brute-forcer |
apt install dirb |
| Gobuster |
URI/DNS brute-forcer |
go install github.com/OJ/gobuster/v3@latest |
| HTTPx |
Fast HTTP toolkit |
go install github.com/projectdiscovery/httpx/cmd/httpx@latest |
| Katana |
Web crawler |
go install github.com/projectdiscovery/katana/cmd/katana@latest |
| LinkFinder |
JS endpoint finder |
git clone https://github.com/GerbenJavado/LinkFinder |
| Photon |
Web crawler for OSINT |
git clone https://github.com/s0md3v/Photon |
| URLCadiz |
URL shortener/masker |
git clone https://github.com/PerezMascato/URLCADIZ |
| Pentest-Tools.com |
Online pentest & recon platform |
pentest-tools.com |
| Feroxbuster |
Fast content discovery |
apt install feroxbuster |
| Wfuzz |
Web fuzzer |
pip install wfuzz |
| ParamSpider |
Parameter discovery from archives |
pip install paramspider |
Installation Guide - WebHack
apt-get install python3 git
git clone https://github.com/yan4ikyt/webhack
cd webhack
pip3 install requests
python3 WebHack.py
15. Social Engineering & Phishing
| Tool |
Description |
Install / Link |
| Zphisher |
Advanced phishing tool (30+ templates) |
git clone https://github.com/htr-tech/zphisher |
| NexPhisher |
Multi-platform phishing tool |
git clone https://github.com/htr-tech/nexphisher |
| SET (Social Engineering Toolkit) |
Complete SE framework |
apt install set |
| Gophish |
Phishing simulation platform |
getgophish.com |
| Storm-Breaker |
Access webcam, mic & location |
git clone https://github.com/ultrasecurity/Storm-Breaker |
| GrabCam |
Camera phishing for Termux |
git clone https://github.com/noob-hackers/grabcam |
| Evilginx2 |
Man-in-the-middle phishing |
go install github.com/kgretzky/evilginx2@latest |
| Modlishka |
Reverse proxy phishing |
go install github.com/drk1wi/Modlishka@latest |
| ShortURL |
URL shortener for SE |
git clone https://github.com/htr-tech/shorturl |
| FakeURL / URLCADIZ |
URL masking tool |
git clone https://github.com/PerezMascato/URLCADIZ |
| King Phisher |
Phishing campaign toolkit |
github.com/rsmusllp/king-phisher |
| SocialFish |
Social media phishing |
git clone https://github.com/UndeadSec/SocialFish |
| AdvPhishing |
Advanced phishing tool |
git clone https://github.com/Ignitetch/AdvPhishing |
Installation Guide - Zphisher
# Kali Linux
git clone https://github.com/htr-tech/zphisher.git
cd zphisher
bash zphisher.sh
# Termux
pkg install git php openssh
git clone https://github.com/htr-tech/zphisher.git
cd zphisher
bash zphisher.sh
Installation Guide - Storm-Breaker (Camera/Mic Access)
# Kali Linux
git clone https://github.com/ultrasecurity/Storm-Breaker
cd Storm-Breaker
sudo bash install.sh
python3 -m pip install -r requirements.txt
sudo python3 Storm-Breaker.py
# Features:
# - Access target webcam
# - Access target microphone
# - Get target location
# - OS password grabber (Win10)
16. Vulnerability Scanning & Exploitation
| Tool |
Description |
Install / Link |
| Metasploit |
Penetration testing framework |
apt install metasploit-framework |
| Nuclei |
Fast vulnerability scanner |
go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest |
| SQLMap |
SQL injection automation |
apt install sqlmap |
| Nmap |
Network mapper & scanner |
apt install nmap |
| Burp Suite |
Web app security testing |
portswigger.net/burp |
| OWASP ZAP |
Web app scanner |
zaproxy.org |
| Nessus |
Vulnerability assessment |
tenable.com/products/nessus |
| OpenVAS |
Open vulnerability scanner |
apt install openvas |
| XSSHunter |
Blind XSS detection |
xsshunter.com |
| Commix |
Command injection exploiter |
git clone https://github.com/commixproject/commix |
| GoldenEye |
HTTP DoS test tool |
git clone https://github.com/jseidl/GoldenEye |
| Pentest-Tools.com |
Web vulnerability scanner |
pentest-tools.com |
| Criminal IP |
Vulnerability & CVE search |
criminalip.io |
| ExploitDB |
Exploit database |
exploit-db.com |
Installation Guide - GoldenEye (DoS Testing)
# Kali Linux
sudo su
cd /opt
git clone https://github.com/jseidl/GoldenEye
cd GoldenEye
# Or download directly:
wget https://github.com/jseidl/GoldenEye/archive/master.zip
unzip master.zip && cd GoldenEye-master
python3 goldeneye.py "http://target.com"
# NOTE: For AUTHORIZED TESTING ONLY
17. Network & Wireless Tools
| Tool |
Description |
Install / Link |
| Wireshark |
Network protocol analyzer |
apt install wireshark |
| Aircrack-ng |
Wi-Fi security suite |
apt install aircrack-ng |
| Kismet |
Wireless network detector |
apt install kismet |
| Bettercap |
MITM framework |
apt install bettercap |
| Ettercap |
MITM attack suite |
apt install ettercap-common |
| Wifite |
Automated Wi-Fi cracker |
apt install wifite |
| Reaver |
WPS brute force tool |
apt install reaver |
| Fern Wifi Cracker |
GUI Wi-Fi audit tool |
apt install fern-wifi-cracker |
| Fluxion |
Wi-Fi social engineering |
git clone https://github.com/FluxionNetwork/fluxion |
| hcxtools |
Wi-Fi capture conversion |
apt install hcxtools |
| BlueMaho |
Bluetooth security testing |
git clone https://github.com/pysec/bluemaho |
| Netcat |
Network debugging tool |
apt install netcat-openbsd |
| tcpdump |
Command-line packet analyzer |
apt install tcpdump |
18. Mobile Hacking & Phone Exploitation
| Tool |
Description |
Install / Link |
| PhoneSploit |
ADB-based phone exploitation |
git clone https://github.com/aerosol-can/PhoneSploit |
| AndroRAT / AhMyth |
Android remote access tool |
git clone https://github.com/AhMyth/AhMyth-Android-RAT |
| Apktool |
Android APK decompiler |
apt install apktool |
| Frida |
Dynamic instrumentation |
pip install frida-tools |
| Objection |
Runtime mobile exploration |
pip install objection |
| MobSF |
Mobile security framework |
github.com/MobSF/Mobile-Security-Framework-MobSF |
| MSFPC |
MSF payload creator |
git clone https://github.com/g0tmi1k/msfpc |
| jadx |
Android APK decompiler (GUI) |
apt install jadx |
Installation Guide - PhoneSploit
# Requirements: ADB + Shodan access
# Shodan search query: "android debug bridge"
# Kali Linux
apt install adb
apt-get update
git clone https://github.com/aerosol-can/PhoneSploit
cd PhoneSploit
pip3 install colorama
adb start-server
python3 phonesploit.py
# Find targets on Shodan: https://shodan.io
# Search: "android debug bridge"
19. AI-Powered OSINT & Free AI Tools
AI tools for analysis, research, image recognition, and OSINT automation
AI-Powered OSINT Tools
| Tool |
Description |
Install / Link |
| GeoSpy |
AI geolocation from images |
geospy.ai |
| DeepFace |
Face analysis (age, gender, emotion) |
pip install deepface |
| FaceSeek |
AI facial recognition search |
faceseek.online |
| OSINTR |
AI-powered OSINT automation |
Search GitHub for latest version |
| SpiderAI |
AI reconnaissance spider |
Search GitHub for latest version |
| ReconAIzer |
AI-enhanced Burp extension |
github.com/hisxo/ReconAIzer |
| face_recognition |
Python face recognition |
pip install face_recognition |
| OpenCV |
Computer vision library |
pip install opencv-python |
| HARPA AI |
AI browser agent for OSINT |
harpa.ai |
| AI or Not |
Detect AI-generated content |
aiornot.com |
Free AI Tools for OSINT Research
20. Financial & Corporate Intelligence
Installation Guide - Orbit (Bitcoin Search)
# Kali Linux
apt upgrade
apt install git python3
git clone https://github.com/s0md3v/Orbit
cd Orbit
python3 orbit.py -s "BITCOIN_ADDRESS"
# Termux
pkg upgrade
pkg install git python
git clone https://github.com/s0md3v/Orbit
cd Orbit
python3 orbit.py -s "BITCOIN_ADDRESS"
21. Vehicle, Property & Public Records
| Tool/Service |
Description |
Link |
| VehicleRegistration API |
Vehicle registration lookup |
Various by country |
| FAXVIN |
Free VIN decoder |
faxvin.com |
| AutoCheck |
Vehicle history reports |
autocheck.com |
| Carfax |
Vehicle history |
carfax.com |
| Voter Records |
US voter registration lookup |
Various state databases |
| PACER |
Federal court records |
pacer.uscourts.gov |
| Zillow |
Property records & estimates |
zillow.com |
| Who Owns What |
NYC landlord portfolio lookup |
whoownswhat.justfix.org |
| County Assessor |
Property tax records |
Varies by county |
| FOIA.gov |
Freedom of Information Act |
foia.gov |
| Court Listener |
Free court opinion search |
courtlistener.com |
| NICB VINCheck |
Stolen vehicle check |
nicb.org/vincheck |
22. Metadata & Digital Forensics
| Tool |
Description |
Install / Link |
| Autopsy |
Digital forensics platform |
autopsy.com |
| Volatility |
Memory forensics framework |
pip install volatility3 |
| Wireshark |
Network packet analysis |
apt install wireshark |
| Binwalk |
Firmware analysis |
apt install binwalk |
| Foremost |
File carving tool |
apt install foremost |
| Bulk Extractor |
Extract features from files |
apt install bulk-extractor |
| DEFT Linux |
Forensics live CD |
deftlinux.net |
| ExifTool |
Complete metadata extraction |
apt install libimage-exiftool-perl |
| FOCA |
Document metadata analysis |
github.com/ElevenPaths/FOCA |
| Metagoofil |
Document metadata harvester |
pip install metagoofil |
| CyberChef |
Data analysis swiss army knife |
gchq.github.io/CyberChef |
| Scalpel |
File carving tool |
apt install scalpel |
23. IP Camera & Webcam OSINT
WARNING: Accessing unauthorized cameras is illegal. This section is for educational purposes only.
Shodan Searches for Cameras
| Search Query |
What It Finds |
screenshot.label:webcam |
Webcams indexed by Shodan |
android debug bridge |
Open ADB ports on Android devices |
port:554 has_screenshot:true |
RTSP cameras with screenshots |
Server: yawcam |
Yawcam webcams |
webcamXP |
WebcamXP servers |
"Server: IP Webcam Server" |
IP Webcam app servers |
port:8080 title:"Blue Iris" |
Blue Iris CCTV |
"Server: IPCamera" |
Generic IP cameras |
port:37777 "DVR" |
Dahua DVR systems |
port:80 title:"DVR" |
Web-accessible DVR |
Google Dorking for Cameras
| Google Dork |
What It Finds |
inurl:top.htm inurl:currenttime |
IP cameras with live feeds |
inurl:"lvappl.htm" |
Live view cameras |
intitle:"webcamXP 5" |
WebcamXP 5 servers |
inurl:"wvhttp-01" |
Panasonic cameras |
inurl:"viewerframe?mode=" |
Axis cameras |
inurl:"videostream.cgi" |
CGI video streams |
inurl:"webcapture" |
Web capture cameras |
inurl:"snap.jpg" |
Camera snapshots |
inurl:"snapshot.jpg" |
Camera snapshot pages |
inurl:"video.mjpg" |
MJPEG video streams |
intitle:"Live View / - AXIS" |
AXIS cameras |
inurl:"CgiStart?page=Single" |
Single page cameras |
inurl:/view/view.shtml |
Mobotix cameras |
inurl:"MultiCameraFrame?Mode=" |
Multi-camera views |
intitle:"Network Camera" inurl:"ViewerFrame" |
Generic network cameras |
Camera OSINT Tools
24. Google Dorking Bible
Master search engine hacking with these advanced operators
Basic Operators
| Operator |
Description |
Example |
site: |
Search within a domain |
site:example.com passwords |
inurl: |
Search in URL |
inurl:admin login |
intitle: |
Search in page title |
intitle:"index of" passwords |
intext: |
Search in page body |
intext:"username" "password" |
filetype: |
Search by file type |
filetype:pdf "confidential" |
ext: |
Search by extension |
ext:sql "dump" |
cache: |
View cached page |
cache:example.com |
link: |
Find linking pages |
link:example.com |
allintext: |
All terms in page body |
allintext:username password email |
allintitle: |
All terms in title |
allintitle:admin panel login |
allinurl: |
All terms in URL |
allinurl:admin dashboard |
Advanced Dorks for OSINT
| Purpose |
Google Dork |
| Find exposed passwords |
intitle:"index of" "passwords.txt" |
| SQL database dumps |
filetype:sql "CREATE TABLE" "INSERT INTO" |
| Config files |
ext:conf OR ext:cnf OR ext:cfg "password" |
| Login pages |
inurl:"/admin/login" OR inurl:"/wp-login" |
| Exposed .env files |
intitle:"index of" ".env" |
| phpinfo pages |
ext:php intitle:phpinfo "published by the PHP Group" |
| Open FTP servers |
intitle:"index of" inurl:ftp |
| Apache status |
intitle:"Apache Status" "Apache Server Status" |
| Exposed git repos |
intitle:"index of" ".git" |
| Database backups |
intitle:"index of" "backup" ext:sql |
| Exposed log files |
filetype:log "password" OR "username" |
| SSH private keys |
filetype:pem "PRIVATE KEY" |
| WordPress config |
filetype:txt inurl:wp-config |
Google Dork Generators
| Tool |
Link |
| DorkSearch |
dorksearch.com |
| Google Hacking Database (GHDB) |
exploit-db.com/google-hacking-database |
| Pagodo |
git clone https://github.com/opsdisk/pagodo |
| GooFuzz |
git clone https://github.com/m3n0sd0n4ld/GooFuzz |
| dorkScanner |
git clone https://github.com/madhavmehndiratta/dorkScanner |
25. Credential & Data Dorking
Google dorks specifically for finding exposed credentials and sensitive data
Credential Hunting Dorks
| Purpose |
Google Dork |
| Gmail + passwords in spreadsheets |
allintext:".@gmail.com" OR "password" OR "username" filetype:xlsx |
| Exposed credentials in CSV |
filetype:csv "email" "password" |
| Credential files |
filetype:txt "username" "password" site:pastebin.com |
| Email lists |
filetype:xlsx "email" "@gmail.com" OR "@yahoo.com" |
| Database dumps |
filetype:sql "INSERT INTO" "password" "email" |
| Config files with creds |
filetype:env "DB_PASSWORD" OR "API_KEY" OR "SECRET" |
| Exposed .htpasswd |
filetype:htpasswd htpasswd |
| Exposed shadow files |
intitle:"index of" "shadow" |
| FTP credentials |
filetype:log "USER" "PASS" "230" |
| phpMyAdmin without auth |
inurl:phpmyadmin/index.php intitle:"phpMyAdmin" "Welcome to phpMyAdmin" |
| Exposed Jenkins |
intitle:"Dashboard [Jenkins]" inurl:"/login" |
| Exposed Kibana |
intitle:"Kibana" inurl:app/kibana |
| AWS keys exposed |
filetype:pem "AKIA" OR "ASIA" |
| GitHub exposed secrets |
site:github.com "API_KEY" OR "api_secret" filetype:env |
Sensitive Document Dorks
| Purpose |
Google Dork |
| Confidential PDFs |
filetype:pdf "confidential" OR "internal use only" |
| Financial documents |
filetype:xlsx "salary" OR "budget" OR "financial" |
| Medical records |
filetype:pdf "medical" "patient" "diagnosis" |
| Employee data |
filetype:xlsx "employee" "SSN" OR "social security" |
| Network diagrams |
filetype:pdf OR filetype:vsd "network diagram" |
26. IP Tracking & Geolocation Links
Tip: Mask an IPLogger link using a URL shortener or the VK redirect trick:
https://vk.com/away.php?to=YOUR_LOGGER_LINK
27. Telegram OSINT Bots & Channels
OSINT Bots
| Bot |
Description |
Link |
| Eye of God (Glaz Boga) |
Person lookup by phone/email/photo/VK |
@glazzz_rus_bot |
| Leak OSINT Bot |
Data breach search via Telegram |
Search for current bot |
| TeleTracker |
Track Telegram user activity |
Search for current bot |
| Sherlock Bot |
Username search via Telegram |
Search for current bot |
| @No_BlackMail_bot |
Search email by phone number |
@No_BlackMail_bot |
| @OverSerchBot |
Multi-search OSINT bot |
@OverSerchBot |
| @Search_firm_bot |
Company/person lookup |
@Search_firm_bot |
| GetContact Bot |
Phone number caller ID |
@getcontact_real_bot |
| Quick OSINT |
Fast person lookup |
@Quick_OSINT_bot |
| Insight |
Data aggregation bot |
Search for current bot |
| USSearchBot |
US person search |
@USSearchBot |
| @CreationDateBot |
Check Telegram account creation date |
@creationdatebot |
| @SangMataBot |
Check username history of TG accounts |
@SangMataInfo_bot |
OSINT Telegram Channels
Telegram Scraping Tools
| Tool |
Description |
Install |
| Telegram-Scraper |
Scrape messages from groups/channels |
pip install telegram-scraper |
| Telelog |
Telegram logging & monitoring |
Search GitHub |
| Telepathy |
Telegram OSINT analysis |
pip install telepathy |
| TeleGram-OSINTer |
Telegram profile investigation |
git clone https://github.com/Alb-310/TeleGram-OSINTer |
| Telethon |
Python Telegram API library |
pip install telethon |
28. Russian OSINT & Person Lookup Services
Services popular in Russian-speaking OSINT communities (from telegra.ph TOP-25)
VK (VKontakte) OSINT
IP Logger Masking (VK redirect trick)
https://vk.com/away.php?to=YOUR_LOGGER_URL
29. Social Media Searcher Platforms
Dedicated platforms for searching and monitoring social media
30. Termux Hacking Toolkit (Complete)
Complete guide to setting up OSINT & hacking tools on Android via Termux
Initial Setup
# First-time Termux setup
pkg update -y && pkg upgrade -y
pkg install python python2 git wget curl nmap
pip install requests colorama
termux-setup-storage
Complete Tool List with Installation
| # |
Tool |
Purpose |
Installation |
| 1 |
Anon-SMS |
Anonymous SMS sending |
See below |
| 2 |
BOMBER / db0mb3r |
SMS/Call flooding |
See below |
| 3 |
TBomb |
SMS & Call bomber |
See below |
| 4 |
Zphisher |
Phishing (30+ templates) |
See below |
| 5 |
NexPhisher |
Advanced phishing |
See below |
| 6 |
Storm-Breaker |
Camera/Mic/Location access |
See below |
| 7 |
GrabCam |
Camera phishing |
See below |
| 8 |
Sherlock |
Username OSINT |
pip install sherlock-project |
| 9 |
UserRecon |
Username search |
See below |
| 10 |
WebHack |
Web hacking toolkit |
See below |
| 11 |
PhoneSploit |
Phone exploitation via ADB |
See below |
| 12 |
IPGeoLocation |
IP geolocation |
See below |
| 13 |
Orbit |
Bitcoin address search |
See below |
| 14 |
h8mail |
Email breach hunting |
pip install h8mail |
| 15 |
ExifTool |
Image metadata |
pkg install perl |
| 16 |
ShortURL |
URL shortener |
See below |
| 17 |
FakeRoot |
Fake root on Termux |
See below |
| 18 |
Nmap |
Network scanner |
pkg install nmap |
| 19 |
Hydra |
Login brute force |
pkg install hydra |
| 20 |
fsociety |
All-in-one hacking pack |
See below |
1. Anon-SMS - Anonymous SMS
git clone https://github.com/HACK3RY2J/Anon-SMS.git
cd Anon-SMS
bash Run.sh
2. BOMBER / db0mb3r & TBomb
# Method 1: db0mb3r (pip)
pkg install python clang make openssl -y
pip3 install db0mb3r -U
db0mb3r
# Method 2: TBomb
pkg install git python
git clone https://github.com/TheSpeedX/TBomb.git
cd TBomb
chmod +x TBomb.sh
./TBomb.sh
3. Zphisher - Phishing Tool
pkg install git php openssh -y
git clone https://github.com/htr-tech/zphisher.git
cd zphisher
bash zphisher.sh
4. NexPhisher - Advanced Phishing
apt install git -y
git clone https://github.com/htr-tech/nexphisher.git
cd nexphisher
bash setup
bash tmux_setup
bash nexphisher
5. Storm-Breaker - Camera/Mic Hack
git clone https://github.com/ultrasecurity/Storm-Breaker
cd Storm-Breaker
sudo bash install.sh
python3 -m pip install -r requirements.txt
sudo python3 Storm-Breaker.py
6. GrabCam - Camera Phishing
apt-get update -y && apt-get upgrade -y
pkg install python python2 wget git -y
pip install lolcat
git clone https://github.com/noob-hackers/grabcam
termux-setup-storage
cd grabcam
chmod +x grabcam.sh
bash grabcam.sh
mv cam*.png /sdcard/
7. UserRecon - Username Search
pkg update && pkg upgrade
pkg install git
git clone https://github.com/wishihab/userrecon.git
cd userrecon
chmod +x userrecon.sh
./userrecon.sh
8. WebHack, PhoneSploit, IPGeoLocation, Orbit
# WebHack
git clone https://github.com/yan4ikyt/webhack
cd webhack && pip3 install requests
python3 WebHack.py
# PhoneSploit (find targets on shodan: "android debug bridge")
apt install adb
git clone https://github.com/aerosol-can/PhoneSploit
cd PhoneSploit && pip3 install colorama
adb start-server
python3 phonesploit.py
# IPGeoLocation
git clone https://github.com/maldevel/IPGeoLocation
cd IPGeoLocation && pip3 install -r requirements.txt
python3 ipgeolocation.py -t "TARGET_IP"
# Orbit (Bitcoin search)
git clone https://github.com/s0md3v/Orbit
cd Orbit
python3 orbit.py -s "BITCOIN_ADDRESS"
9. FakeRoot & FakeURL
# FakeRoot
apt update -y && apt upgrade -y
apt install git
git clone https://github.com/B41B4L/FakeRoot
cd FakeRoot
chmod +x Root.sh
./Root.sh
# Test: whoami
# Alternative: pkg install fakeroot && fakeroot
# FakeURL / URLCADIZ
git clone https://github.com/PerezMascato/URLCADIZ
sudo pip3 install pyshorteners
cd URLCADIZ
python3 URLCADIZ.py
10. ShortURL & fsociety
# ShortURL
git clone https://github.com/htr-tech/shorturl
cd shorturl && bash setup.sh && shorturl
# fsociety
git clone https://github.com/Manisso/fsociety
cd fsociety
python3 fsociety.py
31. Kali Linux OSINT Toolkit
Pre-installed and essential OSINT tools for Kali Linux
Pre-installed OSINT Tools
| Tool |
Category |
Command |
| Nmap |
Network scanning |
nmap |
| Wireshark |
Packet analysis |
wireshark |
| Metasploit |
Exploitation |
msfconsole |
| SQLMap |
SQL injection |
sqlmap |
| Hydra |
Brute force |
hydra |
| John the Ripper |
Password cracking |
john |
| Hashcat |
GPU password cracking |
hashcat |
| Aircrack-ng |
Wi-Fi cracking |
aircrack-ng |
| Nikto |
Web scanner |
nikto |
| Dirb |
Directory brute force |
dirb |
| WPScan |
WordPress scanner |
wpscan |
| theHarvester |
Email/subdomain OSINT |
theHarvester |
| Maltego |
Visual link analysis |
maltego |
| Recon-ng |
Web recon framework |
recon-ng |
| SET |
Social engineering toolkit |
setoolkit |
| Burp Suite |
Web proxy |
burpsuite |
| BeEF |
Browser exploitation |
beef-xss |
Additional Kali Installs
# Install additional OSINT tools
sudo apt update
sudo apt install -y sherlock maltego spiderfoot recon-ng theharvester \
metagoofil eyewitness phoneinfoga amass subfinder
# Python tools
pip install maigret holehe h8mail socialscan social-analyzer
32. All-in-One Hacking Frameworks
| Framework |
Description |
Install |
| fsociety |
Mr. Robot inspired hacking pack |
See below |
| Hackingtool |
All-in-one hacking tool (100+ tools) |
git clone https://github.com/Z4nzu/hackingtool |
| PenTest Tools |
20+ pentest tools |
git clone https://github.com/arch3rPro/PentestTools |
| Lazy Script |
Automated pentest |
git clone https://github.com/arismelachroinos/lscript |
| SpiderFoot |
Complete OSINT automation |
pip install spiderfoot |
| Maltego |
Visual OSINT platform |
Pre-installed in Kali |
| Recon-ng |
Recon framework |
pip install recon-ng |
| OSINTR |
AI-powered OSINT |
Search GitHub |
Installation Guide - fsociety
# Kali Linux
git clone https://github.com/Manisso/fsociety
cd fsociety
python3 fsociety.py
# Termux
pkg install python git
git clone https://github.com/Manisso/fsociety
cd fsociety
python3 fsociety.py
# Includes:
# - Information Gathering
# - Password Attacks
# - Wireless Testing
# - Exploitation Tools
# - Sniffing & Spoofing
# - Web Hacking
# - Private Web Hacking
# - Post Exploitation
Installation Guide - Hackingtool
git clone https://github.com/Z4nzu/hackingtool
cd hackingtool
sudo python3 install.py
sudo hackingtool
# Categories include:
# AnonSurf, Info Gathering, Wordlist Generator,
# Wireless Attacks, SQL Injection, Phishing,
# Web Attack, Post Exploitation, Forensics, and more
33. Wordlist Generation & Brute Force
| Tool |
Description |
Install |
| Crunch |
Pattern-based wordlist generator |
apt install crunch |
| CeWL |
Custom wordlist from website |
apt install cewl |
| Cupp |
Common User Passwords Profiler |
git clone https://github.com/Mebus/cupp |
| Mentalist |
GUI wordlist generator |
github.com/sc0tfree/mentalist |
| SecLists |
Collection of security lists |
git clone https://github.com/danielmiessler/SecLists |
| RockYou |
Classic password wordlist |
Included in Kali |
| Weakpass |
Large wordlist collection |
weakpass.com |
| Probable Wordlists |
Sorted by probability |
github.com/berzerk0/Probable-Wordlists |
| Pydictor |
Powerful wordlist generator |
github.com/LandGrey/pydictor |
Wordlist Generation Examples
# Crunch - Generate all 8-char lowercase passwords
crunch 8 8 abcdefghijklmnopqrstuvwxyz -o wordlist.txt
# CeWL - Generate wordlist from website
cewl https://example.com -d 2 -m 5 -w wordlist.txt
# Cupp - Interactive personal wordlist
git clone https://github.com/Mebus/cupp
cd cupp
python3 cupp.py -i
# SecLists - Download the ultimate collection
git clone https://github.com/danielmiessler/SecLists
34. Hardware Hacking Tools
| Device |
Description |
Price Range |
| Flipper Zero |
Multi-tool for pentesters |
~$170 |
| HackRF One |
Software-defined radio |
~$300 |
| Proxmark3 |
RFID/NFC research tool |
~$60-300 |
| WiFi Pineapple |
Wi-Fi auditing platform |
~$100-300 |
| Rubber Ducky |
USB keystroke injection |
~$80 |
| Bash Bunny |
USB attack platform |
~$120 |
| LAN Turtle |
Covert network access |
~$60 |
| CrazyRadio PA |
2.4GHz wireless research |
~$30 |
| RTL-SDR |
Software-defined radio dongle |
~$25 |
| Alfa AWUS036ACH |
Long-range Wi-Fi adapter |
~$50 |
| O.MG Cable |
Malicious USB cable |
~$120 |
| Key Croc |
Keylogger/payload tool |
~$80 |
| Shark Jack |
Network attack tool |
~$60 |
35. OSINT Operating Systems
36. OSINT APIs & Developer Tools
37. Browser Extensions for OSINT
| Extension |
Description |
Browser |
| Search by Image |
Multi-engine reverse image search |
Chrome / Firefox |
| Wappalyzer |
Technology stack detector |
Chrome / Firefox |
| BuiltWith |
Website technology profiler |
Chrome |
| Shodan |
Server info on any website |
Chrome / Firefox |
| Wayback Machine |
View archived pages |
Chrome / Firefox |
| EXIF Viewer |
View image metadata |
Chrome / Firefox |
| User-Agent Switcher |
Change browser identity |
Chrome / Firefox |
| FoxyProxy |
Proxy management |
Chrome / Firefox |
| Ghostery |
Tracker detection |
Chrome / Firefox |
| HTTPS Everywhere |
Force HTTPS connections |
Chrome / Firefox |
| Hunchly |
OSINT web capture tool |
Chrome |
| InVID/WeVerify |
Video/image verification |
Chrome / Firefox |
| HARPA AI |
AI browser agent |
Chrome |
| SingleFile |
Save complete web pages |
Chrome / Firefox |
38. OSINT Learning Resources
YouTube Channels for OSINT
| Channel |
Focus |
| John Hammond |
Cybersecurity & OSINT |
| The Cyber Mentor |
Ethical hacking |
| David Bombal |
Networking & security |
| NetworkChuck |
Cybersecurity tutorials |
| LiveOverflow |
Security research |
| HackerSploit |
Penetration testing |
| Null Byte |
Hacking tutorials |
| 13Cubed |
DFIR & forensics |
| STOK |
Bug bounty & OSINT |
39. Awesome OSINT GitHub Repos
40. One-Click Install Scripts
Kali Linux - Install ALL OSINT Tools
#!/bin/bash
# OSINT Arsenal - Kali Linux Installer
echo "[*] Updating system..."
sudo apt update && sudo apt upgrade -y
echo "[*] Installing system tools..."
sudo apt install -y git python3 python3-pip golang-go nmap wireshark \
sqlmap hydra john hashcat aircrack-ng nikto dirb wpscan \
recon-ng theharvester maltego spiderfoot set exiftool \
masscan whatweb gobuster feroxbuster wfuzz \
libimage-exiftool-perl binwalk foremost bulk-extractor macchanger
echo "[*] Installing Python tools..."
pip install sherlock-project maigret holehe h8mail socialscan \
social-analyzer phoneinfoga twint snscrape instaloader \
deepface face_recognition volatility3 spiderfoot \
blackbird-osint nexfil socid-extractor osrframework
echo "[*] Cloning GitHub tools..."
cd /opt
sudo git clone https://github.com/Manisso/fsociety
sudo git clone https://github.com/Z4nzu/hackingtool
sudo git clone https://github.com/ultrasecurity/Storm-Breaker
sudo git clone https://github.com/htr-tech/zphisher
sudo git clone https://github.com/s0md3v/Orbit
sudo git clone https://github.com/s0md3v/Photon
sudo git clone https://github.com/maldevel/IPGeoLocation
sudo git clone https://github.com/aerosol-can/PhoneSploit
sudo git clone https://github.com/jseidl/GoldenEye
sudo git clone https://github.com/keraattin/EmailAnalyzer
sudo git clone https://github.com/danielmiessler/SecLists
echo "[+] Installation complete! OSINT Arsenal is ready."
Termux (Android) - Install ALL Tools
#!/bin/bash
# OSINT Arsenal - Termux Installer
echo "[*] Updating Termux..."
pkg update -y && pkg upgrade -y
echo "[*] Installing base packages..."
pkg install -y python python2 git wget curl nmap hydra \
perl clang make openssl openssh php
echo "[*] Installing Python tools..."
pip install requests colorama sherlock-project maigret \
holehe h8mail socialscan phoneinfoga
echo "[*] Setting up storage..."
termux-setup-storage
echo "[*] Cloning tools..."
cd ~
git clone https://github.com/htr-tech/zphisher.git
git clone https://github.com/htr-tech/nexphisher.git
git clone https://github.com/htr-tech/shorturl
git clone https://github.com/HACK3RY2J/Anon-SMS.git
git clone https://github.com/TheSpeedX/TBomb.git
git clone https://github.com/wishihab/userrecon.git
git clone https://github.com/yan4ikyt/webhack
git clone https://github.com/maldevel/IPGeoLocation
git clone https://github.com/s0md3v/Orbit
git clone https://github.com/aerosol-can/PhoneSploit
git clone https://github.com/Manisso/fsociety
git clone https://github.com/B41B4L/FakeRoot
git clone https://github.com/noob-hackers/grabcam
echo "[+] All tools installed! Happy hacking :)"
41. Top 50 Must-Have Tools (Quick Reference)
| # |
Tool |
Category |
Install |
| 1 |
Sherlock |
Username OSINT |
pip install sherlock-project |
| 2 |
Maigret |
Username OSINT (3000+ sites) |
pip install maigret |
| 3 |
h8mail |
Email breach hunting |
pip install h8mail |
| 4 |
Holehe |
Email registration check |
pip install holehe |
| 5 |
theHarvester |
Domain/email recon |
apt install theharvester |
| 6 |
PhoneInfoga |
Phone number OSINT |
See install guide |
| 7 |
Nmap |
Network scanning |
apt install nmap |
| 8 |
Amass |
DNS enumeration |
go install ...amass |
| 9 |
Subfinder |
Subdomain discovery |
go install ...subfinder |
| 10 |
Nuclei |
Vulnerability scanning |
go install ...nuclei |
| 11 |
SQLMap |
SQL injection |
apt install sqlmap |
| 12 |
Metasploit |
Exploitation framework |
apt install metasploit-framework |
| 13 |
Hashcat |
Password cracking |
apt install hashcat |
| 14 |
John the Ripper |
Password cracking |
apt install john |
| 15 |
Hydra |
Login brute force |
apt install hydra |
| 16 |
Wireshark |
Network analysis |
apt install wireshark |
| 17 |
Aircrack-ng |
Wi-Fi security |
apt install aircrack-ng |
| 18 |
Burp Suite |
Web proxy |
portswigger.net |
| 19 |
FaceSeek |
Face recognition search |
faceseek.online |
| 20 |
PimEyes |
Face search engine |
pimeyes.com |
| 21 |
Zphisher |
Phishing tool |
git clone .../zphisher |
| 22 |
Storm-Breaker |
Camera/mic SE tool |
git clone .../Storm-Breaker |
| 23 |
Shodan |
IoT search engine |
shodan.io |
| 24 |
Censys |
Internet scanning |
censys.io |
| 25 |
Criminal IP |
Cyber threat intelligence |
criminalip.io |
| 26 |
SpiderFoot |
OSINT automation |
pip install spiderfoot |
| 27 |
Maltego |
Visual link analysis |
Pre-installed in Kali |
| 28 |
Recon-ng |
Recon framework |
pip install recon-ng |
| 29 |
ExifTool |
Image metadata |
apt install libimage-exiftool-perl |
| 30 |
Autopsy |
Digital forensics |
autopsy.com |
| 31 |
Volatility |
Memory forensics |
pip install volatility3 |
| 32 |
Tor Browser |
Anonymous browsing |
torproject.org |
| 33 |
Tails OS |
Anonymous OS |
tails.boum.org |
| 34 |
DeHashed |
Breach search engine |
dehashed.com |
| 35 |
LeakCheck |
Breach search |
leakcheck.net |
| 36 |
CheckLeaked |
Leak search (15B+ accounts) |
checkleaked.cc |
| 37 |
Have I Been Pwned |
Breach checker |
haveibeenpwned.com |
| 38 |
fsociety |
All-in-one hacking |
git clone .../fsociety |
| 39 |
Hackingtool |
100+ tools in one |
git clone .../hackingtool |
| 40 |
Osintgram |
Instagram OSINT |
git clone .../Osintgram |
| 41 |
Social-Searcher |
Social media search |
social-searcher.com |
| 42 |
VirusTotal |
Malware analysis |
virustotal.com |
| 43 |
IPLogger |
IP tracking |
iplogger.org |
| 44 |
Grabify |
IP grabber |
grabify.link |
| 45 |
GetContact |
Phone caller ID |
getcontact.com |
| 46 |
Pentest-Tools |
Online pentesting platform |
pentest-tools.com |
| 47 |
Perplexity AI |
AI research assistant |
perplexity.ai |
| 48 |
CyberChef |
Data analysis swiss knife |
gchq.github.io/CyberChef |
| 49 |
SecLists |
Security wordlists |
git clone .../SecLists |
| 50 |
WHOIS.com |
Domain lookup |
whois.com |
STATISTICS
| Metric |
Count |
| Total Tools Listed |
1100+ |
| GitHub Repositories |
300+ |
| Online Platforms |
250+ |
| CLI Tools |
400+ |
| Browser Extensions |
15+ |
| Kali Built-in Tools |
40+ |
| Termux Compatible |
25+ |
| Leak/Whistleblower Platforms |
35+ |
| Data Breach Search Engines |
25+ |
| OSINT Operating Systems |
17 |
| Hardware Hacking Tools |
13 |
| AI-Powered Tools |
25+ |
| Free AI Tools |
16 |
| Dark Web Search Engines |
17 |
| Telegram Bots & Channels |
25+ |
| Google Dorks Listed |
50+ |
| Credential Dorks |
14 |
| Social Media Platforms |
11 |
| APIs & Developer Tools |
18 |
| Categories Covered |
41 |
LEGAL DISCLAIMER
This guide is provided for educational and authorized security research purposes only. Many tools listed can be used both defensively and offensively.
- Legal uses: Security research, penetration testing with authorization, OSINT for journalism, missing persons investigations, protecting your own accounts, bug bounty programs
- Illegal uses: Unauthorized access, stalking, harassment, credential theft, hacking without permission, DDoS attacks on systems you don't own
Always obtain proper authorization before testing any systems you don't own. Laws vary by jurisdiction -- know your local laws regarding cybersecurity research, data privacy (GDPR, CCPA), and computer fraud (CFAA, Computer Misuse Act).
The authors of this guide are not responsible for any misuse of the tools listed.
Version: 1.1 -- The Ultimate Arsenal Edition
Last Updated: 2025-2026
Star this repo if you found it useful!
Contributions welcome -- submit a pull request or open an issue
Built by the OSINT community. Knowledge is power -- use it responsibly.
7ce118086c