daemon-sec-cheatsheet

The cheatsheet vault for operators: AD, enumeration, exploitation, priv-esc, web, DFIR
git clone https://git.daemon-sec.xyz/daemon-sec-cheatsheet.git
Log | Files | Refs | README | LICENSE

commit 9df0135341fbe2600674557c2526924abfad2d10
parent 9dd7bfbec1b796e29c4ea9a4bf4076296f90ab64
Author: DAEMON <zer0sec.xp@icloud.com>
Date:   Mon, 28 Sep 2026 08:17:58 +0100

OSINT: add all 282 OSINT Newsletter tools and the missing Bellingcat category

The first pass used the OSINT Newsletter only as 22 "see also" links while
every tool table came from Bellingcat alone, which made "sources: both
catalogues" misleading. This closes that.

- scraped all 282 tool pages for real URLs and descriptions. Their tool
  pages hide the URL behind a table cell whose visible link text *is* the
  URL, so the scraper keys on that rather than "first external link",
  which picks up sponsor and author links instead.
- mapped all 31 upstream categories onto the 16 sheets, plus the 20 tools
  that sit on no category page upstream and would otherwise be dropped
  silently. Every one of the 282 is now on a sheet; 266 link to their own
  URL, the rest were already linked via their Bellingcat entry.
- 63 tools appear in both catalogues, so rows are deduped per sheet
  against anything already named there. That also fixed 40 pre-existing
  duplicates where a hand-written table and the generated table each
  listed the same tool.
- added the facial-recognition category, which the first pass skipped
  while still discussing the topic in prose, with the caveats those tools
  need.

Tool rows across the section go from 264 to 590.

Verified: 553 external links checked, 0 unreachable (with the checker
itself re-tested against a known-dead URL, since an earlier version of it
silently passed everything). astro build exit 0, node --test 4/4,
validate-content.py no ISSUES. Fixed one self-referential link the
validator caught mid-pass.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Diffstat:
Msrc/content/sheets/osint/archiving-and-evidence.md | 23+++++++++++++++++++----
Msrc/content/sheets/osint/companies-and-finance.md | 19++++++++++++++++---
Msrc/content/sheets/osint/conflict-and-environment.md | 22++++++++++++++++++----
Msrc/content/sheets/osint/data-analysis-and-visualisation.md | 9+++++++++
Msrc/content/sheets/osint/email-and-phone.md | 21+++++++++++++++++++++
Msrc/content/sheets/osint/geolocation.md | 15+++++++++++----
Msrc/content/sheets/osint/image-video-forensics.md | 47++++++++++++++++++++++++++++++++++++++++++-----
Msrc/content/sheets/osint/maps-and-satellite-imagery.md | 18++++++++++++++++++
Msrc/content/sheets/osint/osint-foundations.md | 34++++++++++++++++++++++++++++++++++
Msrc/content/sheets/osint/people-search.md | 72++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++----
Msrc/content/sheets/osint/reverse-image-search.md | 16++++++++++++----
Msrc/content/sheets/osint/social-media-platforms.md | 45+++++++++++++++++++++++++++++++++++++++++++++
Msrc/content/sheets/osint/transport-tracking.md | 35+++++++++++++++++++++++++----------
Msrc/content/sheets/osint/usernames-and-accounts.md | 19+++++++++++++++++++
Msrc/content/sheets/osint/websites-and-infrastructure.md | 46++++++++++++++++++++++++++++++++++++++++++++++
15 files changed, 403 insertions(+), 38 deletions(-)

diff --git a/src/content/sheets/osint/archiving-and-evidence.md b/src/content/sheets/osint/archiving-and-evidence.md @@ -96,13 +96,9 @@ auto-archiver --config orchestration.yaml | Tool | What it does | Cost | | --- | --- | --- | | [Archive.today](https://archive.today) | Archive any webpage and search for archived pages. | free | -| [Auto Archiver](https://github.com/bellingcat/auto-archiver) | Bellingcat's tool to automatically archive social media posts, videos, and images. Free and Open-Source. | free | | [Bellingcat TikTok Hashtag Analysis](https://github.com/bellingcat/tiktok-hashtag-analysis) | Archive content and metadata from TikTok posts that contain one or more specified hashtags | free | | [Distill](https://distill.io/) | Distill is a website change monitoring tool that allows users to track changes on web pages. | partly free | -| [Hunchly](https://www.hunch.ly/) | An archiving tool that tracks online activities and preserves essential information about the web pages researchers visit. | paid | -| [Lumen](https://lumendatabase.org/) | A research project collecting and publishing legal takedown notices for online content transparency | free | | [Wayback Machine](https://web.archive.org/) | The Wayback Machine is the Internet Archive's free tool for viewing and saving archived web pages, with over a trillion pages captured, widely used for… | free | -| [Web Archives](https://github.com/dessant/web-archives) | A browser extension to view archived and cached versions of a website on multiple archiving sites. | partly free | ## Pitfalls @@ -122,6 +118,25 @@ auto-archiver --config orchestration.yaml - [Data Extraction OSINT](https://tools.osintnewsletter.com/tool-categories/data-extraction-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Archiving OSINT](https://tools.osintnewsletter.com/tool-categories/archiving-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [4plebs](https://4plebs.org/) | A third-party archive and search service for historical 4chan content. | +| [4shared](https://www.4shared.com/) | File-sharing and cloud-storage platform with a public search function. | +| [Anna's Archive](https://annas-archive.gl/) | Shadow library search engine aggregating books, papers, and digital texts. | +| [Archivarix Tube Search](https://tube.archivarix.net/) | A free OSINT tool for discovering historical versions of YouTube videos using archived snapshots from archive data. | +| [Arctic Shift](https://arctic-shift.photon-reddit.com/) | A Reddit search and archival platform that enables investigators to search historical Reddit posts, comments, deleted content… | +| [deaditArchive](https://deaditarchive.netlify.app/) | A searchable archive of selected deleted or purged Reddit communities, preserving posts from communities that are no longer… | +| [Follow That Page](https://www.followthatpage.com/) | A web-monitoring service that tracks specified webpages and sends notifications when changes are detected. | +| [Free Full PDF](https://www.freefullpdf.com/) | Academic search engine focused on locating freely available full-text scientific PDFs, including journal articles, theses… | +| [GetProofAnchor](https://getproofanchor.com/) | A web-based tool that captures and preserves online content as verifiable digital evidence. | +| [Lookyloo](https://lookyloo.circl.lu/capture) | A web forensics tool that captures a webpage and maps every domain, resource, redirect, and third-party connection involved in… | +| [ProofSnap](https://getproofsnap.com/) | A browser extension that captures a live web page from the rendering browser and seals it as a verifiable archive. | +| [SearchShared](https://www.searchshared.info/) | File-sharing search engine for locating publicly indexed/shared files across multiple hosting services. | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/companies-and-finance.md b/src/content/sheets/osint/companies-and-finance.md @@ -102,9 +102,6 @@ EDGAR requires a `User-Agent` identifying you, and will block you if you omit it | [LittleSis](https://littlesis.org/database) | Connects the dots between influential / wealthy individuals in (mostly US) politics and business. | free | | [Lumen](https://lumendatabase.org/) | A research project collecting and publishing legal takedown notices for online content transparency | free | | [North Data](https://northdata.com) | Search for people and companies in EU corporate and trade registers + visualize relationships | partly free | -| [OCCRP Aleph](https://aleph.occrp.org/) | Aleph offers a way to research sanctions lists, corporate registries, leaks, and more | free | -| [Open Ownership](https://www.openownership.org/en/) | Links to beneficial ownership registers. | free | -| [OpenCorporates](https://opencorporates.com/) | Comprehensive repository of company registries around the world | partly free | | [OpenSecrets](https://www.opensecrets.org/) | Data on campaign finance, lobbying, and spending in U.S. politics | free | | [OSINT Tools Map](https://cybdetective.com/osintmap/) | An interactive map serving as a curated archive of country-specific OSINT resources, including business registries, court records, and cadastral maps… | free | | [RuPEP](https://rupep.org/en/) | Online database of politically exposed persons in Russia, Belarus, Kyrgyzstan, Kazakhstan, Georgia and Moldova. | free | @@ -131,6 +128,22 @@ EDGAR requires a `User-Agent` identifying you, and will block you if you omit it - [Blockchain/Cryptocurrency OSINT](https://tools.osintnewsletter.com/tool-categories/blockchain-and-cryptocurrency-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Blockchain/Cryptocurrency OSINT](https://tools.osintnewsletter.com/tool-categories/blockchain-and-cryptocurrency-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [Arkham Intel](https://intel.arkm.com/) | A blockchain intelligence and analytics platform that de-anonymizes cryptocurrency transactions. | +| [Bid Detail](https://www.biddetail.com/) | A procurement intelligence platform that makes government contract and tender data searchable. | +| [Bitbo](https://bitbo.io/) | A Bitcoin data dashboard that tracks price, market, mining and on-chain metrics. | +| [Bitcoin Talk](https://bitcointalk.org/) | A long-running online discussion forum focused on Bitcoin, cryptocurrencies, blockchain technology and related projects. | +| [Bitcoin Whoswho](https://www.bitcoinwhoswho.com/) | Cryptocurrency intelligence tool used to investigate Bitcoin addresses and identify reported scams. | +| [Block Explorer](https://www.blockexplorer.com/) | A blockchain search engine that lets you inspect cryptocurrency transactions, wallet addresses, blocks, and network activity. | +| [Dune](https://dune.com/home) | A blockchain analytics platform that lets you explore and analyse data from cryptocurrencies and decentralised applications. | +| [GuideStar](https://www.guidestar.org/) | A nonprofit intelligence platform that provides detailed information on registered charities and nonprofit organisations… | +| [TheBigBrother](https://github.com/chadi0x/TheBigBrother) | All-in-one OSINT toolkit that helps track usernames across the web, investigate emails and domains, extract metadata, and follow… | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/conflict-and-environment.md b/src/content/sheets/osint/conflict-and-environment.md @@ -87,16 +87,12 @@ Water / flooding: B8A, B11, B4 | [CryO Tools](https://cryo-tools.org/) | Scientific tools for investigating the cryosphere (areas with snow & ice) | free | | [EIA Global Environmental Crime Tracker](https://eia-international.org/global-environmental-crime-tracker/) | Map/tracker of environmental crimes including trade in ivory, rhino, big cats, and other exotic animals. | free | | [Environmental Justice Atlas](https://ejatlas.org/) | Map of environmental-related conflict globally | free | -| [Global Fishing Watch](https://globalfishingwatch.org/map) | A digital platform for investigating fishing activities and vessel movements worldwide by utilising satellite and AIS data. | free | -| [Global Forest Watch](https://www.globalforestwatch.org/map/) | Explore tree cover loss and gain data, recent deforestation and fire alerts, land use designations, carbon emissions, biodiversity metrics and more. | free | | [Global Monitoring System - ECOSOLVE](https://www.ecosolve.eco/dashboard) | Illicit online wildlife markets data from over 30 countries and regions | free | | [Google Flood Hub](https://sites.research.google/floods/) | A visual tool to monitor river levels and forecast floods based on AI models developed by Google Research. | free | -| [LiveUAMap](https://liveuamap.com/) | LiveUAMap is a mapping tool that provides up-to-date information on global geopolitical events, conflicts, and crises. | partly free | | [Locust Hub](https://locust-hub-hqfao.hub.arcgis.com/) | A repository for desert locust data with maps and other resources for tracking movements, early detection and planning locust control interventions. | free | | [Merlin](https://merlin.allaboutbirds.org/) | Identify birds (visually), through an app. | free | | [Movebank](https://www.movebank.org/) | Platform for animal tracking data. | free | | [Nullschool Earth Map](https://earth.nullschool.net/#current) | View current and historic wind, weather, ocean and pollution conditions on an interactive animated map. | partly free | -| [Open Source Munitions Portal](https://osmp.ngo/) | A searchable library of verified images for researchers, journalists, and practitioners trying to learn more about munitions and their use and impact in… | free | | [Police Records Access Project](https://clean.calmatters.org/) | A database providing searchable access to California law enforcement records including police use-of-force incidents, shootings, and misconduct cases. | free | | [Resource Watch](https://resourcewatch.org/) | A free open-data platform that hosts 300+ datasets on different topics relating to the environment and human well-being, including real-time datasets. | free | | [River Runner Global](https://river-runner-global.samlearner.com/) | Calculate which water stream a drop of rain will follow | free | @@ -126,6 +122,24 @@ Water / flooding: B8A, B11, B4 - [Public Media OSINT](https://tools.osintnewsletter.com/tool-categories/public-media-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Conflict OSINT](https://tools.osintnewsletter.com/tool-categories/conflict-osint), [Environment & Wildlife OSINT](https://tools.osintnewsletter.com/tool-categories/environment-and-wildlife-osint), [Public Media OSINT](https://tools.osintnewsletter.com/tool-categories/public-media-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [1stHeadlines](https://mediabiasfactcheck.com/1stheadlines-bias-and-credibility/) | News aggregation and headline-monitoring site that brings together headlines from multiple news organisations in one searchable… | +| [AllYouCanRead](https://www.allyoucanread.com/) | A global directory of newspapers, magazines and news websites covering more than 200 countries. | +| [Bamqam](https://bamqam.com/) | A real-time geopolitical intelligence dashboard that aggregates military activity and conflict data into a map-based interface. | +| [Combat Aircraft](https://www.combataircraft.com/) | Military aviation reference database providing aircraft specifications, operators, imagery, aviation news, and background… | +| [Combined IUU Vessel List](https://iuu-vessels.org/Home/Search) | A free, searchable database that consolidates official Illegal, Unreported and Unregulated (IUU) fishing vessel lists published… | +| [Country Studies](https://countrystudies.us/) | A free online reference library providing detailed country profiles covering history, politics, society, economics, security… | +| [ECO-SOLVE Global Monitoring System](https://www.ecosolve.eco/dashboard) | An OSINT and AI-enabled monitoring platform for identifying and analysing online environmental crime, particularly illegal… | +| [EJAtlas (Environmental Justice Atlas)](https://ejatlas.org/) | A global, collaborative database that documents environmental conflicts and environmental justice struggles. | +| [Europe Media Monitor](https://media-monitor.europa.eu/home) | An automatic system that monitors global news media in near real time, aggregating multilingual news, alerts and trend analysis… | +| [Geoconfirmed](https://geoconfirmed.org/) | A collaborative OSINT platform to help analysts verify and geolocate images, videos, and events from conflicts worldwide. | +| [OSNT.IN](https://www.osnt.in/) | An AI-powered daily intelligence brief on the Russia-Ukraine war, synthesized from 200+ Ukrainian and Russian-language open… | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/data-analysis-and-visualisation.md b/src/content/sheets/osint/data-analysis-and-visualisation.md @@ -136,6 +136,15 @@ chart's axis anywhere but zero. - [Language Translation OSINT](https://tools.osintnewsletter.com/tool-categories/language-translation-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Data Extraction OSINT](https://tools.osintnewsletter.com/tool-categories/data-extraction-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [Simple Scraper](https://simplescraper.io/) | A web scraping tool that allows users to extract data from websites quickly and easily. | +| [Thunderbit](https://thunderbit.com/) | AI-powered web scraper for fast, no-code data extraction. | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/email-and-phone.md b/src/content/sheets/osint/email-and-phone.md @@ -140,6 +140,27 @@ behaviour before you do it on a target who might notice. - [Phone Number OSINT](https://tools.osintnewsletter.com/tool-categories/phone-number-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Email Address OSINT](https://tools.osintnewsletter.com/tool-categories/email-address-osint), [Phone Number OSINT](https://tools.osintnewsletter.com/tool-categories/phone-number-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [Aeroleads](https://aeroleads.com/) | A prospecting and contact discovery platform that helps users find professional email addresses, phone numbers, company… | +| [Analyst Research Tools](https://analystresearchtools.com/) | A browser-based investigative research platform pulling together a collection of free lookup tools to help you gather, organise… | +| [BeenVerified](https://www.beenverified.com/) | People-search and background research platform that aggregates publicly available records into a single interface. | +| [Behind the Email](https://behindtheemail.com) | A browser-based OSINT tool that identifies the online footprint of an email address by checking where it has been used across… | +| [LoLArchiver](https://lolarchiver.com/) | A niche OSINT tool designed to archive and surface user-related data across gaming and online platforms like League of Legends… | +| [OSINT Industries](https://app.osint.industries/) | An all-encompassing OSINT platform that gathers and correlates publicly available digital data such as emails, domains, phone… | +| [Osintly](https://osint.ly/) | A unified OSINT platform that searches for information across pseudonyms, email addresses, phone numbers, IP addresses, domains… | +| [Phone Validator](https://www.phonevalidator.com/index.aspx) | A phone-number validation & lookup service that can identify a number's line type, carrier/service provider & approx. location… | +| [Phunter](https://github.com/N0rz3/Phunter) | Allows you to find various information via a phone number. | +| [Sherlock Eye](https://www.sherlockeye.io/) | AI-powered OSINT assistant that automates investigations, links data, and surfaces insights fast. | +| [SynapsInt](https://synapsint.com/) | A web-based search platform that aggregates publicly available data about people, organisations, domains, IP addresses, email… | +| [Telegram Phone Number Checker](https://github.com/bellingcat/telegram-phone-number-checker?tab=readme-ov-file) | Identify a Telegram user by their phone number. | +| [Zehef](https://github.com/N0rz3/Zehef) | An email-focused OSINT tool that automates account discovery, breach checks, and paste site lookups | +| [Zen](https://github.com/s0md3v/Zen) | Finds email addresses of GitHub users. | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/geolocation.md b/src/content/sheets/osint/geolocation.md @@ -79,6 +79,9 @@ GeoGuessr and is genuinely the best reference for this step. "a church within 200m of a bridge over a river" — which is how you turn a described scene into candidate coordinates. +Further mapping, satellite and street-level tools are listed on +[Maps, Satellite & Street-Level Imagery](/sheets/osint/maps-and-satellite-imagery). + ## Tool reference | Tool | What it does | Cost | @@ -87,11 +90,7 @@ candidate coordinates. | [GeoHints](https://geohints.com/) | GeoHints is a website that provides information about things like traffic lights, utility poles, bollards etc. for different regions of the world to help… | free | | [GeoNames](http://www.geonames.org/) | The GeoNames geographical database covers all countries and contains over eleven million place names that are available for download free of charge… | free | | [Photo-Map.RU](http://photo-map.ru/) | Geotagged VK posts. | free | -| [ShadeMap](https://shademap.app) | ShadeMap is a global simulation of mountain, building & tree shadows for a given date & time. Base data is free, but users can buy 30cm accurate data per… | partly free | -| [Shadow Finder](https://github.com/bellingcat/ShadowFinder) | To analyse shadows in source imagery, Shadow Finder maps all points on the earth where a shadow of given length could occur at a given date & time, IF the… | free | -| [ShadowMap](https://app.shadowmap.org/) | Global map of 3D buildlings and the shadows they cast at a specific time a day | free | | [Spot](https://www.findthatspot.io/) | A natural language interface for querying the OpenStreetMap database to find locations which meet the search criteria described by the user. | free | -| [SunCalc](https://www.suncalc.org/) | Suncalc models the relationship between the date, time of day, the geographic location of a place, and the position of the sun in the sky, together with… | free | ## Pitfalls @@ -110,6 +109,14 @@ candidate coordinates. - [Geolocation and Maps OSINT](https://tools.osintnewsletter.com/tool-categories/geolocation-and-maps-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library (), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [Geolocation Estimation](https://labs.tib.eu/geoestimation/) | A research demonstrator from TIB that uses deep learning to estimate where a photograph was taken based on visual and geographic… | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/image-video-forensics.md b/src/content/sheets/osint/image-video-forensics.md @@ -96,6 +96,26 @@ resizing, text overlay, successive saves. Treat ELA as "look here", never as "th For anything sensitive, prefer the client-side tools. Uploading a source's photo to a public analysis site that retains submissions can expose them. +## Facial recognition + +Searching a face across the web, rather than searching an image. Treat this as a +different category of act from reverse image search: it identifies a person, the error +rate is not zero, and a false match aimed at the wrong human causes real harm. Several +of these are barred or restricted in some jurisdictions, and uploading someone's face +to a commercial service hands that service biometric data about them. + +Use it to *corroborate* an identity you already have reason to suspect, not to generate +one from nothing, and never treat a match as confirmation on its own. + +| Tool | What it does | Cost | +| --- | --- | --- | +| [Amazon Rekognition](https://aws.amazon.com/rekognition/) | Check how similar two faces are | free | +| [Azure AI Video Indexer](https://vi.microsoft.com/en-us) | AI video tool for facial detection and other types of insights. | paid | +| [Face Comparison by ToolPie](https://facecomparison.toolpie.com/) | Compares two human face photos to determine similarity. | free | +| [FaceCheck.ID](https://facecheck.id/) | A facial recognition search engine that tries to find photos of people that look similar to a person of interest. | paid | +| [PimEyes](https://pimeyes.com/en) | An AI-powered facial recognition reverse image search tool. | paid | +| [Search4Faces](https://search4faces.com) | Upload the picture of a face and find pictures of similar looking people on VKontakte, Odnoklassniki, TikTok and Clubhouse. | free | + ## Tool reference | Tool | What it does | Cost | @@ -106,16 +126,11 @@ analysis site that retains submissions can expose them. | [DeepFake-O-Meter](https://zinc.cse.buffalo.edu/ubmdfl/deep-o-meter/) | DeepFake-O-Meter is an online tool designed to detect deepfake media and help users differentiate between genuine and manipulated content. | free | | [ExifPurge](http://www.exifpurge.com/) | EXIF Purge is a small portable application to remove EXIF metadata from multiple images at once. With the click of a button you can remove the camera… | free | | [fdupes](https://github.com/adrianlopezroche/fdupes) | Github - Locating exact matches of duplicate files. | free | -| [Forensically](https://29a.ch/photo-forensics/#forensic-magnifier) | A collection of web-based image forensics tools. Can identify fake or doctored images. | free | -| [FotoForensics](http://fotoforensics.com/) | Image forensics tool. | free | | [Hugin](https://hugin.sourceforge.io/) | Hugin is a free and open-source panorama photo stitching and HDR (High Dynamic Range imaging) merging software that helps users create seamless panoramic… | free | | [InVID](https://weverify.eu/verification-plugin/) | A toolkit that supports the verification of videos and images. | free | | [Irfanview](http://irfanview.com/) | Windows-based software to extract metadata. | free | -| [Jimpl](https://jimpl.com/) | Online EXIF data viewer | free | | [metadata2go](https://www.metadata2go.com/) | Check metadata for both photos and videos online. | free | | [PureRef](https://www.pureref.com/index.php) | Image workspace; lets you arrange images in groups, organize them, etc. | free | -| [Reveal Image Verification Assistant](https://www.rand.org/research/projects/truth-decay/fighting-disinformation/search/items/reveal-image-verification-assistant.html) | Forensic providing eight filters to detect still images alterations. "Web-based image tool. Also available within InVID verification plugin." | free | -| [xIFr](https://addons.mozilla.org/en-US/firefox/addon/xifr/) | A Firefox add-on for extracting EXIF metadata by right-clicking an image. | free | ## Pitfalls @@ -131,6 +146,28 @@ analysis site that retains submissions can expose them. - [Image and Video Analysis OSINT](https://tools.osintnewsletter.com/tool-categories/image-and-video-analysis-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Image and Video Analysis OSINT](https://tools.osintnewsletter.com/tool-categories/image-and-video-analysis-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [Crowd Counter](https://digitaldigging.org/crowdchecker/) | Estimates crowd sizes from images. | +| [Deepware](https://deepware.ai/) | An AI-powered deepfake detection platform that analyses video and audio content for signs of AI-generated or manipulated media. | +| [Filmot](https://www.reddit.com/r/languagelearning/comments/odj2gx/ive_built_a_search_engine_across_youtube_captions/) | A search engine that lets you search through YouTube video subtitles and metadata to find videos that contain specific words or… | +| [Google Lens](https://lens.google/) | Identify objects or locations that are visible in an image. | +| [Hippie OSINT Toolkit](https://osint.hippie.cat/) | An OSINT web toolkit that allows you to reverse search a domain, a TikTok post, an image, or username (and more). | +| [Human or AI](https://humanizeai.com/human-or-ai/) | A game-style OSINT training tool that challenges you to spot the difference between real human profile photos and AI-generated… | +| [Image Whisperer](https://imagewhisperer.org/) | A fast, browser-based media verification tool that helps you detect AI-generated images, analyse visual anomalies, and assess… | +| [ImgOps](https://imgops.com/) | A free image investigation hub that provides quick access to multiple reverse image search engines and image analysis tools from… | +| [MW Metadata](https://mattw.io/youtube-metadata/) | A free web-based OSINT utility that extracts publicly available metadata from YouTube videos. | +| [Oceanir](https://oceanir.ai/) | Helps verify where images and video frames may have been captured when EXIF/GPS data is missing. | +| [OSINT Industries](https://app.osint.industries/) | An all-encompassing OSINT platform that gathers and correlates publicly available digital data such as emails, domains, phone… | +| [Pic Detective](https://picdetective.com/) | Reverse Image Search | +| [Profile Image Intel](https://profileimageintel.com/) | A reverse image search tool helping you find where a profile picture appears online and uncover linked accounts or identities. | +| [Reverse Image Location (GeoSolver)](https://reverseimagelocation.com/) | AI-assisted image geolocation tool that helps estimate where a photo was taken by reasoning from visible scene clues and map… | +| [TinEye](https://tineye.com/) | A reverse image search engine that helps you find where an image appears online, track its origin, and detect edits or reuse. | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/maps-and-satellite-imagery.md b/src/content/sheets/osint/maps-and-satellite-imagery.md @@ -176,6 +176,24 @@ https://server.arcgisonline.com/ArcGIS/rest/services/World_Imagery/MapServer/til - [Geolocation and Maps OSINT](https://tools.osintnewsletter.com/tool-categories/geolocation-and-maps-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Geolocation and Maps OSINT](https://tools.osintnewsletter.com/tool-categories/geolocation-and-maps-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [EarthPoint Convert](https://www.earthpoint.us/Convert.aspx) | A web-based conversion tool for transforming geographic coordinate data between formats. | +| [Geoconfirmed](https://geoconfirmed.org/) | A collaborative OSINT platform to help analysts verify and geolocate images, videos, and events from conflicts worldwide. | +| [GeoSpy](https://geospy.ai/) | An AI-powered geolocation tool that analyses images to estimate where they were taken by examining visual features like… | +| [MoonCalc](https://www.mooncalc.org/) | A free web-based lunar positioning tool that visualises the position, phase and illumination of the moon for any location, date… | +| [MW Geofind](https://mattw.io/youtube-geofind/location) | Finds geotagged YouTube videos on a map. | +| [N2YO Satellite Tracker](https://www.n2yo.com/) | Real-time satellite tracking platform providing orbital data, pass predictions and positional information for thousands of… | +| [Open Infrastructure Map](https://openinframap.org/) | An interactive mapping platform that visualises critical infrastructure worldwide using data primarily sourced from OpenStreetMap. | +| [Picarta](https://picarta.ai/) | AI-powered geolocation tool that finds where a photo was taken using visual analysis. | +| [SPOT](https://www.findthatspot.io/) | AI-powered geolocation tool to help identify where an image was taken by analysing visual elements including landmarks, terrain… | +| [SunCalc](https://www.suncalc.org/) | A free web-based geolocation tool that visualises the position of the sun and shadows for any location, date, and time. | +| [Surveillance under Surveillance](https://sunders.uber.space/) | An interactive map that visualises CCTV and surveillance camera locations worldwide using OpenStreetMap data. | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/osint-foundations.md b/src/content/sheets/osint/osint-foundations.md @@ -101,6 +101,40 @@ Two sources that both trace back to the same original post are one source. - [Bellingcat — Guides & Handbooks](https://bellingcat.gitbook.io/toolkit/resources/guides-and-handbooks) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Foundational OSINT Tools](https://tools.osintnewsletter.com/tool-categories/foundational-osint-tools), [Language Translation OSINT](https://tools.osintnewsletter.com/tool-categories/language-translation-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [100 Search Engines](https://www.100searchengines.com/) | A simple search hub that brings multiple search engines and specialist search services into one place. | +| [2lingual Search](https://www.2lingual.com/) | A specialist search engine that lets investigators search the web in one language and discover results in another. | +| [527 Explorer](https://projects.propublica.org/527-explorer/) | A ProPublica database that lets you track political “527” organisations in the US i.e. groups that raise and spend money to… | +| [Apertium](https://en.wikipedia.org/wiki/Apertium) | An open-source rule-based machine translation platform. | +| [Authentic8 Silo Workspace](https://authentic8.com/) | A secure, cloud-native browser designed for conducting online investigations safely, anonymously, and at scale. | +| [Babylon](https://www.babylon-software.com/dictionary/) | Multilingual dictionary and translation tool. | +| [Copyleaks](https://copyleaks.com/) | AI-powered plagiarism and AI-content detection platform that compares text against web pages, academic sources and proprietary… | +| [Cover Your Tracks](https://coveryourtracks.eff.org/) | A privacy-testing tool from the Electronic Frontier Foundation that checks how identifiable your browser and device are online. | +| [DeepL Translator](https://www.deepl.com/en/translator) | Online translation tool that converts text from one language to another. | +| [DuckDuckGo](https://duckduckgo.com/) | A privacy-focused internet search engine and web browser. | +| [EarthPoint Convert](https://www.earthpoint.us/Convert.aspx) | A web-based conversion tool for transforming geographic coordinate data between formats. | +| [Excite Web Search](https://www.excite.com/) | A general-purpose internet search service to search for publicly available webpages and online information using keywords, names… | +| [Fagan Finder](https://www.faganfinder.com/) | A comprehensive search portal that brings together hundreds of search engines, specialist databases, and online resources in one… | +| [FindTheScam](https://findthescam.net/) | Checks whether a website looks legitimate or risky by reviewing WHOIS age, HTTPS/SSL, DNS, reputation, and scam-warning signals. | +| [Finger Printer](https://gonzosint.github.io/fingerprinter/) | An interactive browser fingerprinting dashboard that generates and displays a range of unique identifiers based on the behaviour… | +| [Forensic OSINT](https://www.forensicosint.com/) | A digital evidence capture and preservation platform to collect, document, and preserve online content. | +| [FreeSubtitles AI](https://subtitles.app/) | AI-powered transcription and subtitle generation tool that converts audio and video files into text and subtitles, with… | +| [GetProofAnchor](https://getproofanchor.com/) | A web-based tool that captures and preserves online content as verifiable digital evidence. | +| [Human or AI](https://humanizeai.com/human-or-ai/) | A game-style OSINT training tool that challenges you to spot the difference between real human profile photos and AI-generated… | +| [Known Agents](https://knownagents.com/) | A directory of AI bots and the associated information it has on each bot. | +| [Maltego](https://www.maltego.com/) | A visual link analysis and OSINT platform to discover, map, & understand relationships between people, organisations, domains… | +| [OpenGraph Intel](https://ogi.khas.app/) | A self-hosted OSINT and link analysis platform that enables investigators to collect, enrich, visualise, and analyse… | +| [OSINTracker](https://www.osintracker.com/) | A browser-based OSINT investigation management platform that helps organise entities, map relationships, visualise connections… | +| [Palette by OSINT Industries](https://app.osint.industries/palette) | A powerful graph visualisation platform with integrated native search for mapping and analysing OSINT data relationships. | +| [SIERRA](https://phantomhelix.com/download) | A local-first desktop investigation workspace for organizing evidence, entities, notes, timelines, and tool output in one case… | +| [Ubikron](https://www.ubikron.com/) | An OSINT investigation workbench that transforms your browser into a structured intelligence collection and analysis platform. | +| [Your social media fingerprint](https://robinlinus.github.io/socialmedia-leak/) | An OSINT awareness tool showing how much personal and behavioural data can be “leaked” from social media activity to understand… | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/people-search.md b/src/content/sheets/osint/people-search.md @@ -77,17 +77,13 @@ treat a password from a breach as authorisation to use it. | Tool | What it does | Cost | | --- | --- | --- | | [192](http://www.192.com/) | Searching for someone's address in the UK, phone number and who they live with according to electoral rolls. | free | -| [DeHashed](https://dehashed.com/) | A platform that maintains a database of compromised credentials and a web domain registration search tool. | paid | -| [DiscordLeaks](https://discordleaks.unicornriot.ninja/) | Search hundreds of thousands of messages leaked from 290+ white-supremacist / nazi discord servers. | free | | [Eniro](https://www.eniro.se/) | Yellow Pages (Swedish Edition) | free | | [Epieos](https://tools.epieos.com/holehe.php) | Checks where an email has been used. Based on Holehe. | paid | | [FastPeopleSearch](http://fastpeoplesearch.com/) | Mostly good for US. | free | | [GetContact](https://www.getcontact.com/en/) | Phonenumber ID app - draws from crowdsourced contactbooks | free | | [Ghunt](https://github.com/mxrch/GHunt) | A command line tool for obtaining information about Google accounts. | free | -| [Have I Been Pwned](https://haveibeenpwned.com/) | Does an email address appear in data breaches? | free | | [Hitta.se](https://www.hitta.se/) | Mapping service for Sweden | free | | [Intelx](http://intelx.io/) | Find user details in data breaches | partly free | -| [Leak-Lookup](https://leak-lookup.com/) | An online tool that allows you to search across public data breaches to surface credentials that may have been compromised. | partly free | | [NigeriaPhonebook](https://nigeriaphonebook.com/) | Look up by name, state, and phone number. Last names are partially censored for free accounts. | free | | [Person Lookup](https://personlookup.co.za/) | find individuals, phonenumbers, and adresses | free | | [Pipl](http://pipl.com/) | Identity information for professionals | paid | @@ -122,6 +118,74 @@ treat a password from a breach as authorisation to use it. - [Breached Data Provider OSINT](https://tools.osintnewsletter.com/tool-categories/breached-data-provider) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([People OSINT](https://tools.osintnewsletter.com/tool-categories/people-osint), [Public Records OSINT](https://tools.osintnewsletter.com/tool-categories/public-records-osint), [Breached Data Provider OSINT](https://tools.osintnewsletter.com/tool-categories/breached-data-provider)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [192.com](https://www.192.com/) | UK-based online directory that helps you find information about people, addresses, businesses, and property records in the UK. | +| [4shared](https://www.4shared.com/) | File-sharing and cloud-storage platform with a public search function. | +| [Aeroleads](https://aeroleads.com/) | A prospecting and contact discovery platform that helps users find professional email addresses, phone numbers, company… | +| [AllPeople](https://allpeople.com/) | A people-search and contact directory tool (US) that aggregates publicly available contact information to help identify… | +| [Analyst Research Tools](https://analystresearchtools.com/) | A browser-based investigative research platform pulling together a collection of free lookup tools to help you gather, organise… | +| [AnyWho](https://www.anywho.com/) | US- focused people-search and directory tool to find publicly available contact information, including names, phone numbers, and… | +| [Australia Public Record](https://www.australiapublicrecord.com/) | Searches Australian public records to uncover people, businesses, properties, court records, and other publicly available… | +| [BeenVerified](https://www.beenverified.com/) | People-search and background research platform that aggregates publicly available records into a single interface. | +| [BIS Data Portal](https://data.bis.org/) | Public platform for exploring, analysing, and downloading international financial and economic statistics. | +| [Business registers in EU countries](https://e-justice.europa.eu/topics/registers-business-insolvency-land/business-registers-eu-countries_en) | An official European Union portal providing access to national business registers across EU Member States. | +| [Buzzglobe](https://buzzglobe.com/) | Social-media search aggregator for discovering publicly indexed profiles, pages, posts and images across multiple platforms. | +| [Congressional Trader](https://congressional-trader.com/) | Search and review public U.S. congressional stock trade disclosures for lawmakers, tickers, states, and recent transactions. | +| [Corp Watch](https://www.corpwatch.org/) | A non-profit investigative research platform that tracks corporate activity, accountability, environmental issues, human rights… | +| [Corporation Wiki](https://www.corporationwiki.com/) | An online corporate intelligence database that aggregates public records on companies, directors, officers, and business… | +| [dilisense](https://dilisense.com/en) | An AML/KYC screening and risk-intelligence platform that consolidates sanctions, PEPs, criminal watchlists, and adverse-media… | +| [District 4 Labs Darkside](https://portal.district4labs.net/search) | An OSINT search platform that aggregates breached data, darknet intelligence, and leaked datasets into one searchable interface. | +| [EDGAR Full Text Search](https://www.sec.gov/edgar/search/#) | Enables search across millions of filings submitted to the U.S. Securities and Exchange Commission (SEC). | +| [EU Sanctions Map](https://www.sanctionsmap.eu/#/main) | An official public resource that provides a user-friendly overview of sanctions regimes adopted by the European Union. | +| [Eyedex](https://www.eyedex.org/) | An open directory search engine that indexes publicly accessible web directories & allows users to search across petabytes of… | +| [Federal Procurement Data System (FPDS)](https://sam.gov/contracting) | Official U.S. government database for federal contract spending. | +| [Footprint IQ](https://footprintiq.app/) | Scans usernames, emails, and phone numbers across 500+ public sources to map a subject's digital footprint and calculate an… | +| [Forebears](https://forebears.io/) | A global surname and genealogy database. | +| [Free Full PDF](https://www.freefullpdf.com/) | Academic search engine focused on locating freely available full-text scientific PDFs, including journal articles, theses… | +| [FreewareWeb FTP Search](https://www.freewareweb.com/copyright.shtml) | A specialised search engine that searches indexed FTP sites for files and directories using filenames, keywords, file types… | +| [Gravatar](https://gravatar.com/site/check) | An avatar service that allows you to determine whether an email address is associated with a publicly available Gravatar profile. | +| [GrayhatWarfare](https://grayhatwarfare.com/) | Search engine for publicly exposed files stored in cloud storage services such as AWS S3, Azure Blob Storage, Google Cloud… | +| [Have I Been Pwned?](https://haveibeenpwned.com/) | Check whether an email address, password, or domain has appeared in known data breaches. | +| [Hippie OSINT Toolkit](https://osint.hippie.cat/) | An OSINT web toolkit that allows you to reverse search a domain, a TikTok post, an image, or username (and more). | +| [Hudson Rock](https://www.hudsonrock.com/) | A cybercrime intelligence platform that lets you search for compromised credentials, infected machines, and exposed corporate… | +| [IDCrawl](https://www.idcrawl.com/) | A free people, username, reverse phone and reverse email search tool. | +| [Import Yeti](https://www.importyeti.com/) | A supply chain intelligence tool that helps users discover who imports products into the United States and which overseas… | +| [Indicia](https://indicia.app) | A Software-as-a-Service (SaaS)) platform for professional investigations, leveraging AI-powered tools to perform digital… | +| [LeakData.io](https://leakdata.io/en) | A breach intelligence platform that checks authorised emails, usernames, phone numbers, and domains against indexed breach data. | +| [Leaker](https://github.com/vflame6/leaker) | A passive reconnaissance CLI tool that aggregates credential leak data from multiple breach databases, supporting searches by… | +| [LeakIX](https://leakix.net/) | Search engine and monitoring platform that indexes exposed services, misconfigurations, and leaked/publicly accessible data from… | +| [Library of Leaks](https://search.libraryofleaks.org/) | A searchable archive of leaked datasets, documents, and exposed information sources. | +| [LittleSis](https://littlesis.org/) | A public-interest database that maps relationships between powerful people and organisations (mostly U.S.) | +| [Lullar](https://com.lullar.com/en/tools) | A free people-search engine that checks a username, email, or name across 170+ social media and online platforms in one query. | +| [Names Directory](https://namesdir.com/) | A web-based name-association search tool to search for first names associated with surnames and surnames associated with first… | +| [NAMINT](https://seintpl.github.io/NAMINT/) | A web app that generates multiple username, email, and naming combinations from a person’s first, middle, and last name. | +| [North Data](https://www.northdata.com/) | A business intelligence platform providing access to company records, corporate structures, financial information and ownership… | +| [Nuwber](https://nuwber.com/) | People-search and data-broker platform used to identify and cross-reference individuals using names, telephone numbers, addresses… | +| [OFAC Sanctions List Search](https://sanctionssearch.ofac.treas.gov/) | The U.S. Office of Foreign Assets Control (OFAC) sanctions database that identifies individuals, companies, vessels and… | +| [OpenCorporates](https://opencorporates.com/) | One of the largest open databases of company information in the world, aggregating official corporate registry data from… | +| [OpenSecrets](https://www.opensecrets.org/) | A non-partisan transparency platform that tracks money in U.S. politics. | +| [OSINT Industries](https://app.osint.industries/) | An all-encompassing OSINT platform that gathers and correlates publicly available digital data such as emails, domains, phone… | +| [OSINT Tools Map](https://cybdetective.com/osintmap/) | An interactive directory of country-specific OSINT resources, including phonebooks, cadastral maps, business registers, court… | +| [Osintly](https://osint.ly/) | A unified OSINT platform that searches for information across pseudonyms, email addresses, phone numbers, IP addresses, domains… | +| [Predicta Search](https://www.predictasearch.com/) | Reverse email, phone number, username or name lookup. | +| [Radaris](https://radaris.com/) | A people-search and information-aggregation service that allows you to search for information associated with individuals… | +| [Sanctions Atlas](https://sanctionsatlas.com/) | A sanctions intelligence platform that brings together global sanctions lists, watchlists and ownership data. | +| [SearchShared](https://www.searchshared.info/) | File-sharing search engine for locating publicly indexed/shared files across multiple hosting services. | +| [Sherlock Eye](https://www.sherlockeye.io/) | AI-powered OSINT assistant that automates investigations, links data, and surfaces insights fast. | +| [SynapsInt](https://synapsint.com/) | A web-based search platform that aggregates publicly available data about people, organisations, domains, IP addresses, email… | +| [That's Them](https://thatsthem.com/) | A free people-search engine (US) to help find individuals through names, phone numbers, emails, and addresses. | +| [The World Bank Open Data Catalog](https://datacatalog.worldbank.org/) | A searchable repository of development-related datasets, providing access to data, metadata, downloadable resources and, for some… | +| [TheBigBrother](https://github.com/chadi0x/TheBigBrother) | All-in-one OSINT toolkit that helps track usernames across the web, investigate emails and domains, extract metadata, and follow… | +| [UN Comtrade Database](https://comtradeplus.un.org/) | United Nations' database of detailed international trade statistics providing official trade data reported by countries and areas. | +| [United States Patent and Trademark Office (USPTO)](https://www.uspto.gov/) | A public database for digging into patents, trademarks, and intellectual property filings. | +| [Wikispooks](https://wikispooks.com/wiki/Main_Page) | An independent, collaboratively edited research wiki focused on people, organisations, events, documents and alleged networks of… | +| [XposedOrNot](https://xposedornot.com/) | Free data breach search engine. | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/reverse-image-search.md b/src/content/sheets/osint/reverse-image-search.md @@ -78,11 +78,7 @@ ffmpeg -i video.mp4 -vf "select='gt(scene,0.2)',scale=320:-1,tile=4x4" -vsync vf | Tool | What it does | Cost | | --- | --- | --- | -| [Google Lens](https://lens.google/) | Google Lens is an image recognition tool that can be used to identify locations or objects in photographs. | free | | [InVID](https://weverify.eu/verification-plugin/) | A toolkit that supports the verification of videos and images. | free | -| [RootAbout](http://rootabout.com/) | Reverse search images on the Internet Archive | free | -| [Search by Image](https://github.com/dessant/search-by-image) | A browser extension to reverse search an image on multiple search engines. | free | -| [TinEye](https://tineye.com/) | TinEye is a search engine that allows the user to search using images (reverse image search). | free | ## Pitfalls @@ -101,6 +97,18 @@ ffmpeg -i video.mp4 -vf "select='gt(scene,0.2)',scale=320:-1,tile=4x4" -vsync vf - [Fact-checking/verification OSINT](https://tools.osintnewsletter.com/tool-categories/fact-checking-verification-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Fact-checking/verification OSINT](https://tools.osintnewsletter.com/tool-categories/fact-checking-verification-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [Fact Check](https://www.factcheck.org/) | A non-partisan fact-checking platform that investigates political claims, public statements and misinformation (US focused). | +| [Google Fact Check Tools](https://toolbox.google.com/factcheck/explorer/search/list:recent;hl=en) | A free Google verification tool that helps users search existing fact-checks from trusted organisations worldwide. | +| [Politifact](https://www.politifact.com/) | An independent fact-checking platform that verifies claims made by politicians, public figures, organisations, and viral online… | +| [Snopes](https://www.snopes.com/) | Fact-checking and investigative journalism platform used to assess the accuracy, origin and context of online claims, rumours… | +| [StopFake Tools](https://www.stopfake.org/ru/glavnaya-2/) | A fact-checking and verification resource focused primarily on identifying and debunking disinformation, misleading claims, and… | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/social-media-platforms.md b/src/content/sheets/osint/social-media-platforms.md @@ -191,6 +191,51 @@ Upload timestamps are in the metadata and are a reliable earliest-possible date - [Social Media OSINT](https://tools.osintnewsletter.com/tool-categories/social-media-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Facebook](https://tools.osintnewsletter.com/tool-categories/social-media-osint/facebook), [Instagram](https://tools.osintnewsletter.com/tool-categories/social-media-osint/instagram), [Twitter/X](https://tools.osintnewsletter.com/tool-categories/social-media-osint/twitter-x), [Telegram](https://tools.osintnewsletter.com/tool-categories/social-media-osint/telegram), [YouTube](https://tools.osintnewsletter.com/tool-categories/social-media-osint/youtube), [Reddit](https://tools.osintnewsletter.com/tool-categories/social-media-osint/reddit), [Bluesky](https://tools.osintnewsletter.com/tool-categories/social-media-osint/bluesky), [Snapchat](https://tools.osintnewsletter.com/tool-categories/social-media-osint/snapchat), [Other/Multiple Platforms](https://tools.osintnewsletter.com/tool-categories/social-media-osint/other-multiple-platforms)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [Analyst Research Tools](https://analystresearchtools.com/) | A browser-based investigative research platform pulling together a collection of free lookup tools to help you gather, organise… | +| [Archivarix Tube Search](https://tube.archivarix.net/) | A free OSINT tool for discovering historical versions of YouTube videos using archived snapshots from archive data. | +| [Arctic Shift](https://arctic-shift.photon-reddit.com/) | A Reddit search and archival platform that enables investigators to search historical Reddit posts, comments, deleted content… | +| [Aware Online: Reddit Search](https://www.aware-online.com/en/osint-tools/reddit-search-tool/) | A free OSINT tool that helps investigators search Reddit more effectively by querying posts, comments, usernames, and discussions… | +| [AzSky](https://azsky.app/) | A Reddit-style interface powered by Bluesky, designed to make exploring decentralised social conversations easier. | +| [BirdHunt](https://birdhunt.huntintel.io/) | Find tweets based on location, helping you uncover what people were saying in a specific place at a specific time. | +| [Bluesky Follow Finder](https://bsky-follow-finder.theo.io/) | Surfaces accounts followed by people a profile follows, but that the profile doesn’t. | +| [BoardReader](https://boardreader.com/) | A specialised search engine for online forums, message boards and discussion communities. | +| [Buzzglobe](https://buzzglobe.com/) | Social-media search aggregator for discovering publicly indexed profiles, pages, posts and images across multiple platforms. | +| [de-digger](https://www.dedigger.com/#gsc.tab=0) | A specialist search and discovery engine for finding publicly accessible files on Google Drive. | +| [Deaddrop](https://deaddrop.theosintconsultants.com/login) | Telegram search engine. | +| [Discord Leaks](https://discordleaks.unicornriot.ninja/) | A searchable archive of leaked Discord server, RocketChat and Skype messages, mainly from extremist and politically active… | +| [Dolphin Radar](https://www.dolphinradar.com/) | All-in-one Instagram Tracker & Analyser | +| [Dumpor](https://dumpor.io/) | Instagram viewer and profile analysis tool that enables anonymous viewing of public Instagram content without logging in. | +| [Export Comments](https://exportcomments.com/) | Extracts, downloads, and analyses comments from social media platforms and video-sharing sites. | +| [ExportGram](https://exportgram.net/) | A web tool that lets you extract and download comments from Instagram posts and reels into spreadsheet formats. | +| [Filmot](https://www.reddit.com/r/languagelearning/comments/odj2gx/ive_built_a_search_engine_across_youtube_captions/) | A search engine that lets you search through YouTube video subtitles and metadata to find videos that contain specific words or… | +| [Govsky](https://www.govsky.org/) | Allows users to explore and identify official government and public sector accounts on the Bluesky social media platform. | +| [Graph Tips](https://graph.tips/) | Generates Facebook search queries that recreate much of the functionality of the former Facebook Graph Search. | +| [Hippie OSINT Toolkit](https://osint.hippie.cat/) | An OSINT web toolkit that allows you to reverse search a domain, a TikTok post, an image, or username (and more). | +| [Inflact Instagram Profile Viewer](https://inflact.com/instagram-viewer/profile/) | A no-login Instagram viewer that lets you peek at public profiles, posts, and basic engagement data anonymously. | +| [Instagram Map](https://www.youtube.com/watch?v=R_oOdBTBkGg) | Allows users within Instagram to view geotagged posts, Stories, and shared live locations (where enabled) on a map inside the… | +| [Internect.info](https://internect.info/) | A search interface for the AT Protocol allowing users to locate and query Bluesky handles and associated account information… | +| [Nitter](https://nitter.net/) | A privacy-focused alternative front-end for X (Twitter) that lets you view tweets without tracking, ads, or needing an account. | +| [Sotwe](https://www.sotwe.com/) | Tracks Twitter trends and finds the most popular Twitter users, hashtags and places. | +| [Sowsearch](https://www.sowsearch.info/) | A specialist Facebook tool to search posts, profiles, comments, places, events, groups, and public content more efficiently using… | +| [Story Saver (Instagram)](https://www.storysaver.net/en/) | Download public Instagram Stories, highlights and videos. | +| [Subreddit Stats](https://subredditstats.com/) | A free Reddit analytics tool used to track subreddit growth, activity levels, top posts/users, keyword trends, and community… | +| [Subreddits.org](https://subreddits.org/) | An online directory and search tool that helps users find and explore Reddit communities (subreddits) by keyword, topic, or… | +| [Telegago (Telegram)](https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg#gsc.tab=0) | A custom Google search engine to help users search publicly available content on Telegram channels & groups. | +| [Telegram Spoiler Decoder](https://spoiler.soxoj.com/) | Instantly recovers hidden spoiler text on MacOS within a Telegram chat. | +| [ToolsCord](https://toolscord.com/) | A free, browser-based toolkit focused on Discord utilities. | +| [Treeverse](https://treeverse.app/) | Visualise and explore conversations on Bluesky as interactive threads and networks. | +| [TweeterID](https://tweeterid.com/) | A simple X/Twitter username and ID conversion tool. | +| [Twitter Viewer](https://twitterwebviewer.com/) | An online tool that lets you browse Twitter profiles, tweets, and media, and download videos without logging in. | +| [Waybien](https://waybien.com/en) | A search engine for Telegram, Facebook, Discord, and Whatsapp groups. | +| [Who Posted What? Facebook Tool](https://whopostedwhat.com/) | A non-public Facebook keyword search tool that allows you to search keywords on specific dates. | +| [YouTube Video Finder](https://findyoutubevideo.thetechrobo.ca/) | Investigates a YouTube video using its URL or ID, with quick links to archives and analysis tools. | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/transport-tracking.md b/src/content/sheets/osint/transport-tracking.md @@ -93,24 +93,14 @@ finding, not a data problem. | Tool | What it does | Cost | | --- | --- | --- | -| [ADS-B Exchange](https://globe.adsbexchange.com/) | Live flight tracker (including many military aircraft). Live data available for the past month. Historical data available for purchase upon request. | partly free | -| [Airframes](http://www.airframes.org/) | A database of aircraft details | free | | [Aviation Safety Network](https://aviation-safety.net/) | Aircraft incident database; can be searched by country, registration, year, etc. | free | | [Chronotrains](https://www.chronotrains.com/en) | Chronotrains is a free interactive map designed to explore the reach of Europe’s extensive rail network. Enter a starting point and travel time to see… | free | -| [Equasis](https://www.equasis.org/) | Equasis provides vessel ownership and safety records, as well as shipping company fleet information. | free | | [Federal Aviation Administration](https://registry.faa.gov/AircraftInquiry/Search/NNumberInquiry) | Nationwide Plane Registry. Search by N-Number (a.k.a. callsign). Comprehensive list of privately owned planes in the US. | free | | [FlightAware](https://www.flightaware.com/live/) | FlightAware is a global flight-tracking platform that provides real-time data on aircraft movements. It offers live tracking, historical data, and… | partly free | -| [Flightradar24](https://www.flightradar24.com&#x20) | Flightradar24, a real-time flight tracking service, that provides comprehensive information about aircraft positions, flight numbers, routes, historical… | partly free | -| [Global Fishing Watch](https://globalfishingwatch.org/map) | A digital platform for investigating fishing activities and vessel movements worldwide by utilising satellite and AIS data. | free | -| [GPSJam](https://gpsjam.org/) | GPSJam.org is a daily map that visualizes the GPS/GNSS disruptions on aircraft worldwide. It collects and presents 24-hour data showing areas experiencing… | free | | [Illegal, unreported, unregular fishing Vessels List](https://iuu-vessels.org/Home/Search) | A combined list of known illegal, unreported, unregular fishing vessels | free | -| [IMO Registry](http://webaccounts.imo.org/) | Ship/shipping-related information from the IMO | free | -| [Live ATC](http://liveatc.net/) | Audio from air traffic control towers in the United States. Aircraft have to identify themselves to ATC towers, so in cases where aircraft are trying to… | free | -| [MarineTraffic](https://www.marinetraffic.com/en/ais/home/centerx:25.0/centery:-34.5/zoom:8) | An open, community-based project, providing (near) real-time information on the movements of ships and their locations in harbours and ports. | partly free | | [OpenRailwayMap](https://wiki.openstreetmap.org/wiki/OpenRailwayMap) | a detailed online map of the world's railway infrastructure | free | | [OpenSky-Network](http://opensky-network.org/) | Community, open source flight tracking network. | free | | [ShipFinder](https://shipfinder.co/) | ShipFinder is an application designed to track vessels in near real-time across the globe, available on iPhone and Android platforms (but no longer PC) | partly free | -| [VesselFinder](https://www.vesselfinder.com/) | Live marine vessel tracker | partly free | | License Plate Maps | Collection of tools and maps for discerning license plates by country | free | ## Pitfalls @@ -127,6 +117,31 @@ finding, not a data problem. - [Transport OSINT](https://tools.osintnewsletter.com/tool-categories/transport-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Transport OSINT](https://tools.osintnewsletter.com/tool-categories/transport-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [Air Cargo Tracking & News](https://www.utopiax.org/#google_vignette) | A free logistics portal that aggregates air cargo tracking, container tracking, parcel tracking, sailing schedules, logistics… | +| [autoDNA](https://www.autodna.com/) | A vehicle history checking platform that uses a vehicle's VIN (Vehicle Identification Number) to uncover information about its… | +| [Car Detective](https://www.cardetective.com/) | A vehicle intelligence platform providing access to vehicle history, registration information, and provenance data. | +| [CITES Trade Database](https://trade.cites.org/) | An official database of international trade in species protected under the Convention on International Trade in Endangered… | +| [Combat Aircraft](https://www.combataircraft.com/) | Military aviation reference database providing aircraft specifications, operators, imagery, aviation news, and background… | +| [Container Tracking](http://container-tracking.org/) | A web-based tool for tracking shipping containers using container numbers, providing information on vessel movements, shipment… | +| [Global ADS-B Exchange](https://globe.adsbexchange.com/) | Track aircraft movements worldwide in near real time using crowdsourced ADS-B signals. | +| [Global Suppliers Online](https://www.globalsuppliersonline.com/) | A business directory that connects buyers with manufacturers, exporters, wholesalers and suppliers worldwide. | +| [Import Yeti](https://www.importyeti.com/) | A supply chain intelligence tool that helps users discover who imports products into the United States and which overseas… | +| [Live Train Tracker](https://mobility.portal.geops.io/world.geops.transit) | Interactive global public-transport map showing scheduled and, where available, real-time positions of trains and other… | +| [LiveATC](https://www.liveatc.net/) | A live air traffic communications platform that streams air traffic control (ATC) radio transmissions from airports around the… | +| [Maersk Tracking](https://www.maersk.com/tracking/#tracking) | A global cargo tracking platform providing visibility of Maersk ocean and air shipments, including container movements, shipment… | +| [Maritime Database](https://maritime-database.com/) | Global maritime reference and vessel-tracking database providing vessel, port, and maritime-company information. | +| [Open Infrastructure Map](https://openinframap.org/) | An interactive mapping platform that visualises critical infrastructure worldwide using data primarily sourced from OpenStreetMap. | +| [OSINT Tools Map](https://cybdetective.com/osintmap/) | An interactive directory of country-specific OSINT resources, including phonebooks, cadastral maps, business registers, court… | +| [Track-Trace](https://www.track-trace.com/) | An online tracking and lookup service that helps users trace parcels and shipments using tracking numbers. | +| [Vehicle AI](https://vehicle-ai.net/) | AI-powered tool for identifying, analysing, and enriching vehicle-related data. | +| [VIN Decoder from NHTSA](https://vpic.nhtsa.dot.gov/decoder/) | Official U.S. government tool that breaks down a vehicle’s VIN to reveal key details like manufacturer, model, engine type, and… | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/usernames-and-accounts.md b/src/content/sheets/osint/usernames-and-accounts.md @@ -145,6 +145,25 @@ you conclude a name is absent from a registry when it is simply spelled differen - [People OSINT](https://tools.osintnewsletter.com/tool-categories/people-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Username OSINT](https://tools.osintnewsletter.com/tool-categories/username-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [Analyst Research Tools](https://analystresearchtools.com/) | A browser-based investigative research platform pulling together a collection of free lookup tools to help you gather, organise… | +| [DeepFind.Me Username Search](https://deepfind.me/tools/social-media/username-search) | Username search tool that scans multiple online platforms to identify where a specific username appears across social media… | +| [Hippie OSINT Toolkit](https://osint.hippie.cat/) | An OSINT web toolkit that allows you to reverse search a domain, a TikTok post, an image, or username (and more). | +| [LoLArchiver](https://lolarchiver.com/) | A niche OSINT tool designed to archive and surface user-related data across gaming and online platforms like League of Legends… | +| [NAMINT](https://seintpl.github.io/NAMINT/) | A web app that generates multiple username, email, and naming combinations from a person’s first, middle, and last name. | +| [OSINT Industries](https://app.osint.industries/) | An all-encompassing OSINT platform that gathers and correlates publicly available digital data such as emails, domains, phone… | +| [Osintly](https://osint.ly/) | A unified OSINT platform that searches for information across pseudonyms, email addresses, phone numbers, IP addresses, domains… | +| [PSNProfiles](https://psnprofiles.com/) | A PlayStation trophy tracking and player statistics platform that allows users to view public PlayStation Network profiles… | +| [Revealer.US username lookup](https://revealer.us/) | An exposure-intelligence and OSINT tool that lets you search for information connected to an email address, username, or phone… | +| [Sherlock Eye](https://www.sherlockeye.io/) | AI-powered OSINT assistant that automates investigations, links data, and surfaces insights fast. | +| [TheBigBrother](https://github.com/chadi0x/TheBigBrother) | All-in-one OSINT toolkit that helps track usernames across the web, investigate emails and domains, extract metadata, and follow… | +| [Threat Actor Username Search](https://threatactorusernames.com/) | A simple OSINT tool that checks whether a username has been observed on known cybercriminal forums and underground platforms. | + ## Sources Both catalogues below are maintained by other people and are considerably larger than diff --git a/src/content/sheets/osint/websites-and-infrastructure.md b/src/content/sheets/osint/websites-and-infrastructure.md @@ -163,6 +163,52 @@ curl -s 'http://web.archive.org/cdx/search/cdx?url=example.com&output=json&limit - [Cyberthreat Intelligence OSINT](https://tools.osintnewsletter.com/tool-categories/cyberthreat-intelligence-osint) +## More tools + +Further tools for this area from the OSINT Newsletter Tools Library ([Domain Name OSINT](https://tools.osintnewsletter.com/tool-categories/domain-name-osint), [Network Infrastructure OSINT](https://tools.osintnewsletter.com/tool-categories/network-infrastructure-osint), [Cyberthreat Intelligence OSINT](https://tools.osintnewsletter.com/tool-categories/cyberthreat-intelligence-osint)), excluding those already listed above. + +| Tool | What it does | +| --- | --- | +| [Analyst Research Tools](https://analystresearchtools.com/) | A browser-based investigative research platform pulling together a collection of free lookup tools to help you gather, organise… | +| [ARIN](https://www.arin.net/) | A non-profit, regional internet registry that provides public access to IP address, Autonomous System Number (ASN), and network… | +| [Blacklist Alert](https://blacklistalert.org/) | Webtool that checks whether an IP address or domain appears on public DNS-based blacklists (DNSBLs). | +| [BotScout](https://botscout.com/search.htm) | A bot-signature lookup service that checks names, email addresses & IP addresses against a database of previously identified bot… | +| [Censys](https://censys.com/) | An internet scanning and reconnaissance platform that continuously indexes exposed devices, services, and infrastructure across… | +| [Central Ops](https://centralops.net/co/) | A free internet reconnaissance and domain investigation platform that brings together multiple lookup tools in one place. | +| [Dark Reading](https://www.darkreading.com/) | A cybersecurity news and intelligence platform providing news, analysis, research, and expert insights on cyber threats… | +| [DNS Dumpster](https://dnsdumpster.com/) | A free domain research tool that can discover hosts related to a domain. | +| [Domain Digger](https://digger.tools/) | A fast, browser-based OSINT tool for uncovering infrastructure linked to a domain. | +| [Domain Dossier](https://centralops.net/co/DomainDossier.aspx) | Investigate domain names, IP addresses, and DNS records to understand how a website is set up and who may be behind it. | +| [Dorky](https://dork.bugbountyhunting.com/) | A focused Google dorking and search query builder designed to help quickly generate advanced search queries for uncovering… | +| [Favicon Hash Generator](https://favicon-hash.kmsec.uk/) | A lightweight tool for generating a Shodan-compatible favicon hash from a website favicon or local favicon file. | +| [File Phish](https://greylensresearch.github.io/filephish/) | A query builder that allows you to discover exposed documents, sensitive files, and hidden data across the web in seconds. | +| [FindTheScam](https://findthescam.net/) | Checks whether a website looks legitimate or risky by reviewing WHOIS age, HTTPS/SSL, DNS, reputation, and scam-warning signals. | +| [FOFA](https://en.fofa.info/) | A cyberspace search engine for the internet of things that lets you discover exposed systems, servers, and network services… | +| [Have I Been Squatted?](https://haveibeensquatted.com/) | Checks whether a domain has been registered as a typo-squatted or lookalike site. | +| [Hippie OSINT Toolkit](https://osint.hippie.cat/) | An OSINT web toolkit that allows you to reverse search a domain, a TikTok post, an image, or username (and more). | +| [Host.io](https://host.io/) | A domain intelligence and infrastructure discovery tool to uncover relationships between websites, IP addresses, hosting… | +| [Hudson Rock](https://www.hudsonrock.com/) | A cybercrime intelligence platform that lets you search for compromised credentials, infected machines, and exposed corporate… | +| [IBM X-Force Exchange](https://exchange.xforce.ibmcloud.com/) | Threat intelligence platform providing indicators of compromise (IOCs), malware analysis, IP and domain reputation, vulnerability… | +| [IntelligenceX](https://intelx.io/) | An OSINT search engine that indexes breached data, leaks, and historical internet records to help uncover hidden links and… | +| [IPinfo](https://ipinfo.io/) | A fast, reliable tool for looking up IP addresses and getting key details like location, ISP, and network ownership. | +| [JSON Crack](https://jsoncrack.com/) | Visualise JSON data as interactive graphs to quickly understand structure and relationships. | +| [Lookyloo](https://lookyloo.circl.lu/capture) | A web forensics tool that captures a webpage and maps every domain, resource, redirect, and third-party connection involved in… | +| [Malpedia](https://malpedia.caad.fkie.fraunhofer.de/) | A curated malware intelligence platform used to identify malware families, research samples, actors and related technical… | +| [Meawfy](https://meawfy.com/) | A web-based OSINT crawler that searches and indexes publicly accessible files hosted on MEGA.nz using automated discovery… | +| [Netlas](https://netlas.io/) | Internet intelligence and attack surface discovery platform to search and analyse publicly exposed infrastructure, domains… | +| [OSINT Industries](https://app.osint.industries/) | An all-encompassing OSINT platform that gathers and correlates publicly available digital data such as emails, domains, phone… | +| [PhishTank](https://www.phishtank.com/) | A community-driven database of verified phishing websites, helping you check URLs and track phishing campaigns. | +| [Pulsedive](https://pulsedive.com/) | A threat-intelligence and indicator-enrichment platform that allows users to investigate domains, IP addresses, and URL. | +| [ScamDB](https://www.scamdb.net/) | Community-driven scam intelligence platform used to search and report suspicious websites, phone numbers, email addresses &… | +| [ScanMalware](https://scanmalware.com/) | An online URL and website security-analysis platform for investigating potentially malicious or suspicious websites. | +| [SynapsInt](https://synapsint.com/) | A web-based search platform that aggregates publicly available data about people, organisations, domains, IP addresses, email… | +| [Threat Actor Username Search](https://threatactorusernames.com/) | A simple OSINT tool that checks whether a username has been observed on known cybercriminal forums and underground platforms. | +| [Tiny Scan](https://www.tiny-scan.com/) | Scans a website, pulling valuable information including SSL certificates, records, web technologies and HTTP headers in an… | +| [VirusTotal](https://www.virustotal.com/gui/home/upload) | An online threat intelligence platform that aggregates over 70 antivirus scanners and blocklisting services to analyse suspicious… | +| [WHOIS API](https://whois.whoisxmlapi.com/) | A domain registration tool showing who owns a domain, when it was created, and how it’s configured. | +| [Whoisology](https://whoisology.com/) | WHOIS intelligence platform that provides historical domain ownership records, reverse WHOIS searches and domain registration… | +| [XResolver](https://xresolver.com/) | A gamer-tag and IP intelligence lookup tool linking Xbox and PlayStation usernames to IP addresses collected from public and… | + ## Sources Both catalogues below are maintained by other people and are considerably larger than