Resources & Links

Tools

Devices Investigation

  1. Shodan - A search engine for finding specific types of devices connected to the internet, such as webcams, servers, routers, etc.

  2. Censys - A search engine that allows you to discover devices and hosts on the internet.

Social Media Analysis

  1. Twitter Advanced Search - Search Twitter for specific keywords, users, and locations to find relevant tweets.

  2. Facebook Graph Search - Allows you to search public Facebook content based on various parameters.

  3. Toutatis - CLI tool that finds details about any instagram account including phone numbers and email.

  4. LinkedIn - Use LinkedIn’s advanced search to find professionals and companies.

Domain and Website Analysis

  1. Wayback Machine - View historical snapshots of websites, useful for tracking changes over time.

  2. DNS Dumpster - Discover all the DNS records associated with a domain.

  3. Wappalyzer - Detect the technology stack and software used by websites.

  4. crt.sh - Check Certificates of websites

  5. LinkFinder - Python Script that finds all the links present in a webpage

  6. ffuf - Web Fuzzing tool Written in go

Email and Username Investigation

  1. Hunter - Find email addresses associated with a domain or perform email verification.

  2. Have I Been Pwned - Check if an email address or username has been compromised in data breaches.

  3. intelx.io - Check actual breached data from various dumps.

IP Address Analysis

  1. IPinfo - Retrieve detailed information about IP addresses, including geolocation data.

  2. Whois Lookup - Obtain domain registration information and IP addresses associated with a website.

  3. nmap - Network Mapping tool and port scanner
  4. fping - Tool using ICMP protocol that can identify live hosts in a network very fast.
  5. goscanner - Fast port scanner written using go for Linux and Windows.

Miscellaneous

  1. Sn0int - An OSINT framework that automates data collection and analysis.

  2. Google Dorks for Bug Bounty - List of Google dorks.

  3. Synapsint - Curated all-in-one OSINT tool.

  4. OSINT industries - Comprehensive OSINT tool for people lookup