Open Source Intelligence (OSINT) is the collection and analysis of data gathered from open sources to produce actionable intelligence. This carefully edited OSINT list won't be an endless list of links, but priority will be given to highly effective content (quality over quantity) and only services that can be used for free.
Warning
While OSINT itself is not illegal, it is crucial to understand that the legality of specific OSINT activities heavily depends on how the information is obtained and used. You assume full and sole responsibility for all consequences of your actions. This includes, but is not limited to, any direct, indirect, incidental, or consequential damages.
- ⚙️ Executable Program
- 🌐 Website Tool
- 💉 Exploitable Dork/Page/API
- 📜 Userscript
- 🤖 AI Powered
- 📚️ Wiki/List Resource
- ⚙️ maigret (🌐 osint.rocks) ~ username reverse lookup
maigret 'username' --html- ⚙️ WhatsMyName (🌐 whatsmyname.app) ~ username scraper
python whatsmyname.py -u 'username'- 🌐 user-searcher.com ~ username reverse lookup
- 🌐 metricsparrow.com ~ email permutator
- 🌐 seintpl.github.io/NAMINT ~ email checker
- 💉 Email Finder by Domain Dork (top 100 email providers) ~ email searcher
"<NAME>" "<SURNAME>" (intext:"@gmail.com" | intext:"@yahoo.com" | intext:"@hotmail.com" | intext:"@outlook.com"| intext:"@icloud.com")- 🌐 emailhippo.com ~ email checker
- 🌐 minervaosint.com ~ email reverse lookup
- ⚙️ holehe (🌐 osint.rocks) ~ email reverse lookup
holehe '[email protected]'- ⚙️ ghunt (🌐 osint.rocks, 🌐 gmail-osint) ~ gmail parser
- 🌐 epieos.com ~ email reverse lookup
- 🌐 castrickclues.com ~ email reverse lookup
- 🌐 smsc.ru ~ phone lookup
- ⚙️ phoneinfoga ~ phone lookup
phoneinfoga scan -n '<XX> <NUMBER>'- ⚙️ ignorant (🌐 osint.rocks) ~ phone reverse lookup
ignorant '<NUMBER>' --only-used- 🌐 pimeyes.com (📜 unblur) ~ reverse face search 🤖
- 🌐 huggingface.co/FaceOnLive ~ reverse face search 🤖
- 🌐 facecheck.id ~ reverse face search 🤖
- 🌐 tattoodo.com ~ tattoo location lookup
- 🌐 images.google.com (🌐 yandex.com) ~ reverse image search
- 🌐 lenso.ai (📜 unblur) ~ reverse image search 🤖
- 🌐 exifinfo.org ~ exif lookup
- 🌐 29a.ch ~ image forensic
- 🌐 cse.google.com ~ multi-social search
- 💉 Multisocial Search Dork ~ multi-social search
"<NAME>" "<SURNAME>" "<CITY>" (site:facebook.com | site:x.com | site:instagram.com | site:tiktok.com)- 💉 Instagram Place Search ~ IG place finder
inurl:"<PLACE>" site:instagram.com
https://www.instagram.com/explore/search/keyword/?q=<PLACE>- ⚙️ instaloader ~ IG backup
- 📜 Instagram Followers/Following Scraper ~ IG followe/rs
- 📜 Instagram Post Date and Location ~ IG geotag+date ui
- ⚙️ instagram-location-search ~ IG location scraper
instagram-location-search --cookies "<ig-cookie>" --lat "<lat>" --lng "<lng>" --json locs.json --map map.html- 📜 Instagram Threads Checker ~ IG threads matcher
- 🌐 sowsearch.info ~ FB searcher
- 💉 Facebook Search Dorks ~ FB info finder
"<NAME>" "<SURNAME>" ("lives in <PLACE>" | "from <PLACE>") site:facebook.com
"<NAME>" "<SURNAME>" ("studied at <SCHOOL>" | "went to <SCHOOL>") site:facebook.com
"<NAME>" "<SURNAME>" ("worked at <COMPANY>" | "works at <COMPANY>") site:facebook.com- 🌐 facebook.com/ads/library ~ FB/IG ads library
- 🌐 cse.google.com ~ FB published images by keyword
- 📜 Facebook Profile ID Extractor ~ FB id finder
https://www.facebook.com/profile.php?id=<PROFILEID>- 🌐 onlysearch.co ~ OF searcher
- 🌐 mattw.io/youtube-metadata ~ YT metadata parser
- 🌐 findyoutubevideo.thetechrobo.ca ~ YT private/removed parser
- 🌐 ytcomment.kmcat.uk ~ YT comments search
- 🌐 filmot.com ~ YT global subtitles search
- 🌐 twitch-tools.rootonline.de ~ TW followers/ing viewer
- 🌐 r00m101.com ~ Reddit profile analyzer
- 🌐 badoo-archive-collection ~ Badoo wayback db
- 🌐 strava.com/maps ~ Stava global heatmap
- 🌐 vedbex.com ~ SKYPE mail/phone/ip
- 🌐 discordlookup.com ~ DISCORD lookup
- 🌐 hugonun.github.io ~ DISCORD creation time
- 🌐 discord.com (🌐 discord.me, 🌐 disboard.org ) ~ DISCORD server search
- 🌐 intelx.io ~ TG search
- 🌐 tgfind.org ~ TG channel search
- 🌐 telegram-archive-collection ~ TG wayback db
- ⚙️ telegram-phone-number-checker ~ TG lookup
python telegram_phone_number_checker/main.py --phone-numbers '<NUMBER>' --download-profile-photos- ⚙️ telepathy ~ TG groups/channels lookup
telepathy -t '<NIKNAME>' -c- 🌐 @creationdatebot ~ TG registration lookup
- 🌐 @SangMata_beta_bot ~ TG nik lookup
- 🌐 xresolver.com ~ XBOX/PSN/GTA resolver
- 🌐 psnprofiles.com ~ PSN parser
- 🌐 xboxgamertag.com ~ XBOX parser
- 🌐 epic-lookup.com ~ EPICGAMES parser
- 🌐 geospy.net (🌐 whereisthisphoto.com, 🌐 picarta.ai) ~ place finder 🤖
- 🌐 overpass-ultra.trailsta.sh ~ map advanced scripting
- 💉 Gmaps Tracker by Gaia ID ~ gmap tracker
https://www.google.com/maps/contrib/<GAIA-ID>- ⚙️ Weather2Geo ~ reverse city finder by weather
python main.py --time "2025-05-22 14:00" --condition "Mostly cloudy" --temp 18 --tolerance 1.0- 🌐 colab.research.google.com ~ place finder by sun shadow
- 🌐 pleper.com ~ gmaps spots info
- 🌐 cse.google.com (🌐 cybdetective.com/webcamcse) ~ webcam finder
- 🌐 wigle.net ~ wifi wardriving map
- 🌐 firms.modaps.eosdis.nasa.gov ~ nasa fire map
- 🌐 plonkit.net ~ geoguesser wiki
- 🌐 geotips.net ~ geoguesser wiki
- 🌐 geohints.com ~ geoguesser objects wiki
- 🌐 cipher387.github.io ~ car plate info
- 🌐 flightmapper.net ~ flight tracking map
- 🌐 globe.airplanes.live ~ live ship map
- 🌐 marinetraffic.com ~ live airplane map
- 🌐 aerobasegroup.com ~ flight number lookup
- 🌐 intelx.io ~ multi-engine search
- 💉 Localized Google Search (ISO 3166-1 alpha-2 Table) ~ search by country switching
https://www.google.com/search?q=<ANY>+<DORK>+<OR>+<CUSTOM>+<SEARCH>&cr=country<ALPHA-2-COUNTRY-CODE>- 💉 Docs Search Dork ~ general info gathering
"<NAME>" "<SURNAME>" "<CITY>" (filetype:pdf | filetype:doc | filetype:docx | filetype:odt | filetype:ods | filetype:odp | filetype:xls | filetype:xlsx | filetype:csv | filetype:txt | filetype:rtf | filetype:xml | filetype:ppt | filetype:pptx | filetype:key | filetype:zip | filetype:rar | filetype:7z | filetype:gz | filetype:log | filetype:json | filetype:audit | filetype:trace | filetype:debug | filetype:out | filetype:err)- 🌐 cybdetective.com/pastebin ~ pastebin search
- 🌐 cybdetective.com/codesearch ~ repos search
- ⚙️ Hidden Metadata In Local Repos ~ repos email/nikname finder
git log --pretty=format:"[AUTHOR-EMAIL:%ae | AUTHOR-NIK:%an ][ COMMITTER-EMAIL:%ce | COMMITTER-NIK:%cn ][ DATE:%aD ]"- ⚙️ trufflehog ~ repo secret finder
trufflehog git "https://github.com/<USER>/<REPO>"- 💉 Github User Info ~ github user lookup
https://api.github.com/users/<NIKNAME>- 🌐 ispyconnect.com ~ ipcam passwords
- 🌐 cybdetective.com/osintmap ~ world institutions directory
- 🌐 osintguru.azurewebsites.net ~ world institutions directory
- 🌐 ean-search.org ~ multi-barcode lookup
- 🌐 companyresearcher.exa.ai ~ general company info
- 🌐 skymem.info ~ company emails
- 🌐 lei.info ~ legal company identifier
- 🌐 opencorporates.com ~ open corporate database
- 💉 Company Employee Dork ~ linkedin company users
site:linkedin.com inurl:in “<COMPANY>”- 🌐 sitereport.netcraft.com ~ website general info
- 🌐 centralops.net ~ instant whois
- 🌐 whoxy.com/archive ~ whois DB history+email/name
- 🌐 whois.easycounter.com ~ whois DB history
- 📜 Reverse Whoxy Domain Status ~ whois website checker
- 🌐 dnsdumpster.com ~ reverse website location
- 🌐 viewdns.info/iphistory ~ ip hosting history
- 🌐 viewdns.info/reversens ~ websites associated to dns
- 🌐 viewdns.info/reverseip ~ all websites registered by ip
- 🌐 host.io ~ all websites linked/redirect to a website
- 🌐 osint.sh/adsense ~ reverse adsense lookup
- 🌐 osint.sh/analytics ~ reverse google analytics lookup
- 🌐 crt.sh ~ certificate analysis
- ⚙️ wayBackLister ~ wayback directory bruteforcer
python waybacklister.py -d <SITE> -t 50- ⚙️ robofinder ~ wayback robots.txt parser
robofinder -u <SITE> -t 50 -c- 💉 Subdomains Finder ~ subdomains finder
https://api.hackertarget.com/hostsearch/?q=<WEBSITE>
https://www.virustotal.com/gui/domain/<WEBSITE>/relations- 💉 Wayback Pages Finder (CDX API) ~ wayback pages enumerator
https://web.archive.org/cdx/search/cdx?url=<WEBSITE>/path/page.php?<PARAMETER>=* [&to=<YYYYMMDD>&from=<YYYYMMDD>]- 💉 Wayback Hidden Domains/Files (CDX API) ~ wayback pages enumerator
https://web.archive.org/cdx/search/cdx?url=*.<WEBSITE>&collapse=urlkey [&to=<YYYYMMDD>&from=<YYYYMMDD>]- 💉 Wayback Files Filer (CDX API) ~ wayback mimetype filter
https://web.archive.org/cdx/search/cdx?url=<WEBSITE>&filter=mimetype:text/javascript&collapse=urlkey [&to=<YYYYMMDD>&from=<YYYYMMDD>]- 💉 Gravatar API ~ gravatar lookup
https://en.gravatar.com/<MD5_HASH_OF_EMAIL>.json- 🌐 instagram.com (nik->✉️📞) ~ account knocker
- 🌐 facebook.com (nik->✉️📞) ~ account knocker
- 🌐 x.com (nik->✅) ~ account validator
- 🌐 accounts.google.com (nik->✉️) ~ account knocker
- 🌐 snapchat.com (nik✉️📞->✅) ~ account validator
- 🌐 discord.com (nik✉️📞->✅) ~ account validator
- 🌐 identity.flickr.com (✉️->✅) ~ account validator
- 🌐 pinterest.com (nik->✅) ~ account validator
- 🌐 login.yahoo.com (*->✉️📞) ~ account knocker
- 🌐 iforgot.apple.com (nik->✉️📞) ~ account knocker
- 🌐 account.samsung.com (nik->✉️) ~ account knocker
- 🌐 account.live.com (nik✉️📞skypeid->📞✉️) ~ account knocker
- 🌐 paypal.com (✉️->✅) ~ account validator
- 🌐 accounts.binance.com (📞✉️->✅) ~ account validator
- 🌐 databreach.com ~ breach checker
- 🌐 haveibeenpwned.com ~ breach checker
- 🌐 dehashed.com ~ breach checker
- 🌐 intelbase.is (🌐 oathnet.org) ~ breach/account searcher
- 🌐 breach.vip ~ breach searcher
- 🌐 bf.based.re ~ breachforums lookup
- 🌐 sizeof.cat (🌐 zerobin.net)
⚠️ your responsibility ~ breach torrents
- 📚️ Bellingcat's Online Investigation Toolkit
- 📚️ Malfrat's OSINT Map
- 📚️ OSINT Framework
- 📚️ Cyber Detective's OSINT tools collection
- 📚️ Cyber Detective's Dorks-collection-list
- 📚️ IntelTechniques Search Tools
- 📚️ Awesome OSINT
- 📚️ Awesome Google Dorks
For contributions and reports: [email protected]
If you want to support my research you can donate Monero (XMR).
All donations will be used to buy new OSINT learning materials and tools to improve this project.
Thank you!
XMR: 87QKLLGi9nNc9G8K4Rg4aAVipmmixNywN4MgR3UzF3Z5YrgZn74UNFVRZpss4G63eHJbhD9N8tVKoZCKcKCGZyh8M6AUkSb

