Набор инструментов OSINT

[ShadowHawk]

* Поисковики широкого спектра
https://github.com/laramies/theHarvester - сбор email-адресов, субдоменов, виртуальных хостов, открытых портов/баннеров, имён сотрудников из открытых источников.
https://github.com/Bafomet666/OSINT-SAN OSINT-SAN - комбайн широкого профиля
https://mor-pah.net/software/dmitry-deepmagic-information-gathering-tool/ - Dmitry - аналог предыдущего инструмента
https://github.com/0xInfection/TIDoS-Framework - универсальный фреймворк с возможностью анализа сетей (DNS, whois, emails)

GitHub - smicallef/spiderfoot: SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface. - smicallef/spiderfoot

github.com

https://osintframework.com/ - рубрикатор инструментов OSINT, общий поиск по соц. сетям, большой набор разных инструментов для поиска:
https://hunter.io/ - сбор инфо о email по имени домена

28 Online Vulnerability Scanners & Network Tools | HackerTarget.com

Online Vulnerability Scanners to map the attack surface and identify vulnerabilities. 28 trusted open source security scanners and network tools.

hackertarget.com

* Поисковики по компаниям
https://www.zoominfo.com - поисковик данных о компаниях
https://opencorpdata.com/ - Open corporate business database
https://domainbigdata.com/ - big database of domains and whois records
https://opencorporates.com/ - largest open database of companies in the world
https://www.sec.gov/edgar/searchedgar/cik.htm - EDGAR Company Filings | Central Index Key Lookup
http://www.orsr.sk/search_osoba.asp?lan=en - Business register | Ministry of Justice of the Slovak Republic
Больше инструментов в статье https://habr.com/ru/company/pentestit/blog/554006/

* Поиск по USERNAME/NICKNAME:

Namechk - Username and Domain Name Checker - Search All Domain Names and User Names to see if they're available

There are 351 million registered domain names and counting. Every day, thousands more are registered. Since domain names can only be used by one company or

namechk.com

GitHub - snooppr/snoop: Snoop — инструмент разведки на основе открытых данных (OSINT world)

Snoop — инструмент разведки на основе открытых данных (OSINT world) - snooppr/snoop

github.com

* Поиск по EMAIL:

Have I Been Pwned: Check if your email has been compromised in a data breach

Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.

haveibeenpwned.com

AI-Driven Identity Risk Intelligence | Constella Intelligence

Intelligence from a constellation of greater than one trillion compromised identity assets, the new paradigm, ai-driven identity risk intelligence.

hacked-emails.com

Find out if you’ve been part of a data breach

Have your online accounts been exposed in a data breach?

ghostproject.fr

https://weleakinfo.com/

The #1 source for identity & trust | Pipl

Pipl is a provider of identity solutions. We aim to provide the best identity information to organizations in order to ensure that trustworthy people can be trusted.

pipl.com

Find the source of your leaks - LeakedSource

Have you been hacked? Search hundreds of leaked databases like LinkedIn, MySpace, Dropbox, Ashley Madison and Twitter by name, email, ip address, and phone number!

leakedsource.ru

http://mailtester.com/ - E-mail address verification

Epieos, the ultimate OSINT tool

An OSINT search engine that allows you to perform an email or a phone reverse lookup, find related google reviews, and many other things.

epieos.com

Приложение "Skype"

* Поиск по номеру телефона:

https://phonenumber.to

The #1 source for identity & trust | Pipl

Pipl is a provider of identity solutions. We aim to provide the best identity information to organizations in order to ensure that trustworthy people can be trusted.

pipl.com

Epieos, the ultimate OSINT tool

An OSINT search engine that allows you to perform an email or a phone reverse lookup, find related google reviews, and many other things.

epieos.com

Приложение "GetContact"
Приложение "NumBuster"
Приложение "Truecaller" или сайт https://www.truecaller.com/

KRAKEN Darknet - kraken5.at kraken6.at

KRAKEN Darknet - kraken5.at kraken6.at где заказать наркотики, даркнет наркотики, купить наркотики в москве, магазин наркошоп, сайт где купить наркотики, магазин по продаже наркотиков, магазин наркоты, как найти наркошопы, русские онион сайты,

doska-org.ru

Приложение "Skype"

* Картирование сетей

Shodan

Search engine of Internet-connected devices. Create a free account to get started.

www.shodan.io

https://spyse.com/

https://crt.sh/ - поиск субдоменов
https://archive.org/web/ - поиск в прошлом (просмотр сайтов на определенную дату)
https://viewdns.info/ - data about a given website or IP address
https://github.com/Fadavvi/Sub-Drill Simple script for finding subdomains based on [free] online services without any dependency to API-keys
https://builtwith.com/ - на чем сделан сайт

* Поиск местоположения базовой станции сотового оператора:

Unwired Labs Location API - Geolocation API, Cell Tower & WiFi Geolocation database

Unwired Labs Location API locates any IoT device worldwide using Cell Towers, WiFi & IP Address.

unwiredlabs.com

http://xinit.ru/bs/

* Поиск по соцсетям, несортированое
http://sanstv.ru/photomap - Получение фотографий из соц. сетей из локального района (по геометкам):
https://foller.me/ - Twitter Analytics
https://followerwonk.com/ - social analytics mega-tool that digs through Twitter data
https://tinfoleak.com/ - Search for Twitter users leaks
https://twicsy.com/ - Twicsy is social pics
https://www.spokeo.com/- iskat infu po USA.

GitHub - jivoi/awesome-osint: :scream: A curated list of amazingly awesome OSINT

:scream: A curated list of amazingly awesome OSINT - jivoi/awesome-osint

github.com

 

[bablodalo]

cool, thank you for sharing! I really enjoy spiderfoot

 

[catits]

А кракен зачем

 

[im_stupid]

Thank you for your sharing. I needed this

 

[misterpotato]

Nice list. For company search engines also https://www.gov.uk/government/organisations/companies-house is helpful for UK

 

[gr0b]

Nice list, thanks

 

[aynaz29]

Please add https://findemail.io
on your list
best osint tools you can search on leak database , logs database , company email address

 

[moncavex00]

Я хотел бы добавить этот инструмент в список :

Поиск по USERNAME/NICKNAME:

GitHub - TheYahya/enola: This is Sherlock's sister, Modern shiny CLI tool written with Golang to help you: 🔎 Hunt down social media accounts by username across social networks

This is Sherlock's sister, Modern shiny CLI tool written with Golang to help you: 🔎 Hunt down social media accounts by username across social networks - TheYahya/enola

github.com

GitHub - soxoj/maigret: 🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites - soxoj/maigret

github.com