Open Source Intelligence (OSINT) is the collection and analysis of data gathered from open sources to produce actionable intelligence. This carefully edited OSINT list won't be an endless list of links, but priority will be given to highly effective content (quality over quantity) and only services that can be used for free.
Warning
While OSINT itself is not illegal, it is crucial to understand that the legality of specific OSINT activities heavily depends on how the information is obtained and used. You assume full and sole responsibility for all consequences of your actions. This includes, but is not limited to, any direct, indirect, incidental, or consequential damages.
- ⚙️ Executable Program
- 🌐 Website Tool
- 💉 Exploitable Dork/Page/API
- 📜 Userscript
- 🤖 AI Powered
- 📚️ Wiki/List Resource
- 💉 Multisite Nickname Search Dork ~ multi-site nickname search
inurl:"<USERNAME>" (site:facebook.com | site:instagram.com | site:x.com | site:tiktok.com | site:linkedin.com | site:pinterest.com | site:reddit.com | site:tumblr.com | site:youtube.com | site:twitch.tv | site:stackoverflow.com | site:soundcloud.com) -inurl:videos -inurl:video -inurl:watch -inurl:status -inurl:post -inurl:posts -inurl:photo -inurl:/p/ -inurl:photos -inurl:reply -inurl:reel -inurl:reels -inurl:comment -inurl:comments -inurl:search -inurl:tag -inurl:?__d= -inurl:related_profiles -inurl:popular -inurl:hashtag -inurl:/?v=- ⚙️ sherlock (🌐 osint.rocks) ~ reverse username lookup
sherlock 'username' --timeout 2- ⚙️ WhatsMyName (🌐 whatsmyname.app) ~ username scraper
python whatsmyname.py -u 'username'- 🌐 whatsmynameapp.net ~ username scraper
- 🌐 metricsparrow.com ~ email permutator
- 🌐 seintpl.github.io/NAMINT ~ email checker
- 💉 Email Finder by Domain Dork (top 100 email providers) ~ email searcher
"<NAME>" "<SURNAME>" (intext:"@gmail.com" | intext:"@yahoo.com" | intext:"@hotmail.com" | intext:"@outlook.com"| intext:"@icloud.com")- 🌐 tools.emailhippo.com ~ email validator
- 🌐 minervaosint.com ~ reverse email lookup
- 🌐 intelbase.is ~ reverse email lookup
- 🌐 behindtheemail.com ~ reverse email lookup
- 🌐 epieos.com ~ reverse email lookup
- ⚙️ holehe (🌐 osint.rocks) ~ reverse email lookup
holehe 'email@provider.com'- ⚙️ blackbird (🌐 osintcabal.org) ~ reverse email lookup
blackbird -e 'email@provider.com'- ⚙️ ghunt (🌐 osint.rocks, 🌐 gmail-osint) ~ gmail parser
- 🌐 smsc.ru ~ phone lookup
- 🌐 @TrueCalleRobot ~ phone caller lookup
- ⚙️ ignorant (🌐 osint.rocks) ~ reverse phone lookup
ignorant '<NUMBER>' --only-used- 🌐 wayp.com ~ world white/yellow pages
- 🌐 pimeyes.com (📜 unblur) ~ reverse face search 🤖
- 🌐 huggingface.co/FaceOnLive ~ reverse face search 🤖
- 🌐 tattoodo.com ~ tattoo location lookup
- 🌐 images.google.com (🌐 yandex.com) ~ reverse image search
- 🌐 picdetective.com ~ reverse image search 🤖
- 🌐 exifinfo.org ~ exif lookup
- 🌐 29a.ch ~ image forensic
- 🌐 cse.google.com ~ multi-social search
- 💉 Multisocial Search Dork ~ multi-social search
"<NAME>" "<SURNAME>" (site:facebook.com | site:x.com | site:instagram.com | site:tiktok.com) -inurl:videos -inurl:video -inurl:watch -inurl:status -inurl:post -inurl:posts -inurl:photo -inurl:/p/ -inurl:photos -inurl:reply -inurl:reel -inurl:reels -inurl:comment -inurl:comments -inurl:search -inurl:tag -inurl:?__d= -inurl:related_profiles -inurl:popular -inurl:hashtag -inurl:/?v= -inurl:public- ⚙️ instaloader ~ IG backup
- 📜 Instagram Followers/Following Scraper ~ IG followe/rs
- 📜 Instagram Post Date and Location ~ IG geotag+date ui
- ⚙️ instagram-location-search ~ IG location scraper
instagram-location-search --cookies "<ig-cookie>" --lat "<lat>" --lng "<lng>" --json locs.json --map map.html- 📜 Instagram Threads Checker ~ IG threads matcher
- 🌐 sowsearch.info ~ FB searcher
- 💉 Facebook Search Dorks ~ FB info finder
"<NAME>" "<SURNAME>" ("lives in <PLACE>" | "from <PLACE>") site:facebook.com"<NAME>" "<SURNAME>" ("studied at <SCHOOL>" | "went to <SCHOOL>") site:facebook.com"<NAME>" "<SURNAME>" ("worked at <COMPANY>" | "works at <COMPANY>") site:facebook.com- 🌐 facebook.com/ads/library ~ FB/IG ads library
- 🌐 cse.google.com ~ FB published images by keyword
- 📜 Facebook Profile ID Extractor ~ FB id finder
https://www.facebook.com/profile.php?id=<PROFILEID>-
📜 X.com Profile Info Widget ~ X advanced info
-
🌐 onlysearch.co ~ OF searcher
-
📜 YouTube Channel ID Extractor ~ YT id finder
-
🌐 mattw.io/youtube-metadata ~ YT metadata parser
-
🌐 findyoutubevideo.thetechrobo.ca ~ YT private/removed parser
-
🌐 ytcomment.kmcat.uk ~ YT comments search
-
🌐 filmot.com ~ YT global subtitles search
-
🌐 twitch-tools.rootonline.de ~ TW followers/ing viewer
-
🌐 r00m101.com ~ Reddit profile analyzer
-
🌐 badoo-archive-collection ~ Badoo wayback db
-
🌐 strava.com/maps ~ Stava global heatmap
- 🌐 vedbex.com ~ SKYPE mail/phone/ip
- 🌐 gatecord.com ~ DISCORD lookup
- 🌐 hugonun.github.io ~ DISCORD creation time
- 🌐 discord.com (🌐 discord.me, 🌐 disboard.org ) ~ DISCORD server search
- 🌐 intelx.io ~ TG search
- 🌐 tgfind.org ~ TG channel search
- 🌐 telegram-archive-collection ~ TG wayback db
- ⚙️ telegram-phone-number-checker ~ TG lookup
python telegram_phone_number_checker/main.py --phone-numbers '<NUMBER>' --download-profile-photos- ⚙️ telepathy ~ TG groups/channels lookup
telepathy -t '<NICKNAME>' -c- 🌐 @fsta_bot_of_bot ~ TG groups lookup
- 🌐 @poiskpoinfo2026_bot ~ TG phone lookup
- 🌐 @creationdatebot ~ TG registration lookup
- 🌐 @SangMata_beta_bot ~ TG nick lookup
- 🌐 xresolver.com ~ XBOX/PSN/GTA resolver
- 🌐 psnprofiles.com ~ PSN parser
- 🌐 xboxgamertag.com ~ XBOX parser
- 🌐 epic-lookup.com ~ EPICGAMES parser
- 🌐 geospy.net (🌐 whereisthisphoto.com, 🌐 picarta.ai) ~ place finder 🤖
- 🌐 overpass-ultra.trailsta.sh ~ map advanced scripting
- 💉 Gmaps Tracker by Gaia ID ~ gmap tracker
https://www.google.com/maps/contrib/<GAIA-ID>- ⚙️ Weather2Geo ~ reverse city finder by weather
python main.py --time "2025-05-22 14:00" --condition "Mostly cloudy" --temp 18 --tolerance 1.0- 🌐 colab.research.google.com ~ place finder by sun shadow
- 🌐 tubvsig-so2sat-vm1.srv.mwn.de ~ global building info
- 🌐 pleper.com ~ gmaps spots info
- 🌐 cse.google.com (🌐 cybdetective.com/webcamcse) ~ webcam finder
- 🌐 3wifi.dev (🌐 wigle.net) ~ wifi wardriving map
- 🌐 firms.modaps.eosdis.nasa.gov ~ nasa fire map
- 🌐 plonkit.net ~ geoguesser wiki
- 🌐 geotips.net ~ geoguesser wiki
- 🌐 geohints.com ~ geoguesser objects wiki
- 🌐 cipher387.github.io ~ car plate info
- 🌐 flightmapper.net ~ flight tracking map
- 🌐 aerobasegroup.com ~ flight number lookup
- 🌐 globe.airplanes.live ~ live airplane map
- 🌐 marinetraffic.com ~ live ship map
- 🌐 intelx.io ~ multi-engine search
- 💉 Localized Google Search (ISO 3166-1 alpha-2 Table) ~ search by country switching
https://www.google.com/search?q=<ANY>+<DORK>+<OR>+<CUSTOM>+<SEARCH>&cr=<ALPHA-2-COUNTRY-CODE>- 💉 Docs Search Dork ~ general info gathering
"<NAME>" "<SURNAME>" "<CITY>" (filetype:pdf | filetype:doc | filetype:docx | filetype:odt | filetype:ods | filetype:odp | filetype:xls | filetype:xlsx | filetype:csv | filetype:txt | filetype:rtf | filetype:xml | filetype:ppt | filetype:pptx | filetype:key | filetype:zip | filetype:rar | filetype:7z | filetype:gz | filetype:log | filetype:json | filetype:audit | filetype:trace | filetype:debug | filetype:out | filetype:err)-
🌐 cybdetective.com/pastebin ~ pastebin search
-
🌐 cybdetective.com/codesearch ~ repos search
-
💉 Github User Info ~ github user lookup
https://api.github.com/users/<NICKNAME>- 🌐 ghintel.secrets.ninja ~ github email commits finder
- ⚙️ Hidden Metadata In Local Repos ~ repos email/nickname finder
git log --pretty=format:"[ AUTHOR-EMAIL:%ae | AUTHOR-NICK:%an ][ COMMITTER-EMAIL:%ce | COMMITTER-NICK:%cn ][ DATE:%aD ]"- ⚙️ trufflehog ~ repo secret finder
trufflehog git "https://github.com/<USER>/<REPO>"- 🌐 ispyconnect.com ~ ipcam passwords list
- 🌐 cybdetective.com/osintmap ~ world institutions directory
- 🌐 osintguru.azurewebsites.net ~ world institutions directory
- 🌐 aleph.occrp.org ~ investigation documents dataset
- 🌐 ean-search.org ~ multi-barcode lookup
- 🌐 iknowwhatyoudownload.com ~ reverse torrents lookup
- 🌐 dnb.com ~ company lookup
- 🌐 skymem.info ~ company email lookup
- 🌐 lei.info ~ legal company identifier
- 🌐 opencorporates.com ~ open corporate database
- 💉 Company Employee Dork ~ linkedin company users
site:linkedin.com inurl:in “<COMPANY>”- 🌐 sitereport.netcraft.com ~ website parser
- 🌐 centralops.net ~ whois lookup
- 🌐 whoxy.com/archive ~ whois DB history parser
- 🌐 whois.easycounter.com ~ whois DB history parser
- 🌐 whoisfreaks.com ~ whois DB history parser
- 📜 Reverse Whoxy Domain Status ~ whois website checker
- 🌐 dnsdumpster.com ~ reverse website location lookup
- 🌐 informationlaundromat.com ~ website metadata correlator
- 🌐 viewdns.info/iphistory ~ ip hosting history lookup
- 🌐 viewdns.info/reversens ~ reverse dns lookup
- 🌐 viewdns.info/reverseip ~ reverse ip lookup
- 🌐 host.io ~ website to website lookup
- 🌐 osint.sh/adsense ~ reverse adsense lookup
- 🌐 osint.sh/analytics ~ reverse google analytics lookup
- 🌐 crt.sh ~ certificate analysis
- 🌐 shodan.io (🌐 fofa.info, 🌐 platform.censys.io) ~ host scanner
- ⚙️ CloudRip ~ ip behind cloudflare by subdomain enum
python cloudrip.py <SITE> -t 50- ⚙️ wayBackLister ~ wayback directory bruteforcer
python waybacklister.py -d <SITE> -t 50- ⚙️ robofinder ~ wayback robots.txt parser
robofinder -u <SITE> -t 50 -c- ⚙️ subcat (🌐 osintcabal.org) ~ subdomains finder
subcat -d hackerone.com --sc --title --tech --up- 💉 Subdomains Finder ~ subdomains finder
https://api.hackertarget.com/hostsearch/?q=<WEBSITE>https://www.virustotal.com/gui/domain/<WEBSITE>/relations- 💉 Wayback Pages Finder (CDX API) ~ wayback pages enumerator
https://web.archive.org/cdx/search/cdx?url=<WEBSITE>/path/page.php?<PARAMETER>=* [&to=<YYYYMMDD>&from=<YYYYMMDD>]- 💉 Wayback Hidden Domains/Files (CDX API) ~ wayback pages enumerator
https://web.archive.org/cdx/search/cdx?url=*.<WEBSITE>&collapse=urlkey [&to=<YYYYMMDD>&from=<YYYYMMDD>]- 💉 Wayback Files Filer (CDX API) ~ wayback mimetype filter
https://web.archive.org/cdx/search/cdx?url=<WEBSITE>&filter=mimetype:text/javascript&collapse=urlkey [&to=<YYYYMMDD>&from=<YYYYMMDD>]- 💉 Gravatar API ~ gravatar lookup
https://en.gravatar.com/<MD5_HASH_OF_EMAIL>.json- 🌐 instagram.com (🏷️->✉️📞) ~ account knocker
- 🌐 facebook.com (🏷️->✉️📞) ~ account knocker
- 🌐 x.com (🏷️->✅) ~ account validator
- 🌐 accounts.google.com (🏷️->✉️) ~ account knocker
- 🌐 login.yahoo.com (🏷️✉️📞->✉️📞) ~ account knocker
- 🌐 iforgot.apple.com (🏷️->✉️📞) ~ account knocker
- 🌐 account.live.com (🏷️✉️📞->📞✉️) ~ account knocker
- 🌐 account.samsung.com (🏷️->✉️) ~ account knocker
- 🌐 snapchat.com (🏷️✉️📞->✅) ~ account validator
- 🌐 discord.com (🏷️✉️📞->✅) ~ account validator
- 🌐 identity.flickr.com (✉️->✅) ~ account validator
- 🌐 pinterest.com (🏷️->✅) ~ account validator
- 🌐 accounts.spotify.com (✉️->✅) ~ account validator
- 🌐 epicgames.com (✉️->✅) ~ account validator
- 🌐 airbnb.it (✉️📞->✅) ~ account validator
- 🌐 github.com (✉️->✅) ~ account validator
- 🌐 lastpass.com (✉️->✅) ~ account validator
- 🌐 paypal.com (✉️->✅) ~ account validator
- 🌐 accounts.binance.com (📞✉️->✅) ~ account validator
- 🌐 databreach.com ~ breach checker
- 🌐 haveibeenpwned.com ~ breach checker
- 🌐 dehashed.com ~ breach checker
- 🌐 breach.vip ~ breach searcher
- 🌐 idleakcheck.com ~ NPD searcher
- 🌐 bf.based.re ~ breachforums lookup
- 🌐 sizeof.cat (🌐 zerobin.net)
⚠️ your responsibility ~ breach torrents - 💉 Hudsonrock Cavalier API ~ stealers email searcher
https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-email?email=<EXAMPLE@GMAIL.COM>- 💉 Hudsonrock Cavalier API ~ stealers username searcher
https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-username?username=<USERNAME>- 💉 Hudsonrock Cavalier API ~ stealers ip searcher
https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-ip?ip=<127.0.0.1>
- 📚️ Bellingcat's Online Investigation Toolkit
- 📚️ Malfrat's OSINT Map
- 📚️ OSINT Framework
- 📚️ Cyber Detective's OSINT tools collection
- 📚️ Cyber Detective's Dorks-collection-list
- 📚️ IntelTechniques Search Tools
- 📚️ Awesome OSINT
- 📚️ Awesome Google Dorks
- 📚️ Google Hacking Database ExploitDB
For contributions and reports: pikaosint@proton.me
If you want to support my research you can donate Monero (XMR).
All donations will be used to buy new OSINT learning materials and tools to improve this project.
Thank you!
XMR:
87QKLLGi9nNc9G8K4Rg4aAVipmmixNywN4MgR3UzF3Z5YrgZn74UNFVRZpss4G63eHJbhD9N8tVKoZCKcKCGZyh8M6AUkSb