A resource to help you analyze open-source content for authenticity using a selection of OSINT tools and techniques. They are broken down into 4 categories – search engines, services lists, leak sites and chat/file sharing. Most of https://osint-software.com/ the tools in this guide have web interfaces or point-and-click apps. This is invaluable for security assessments and investigations.
Overall, Shodan provides a unique perspective on the internet, helping users see beyond websites and into the infrastructure that powers them. In practical scenarios, Shodan is often used to identify misconfigured systems, monitor network security, and support investigations. The interface is clean, and basic searches can be performed without deep technical knowledge. This allows users to identify changes quickly and respond to potential threats without delay. This makes it an incredibly powerful tool for understanding what is exposed online and how systems are connected.
Ethical hackers use it for rapid reconnaissance and large-scale assessments. Wireshark is a packet analysis tool used to inspect and analyze network traffic in real time. Shodan helps ethical hackers identify exposed servers, IoT devices, webcams, databases, and vulnerable systems. These hacker tools help gather intelligence about domains, IPs, technologies, users, and exposed assets.
Exploring Public Records and Databases
Reuters first spotted the Chinese-language guide on Apple’s support site on August 8, which explained how eligible Mac users in mainland China could connect Qwen, Alibaba’s family of generative AI models, to Siri… Apple briefly published a support guide in China explaining how Mac users can connect Alibaba’s Qwen AI to Siri and Writing Tools, before pulling it entirely less than a day later. While Apple has a history of early but uneven AI efforts, including the original launch of Siri in 2011, The Information argues that these shortcomings have not materially harmed its core businesses. To power it, Apple is believed to be adopting Google’s Gemini, reflecting an internal view that large language models may become commoditized and not worth the cost of large-scale proprietary development.
- It provides real-time visibility into global networks, uncovering vulnerabilities, security risks, and configuration details.
- The Social Media Finder searches for usernames across 200+ major platforms including LinkedIn, Twitter/X, Instagram, Facebook, TikTok, GitHub, Reddit, and more.
- Build real-world investigative capability with tool-agnostic OSINT training designed for teams working across operational environments and mission sets.
- The visual output alone makes it worth opening at the start of any domain-focused investigation.
Browse tools by category:
This model was trained on a dataset of everyday objects called COCO and can identify things like tables, chairs, and books. In that case, an object detection system should be able to identify and label you (human) and the computer, along with your position in the image. An object detection system can identify classes of objects present within an image by utilizing computer vision techniques in the background. These foundational AI-based projects are ideal for students and professionals alike. Multinational companies like IBM, Accenture, and Apple are actively hiring AI practitioners.
Triage is an advanced malware analysis sandbox that allows users to submit and analyze malware samples in a controlled environment. Recorded Future’s Vulnerability Database is a comprehensive resource offering detailed information on the latest software vulnerabilities. A single HTTP request retrieves the data, streamlining the process of obtaining comprehensive domain information. It is utilized to collect information about subdomains, virtual hosts, open ports, and email addresses related to any company or website.
This tool is an awesome reconnaissance framework based on public resources. Build real-world investigative capability with tool-agnostic OSINT training designed for teams working across operational environments and mission sets. All results take the user to the source on the TikTok.com website or are provided as a Google search result. The map-based interface makes it easy to use and the design means you remain compliant with relevant terms of service.
The company gets a SupportScore of 8.1 out of 10 even though its Customer Support team and online documentation each get the full 10 out or 10. It helps track trends, sentiments, and emerging threats by identifying key discussions, influencers, and patterns. Babel Street’s social media scanning allows users to monitor and analyze real-time data across various platforms, including Twitter, Facebook, and Instagram. You can then use that knowledge to scan through a large number of tools and data sources in the list to perform a targeted research project. OSINT Framework is a good starting point for anyone who has never performed a search of public data before because it has a training section. There are tutorials and games included to get beginners started with the digging-for-information game.
NexusXplore is a best-in-class OSINT platform that brings together data from across the surface, deep and dark web into a single, secure environment, alongside the investigative capabilities needed to derive insight and meaning. Its automation and report generation streamline the investigative process, making it easier to identify vulnerabilities, connections, and potential threats without manual data collection. ExifTool is a powerful command-line utility for reading, writing, and editing metadata in images, videos, and documents. It offers simulated environments, educational content, and curated tools to sharpen investigative skills and operational tactics. FOCA (Fingerprinting Organizations with Collected Archives) is specialized in extracting metadata from publicly available documents and images.
Common in compliance audits checking for accidental publication of HR, financial, or legal documents. Used to identify exposed administrative entry points during authorized attack-surface mapping. Using Google’s public search operators is not illegal; you are using a search engine as intended. Nothing is bypassed or exploited; the query only surfaces what a site owner already allowed search engines to crawl and cache. Email OSINT can be legitimate in the right context, but legality and ethics depend on authorization, purpose, local rules, data handling, and …
It’s essentially a search engine—the user uploads a photo, and PimEyes will show you where it’s been published online. It has a number of valuable uses including device security auditing, network maintenance, asset management, network vulnerability exploitation, and more. On top of intelligence services, the company offers the sleekly designed OSINT solution, Logically Intelligence. The tool empowers users to identify, predict, and mitigate various criminal activities. The metadata fields are strongly encouraged as they help users understand each tool at a glance. Please feel free to submit a pull request or open an issue on github or reach out on Twitter.
Clam AntiVirus is an open-source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Yes, tools like Apache Superset and Pentaho are designed to manage and analyze big data efficiently. ReportServer combines old-school reporting with modern BI features. The open-source version is flexible and can easily be integrated with your current applications. The tool supports multi-dimensional Online Analytical Processing (OLAP) along with real-time data monitoring and visualization. SpagoBI offers a whole suite of open-source BI tools for building reports, charts, and data mining.
