Recon
Freemium
Shodan
Search internet-exposed hosts, ports and banners.
shodan.ioOpen
Open-source intelligence // File 079
The investigation tools index
A categorized, searchable dossier of recon, lookup and OSINT utilities. Subject: everyone you are looking for. Source: the open web.
AI analysis desk
Lead Synthesizer
Lead brief
Structured entities, timeline, leads, gaps and recommended checks will appear here.
Recently updated
0501Freemium02Free03Free04Free05Free
Maltego
Visual link analysis and entity relationship mapping; availability varies by edition.
X Advanced Search
Search public X posts by account, words, dates and other filters.
Awesome OSINT
Large community-curated index of OSINT tools and resources.
IntelTechniques
Public search tools, research techniques and investigation resources.
EmailRep
Email reputation and risk signals from public sources.
All tools
79 / 79Recon
Freemium
Censys
Global network, certificate and host search.
search.censys.ioOpen
Recon
Free
SpiderFoot
Automated OSINT collection across 200+ modules.
github.com/smicallefOpen
Recon
Freemium
Maltego
Visual link analysis and entity relationship mapping; availability varies by edition.
maltego.comOpen
Domain
Free
theHarvester
Harvest emails, subdomains and hosts from public sources.
github.com/laramiesOpen
Domain
Free
OWASP Amass
Attack surface mapping and subdomain enumeration.
owasp.orgOpen
Domain
Free
crt.sh
Certificate transparency log search by domain.
crt.shOpen
Domain
Freemium
SecurityTrails
Historical DNS, WHOIS and subdomain intelligence.
securitytrails.comOpen
Domain
Freemium
urlscan.io
Sandbox and scan any URL, view DOM and requests.
urlscan.ioOpen
People
Free
Sherlock
Hunt usernames across 400+ social networks.
github.com/sherlock-projectOpen
People
Free
Maigret
Collect a dossier on a username from 3000+ sites.
github.com/soxojOpen
People
Free
WhatsMyName
Username enumeration across web services.
whatsmyname.appOpen
People
RestrictedPaid
Pipl
Professional identity resolution and people search.
pipl.comOpen
Email
Freemium
Hunter.io
Find and verify corporate email addresses.
hunter.ioOpen
Email
Free
Holehe
Check which sites an email is registered on.
github.com/megadoseOpen
Email
Freemium
Epieos
Reverse email and phone lookup, Google account data.
epieos.comOpen
Breach
Free
Have I Been Pwned
Check exposure in known data breaches.
haveibeenpwned.comOpen
Breach
RestrictedPaid
DeHashed
Search leaked credentials and breach records.
dehashed.comOpen
Breach
RestrictedFreemium
Intelligence X
Search leaks, pastes, darknet and historical data.
intelx.ioOpen
Images
Free
ExifTool
Read and write metadata in images and documents.
exiftool.orgOpen
Images
Free
Yandex Images
Strongest reverse image search for faces and places.
yandex.com/imagesOpen
Images
Freemium
TinEye
Reverse image search with first-seen dates.
tineye.comOpen
Images
Free
Forensically
Browser-based image forensics: ELA, clone detection.
29a.chOpen
Geo
Free
SunCalc
Verify time and place from shadows and sun position.
suncalc.orgOpen
Geo
Free
Overpass Turbo
Query OpenStreetMap for feature combinations.
overpass-turbo.euOpen
Geo
Freemium
Sentinel Hub EO Browser
Recent satellite imagery, free to browse.
apps.sentinel-hub.comOpen
Geo
Freemium
Flightradar24
Live and historical aircraft tracking.
flightradar24.comOpen
Social
Free
X Advanced Search
Search public X posts by account, words, dates and other filters.
x.comOpen
Social
Free
Telegago
Custom search engine over public Telegram.
cse.google.comOpen
Social
Freemium
Social Blade
Account growth history across major platforms.
socialblade.comOpen
Dark web
RestrictedFree
Ahmia
Search engine for Tor onion services.
ahmia.fiOpen
Dark web
RestrictedFree
OnionSearch
Scrape multiple onion search engines at once.
github.com/megadoseOpen
Dark web
RestrictedPaid
DarkOwl Vision
Commercial darknet data indexing and alerts.
darkowl.comOpen
Archive
Free
Wayback Machine
Historical snapshots of any web page.
web.archive.orgOpen
Archive
Free
archive.today
On-demand page captures that resist takedowns.
archive.phOpen
Archive
Free
OSINT Framework
Hierarchical directory of OSINT resources.
osintframework.comOpen
Recon
Free
Google Hacking DB
Curated advanced search operators (dorks).
exploit-db.comOpen
Security
RestrictedFree
Nmap
Discover hosts and audit exposed network services on authorized systems.
nmap.orgOpen
Security
RestrictedFree
Wireshark
Inspect network traffic and protocols for troubleshooting and incident response.
wireshark.orgOpen
Security
RestrictedFree
OWASP ZAP
Test web applications for common security weaknesses in an authorized scope.
zaproxy.orgOpen
Security
RestrictedFree
Nikto
Audit approved web servers for risky files, defaults and outdated software.
github.com/sullo/niktoOpen
Security
RestrictedFree
Metasploit Framework
Validate known vulnerabilities in isolated labs or explicitly authorized tests.
metasploit.comOpen
Security
Free
CyberChef
Decode, transform and inspect text or files with repeatable browser recipes.
gchq.github.ioOpen
Security
Free
VirusTotal
Check hashes, domains and URLs against multiple security engines.
virustotal.comOpen
Security
RestrictedFree
Gobuster
Enumerate approved web paths, DNS names and virtual hosts.
github.com/OJ/gobusterOpen
Research
Free
Awesome OSINT
Large community-curated index of OSINT tools and resources.
github.com/jivoiOpen
Research
Free
IntelTechniques
Public search tools, research techniques and investigation resources.
inteltechniques.comOpen
Email
Free
EmailRep
Email reputation and risk signals from public sources.
emailrep.ioOpen
Records
Free
OpenCorporates
Search public company and corporate registry data.
opencorporates.comOpen
Domain
Free
DNSDumpster
Free DNS and domain reconnaissance with visual host mapping.
dnsdumpster.comOpen
Domain
Free
Subfinder
Passive subdomain discovery from multiple public sources.
github.com/projectdiscoveryOpen
Domain
Free
ViewDNS
Public DNS, reverse DNS, WHOIS and network lookup utilities.
viewdns.infoOpen
Domain
Freemium
BuiltWith
Identify technologies used by websites and domains.
builtwith.comOpen
Domain
Freemium
Wappalyzer
Detect web technologies, frameworks, analytics and services.
wappalyzer.comOpen
Recon
Freemium
Netlas
Search internet infrastructure, services and certificates.
netlas.ioOpen
Recon
Freemium
ZoomEye
Search public internet hosts and exposed services.
zoomeye.orgOpen
Images
Free
Google Lens
Visual search for identifying objects, places and related images.
lens.google.comOpen
Images
Free
Bing Visual Search
Reverse image and visual search from Microsoft.
bing.comOpen
Geo
Free
Mapillary
Crowdsourced street-level imagery for geographic verification.
mapillary.comOpen
Geo
Free
KartaView
Open street-level imagery useful for location verification.
kartaview.orgOpen
Geo
Free
OpenStreetMap
Open geographic database for roads, buildings and mapped features.
openstreetmap.orgOpen
Cameras
Freemium
WorldCam
Map-style directory for publicly viewable camera feeds.
worldcam.ioOpen
Cameras
Free
Provenance
Public visual intelligence map combining cameras and other live geographic data.
provenance-online.comOpen
Cameras
RestrictedFree
Insecam
Directory of publicly reachable camera streams; use only for lawful public-source research.
insecam.orgOpen
Crypto
Free
Etherscan
Ethereum block explorer for transactions, contracts and addresses.
etherscan.ioOpen
Crypto
Free
Mempool.space
Bitcoin blocks, transactions, fees and address activity.
mempool.spaceOpen
Crypto
Free
Solscan
Solana blockchain explorer for wallets, transactions and tokens.
solscan.ioOpen
Crypto
Free
Tronscan
TRON blockchain explorer for addresses, transactions and tokens.
tronscan.orgOpen
Crypto
Free
Blockchair
Multi-chain blockchain explorer and transaction search.
blockchair.comOpen
Crypto
Free
WalletExplorer
Bitcoin address clustering and wallet relationship research.
walletexplorer.comOpen
Crypto
Freemium
Arkham Intelligence
Blockchain address and entity intelligence with free public features.
arkhamintelligence.comOpen
Crypto
Freemium
MetaSleuth
Blockchain investigation and transaction visualization.
metasleuth.ioOpen
Crypto
Free
Chainabuse
Public reports and risk information for suspicious blockchain activity.
chainabuse.comOpen
Geo
Free
ADS-B Exchange
Independent aircraft tracking and flight data map.
globe.adsbexchange.comOpen
Geo
Freemium
MarineTraffic
Ship and vessel tracking with a limited free public view.
marinetraffic.comOpen
People
Free
PhoneInfoga
Open-source phone-number reconnaissance and validation utilities.
github.com/sundowndevOpen
Archive
Free
SingleFile
Save complete web pages locally for reproducible research records.
github.com/gildas-lormeauOpen
Geo
Freemium
GeoSpy
AI-assisted image geolocation with limited free access depending on the service.
geospy.aiOpen
Geo
Freemium
Picarta
AI image geolocation and geographic clue analysis.
picarta.aiOpen