OSINT Tools by Data Type & Use Case
Every investigation starts with what you already have. Pick the data type you hold — a domain, a username, an email, an IP — to see the tools that take it, or jump straight to a use case like find email from domain or username to social media. Each tool is indexed by what it takes in and what it returns, so you can chain them into a workflow.
Start from a data type
Domain NameURLReal NameIP AddressUsernameCompany NameEmail AddressHash (MD5/SHA)Phone NumberImage / PhotoGeolocation (Physical)Physical AddressDocument / FileMalware SampleCryptocurrency WalletCVE / VulnerabilityWebsiteVideoIP Range / CIDRIOC (Indicator of Compromise)Media ArticleASNCompany RegistrationDisinformation Narrative ClusterFace / BiometricVessel MMSI / IMO NumberSSL CertificateFlight Number / CallsignAndroid Package (APK)Aircraft ICAO24 HexTor Onion Service v3 AddressSatellite ImageDate of BirthVehicle InfoBlockchain Transaction HashLicense PlateSmart Contract AddressEmail HeaderSource Code SnippetAccess TokenLeaked Credential
Popular use cases
Find Social Media Accounts from a Username124Find Intelligence reports from a URL109Find Intelligence reports from a domain103Find Indicators of compromise (IOCs) from an IP address101Find Indicators of compromise (IOCs) from a domain96Find Indicators of compromise (IOCs) from a URL83Find Intelligence reports from a name81Find Intelligence reports from an IP address71Find Social media accounts from a name70Find DNS Records from a Domain62Find Business relationships from a company name60Find URLs from a domain60Find Subdomains of a Domain57Find Indicators of compromise (IOCs) from a file hash57Find Websites from a URL53Find Activity timelines from a username50Find Intelligence reports from a company name48Find Social media accounts from a URL47Find URLs from a username47Find Physical addresses from a name46Find Activity timelines from a URL45Find Images from a location44Find Data Breaches from an Email Address42Find Social media accounts from an email address42Find the Technology Stack of a Domain41Find Company registration records from a company name40Find Websites from a domain38Find Intelligence reports from an email address38Find URLs from a name38Find Intelligence reports from a document36Find Intelligence reports from a file hash36Find DNS records from an IP address36Find Geolocations from a physical address35Find Court records from a name35Find CVEs and vulnerabilities from a domain34Find Activity timelines from a name34Find Email Addresses from a Domain31Find Service banners from an IP address31Find CVEs and vulnerabilities from an IP address31Find Intelligence reports from a malware sample31Find Business relationships from a name31Find Threat-actor profiles from an IP address30Find Social media accounts from a phone number30Find Employees from a domain29Find Whois data from a domain29Find Threat-actor profiles from a file hash29Find Email addresses from a name29Find Indicators of compromise (IOCs) from a CVE28Find Intelligence reports from a CVE28Find SSL/TLS certificates from a domain28Find Indicators of compromise (IOCs) from a malware sample28Find Financial records from a company name27Find Threat-actor profiles from a domain27Find Technology stacks from a URL27Find CVEs and vulnerabilities from a URL26Find Open ports and services from a domain25Find Geolocation (ip-based) from an IP address25Find Open ports and services from an IP address25Find Intelligence reports from a username25Find Service banners from a domain24
Use-case pages list 5+ tools each; data-type pages, 8+. Combinations with fewer tools are reachable but kept out of the index to avoid thin pages.