Find Intelligence reports from a domain

Wireshark

Network protocol analyzer

urlscan.io

Scan and analyze URLs safely

AADInternals

Recon Azure AD / M365 tenant info from a domain

AbuseIPDB

a community IP reputation database for checking and reporting abusive interne

AeroLeads

a prospecting platform for finding business emails, phone numbers, and compan

AlienVault OTX

a community threat intelligence exchange for pulses, indicators, malware, and

Anymail Finder

an email discovery and verification platform for finding deliverable professi

Aquatone

HTTP host screenshotting and clustering

Babel Street

Multilingual OSINT and PAI platform

BitSight

External cyber-risk rating by BitSight

Burp Suite

a commercial web security testing platform for proxying, scanning, and analyz

CVE Details

a searchable vulnerability database for CVEs, vendors, products, versions, an

Can I Take Over XYZ

a community-maintained reference for identifying services vulnerable to subdo

Cisco Talos Intelligence

a threat reputation portal for IPs, domains, malware, vulnerabilities, and sp

Cloud Custodian

Query cloud accounts for policy-violating resources

Cloudflare Radar

Internet trends and DDoS data from Cloudflare

Companies House

the UK company register for searching companies, officers, filings, and corpo

ContactOut

a recruiting and contact search platform for finding professional emails and

Cortex

an observable analysis and active response engine used with TheHive and secur

CryptoScamDB

Check a crypto address or domain against known scams

CyberChef

a browser-based data transformation workbench for decoding, parsing, hashing,

Cyberbro

Extract IOCs from raw text and enrich them across reputation services

DNSReaper

Subdomain takeover detection scanner

Datasploit

Domain/email/username OSINT framework

Email Hippo

an email verification API and service for checking deliverability and fraud s

Epieos

an email and phone OSINT platform for finding accounts and traces linked to i

Exploit-DB

a public exploit archive maintained by Offensive Security for vulnerability r

Fediverse.observer

Directory and stats for Fediverse instances

Feodo Tracker

an abuse.ch tracker for botnet command-and-control indicators associated with

FindThatLead

an email discovery and verification service for domains, companies, and profe

FortiGuard Web Filter Lookup

Look up a URL, domain or IP reputation and category

GLEIF Search

a global Legal Entity Identifier search service for companies and organizatio

GetProspect

a B2B email finder and contact database for company and professional investig

Google Safe Browsing

a Google service and API for checking URLs against unsafe web resource lists

Greenbone Community Edition

an open-source vulnerability scanning stack for identifying known issues acro

Grype

a vulnerability scanner for container images, filesystems, and software bills

Harpoon

Meta OSINT CLI wrapping 30+ APIs

Hudson Rock Cavalier

Infostealer exposure lookup tool

IBM X-Force Exchange

a threat intelligence sharing and enrichment platform for indicators, malware

Interactsh

an out-of-band interaction server used to verify blind vulnerabilities and ca

Interlace

Multi-threaded recon CLI runner

Jaeles

a signature-based web application scanner for detecting security issues and e

Kickbox

an email verification platform for checking mailbox existence, quality, and d

LeakCheck

Search compromised breach records

Lusha

a B2B contact data platform for enriching people, companies, emails, and phon

MISP

an open-source threat intelligence platform for sharing indicators, events, g

Mailboxlayer

an email validation API for syntax checks, MX verification, and disposable em

Maltrail

Detect traffic to malicious domains and IPs from blacklists

Malwarebytes Labs

a threat research publication and malware intelligence source for campaigns a

Metasploit Framework

Penetration testing and exploit framework

Mozilla Observatory

Mozilla TLS and HTTP-header grader

NVD

the U.S. National Vulnerability Database for CVEs, CPEs, CVSS scores, and ref

NeverBounce

an email verification service for validating deliverability and reducing boun

Newsguard Misinformation Tracker

Paid analyst news-credibility ratings

Nikto

a web server scanner for dangerous files, outdated software, and common misco

Nuclei

a template-based vulnerability scanner used to detect misconfigurations and e

Nuclei Templates

a community template library used by Nuclei to identify vulnerabilities and m

OONI Explorer

OONI internet censorship measurement archive

OSINT Framework

Interactive mind-map directory of free OSINT resources by data type

OSV-Scanner

a vulnerability scanner that checks dependencies against the Open Source Vuln