OSINT Tools

Apollo.io

B2B contact and company intelligence

BuiltWith

Website technology profiling platform

DomainTools

Enterprise domain and DNS intelligence

GitHub User Search

Search public GitHub users and repos

Google Maps

Maps, places, and street-level imagery

Have I Been Pwned

Check exposure in known data breaches

Hunter.io

Find and verify professional emails

LinkedIn Search

Search people and companies on LinkedIn

Maltego

Visual OSINT link-analysis platform

Recon-ng

Modular web reconnaissance framework

SecurityTrails

DNS history and domain intelligence platform

Wappalyzer

Detect technologies used by websites

Wayback Machine

View archived versions of web pages

theHarvester

Collect emails and subdomains from public sources

AADInternals

Recon Azure AD / M365 tenant info from a domain

AIHIT

Company database with registration and contact data

AeroLeads

a prospecting platform for finding business emails, phone numbers, and compan

Africa OSINT Toolbox

Africa-focused OSINT directory by ANCIR

Airfleets

Airline fleet and aircraft history database

Airframes.org

Long-running aircraft registration history

Altdns

a subdomain permutation tool that generates altered hostnames for DNS brute f

Anymail Finder

an email discovery and verification platform for finding deliverable professi

Apache Tika

Extract text and metadata from any document type

Archive.is

Archive web pages for evidence