FOLLOW THE TRACES.
CONNECT THE SIGNALS.
OSINT toolkit
Explore the tools02 / Tool catalogue
Tools[20]
- /01Search
Dork builder
Build targeted Google searches for accounts, emails, names, phone numbers and domains.
open - /02Files & hashes
Hash lab
Calculate file and text hashes, identify possible hash types and compare fingerprints.
open - /03Domains & network
Domain recon
Inspect DNS, email security, registration data, certificate subdomains and archived pages.
open - /04Domains & network
IP recon
Explore network ownership, approximate location, reverse DNS and passive port and CVE data.
open - /05People & accounts
Email inspection
Check address syntax, provider type, mail servers, email security and public Gravatar details.
open - /06Breaches
Breach check
Look for known email breaches and exposed passwords using password hash prefixes.
open - /07People & accounts
Username radar
Check a username across hundreds of public sites using the WhatsMyName catalogue.
open - /08People & accounts
Phone inspection
Validate number formats, country and number type locally. Get links for further research.
open - /09People & accounts
Telegram profiles
Read public account previews, member counts and recent posts from public channels.
open - /10Blockchain
Crypto trail
Inspect supported crypto addresses, balances and recent transactions. Follow counterparties.
open - /11People & accounts
GitHub footprint
Explore public profiles, repositories, organizations, commit emails and published keys.
open - /12Files & hashes
Metadata explorer
Extract image, PDF and Office metadata locally: authors, dates, software and available GPS data.
open - /13Domains & network
Lookalike domains
Generate domain lookalikes and check DNS and mail records for possible phishing leads.
open - /14Domains & network
Favicon fingerprint
Calculate favicon hashes locally and open searches for infrastructure using the same icon.
open - /15Threat intel & phishing
Email header inspection
Reconstruct mail routes and inspect authentication results and suspicious header mismatches.
open - /16Domains & network
Archive footprint
Explore archived URLs in Common Crawl and Wayback without contacting the target site.
open - /17Threat intel & phishing
URL inspection
Inspect link structure and suspicious patterns. Expand short links and consult public threat sources.
open - /18Decoders & utilities
ID & time decoder
Decode supported platform IDs and timestamps, or convert dates between formats.
open - /19Decoders & utilities
MAC vendor lookup
Identify IEEE vendor assignments, convert address formats and spot local or multicast addresses.
open - /20Threat intel & phishing
Reputation signals
Compare IPs, domains, URLs and emails with public threat feeds. Listings are leads, not proof.
open
Files are analysed locally in your browser.