This list provides a structured overview of OSINT tools frequently used in cybercrime investigation, digital forensics, infrastructure analysis, and intelligence gathering.
1. DNS & Domain Intelligence
- https://centralops.net – WHOIS, traceroute, DNS lookups
- https://dnsdumpster.com – DNS mapping and subdomains
- https://whois.domaintools.com – detailed WHOIS information
- https://viewdns.info – multi-DNS tools, IP checks
- https://mxtoolbox.com – MX records, blacklists, DNS status
- https://crt.sh – SSL certificate transparency logs
- https://securitytrails.com – DNS history, subdomains, IP data
- https://censys.io – certificate & service search engine
- https://dnstwister.report – typosquatting domain monitoring
- https://transparencyreport.google.com/https/certificates – Google CT logs
- https://hexillion.com – Whois, DNS & IP toolkit
- https://www.tejji.com – Whois + DNS lookups
- https://myip.ms – domain & hosting intelligence
- https://www.geobytes.com – IP geolocation & ASN info
2. IP Address & Infrastructure Intelligence
- https://ipapi.co – IP geolocation API
- https://hackertarget.com/ip-tools – IP tests & network tools
- https://shodan.io – internet-connected devices search
- https://zoomeye.org – infrastructure scanning
- https://bgp.he.net – BGP and ASN database
- https://onyphe.io – cyber threat sensors & intel
- https://viz.greynoise.io – scan activity intelligence
- https://ipvoid.com – IP reputation
- https://talosintelligence.com – IP/domain reputation
- https://badpackets.net – malicious activity reports
- https://spyonweb.com – links between IPs/domains/GA-IDs
- https://cymru.com – ASN & IP block intelligence
- ipapi bulk map – bulk IP mapping
3. Email Intelligence
- https://haveibeenpwned.com – breach lookup
- https://hunter.io – email discovery from domains
- https://emailrep.io – email reputation scoring
- https://www.emailsherlock.com – reverse email search
- https://verify-email.org – email existence check
- https://dehashed.com – breached data & credential lookup
- https://epieos.com – reverse email/phone lookup
- https://seon.io/resources/tools/email-verifier – SEON email analyzer
4. Phone Number Intelligence
- https://truecaller.com – phone number identity
- https://sync.me – number lookup
- https://libphonenumber.appspot.com – phone validation
- Receive SMS Free – temporary phone numbers
5. Web Analysis & Metadata Extraction
- https://urlscan.io – website scanning & screenshots
- https://securityheaders.com – HTTP header analysis
- https://builtwith.com – technology and CMS detection
- https://exiftool.org – EXIF and file metadata
- https://www.elevenpaths.com/labstools/foca.html – document metadata extraction
- https://www.getsinglefile.com – save full website snapshots
- https://whatweb.net – server fingerprinting
- https://nmap.org – port scanning & OS detection
- https://nikto.sourceforge.net – webserver vulnerability scanning
- https://wpscan.com – WordPress vulnerability scanner
- https://web.archive.org – Wayback Machine archive
- https://archive.today – webpage archiving
- https://www.outwit.com – OutWit Hub data extraction
- https://visualsitemapper.com – visual website mapping
- https://webcache.googleusercontent.com – Google cached pages
6. Social Media & Identity Research
- https://pipl.com – person search
- https://social-searcher.com – social media monitoring
- https://namechk.com – username availability
- https://peekyou.com – public profile lookup
- Netbookcamp – social network mentions
- http://www.icerocket.com – blog search
- https://inteltechniques.com – OSINT resources & methods
7. Twitter / X Intelligence
- Twitter Tunnel – mention tracking
- Conweets – shared tweets between accounts
- One Million Tweet Map – geolocation heatmap
- Echosec – geolocated social data
- Geofeedia – location-based social monitoring
- Tweet Archivist – tweet archiving
8. Dark Web Tools
- https://ahmia.fi – Tor hidden services search
- https://dark.fail – verified .onion links
9. Search Engines & OSINT Frameworks
- https://dorksearch.com – Google Dorks search
- https://www.aware-online.com/en/osint-tools – OSINT tool directory
- https://search.carrot2.org – clustered search engine
- https://osintframework.com – OSINT techniques index
- https://maltego.com – relationship mapping
- https://www.spiderfoot.net – automated OSINT
- https://mitaka.ninoseki.dev – IOC lookup
- https://intelx.io – darknet, leaks & data search
- https://isearchfrom.com – search from other regions
- Colossus Search – deep search engine
10. Malware Analysis & Sandboxes
- https://virustotal.com – file, hash & URL analysis
- https://hybrid-analysis.com – sandbox analysis
- https://any.run – interactive malware sandbox
- https://anubis.iseclab.org – malware sandbox
- https://joesecurity.org – advanced sandboxing
- https://bazaar.abuse.ch – malware samples/hash search
- https://otx.alienvault.com – threat intel & IOCs
- https://www.threatminer.org – domain & threat intel
- https://www.threatcrowd.org – visual entity mapping
- https://community.riskiq.com – asset intelligence
11. Kali Linux OSINT Tools
- SpiderFoot – automated recon
- theHarvester – emails & domain gathering
- Maltego CE – relationship analysis
- Recon-ng – modular OSINT toolset
- Metagoofil – metadata extraction
- ExifTool – metadata inspection
- Creepy – geolocation via social posts
12. Browser Extensions (Privacy & OSINT)
- Ghostery – tracker blocking
- Privacy Badger – privacy protection
- Disconnect – tracking protection
- AdBlock Ultimate – ad blocking
- Cookie AutoDelete – automatic cookie cleanup
- Browsec VPN – lightweight proxy for recon
13. Additional Useful Tricks
- WIN + ALT + R – screen recording
- WIN + ALT + G – last 30 seconds replay capture
Summary
This toolbox provides a powerful foundation for:
- cybercrime investigation
- threat intelligence
- digital forensics
- blockchain analysis
- infrastructure mapping
- human OSINT
- darknet research
It forms the core OSINT equipment list used across the SystemLog workflows.