DNS, WHOIS, DKIM selector discovery, SPF/DMARC and blacklist lookups with plain-English AI explanations. Free, no signup
Catalogue d’outils OSINT
3 050 outils
Domain and website reconnaissance for DNS, WHOIS/RDAP, public subdomains, certificates, technology, reputation and typosquatting.
check A, AAAA, MX, TXT, CNAME and NS records for any domain name in the browser
calculate IPv4 subnet masks, IP ranges, broadcast addresses and host counts; works fully client-side
Open search engine for domain research & OSINT â 44.1M domains indexed, free API tier.
Very(!) fast and simple tool for subdomain bruteforce. It find 53 subdomains, scanned 31160 variations in 31 seconds.
Subdomain enumeration and information gathering tool
An improved and accelerated version of famous sublist3r. Looks for subdomains in 11 sources (see picture). It's possible to apply bruteforce (flag -b)
Fast and reliable #python script that makes active and/or passive scan to obtain subdomains and search for open ports. Used 21 different #OSINT sources (AlienVault, ThreatCrowd, Ur
Tool to find target infrastructure, files, and apps on the popular cloud providers
TwiSub-domain takeover tool
Very fast #go tool for search subdomains. For example, it fin 111 http://tesla.com subdomains in 0.003 seconds.
A fast, API-first subdomain discovery service with advanced queries.
#python tool for searching and filtering subdomains using different APIs: SecurityTrails, AlienVault, VirusTotal, SpyOnWeb, Crt sh
Simple tool to find origin servers of websites protected by #Cloudflare, #Sucuri or #Incapsula with a misconfiguration DNS
Reconnaissance Real IP address for Cloudflare Bypass
"Yet another Ransomware gang tracker" (c) Group profiles, recent updates, forums and markets list + some stats. A real treasure cybercrime researchers.
API which allows you to search Whois-database (430M+ domains since 1986) by keyword, company name or owner name
lists of deleted and expired domains (last 7 days)
search for domains for sale
database of domains registered in the last day
An interesting tool for researchers of IT history and data journalists. Just an FREE API that shows how many sites were registered in each domain zone on a given day (since January
search by 230 billion DNS records retrieved from 2008 to the present.
Freely available, user-maintained, database of networks, and the go-to location for interconnection data.
Search whois data by address, city, name, surname, phonenumber
Keyword Research, Competitive Analysis, Website Ranking
Shows estimate daily website traffic, Alexa rank, average visit duration and used techhologies.
Getting detailed info about website traffic (sources, keywords, linked sites etc)
Getting detailed information about website: - general domain info; - valuation ($); - popularity; - traffic; - revenue; - security (WOT rating, McAfee WebAdvisor Rating etc) and mo
extension, which discover what runs a website: frameworks, Analytics Tools, Wordpress Plugins, Fonts.
search by technology, keyword or served asset, with country and industry breakdowns
type name of #webdev technology (jquery, django, wordpress etc) and get the list of websites, which used it.
Tool for search and analyze directories, can find interesting things if the server has the "index of" mode enabled (also useful if the directory listing is not enabled).
A simple Python tool that helps you determine when (approximately) some content was published. It find the Last-Modified header of linked images on a particular web page.
The standard browser source code view did not display the actual source code. View Rendered Source extension solve this problem. It shows the html code after all JavaScript functio
GoogleChrome extension for scanning a web app for use of vulnerable JavaScript libraries
GoogleChrome extension which reveals structured metadata (Microdata, RDFa, JSON-LD, Turtle, etc.) embedded within HTML documents.
GoogleChrome, Firefox and MicrosoftEdge addon to save webpage in single html file
OSINT scanning tool which discovers and maps directories found in javascript files hosted on a website
Get a detailed report with links to CSS, Javascript, Fonts, XHR, Images and domains web pages