OSINTCCCommand Center

Catalogue d’outils OSINT

3 050 outils

DNS, WHOIS, DKIM selector discovery, SPF/DMARC and blacklist lookups with plain-English AI explanations. Free, no signup

Domaine / IP / Web osint_stuff_tool_collection domainip-investigation)Domain/IP investigation

Domain and website reconnaissance for DNS, WHOIS/RDAP, public subdomains, certificates, technology, reputation and typosquatting.

Domaine / IP / Web osint_stuff_tool_collection domainip-investigation)Domain/IP investigation

check A, AAAA, MX, TXT, CNAME and NS records for any domain name in the browser

Domaine / IP / Web osint_stuff_tool_collection domainip-investigation)Domain/IP investigation

calculate IPv4 subnet masks, IP ranges, broadcast addresses and host counts; works fully client-side

Domaine / IP / Web osint_stuff_tool_collection domainip-investigation)Domain/IP investigation

Open search engine for domain research & OSINT — 44.1M domains indexed, free API tier.

Domaine / IP / Web osint_stuff_tool_collection domainip-investigation)Domain/IP investigation

Very(!) fast and simple tool for subdomain bruteforce. It find 53 subdomains, scanned 31160 variations in 31 seconds.

Domaine / IP / Web osint_stuff_tool_collection subdomains-scanbrute)Subdomains scan/brute

Subdomain enumeration and information gathering tool

Domaine / IP / Web osint_stuff_tool_collection subdomains-scanbrute)Subdomains scan/brute

An improved and accelerated version of famous sublist3r. Looks for subdomains in 11 sources (see picture). It's possible to apply bruteforce (flag -b)

Domaine / IP / Web osint_stuff_tool_collection subdomains-scanbrute)Subdomains scan/brute

Fast and reliable #python script that makes active and/or passive scan to obtain subdomains and search for open ports. Used 21 different #OSINT sources (AlienVault, ThreatCrowd, Ur

Domaine / IP / Web osint_stuff_tool_collection subdomains-scanbrute)Subdomains scan/brute

Tool to find target infrastructure, files, and apps on the popular cloud providers

Domaine / IP / Web osint_stuff_tool_collection subdomains-scanbrute)Subdomains scan/brute

TwiSub-domain takeover tool

Domaine / IP / Web osint_stuff_tool_collection subdomains-scanbrute)Subdomains scan/brute

Very fast #go tool for search subdomains. For example, it fin 111 http://tesla.com subdomains in 0.003 seconds.

Domaine / IP / Web osint_stuff_tool_collection subdomains-scanbrute)Subdomains scan/brute

A fast, API-first subdomain discovery service with advanced queries.

Domaine / IP / Web osint_stuff_tool_collection subdomains-scanbrute)Subdomains scan/brute

#python tool for searching and filtering subdomains using different APIs: SecurityTrails, AlienVault, VirusTotal, SpyOnWeb, Crt sh

Domaine / IP / Web osint_stuff_tool_collection subdomains-scanbrute)Subdomains scan/brute

Simple tool to find origin servers of websites protected by #Cloudflare, #Sucuri or #Incapsula with a misconfiguration DNS

Divers osint_stuff_tool_collection cloudfare)Cloudfare

Reconnaissance Real IP address for Cloudflare Bypass

Divers osint_stuff_tool_collection cloudfare)Cloudfare

"Yet another Ransomware gang tracker" (c) Group profiles, recent updates, forums and markets list + some stats. A real treasure cybercrime researchers.

Domaine / IP / Web osint_stuff_tool_collection databases-of-domains)Databases of domains

API which allows you to search Whois-database (430M+ domains since 1986) by keyword, company name or owner name

Domaine / IP / Web osint_stuff_tool_collection databases-of-domains)Databases of domains

lists of deleted and expired domains (last 7 days)

Domaine / IP / Web osint_stuff_tool_collection databases-of-domains)Databases of domains

search for domains for sale

Domaine / IP / Web osint_stuff_tool_collection databases-of-domains)Databases of domains

database of domains registered in the last day

Domaine / IP / Web osint_stuff_tool_collection databases-of-domains)Databases of domains

An interesting tool for researchers of IT history and data journalists. Just an FREE API that shows how many sites were registered in each domain zone on a given day (since January

Domaine / IP / Web osint_stuff_tool_collection databases-of-domains)Databases of domains

search by 230 billion DNS records retrieved from 2008 to the present.

Domaine / IP / Web osint_stuff_tool_collection databases-of-domains)Databases of domains

Freely available, user-maintained, database of networks, and the go-to location for interconnection data.

Domaine / IP / Web osint_stuff_tool_collection databases-of-domains)Databases of domains

Search whois data by address, city, name, surname, phonenumber

Domaine / IP / Web osint_stuff_tool_collection databases-of-domains)Databases of domains

Keyword Research, Competitive Analysis, Website Ranking

Divers osint_stuff_tool_collection website-traffic-look-up)Website traffic look up

Shows estimate daily website traffic, Alexa rank, average visit duration and used techhologies.

Divers osint_stuff_tool_collection website-traffic-look-up)Website traffic look up

Getting detailed info about website traffic (sources, keywords, linked sites etc)

Divers osint_stuff_tool_collection website-traffic-look-up)Website traffic look up

Getting detailed information about website: - general domain info; - valuation ($); - popularity; - traffic; - revenue; - security (WOT rating, McAfee WebAdvisor Rating etc) and mo

Divers osint_stuff_tool_collection website-traffic-look-up)Website traffic look up

extension, which discover what runs a website: frameworks, Analytics Tools, Wordpress Plugins, Fonts.

Divers osint_stuff_tool_collection website-technology-look-up)Website technology look up

search by technology, keyword or served asset, with country and industry breakdowns

Divers osint_stuff_tool_collection website-technology-look-up)Website technology look up
Divers osint_stuff_tool_collection website-technology-look-up)Website technology look up
Divers osint_stuff_tool_collection website-technology-look-up)Website technology look up
Divers osint_stuff_tool_collection website-technology-look-up)Website technology look up
Divers osint_stuff_tool_collection website-technology-look-up)Website technology look up
Divers osint_stuff_tool_collection website-technology-look-up)Website technology look up
Divers osint_stuff_tool_collection website-technology-look-up)Website technology look up
Divers osint_stuff_tool_collection website-technology-look-up)Website technology look up

type name of #webdev technology (jquery, django, wordpress etc) and get the list of websites, which used it.

Divers osint_stuff_tool_collection website-technology-look-up)Website technology look up

Tool for search and analyze directories, can find interesting things if the server has the "index of" mode enabled (also useful if the directory listing is not enabled).

Dark Web osint_stuff_tool_collection find-directories)Find directories

A simple Python tool that helps you determine when (approximately) some content was published. It find the Last-Modified header of linked images on a particular web page.

Outils & frameworks osint_stuff_tool_collection source-code-analyzes)Source Code Analyzes

The standard browser source code view did not display the actual source code. View Rendered Source extension solve this problem. It shows the html code after all JavaScript functio

Outils & frameworks osint_stuff_tool_collection source-code-analyzes)Source Code Analyzes

GoogleChrome extension for scanning a web app for use of vulnerable JavaScript libraries

Outils & frameworks osint_stuff_tool_collection source-code-analyzes)Source Code Analyzes

GoogleChrome extension which reveals structured metadata (Microdata, RDFa, JSON-LD, Turtle, etc.) embedded within HTML documents.

Outils & frameworks osint_stuff_tool_collection source-code-analyzes)Source Code Analyzes

GoogleChrome, Firefox and MicrosoftEdge addon to save webpage in single html file

Outils & frameworks osint_stuff_tool_collection source-code-analyzes)Source Code Analyzes

OSINT scanning tool which discovers and maps directories found in javascript files hosted on a website

Outils & frameworks osint_stuff_tool_collection source-code-analyzes)Source Code Analyzes

Get a detailed report with links to CSS, Javascript, Fonts, XHR, Images and domains web pages

Outils & frameworks osint_stuff_tool_collection source-code-analyzes)Source Code Analyzes