All OSINT Tools

Explore our comprehensive collection of free Open Source Intelligence tools

Showing 28 tools

Google Dorks

Advanced Google search technique using operators to uncover specific, often hidden information.

Key Features:

  • Advanced search operators
  • File type searches
  • Sensitive data discovery
Beginner

Maltego Community Edition

Powerful link analysis tool that visualizes connections between people, companies, domains, and documents.

Key Features:

  • Visual link analysis
  • Entity relationship mapping
  • Transform-based data gathering
Intermediate
Guide

Nmap

A powerful utility for network discovery and security auditing that identifies active hosts, open ports, and running services.

Key Features:

  • Network discovery and host detection
  • Port scanning (TCP/UDP)
  • Service and version detection
Intermediate
Guide

OWASP Amass

In-depth attack surface mapping and asset discovery tool with extensive subdomain enumeration capabilities.

Key Features:

  • Extensive subdomain enumeration
  • Passive and active reconnaissance
  • Integration with 55+ data sources
Advanced
Guide

QGIS

Professional-grade, free, and open-source Geographic Information System for creating and analyzing geospatial data.

Key Features:

  • Professional GIS capabilities
  • Multi-layer mapping
  • Spatial analysis toolbox
Advanced
Guide

Recon-ng

Modular web reconnaissance framework with powerful command-line interface for gathering web data.

Key Features:

  • Modular architecture
  • Database integration
  • Multiple data sources
Advanced

Shodan

Search engine for connected devices that scans the internet and indexes metadata from servers, webcams, routers, and IoT devices.

Key Features:

  • Internet-wide device scanning
  • Banner grabbing and metadata collection
  • Advanced search filters (port, country, OS)
Beginner
Guide

Social Searcher

Free social media search engine for real-time monitoring of mentions, hashtags, and profiles across major platforms.

Key Features:

  • Real-time social media search
  • Multi-platform coverage
  • Hashtag and mention tracking
Beginner
Guide

theHarvester

Classic passive reconnaissance tool for gathering emails, subdomains, and employee names from public sources.

Key Features:

  • Email harvesting
  • Subdomain discovery
  • Employee name collection
Beginner

Botometer

Tool analyzing Twitter account activity to determine likelihood of being an automated bot.

Key Features:

  • Bot detection
  • Activity analysis
  • Automation scoring
Beginner

BuiltWith

Web technology profiler identifying frameworks, CMS, analytics tools, and technologies used to build websites.

Key Features:

  • Technology stack detection
  • Framework identification
  • Analytics tracking
Beginner

Censys

Internet-wide scanning platform with high-quality data and in-depth SSL/TLS certificate analysis.

Key Features:

  • Internet scanning
  • Certificate analysis
  • Infrastructure mapping
Beginner

Companies House

UK government database providing official information on UK-based companies.

Key Features:

  • Company registration details
  • Director information
  • Financial filings
Beginner

CrowdTangle

Browser extension revealing where URLs have been shared across Facebook, Instagram, and Reddit.

Key Features:

  • URL tracking
  • Share analysis
  • Platform coverage
Beginner

DNSDumpster

Web-based tool providing visual maps of DNS infrastructure including servers, MX records, and subdomains.

Key Features:

  • DNS mapping
  • Visual infrastructure diagrams
  • Subdomain discovery
Beginner

ExifTool

Command-line utility for reading, writing, and editing metadata in images and videos.

Key Features:

  • Metadata extraction
  • GPS data recovery
  • Timestamp analysis
Intermediate

Google Earth

Tool combining high-resolution satellite imagery, aerial photography, and geographic data into a 3D globe.

Key Features:

  • Satellite imagery
  • 3D visualization
  • Location verification
Beginner

Have I Been Pwned

Service to check if email addresses or passwords have been compromised in known data breaches.

Key Features:

  • Breach checking
  • Password verification
  • Email monitoring
Beginner

Instaloader

Python tool to download pictures, videos, and metadata from public Instagram profiles.

Key Features:

  • Instagram scraping
  • Metadata extraction
  • Offline analysis
Intermediate

NASA Worldview

Interactive interface for browsing over 900 global satellite imagery layers with near real-time updates.

Key Features:

  • Satellite imagery
  • Near real-time data
  • Environmental monitoring
Intermediate

Namechk

Utility to check username availability across dozens of social media sites and domain registrars.

Key Features:

  • Username availability
  • Cross-platform checking
  • Domain availability
Beginner

OpenStreetMap

Collaborative, crowdsourced project creating a free, editable map of the world.

Key Features:

  • Crowdsourced mapping
  • Detailed geographic data
  • Free and editable
Beginner

Sherlock

Command-line tool that scans hundreds of social networks to find accounts associated with a username.

Key Features:

  • Username search
  • Multi-platform scanning
  • Automated discovery
Intermediate

Spiderfoot

Open-source automation tool that collects and analyzes data from over 100 public sources.

Key Features:

  • Automated data collection
  • 100+ data sources
  • Correlation analysis
Intermediate

Subfinder

Highly efficient subdomain discovery tool using passive online sources.

Key Features:

  • Fast subdomain enumeration
  • Passive reconnaissance
  • Multiple sources
Intermediate

TweetDeck

Real-time Twitter monitoring tool for tracking multiple timelines, topics, and organizing content.

Key Features:

  • Real-time monitoring
  • Multiple timeline management
  • Event tracking
Beginner

Wayback Machine

Digital archive of the World Wide Web allowing users to view historical versions of websites.

Key Features:

  • Website history
  • Deleted content recovery
  • Timeline analysis
Beginner

Wigle

Global database mapping locations of wireless networks for WiFi access point density analysis.

Key Features:

  • WiFi mapping
  • Network geolocation
  • Density analysis
Intermediate