Tools

Essential OSINT Tools

Attack Surface

01

Lupovis Prowl ⭐️

CVE Exploitation and Malicious IP Search Engine

Go

04

Full Hunt

Attack Surface Management

Go

07

ShadowServer

Free Daily Reports Subscription

Go

10

Security Trails

Attack Surface Intelligence API

Go

13

Greynoise

Vulnerability Search Engine

Go

02

Shodan

Intelligence Search Engine

Go

05

PhoneBook

Retrieve URLs from given Domain by IntelligenceX

Go

08

SOCRadar

Extended Threat Intelligence

Go

11

Hunter

Hunter Internet Search

Go

03

Zoomeye

Intelligence Search Engine

Go

06

Onyphe

Cyber Defense Search Engine

Go

09

CriminalIP

Intelligence Search

Go

12

IntelligenceX

Intelligence Search Engine

Go

Sandbox and Reputation

01

Lupovis Prowl

IP Reputation Lookup

Go

04

AppAnyRun

Interactive Malware Analysis

Go

07

IP Quality Score

IP Reputation Lookup

Go

10

Abuse IP

Asset Reputation Lookup

Go

13

Triage

Analyze Malware Samples

Go

16

MobSF

Mobile Security Framework (Android/iOS/Win)

Go

17

Bluecoat Review

URL Reputation by Symantec

Go

20

MetaDefender

Scan Anything with OPSWAT

Go

23

Blacklist Checker

IP, Domain and Email Blacklist Check

Go

25

Broweser ling

Online Browser Sandbox

Go

02

VirusTotal

Free Malware Scanner by Google

Go

05

URLScan

Public Sandbox

Go

08

Google Safe

Google Transparency Report

Go

11

URL Void

Website Reputation Lookup

Go

14

Joe Sandbox

Windows, MacOS and Android Sanbox

Go

14

IBM X-Force

Malware Analysis by IBM

Go

18

Malwares

Hash, IP and Domain Malware Scan

Go

21

FileScan

Sandbox by OPSWAT

Go

24

France Verif

E-commerce Reputation Checker (Extension Available)

Go

03

HybridAnalysis

Free Malware Scanner by Crowdstrike

Go

06

Cuckoo CERT

Online Malware Analysis Tool

Go

09

Talos

Asset Reputation Lookup by Cisco

Go

12

Scam Adviser

E-commerce Website Reputation Lookup

Go

15

Cyber Gordon

Amazing Multi-engine Cyber Reputation Check

Go

15

PA Filtering

URL Reputation by Palo Alto

Go

19

DocGuard

Malware Threat Scan from Hash

Go

22

RST Cloud

IoC (Indicators of Compromise) Lookup by RST Cloud

Go

Network

01

Lupovis Prowl

Malicious IP Lookup and

Go

04

HPing

Send Custom Ping for security assessment

Go

07

Nmap Online

Nmap IP Ports Scan

Go

10

BGP Tools

BGP Info

Go

02

KeyCDN

IP Lookup

Go

05

PeeringDB

Network, Internet Exchange and Facility DB

Go

08

Wigle

Wireless Networks Mapping

Go

11

IP Void

Popular IP Tools

Go

03

IPInfo

Trusted IP address data

Go

06

IPTools

Basic IP and Network Tools

Go

09

Port Scanner

Port scanner

Go

DNS

01

Dig

DNS Dig

Go

04

MXT Toolbox

MX DNS Audit

Go

07

WhatsmyDNS

DNS Whois Details

Go

10

Dig GUI

DNS Dig (modern interface)

Go

02

DNS Dumpster

Deep DNS Lookup

Go

05

DNSLytics

Reverse IP to get hosted domains on server

Go

08

DomainTools

DNS Whois Lookup

Go

11

DNS Security

DNS Security Check & DMARC by Merox

Go

03

Security Trails

DNS Lookup

Go

06

Where Goes

Where does a link go

Go

09

DNS History

Domain DNS Records History

Go

Image

01

Tiny Eye

Reverse Image Search

Go

02

PimEyes

Reverse Face Specialized Image Search

Go

03

Pic2map

Image EXIF Data Viewer

Go

Vulnerability Exploitation and Scanner

01

Lupovis Prowl

Malicious IP

Go

04

OpenVAS Online

Online Vulnerability Scanner

Go

07

Wappalizer

Website Technologies Scanner

Go

10

Sucuri

Website Approximative Traffic and Ranking

Go

13

NetCraft

Website Technologies and Infrastructure Scanner

Go

02

SSL Labs

Website SSL Certificate Scanner by Qualys

Go

05

WEB Archive

Internet Archive Machine

Go

08

CMSSecurityScan

WordPress, Joomla and Drupal Security Scan

Go

11

Similar Web

Website Approximative Traffic and Ranking

Go

14

BuildWith

Assets Technologies Scanner

Go

03

Cloudflare Radar

Amazing URL Scanner

Go

06

SSL Scan

SSL/TLS Scan

Go

09

WAFwoo

WAF Detection

Go

12

Web Check

All-in-one Web site OSINT tool

Go

Exploits and CTI

01

Lupovis Prowl

Threat Intelligence Based on Deception

Go

04

Pulse Dive

Free Threat Intelligence

Go

07

Vulners

Exploit Search Engine

Go

10

OpenCTI

CTI Structuring Platform by French ANSSI

Go

13

RiskIQ

Internet Intelligence by Microsoft

Go

16

LOLBin

Attackers Binaries used out of their Purpose

Go

02

LeakIX

Assets Leaks and Security Incident

Go

05

CVE Shield

Crowdsources CVE Intel

Go

08

ExploitDB

Vulnerabilities Advanced Database

Go

11

CarbonBlack

VMware CB Real-time threat research data

Go

14

First.org

CVSS Score Adapted to your Context

Go

17

GTFOBins

Binaries to Bypass Misconfigured Systems

Go

03

Threatbook CTI

Efficient Cyber Threat Intelligence

Go

06

CVE Details

Vulnerabilities database

Go

09

Alienvault OTX

Community Powered Open Threat Exchange Platform

Go

12

Palo Alto Atoms

Actionable Threat Objects and Mitigations

Go

15

Filesec

Latest Attackers File Extensions

Go

18

Abuse.ch

Community Driven Threat Intelligence

Go

Active Directory

01

Purple Knight

Active Directory Security Audit by Semperis

Go

04

HardenAD

AD and M365 Infrastructure Hardening-

Go

07

Adalanche

Open-Source Active Directory ACL Visualizer

Go

02

Ping Castle

Active Directory Security at 80% by Vincent Le Toux

Go

05

CRT

CrowdStrike Reporting Tool for Azure AD / O365

Go

03

BloodHound

AD and AAD Complex Attack Path Audit

Go

06

AAD Internals

Extract openly available tenant information

Go

Authentication

01

CRT

Certificate History Search Engine

Go

04

NTLM

Database of +8,7 billion Password Hashes

Go

02

2FA Directory

Check if MFA/2FA is Supported

Go

03

CyberChef

Analyzing and Encoding Data

Go

End Point

01

Browser Test

Web Browser Scan

Go

04

Wicar

Test Your Anti-Malware Anti-Virus

Go

02

Ransomware Risk

Ransomware Risk Assessment by Zscaler

Go

05

OTX Endpoint Security

Community Powered Endpoint Security Tool

Go

03

Grabify

Track Clicks on Your URL

Go

06

SurfShark

DNS Leak Test

Go

Additional

01

GrayHat Warfare

Buckets and Shorteners finder

Go

04

OSINT Tracker

Track Your Investigations Online

Go

07

Meta Crawler

Aggregates Search Engines

Go

02

Blackbird

Map Accounts by Username

Go

05

Pastebin

Combine with Google Dorks

Go

08

Search Code

Search repositories

Go

03

Grep

Search Across Git Repositories

Go

06

Coalition

Cyber Score for your Company

Go

Advisory

01

NCSC

Go

04

CERT-FR

French CERT Security Advisories

Go

07

CERT-BE

Go

02

CISA KEV

Know Exploited Vulnerabilities Catalog

Go

05

MyCERT

Malaysia CERT Security Advisories

Go

03

CERT-EU

European Union CERT Security Advisories

Go

06

ORANGE CERT

Orange CERT

Go

Data Breach

01

Have I Been Pwned

Search Email across multiple data breaches

Go

02

Leak-Lookup

Search across multiple data breaches

Go

03

LeakIX

Find Data Leaks

Go