OSINT Tool Library

The world's first search engine for Internet-connected devices — find exposed servers, cameras, databases.

Analyze suspicious files, URLs, IPs, and hashes using 70+ antivirus engines simultaneously.

Free and open source utility for network discovery and security auditing.

Find and verify professional email addresses associated with any domain or company.

Internet-wide scanning for hosts, certificates, and attack surface analysis.

Historical DNS data, IP history, subdomain enumeration, and WHOIS for any domain.

Passive subdomain discovery tool using 40+ passive sources for maximum coverage.

Industry-leading graphical link analysis tool for mapping relationships between entities.

Explore more than 866 billion web pages saved over time.

Hurricane Electric BGP Toolkit for network routing and ASN info.

Gather emails, subdomains, hosts, employee names, open ports from public sources.

In-depth attack surface mapping and external asset discovery from OWASP.

Search engine for darknet, data leaks, document sharing and breach data.

Open threat intelligence community — share and research IOCs, threat indicators, and pulses.

Incredibly fast crawler designed for OSINT.

Automated OSINT reconnaissance tool that integrates with over 100 APIs.

Certificate Transparency Search Tool.

Free domain research tool to find DNS records, subdomains, host data, and network map.

Web technology information profiler tool.

Search engine for Tor hidden services — searchable index of .onion sites.

Set of libraries to perform Open Source Intelligence tasks.

People tracker on the Internet: OSINT analysis and research tool.

Extract metadata from public documents found on a target domain.