Talks videos 🎬 Watch here
- Acquisitions https://acquiredby.co/apple-acquisitions/
- ViewDNS https://viewdns.info
- Certificate Transparency services
- Shodan https://shodan.io
- Censys https://censys.io/
- Crt.sh https://Crt.sh
- Certspotter https://sslmate.com/certspotter/
- Google Transparency Report https://transparencyreport.google.com/https/certificates
- Facebook Certificate Transparency Monitoring https://developers.facebook.com/tools/ct/
- Amass https://github.com/OWASP/Amass
- Subfinder https://github.com/projectdiscovery/subfinder
- Sublist3r https://github.com/aboul3la/Sublist3r
- Findomain https://github.com/Findomain/Findomain
- Sudomy https://github.com/screetsec/Sudomy
- RiskIQ https://community.riskiq.com/home
- Cisco Umbrella https://umbrella.cisco.com/
- SecurityTrails https://securitytrails.com/
- CIRCL Passive DNS https://www.circl.lu/services/passive-dns/
- SpamHaus Passive DNS https://www.spamhaus.com/product/passive-dns/
- Word Generator https://wordsmith.org/anagram
- https://coveryourtracks.eff.org
- AmIUnique https://www.amiunique.org
- Whoer https://whoer.net
- WhatU https://whatu.info
- HTTPS everywhere https://addons.mozilla.org/en-US/firefox/addon/https-everywhere/
- Privacy badger https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/
- User agent switcher https://addons.mozilla.org/en-US/firefox/addon/user-agent-string-switcher/
- https://haveibeenpwned.com
- https://tosdr.org
- https://privacytools.io
- https://justgetmydata.com
- https://justdeleteme.xyz
- https://accountkiller.com
- https://www.securemessagingapps.com/
- https://inteltechniques.com/data/workbook.pdf
- https://webbreacher.com/2017/04/24/removing-yourself-from-the-internet/
- https://www.learnallthethings.net/blog/2018/1/23/opting-out-like-a-boss-the-osint-way
- https://tisiphone.net/2017/01/25/thwart-my-osint-efforts-while-binging-tv/
- https://bgpview.io/asn/131279
- https://github.com/nknetobserver/nknetobserver.github.io
- RedStar OS
- Foreign Trade of the DPRK http://www.korean-books.com.kp/en/search/?page=periodic-trade
- NK websites
- dprkportal.kp
- portal.net.kp
- webmail.star.net.kp
- sns.star.net.kp
- Bellingcat tools: http://bit.ly/bcattools
- Torrent Tracking https://iknowwhatyoudownload.com
- Strava HeatMap https://www.strava.com/heatmap
dig a example.com +short> IPswhois -h whois.cymru.com x.x.x.x> ASN, company name
Hidden Gems via URL Shorteners - Utku Sen
- https://github.com/lc/gau
- https://github.com/OJ/gobuster
- https://github.com/utkusen/urlhunter
- https://shorteners.grayhatwarfare.com/
- https://wiki.archiveteam.org/index.php?title=URLTeam
- https://tracker.archiveteam.org:1338/
- Unshort URL:
curl https://xx.xx/xxx --head
- docs.google.com/a/CompanyName
- docs.google.com/a/CompanyName.com
- drive.google.com/a/CompanyName
- drive.google.com/a/CompanyName.com
- Includes "trello.com" AND "Company Name"
- Include "company.com" AND "admin" OR "private"
- Include "company.com" AND "resetToken"
- Include "company.com" AND "PHPSESSIONID"
- Include "google.com/maps/place" AND "39.9,32.3"
- Tracking Trends
- Block Trolls
- MegaBlock https://megablock.xyz/
- Twitter Block Chain https://chrome.google.com/webstore/detail/twitter-block-chain/dkkfampndkdnjffkleokegfnibnnjfah
- Block together https://twitter.com/blocktogether
- Venator tool: https://github.com/mauroeldritch/venator
- Ripgrep Tool https://github.com/BurntSushi/ripgrep
- People search
- Search NPI Records https://npiregistry.cms.hhs.gov/
- Vehicle Search https://www.vehiclehistory.com/
- Search Bluetooth devices https://wigle.net/
- Voter Search https://www.sec.state.ma.us/VoterRegistrationSearch/MyVoterRegStatus.aspx
- Burp suit tool https://portswigger.net/burp
- Breach lookup
- Hashcat tool https://github.com/hashcat/hashcat/
- Carrier lookup https://scammerblaster.com/carrier-lookup/
- Doctor search https://www.vitals.com/
- Classmates https://classmates.com
- Instagram tool https://github.com/megadose/toutatis
- Holehe - Registered Account Checking tool https://github.com/megadose/holehe
- https://socialbearing.com/
- MMhdan
- Mihari https://github.com/ninoseki/mihari
- Active Tracking
- Passive Tracking
- Internet-wide scanning
- Shodan https://shodan.io
- Censys https://censys.io/
- BinaryEdge https://www.binaryedge.io/
- Onyphe https://www.onyphe.io/
- Spyse https://spyse.com/
- ZoomEye https://www.zoomeye.org/
- Passive DNS services
- VirusTotal https://www.virustotal.com/
- PassiveTotal (RiskIQ) https://community.riskiq.com/home
- SecurityTrails https://securitytrails.com/
- DomainTools https://domaintools.com
- CT logs
- Crt.sh https://Crt.sh
- Censys https://censys.io/
- Internet-wide scanning
- ReconFTW https://github.com/six2dez/reconftw
- Bheem https://github.com/harsh-bothra/Bheem
- Osmedeus https://github.com/j3ssie/Osmedeus
- https://github.com/MasterChenb0x/SocialThreatScore
- https://us-cert.cisa.gov/CISA-National-Cyber-Incident-Scoring-System
- https://merics.org/en/report/chinas-social-credit-system-2021-fragmentation-towards-integration
- https://www.myfico.com/credit-education/whats-in-my-credit-report
- Brevityrecon https://github.com/brevityinmotion/brevityrecon
- Blog https://www.brevityinmotion.com/automated-cloud-based-recon/
- Arkadiyt https://github.com/arkadiyt
- Hybrid Analysis https://www.hybrid-analysis.com/
- Any.Run https://any.run/
- Tria.ge https://tria.ge/
- VirusTotal https://www.virustotal.com/
- Yeti https://yeti-platform.github.io/
- Tweettico http://tweettioc.com/
- Twint https://github.com/twintproject/twint
- Shodan https://shodan.io
- Censys https://Censys.io
- Webarchive https://archive.org/web/
- Search by hash on Shodan
http.favicon.hash
- Thatsthem https://Thatsthem.com
- GeoCreepy https://geocreepy.com
- SunCalc https://SunCalc.net
- OsintFramework https://osintframework.com/
- Wiki of Social Media Monitoring Solutions http://wiki.kenburbary.com/