OSINT CHEAT SHEET

SOCMINT

• Buster (find person/username/email appearances on multiple media platforms and breaches): https://github.com/sham00n/buster
• Check Usernames (username checker): https://checkusernames.com/
• CrossLinked (enumerate LinkedIn users to find valid information): https://github.com/m8sec/CrossLinked
• Duolingo User Info (find Duolingo user information via API): https://www.duolingo.com/2017-06-30/users?username={USERNAME_HERE}
• Epieos (find emails, IDs, and phone number appearances): https://epieos.com/
• GitHub User Info (fetch public GitHub user profile details via API): https://api.github.com/users/{USERNAME_HERE}
• Holehe (search an email address across multiple social media platforms): https://github.com/megadose/holehe
• Hunter.io (email finder tool, useful for corporate directory reconnaissance): https://hunter.io/
• I Know Where Your Cat Lives (locate public Instagram posts utilizing the #cat hashtag): https://iknowwhereyourcatlives.com/
• ID Crawl (find public information on individuals in America): https://www.idcrawl.com/
• Ifu (username checker): https://ifu.app
• Ignorant (check if a phone number is registered on social media platforms): https://github.com/megadose/ignorant
• Instant Username (username checker): https://instantusername.com
• Lullar (find public profiles using a name, Gmail address, or username): https://com.lullar.com/
• Maigret (find a specific username across multiple media platforms): https://github.com/soxoj/maigret/
• Namechk (username checker): https://namechk.com/
• NameMC (Minecraft username lookup): https://namemc.com/
• Prude (find person/username appearances across multiple media platforms): https://github.com/NotLoBi/Prude/
• Roblox OSINT Tool (Bloxsint) (Roblox account intelligence gathering): https://github.com/phishontop/bloxsint
• Scribd VPDFS (Scribd document download utility): https://scribd.vpdfs.com/
• Sherlock (find a specific username across multiple media platforms): https://github.com/sherlock-project/sherlock
• Skymem (corporate email finder tool): https://www.skymem.info
• Snoosnoop (get complete insights and analytics about a Reddit account): https://snoosnoop.com
• Steam User Info (Steam profile worth and account calculator): https://steamdb.info/calculator/
• That's Them (search for public person directory information): https://thatsthem.com
• TikTok Tools - TikTok user finder, you can find any tiktok user region & info, watch stories, reposts, highlights, and other tools for tiktok: https://omar-thing.site
• TikTok Info Fetcher (fetch TikTok user, video, trace, or link information): https://tiktok.einzzcookie.org/
• Tinder User Profile (direct web link to a Tinder user profile): https://www.gotinder.com/@{USERNAME_HERE}
• Tracker.gg (Gamertag profile and statistic lookup): https://tracker.gg/
• Twstalker (view and analyze Twitter profiles without an account): https://twstalker.com/
• UserSearch (username checker): https://usersearch.org
• Vinted User Info (fetch public Vinted user details via API): https://www.vinted.fr/api/v2/users/{USERID_HERE}
• WhatsMyName (find a username across multiple media platforms): https://whatsmyname.app/
• ZabaSearch (find public information on individuals in America): https://www.zabasearch.com/

BREACH HUNTERS

• h8mail (mails and passwords breach hunter) : https://github.com/khast3x/h8mail
• Find usernames, phones, mails and names in leaked databases : https://leak-lookup.com/
• Find mails, phones, usernames, IC/ID/SSN, passport number : https://9ghz.com/
• Find usernames or mails in leaked databases : https://breachdirectory.org/
• Find mails or phones in leaked databases : https://espysys.com
• Find usernames in leaked databases : https://leakcheck.io/
• Find mails in leaked databases : https://haveibeenpwned.com/
• Find mails, usernames or domains compromised by Infostealer malware : https://www.hudsonrock.com/threat-intelligence-cybercrime-tools
• Compromised account verifier : https://hackcheck.io
• Breached databases list : https://nuclearleaks.com/
• Compromised emails : https://ashley.cynic.al/
• Find mails in leaked databases : https://namescan.io/freeemailcompromisedcheck

DEEP/DARK WEB

• DarkDump (query the deeep web) : https://github.com/josh0xA/darkdump
• OnionSearch (scrape url's from the .onion search engines) : https://github.com/megadose/OnionSearch

BANKING

• BinCodes (credit card checker) : https://www.bincodes.com/creditcard-checker/
• DNS Checker (credit card checker) : https://dnschecker.org/credit-card-validator.php
• BinList (bank BIN lookup) : https://binlist.net

SOCIAL SECURITY

• SSN Check (SSN lookup tools) : https://www.ssn-check.org

VEHICLES

• DLCheck (american driving license check) : https://services.flhsmv.gov/DLCheck/
• Evaluer chauffeur (french drivers evaluation) : https://evaluer-chauffeur.fr/
• Paruvendu (vehicle information from french plates) : https://www.paruvendu.fr/fiches-techniques-auto/
• American licence plate checker : https://www.faxvin.com/license-plate-lookup/owner
• VIN checker : https://www.vindecoderz.com

OTHERS

• IKnowWhatYouDownload (torrent downloads and distributions for an IP address) : https://iknowwhatyoudownload.com/en/peer/
• UnlistedVideos (find unlisted YouTube videos) : https://unlistedvideos.com/indexm.html
• Xquik (Independent X/Twitter search, followers, monitors, MCP): https://github.com/Xquik-dev/x-twitter-scraper

REVERSE SEARCHES

• Google Lens / Reverse Google Search (search for image apparition on the Internet) : https://lens.google.com/
• Yandex Image (search for image apparition on the Internet) : https://yandex.com/images/
• TinEye (search for image apparition on the Internet) : https://tineye.com/
• FaceCheck (search for a face on the Internet) : https://facecheck.id/

STEGANALYSIS

• Aperisolve (complete steganalysis tool) : https://www.aperisolve.com/
• Fotoforensics (scrape image metadata) : https://fotoforensics.com/
• Jimpl (scrape image metadata) : https://jimpl.com/
• MagicEye (magiceye illusion resolver) : https://magiceye.ecksdee.co.uk/
• Steghide / Stegcraker (steganography brute-force utility) : https://github.com/Paradoxis/StegCracker
• Exiftool (reading and writing meta information in files) : https://exiftool.org/

UPSCALING

• ILoveIMG (x2-x4 upscaling) : https://www.iloveimg.com/upscale-image?ref=artturijalli

UNBLURING

• Depix : https://github.com/spipm/Depix
• Unredacter : https://github.com/bishopfox/unredacter

WEATHER / ENVIRONMENT

• Ventusky (weather map) : https://www.ventusky.com/
• Windy (wind mapping) : https://www.windy.com/

MAPPING TOOLS

• Google Earth : https://earth.google.com/web/
• MeasureTool (measure distance between two point) : https://zhenyanghua.github.io/MeasureTool-GoogleMaps-V3/
• MapChecking (calculation and estimation of the population density of an area) : https://www.mapchecking.com/
• Mapnificient (checking areas reachable by public transport) : https://www.mapnificent.net/
• CalcMaps (plotting tools, calculations and estimates) : https://www.calcmaps.com/
• Waze : https://www.waze.com/en-GB/live-map/
• OpenStreetMap : https://www.openstreetmap.org/
• Bing Maps : https://www.bing.com/maps
• WayBack world map : https://livingatlas.arcgis.com/wayback/
• NASA world view : https://worldview.earthdata.nasa.gov
• Sun calculation map : https://suncalc.net/
• USA live map : https://usa.liveuamap.com
• Sentinel Hub : https://apps.sentinel-hub.com/eo-browser/
• GeoJSON (JSON mapping) : https://geojson.io/

AVIATION

• Skyvector (live map of private flights) : https://skyvector.com/
• FlightConnection (check the direct flights available at each airport) : https://www.flightconnections.com/
• FlightAware (check public flights info) : https://www.flightaware.com
• Phantom Tide (restricted airspace and incident map) : https://phantom.labs.jamessawyer.co.uk/
• Crashes database from 2008 to 2021 : https://data.ntsb.gov/carol-main-public/basic-search
• RZJets (civil and private aviation database) : https://rzjets.net/
• ADS-B Exchange (all flights live) : https://globe.adsbexchange.com/

MARITIME

• TrackTrace (live container tracking) : https://www.track-trace.com/container
• Searates (live container tracking) : https://www.searates.com/container/tracking/
• Phantom Tide (maritime activity and incident map) : https://phantom.labs.jamessawyer.co.uk/
• The Shipping Database (comprehensive maritime vessel database) : https://theshippingdatabase.com/
• Submarine Cable Map : https://www.submarinecablemap.com/
• Submarine Tracker : https://www.marinevesseltraffic.com/submarine-vessels-tracking-map
• Track ships, equipment, brokers… : https://www.maritime-database.com/
• Ports database : https://www.myshiptracking.com/ports
• Ports database : http://portfocus.com/
• Ships imports, buyers, seller : https://www.volza.com/global-trade-data/
• OpenseaMap : https://map.openseamap.org/
• Container Tracking : https://www.bic-code.org/
• Bill number & container tracking : https://www.bltracking.com/
• MarineTraffic : https://www.marinetraffic.com

TRAINS

• AmTrak (register of all rail journeys) : https://juckins.net/amtrak_status/archive/html/history.php
• Europe Station Maps : https://www.nsinternational.com/en/stations/station-maps-floor-plan
• Live Map of trains in RU/UKR/BLR/... : https://rasp.yandex.ru/map/trains/
• Chronotrains (all destinations within X hours of train travel from a station) : https://www.chronotrains.com/en
• Direct Trains Connections Map : https://direkt.bahn.guru/
• Live Trains Tracking : https://mobility.portal.geops.io/
• ZugFinder (detailed information on trains, stations, live rail traffic for European countries) : https://www.zugfinder.net/en/start

CAMERAS AND SURVEILLANCE

• Surveillance under surveillance : https://sunders.uber.space/
• EarthCam (live cameras on arround the world) : https://www.earthcam.com/
• WebCam Taxi (live cameras on arround the world) : https://www.webcamtaxi.com/en/
• CamStreamer (live cameras on arround the world) : https://camstreamer.com/live/map
• Skyline Webcam (live cameras on arround the world) : https://www.skylinewebcams.com/webcam.html
• LiveBeaches (live camera from world beaches) : https://www.livebeaches.com/
• IPVM Designer (camera angle calculator and installation preview) : https://calculator.ipvm.com/
• Pictimo (live cameras on arround the world) : https://www.pictimo.com/

NETWORKS & ANTENNAS

• Open CellID (mapping of all telephone antennas) : https://opencellid.org/
• CellMapper (frequency calculation, coverage, stats, operator IDs on a map) : https://www.cellmapper.net/
• nPerf (mapping of global mobile operators & networks) : https://www.nperf.com/en/map
• Radio Garden (live radio based on location) : https://radio.garden/
• GPSJam (live map of jamming levels around the world) : https://gpsjam.org/
• Explorer (live connectivity and censorship test) : https://explorer.ooni.org/
• Wigle (geolocation of WiFi access points) : https://wigle.net/
• TOR Map (Tor nodes map) : https://tormap.org/
• Carto Radio : https://www.cartoradio.fr/

MILITARY

• ADS-B (military air traffic live) : https://www.ads-b.nl/
• MarineVesselTraffic (tracking planes, boats, cargo, etc.) : https://www.marinevesseltraffic.com/
• OSMP (Open Source Munition Portal) : https://osmp.airwars.org/
• DeepStateMap (RU/UKR live war map - 2024) : https://deepstatemap.live/
• Kolossal DeepStateMap (live war map) : https://kolossal.deepstateua.tech/

OTHERS

• PastVu (locate old or historical photos) : https://pastvu.com/
• BirdHunt (find tweets based on a location) : https://birdhunt.co/
• EBird (tracking the birds you see across North America) : https://ebird.org/explore
• Geomastr (country identification cheat sheet) : https://geomastr.com/

INFORMATION GATHERING

• Shodan : https://www.shodan.io/
• ZoomEye : https://www.zoomeye.org
• AnyRun : https://intelligence.any.run/
• Netlas : https://netlas.io/
• Censys : https://search.censys.io/
• GreyNoise : https://viz.greynoise.io/
• DNSDumpster : https://dnsdumpster.com/
• Leakix : https://leakix.net
• MXToolBox : http://mxtoolbox.com
• DomainTools : https://whois.domaintools.com/
• Domain complete informations : https://domainhelp.com/
• VirusTotal : https://www.virustotal.com/
• URLScan : https://urlscan.io/search
• FOFA : http://fofa.info
• PublicWWW : http://publicwww.com
• CRT http://crt.sh
• PulseDive : http://pulsedive.com
• SearchCode (Code search) : http://searchcode.com
• GrepApp (Code search): http://grep.app
• Onyphe : https://www.onyphe.io/
• BGPView : https://bgpview.io/
• IPToolBox : https://www.ipaddressguide.com/
• ThreatIntelligence : https://threatintelligenceplatform.com/
• Internet outages live map : https://www.pingdom.com/outages/
• Internet outages live map : https://www.thousandeyes.com/outages/
• Search for hosts, CVEs and exposed buckets : https://search.odin.io/
• PulseDive : https://pulsedive.com/

SCANNERS

• DracNMAP (gathering information with nmap help) : https://github.com/Screetsec/Dracnmap
• RedHawk (all in one tool for Information Gathering and Vulnerability Scanning) : https://github.com/Tuhinshubhra/RED_HAWK
• SecretFinder (discover sensitive data like apikeys, accesstoken, authorizations, jwt,..etc.) : https://github.com/m4ll0k/SecretFinder
• TheHarvester (determine a domain's external threat landscape) : https://github.com/laramies/theHarvester
• DNSRecon (DNS reconnaissance, enumeration, and information gathering) : https://github.com/darkoperator/dnsrecon
• AbuseIPdb (find if an IP is blacklisted) : https://www.abuseipdb.com
• Web-Check (website complete scan) : https://web-check.as93.net/
• Pentest-Tools (subdomains scans) : https://pentest-tools.com/information-gathering/find-subdomains-of-domain

ENUMERATION

• DIRB (Web Content Scanner) : https://dirb.sourceforge.net/
• Breacher (find admin login pages and EAR vulnerabilites) : https://github.com/s0md3v/Breacher
• OneDriveEnumUser (enumerate possible users of a OneDrive tenant) : https://github.com/nyxgeek/onedrive_user_enum

CREDENTIALS

• Constructors default passwords : https://cirt.net/passwords
• Constructors default passwords : https://default-password.info
• Constructors default passwords : https://datarecovery.com/rd/default-passwords/
• Wordlists database : https://wiki.skullsecurity.org/index.php?title=Passwords
• Seclist wordlist database : https://github.com/danielmiessler/SecLists/tree/master/Passwords
• Seclist leaked databases passwords : https://github.com/danielmiessler/SecLists/tree/master/Passwords/Leaked-Databases

PASTEBINS

• awesome-pastebins : https://github.com/lorien/awesome-pastebins
• 0Bin : https://0bin.net
• KDE Paste : https://Paste.kde.org
• Private Bin : https://privatebin.net/

CORPORATE

• Open Corporate (company papers) : https://opencorporates.com/
• GLEIF (company information recon) : https://search.gleif.org
• OffShoreLeaks (offshore papers database) : https://offshoreleaks.icij.org
• Papers (company papers) : https://www.pappers.fr
• EU Business registers : https://e-justice.europa.eu/content_business_registers_in_member_states-106-en.do
• Companies database : https://www.aihitdata.com/search/companies
• Organizations OSINT : https://traversals.com/blog/osint-tools/
• Zefix (Swiss business search) : https://zefix.ch/
• InfoClipper : https://www.info-clipper.com/

SEARCH ENGINES

• Google : https://google.com/
• Yandex : https://yandex.com/
• MetaGer : https://metager.org/
• DuckDuckGo : https://duckduckgo.com/
• Qwant : https://www.qwant.com/
• Brave : https://search.brave.com/
• Mojeek : https://www.mojeek.com/
• Cached Pages (get cached page of any URL) : http://www.cachedpages.com/
• Ahmia (search hidden services on the Tor network) : https://ahmia.fi/
• OCCRP Search : https://data.occrp.org/
• Cluster Search Engine : https://search.carrot2.org/#/search/web
• Search files in open Drives and Clouds : https://www.dedigger.com/
• Search files in Buckets : https://buckets.grayhatwarfare.com
• Search files in public FTPs : https://www.searchftps.net/
• Search files on the Web : https://filepursuit.com/
• Art / Creativity search engine : https://search.creativecommons.org/
• Art Encyclopedia : http://www.artcyclopedia.com/
• ZorexEye : https://zorexeye.com/
• Similar Websites : https://www.similarsites.com/
• Wikileaks search engine : https://search.wikileaks.org/
• Scientific litterature search engine : https://www.semanticscholar.org/
• Scientific litterature search engine : https://www.scienceopen.com/
• OnlyFans search engine : https://onlysearch.co/
• US sex offenders database : https://www.justice.gov/action-center/locate-prison-inmate-or-sex-offender

SEARCH ENGINES BY REGION / COUNTRY

• Arabic : http://www.arabo.com/
• Bulgaria : http://www.search.bg/
• China : https://www.baidu.com/
• China : https://www.sogou.com/
• China : https://www.so.com
• China : https://www.hao123.com
• China : https://www.sina.com.cn
• China : https://www.qq.com
• Czech : https://www.seznam.cz/
• Finland : https://www.finna.fi

DORKS & BANGS

• Dorks Builder : https://dorks.faisalahmed.me/
• DuckDuckGo Bang Guide : https://duckduckgo.com/bangs?q=!
• Dorks Guide : https://github.com/redduxi/Google-Dorks-Resources
• Google Operators : https://support.google.com/vault/answer/2474474?hl=en#zippy=%2Cgoogle-voice-search-operators
• Google URL Modifiers & Operators : https://supple.com.au/tools/google-advance-search-operators/
• GHDB (GoogleHackingDatabase) : https://www.exploit-db.com/google-hacking-database

OTHERS

• CyberMap : https://cybermap.kaspersky.com/
• CyberMapStats : https://cybermap.kaspersky.com/stats
• WolframAlpha (complete calculation tool): https://www.wolframalpha.com/

ARCHIVES

• Wayback Machine : https://web.archive.org
• Swiss newspapers archive : https://www.e-newspaperarchives.ch

CHEAT SHEETS

• 0xSojalSec cheat sheet : https://github.com/0xSojalSec/read-dark-web

SEARCH ENGINES

• Ahmia : http://juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion/
• OnionIndex : http://oniondxjxs2mzjkbz7ldlflenh6huksestjsisc3usxht3wqgk6a62yd.onion/
• OnionLand : http://3bbad7fauom4d6sgppalyqddsqbf5u5p56b5k5uk2zxsy3d6ey2jobad.onion/
• TorDex : http://tordexu73joywapk2txdr54jed4imqledpcvcuf75qsas2gwdgksvnyd.onion/
• Darkon : http://darkon6d23lmnx3ttnenhbjkthfdsxthimxvoimwyt43yvxsjqb3read.onion/
• OnDex : http://ondexcyirrwd4vvvpylav4r6dojnxgckj7rwywcklsz7cjrm5ush4fyd.onion/
• Tor66 : http://tor66sewebgixwhcqfnp5inzp5x5uohhdy3kvtnyfxc2e5mxiuh34iid.onion/
• OnionSS : http://3fzh7yuupdfyjhwt3ugzqqof6ulbcl27ecev33knxe3u7goi3vfn2qqd.onion/oss/
• DuckDuckGo : https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/
• Haystak : http://haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion/

HIDDEN WIKI

• The Hidden Wiki (clearnet) : https://thehiddenwiki.org/
• The Hidden Wiki 2 (clearnet) : https://thehidden2.wiki/
• Trust Wiki : http://wiki6dtqpuvwtc5hopuj33eeavwa6sik7sy57cor35chkx5nrbmmolqd.onion/
• DarkDir : http://l7vh56hxm3t4tzy75nxzducszppgi45fyx2wy6chujxb2rhy7o5r62ad.onion/
• Deep Web News : http://zdacwobtzwp2xgedcv2besrckdq76um5xdyvaqcedatzqxbjewamheyd.onion/
• Deep Links Dump : http://t3g5mz7kgivhgzua64vxmu7ieyyoyzgd423itqjortjhh64lcvspyayd.onion/
• Original Hidden Wiki : http://zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion/wiki/index.php/Main_Page
• VCS Onion Links : http://hgzqgqunlejgxruvcthlpk3pywgkci3kkubhnvlv2rgveusz3n6qarad.onion/

CHECK UPTIME

• Dark.fail : http://darkfailenbsdla5mal2mxn2uz66od5vtzd5qozslagrfzachha3f3id.onion/
• Ooni (internet censorship) : https://explorer.ooni.org/

• WebMD (pill identification) : https://www.webmd.com/pill-identification/
• National Library of Medicine : https://pubmed.ncbi.nlm.nih.gov
• Drugs.com (prescription drug info) : https://www.drugs.com/
• DrugBank (drugs knowledge base) : https://go.drugbank.com
• Chemical Book : https://www.chemicalbook.com/

ONCHAIN ANALYSIS

• OkLink : https://www.oklink.com/
• Arkham : https://platform.arkhamintelligence.com/
• Tenderly : https://dashboard.tenderly.co/explorer/
• ETHTective : https://ethtective.com/
• BreadCrumbs : https://www.breadcrumbs.app/
• Bloxy : https://bloxy.info/
• BlockPath (BTC only) : https://blockpath.com/
• Block and transactions : https://www.aware-online.com/en/osint-tools/cryptocurrency-search-tool/
• 0xScope : https://scan.0xscope.com/
• ChainAbuse (crypto scams) : https://www.chainabuse.com/reports
• Blockchain.com : https://www.blockchain.com/explorer

ONCHAIN ANALYSIS FRAMEWORKS

• TX Analysis tools : https://graph.org/TX-Analysis-tools-04-19
• OffcierCia - OnChain Investigations Tools : https://github.com/OffcierCia/On-Chain-Investigations-Tools-List?tab=readme-ov-file

CIPHER IDENTIFIER

• Dcode : https://www.dcode.fr/identification-chiffrement
• Dcode : https://www.dcode.fr/hash-identifier
• Hashes : https://hashes.com/en/tools/hash_identifier

DECIPHER

• Dcode : https://www.dcode.fr/
• CyberChef : https://gchq.github.io/CyberChef/
• MD5Hashing : https://md5hashing.net/

WEAPON DATABASES

• ModernFireArms : https://modernfirearms.net/
• TheGunDataBase : https://www.thegundatabase.com/
• WeaponSystems : https://weaponsystems.net/menu
• Weapon Index (WWII - Today) : https://www.theworldwars.net/weapons/index.php

CONFLICTS

• UCDP Conflicts Database : https://ucdp.uu.se/
• Conflict Index Dashboard (ACLED) : https://acleddata.com/platform/conflict-index-dashboard
• Wars Live Map : https://war.liveuamap.com/
• Interactive Geopolitics Map and Wars : https://www.mapdis.com/diplomacy