Awesome OSINT 
A curated list of amazingly awesome open source intelligence tools and resources.
Open-source intelligence (OSINT) is intelligence collected from publicly available sources.
In the intelligence community (IC), the term "open" refers to overt, publicly available sources (as opposed to covert or clandestine sources).
This list is to help all of those who are into Cyber Threat Intellience (CTI), threat hunting, or OSINT. From beginners to advanced.
Happy hacking and hunting 🧙♂️
📖 Table of Contents
↑ Contributing
Please read CONTRIBUTING if you wish to add tools or resources. Feel free to help 🥰 us grow this list with great resources.
↑ Credits
This list was taken partially taken from i-inteligence's OSINT Tools and Resources Handbook.
Thanks to our main contributors
jivoi EK_ &
spmedia
↑ General Search
The main search engines used by users.
- Aol - The web for America.
- Bing - Microsoft´s search engine.
- Brave - a private, independent, and transparent search engine.
- Goodsearch - a search engine for shopping deals online.
- Google Search - Most popular search engine.
- Instya - You can searching shopping sites, dictionaries, answer sites, news, images, videos and much more.
- Lycos - A search engine for pictures, videos, news and products.
- Mojeek - A growing independent search engine which does not track you.
- Perplexity - AI-powered search engine with source citations.
- Phind - AI search engine optimized for developers and technical questions.
- Search.com - Search the Web by searching the best engines from one place.
- Wolfram Alpha - Wolfram Alpha is a computational knowledge engine (answer engine) developed by Wolfram Alpha. It will compute expert-level answers using Wolfram’s breakthrough
algorithms, knowledgebase and AI technology.
- Yahoo! Search - The search engine that helps you find exactly what you're looking for.
- YOU - AI search engine.
Google Dorks Tools
- AtDork - Professional OSINT dorking tool featuring adaptive delay, circuit breaker, and automatic backend fallback to avoid IP bans and rate limits.
- DorkCraft - Google dork generator that builds advanced search queries for OSINT and reconnaissance.
- DorkGenius - DorkGenius is the ultimate tool for generating custom search queries for Google, Bing, and DuckDuckGo. - Our cutting-edge app uses the power of AI to help you create advanced search queries that can find exactly what you're looking for on the web.
- DorkGPT - Generate Google Dorks with AI.
- Google Hacking Database (GHDB) - The GHDB is an index of search queries (we call them dorks) used to find publicly available information, intended for pentesters and security researchers.
- SearchDorks - Generate Search Engine (Google, FOFA, Shodan, Censys, ZoomEye) Dorks using AI.
↑ Main National Search Engines
Localized search engines by country.
Lesser known and used search engines.
↑ Privacy Focused Search Engines
Search engines that focuses on anonymization,privacy.
- DuckDuckGo - an Internet search engine that emphasizes protecting searchers' privacy.
- Disconnect Search - Stop search engines from tracking your searches.
- Gibiru - Gibiru provides “uncensored search results” without collecting personal data like logging users’ IP addresses or search queries.
- Kagi Search - Liberate your search. Free of ads. Free of surveillance. Your time respected. You are the customer, never the product.
- Mojeek - Mojeek is a growing independent search engine which does not track you.
- Presearch - Presearch is a decentralized, community-driven search engine that protects your privacy and rewards you when you search.
- Qwant - The search engine that respects your privacy.
- Startpage - The world’s most private search engine.
- SearXNG - A privacy-respecting, open-source metasearch engine.
- swisscows - Anonymous search engine, a family-friendly, privacy-focused search engine based in Switzerland.
↑ Data Breach Search Engines
Search engines that can be used to check if your data's been breached
- CheckLeaked - Check if an email, username or phone appears in a data breach, showing the sources; free searches, developer API and chat bots.
- CredenShow - Identify your compromised credentials before others do.
- HIB Ransomed - Because people have the right to know if their data has been leaked.
- HEROIC.NOW - Has your data been leaked on the dark web? Scan your identities for FREE.
- IKnowYour.Dad - Data Breach Search Engine.
- Leaker - Passive leak enumeration CLI tool that searches across 10 breach databases simultaneously.
- NOX - Recursive async framework for deep breach analysis and identity pivoting.
- OsintCat - Check if an email address has been exposed in known data breaches. Fast lookup across multiple breach databases, with a simple API available.
- StealSeek - Powerful search engine designed to help you find and analyze data breaches.
- Venacus - Search for your data breaches and get notified when your data is compromised.
↑ Speciality Search Engines
Search engines for specific information or topics.
- 2lingual Search
- Abusech - Hunt across all abuse.ch platforms with one simple query
- Abuseipdb - Repository of abuses reported by system administrators for IPs, Domains, and subnets
- BeVigil - Search for assets like Subdomains, URLs, Parameters in mobile applications
- BGP.tools - Modern BGP toolkit for network reconnaissance and analysis.
- BGP.he.net - Free BGP and network intelligence toolkit
- Biznar
- BrightCloud - Checks the reputation, category, and potential threats associated with a URL or IP address.
- Browserleaks - BrowserLeaks tests your browser for privacy and fingerprinting leaks
- Censys - Searcher that monitors and analyzes devices.
- CertKit Certificate Search - Fast search for public SSL/TLS certificate records.
- Cisco Talos Intelligence - IP and Domain Reputation Center for real-time threat detection
- CiteSeerX
- Cloudflare Radar - Internet traffic patterns, attacks, and technology trends.
- Criminal IP - Cyber Threat Intelligence Search Engine and Attack Surface Management(ASM) platform
- CRT Certificate Search - Allows you to search for public SSL/TLS certificates recorded in Certificate Transparency logs
- FOFA - Asset search and analysis tool.
- FullHunt -FullHunt identifies and secures your External Attack Surface.
- Google Custom Search
- GrayhatWarfare - Searches and indexes open Amazon S3 buckets, allowing users to find and explore potentially exposed data.
- GreyNoise - Search Exposed Internet assets, Malicious IP's.
- Harmari (Unified Listings Search)
- Hunter Search Engine - Search Exposed Internet assets, open web directories and many more.
- Intelligence X - Paid OSINT Tool Allowing users to search for information across various sources including the dark web and public data leaks.
- Internet Archive
- Islegitsite - Checks if a website is trustworthy by analyzing its reputation, domain, and security based on public sources.
- MalwareBazaar - Search and download confirmed malware samples by hash, family, tag, and other criteria.
- Mamont
- Million Short
- Netlas.io
- ODIN - Used to search for Hosts, CVEs & Exposed Buckets/Files and shows a website is vulnerable or not. 10 Free Searches Per Day.
- OCCRP Aleph
- ONYPHE - OSINT engine indexing exposed assets and services across the internet.
- packet.guru - Browser-fingerprint and connection-trust audit: WebRTC/DNS leak tests, JA4/JA3 TLS and passive TCP/IP fingerprints, ECH state, and IP reputation (VPN, proxy, datacenter, Tor), returning two independent 0–100 Privacy & Trust scores. No signup, runs client-side.
- Shadowserver - Dashboard with global statistics on cyber threats collected by the Shadowserver Foundation.
- Shodan - Shodan is a search engine for the IOT(Internet of Things) that allows you to search variety of servers that are connected to the internet using various searching filters.
- SikkerAPI - SikkerAPI is a free IP and threat intelligence provider, that publishes IP reputation scores, behavioral data and full attack sessions across 16+ different protocols.
- WIPO
- WorldWideScience.org
- Wpscan - Scan your WordPress site and get an instant report on its security.
- YARAif - Collaborative YARA engine providing open threat intelligence through file pattern matching.
- Zanran
- ZoomEye - ZoomEye is a cyberspace search engine for IPs, domains, internet asset discovery, and exposure analysis of servers, routers, and webcams.
↑ Dark Web Search Engines
↑ Visual Search and Clustering Search Engines
Search engines that scrape multiple sites (Google, Yahoo, Bing, Goo, etc) at the same time and return results.
↑ Similar Sites Search
Find websites that are similar. Good for business competition research.
- SimilarSites - Discover websites that are similar to each other
- SitesLike - Find similar websites by category
↑ Document and Slides Search
Search for data located on PDFs, Word documents, presentation slides, and more.
↑ Threat Actor Search
Search for Threat actors and their associated information.
- APT Groups and Operations - Know about Threat Actors, sponsored countries, their tools, methods, etc.
- Bi.Zone - 148 threat groups with detailed TTPs.
- BreachHQ - Provides a list of all known cyber threat actors also referred to as malicious actors, APT groups or hackers.
- Dark Web Informer - Tracking 854 Threat Actors as of 29th of May 2025.
- ETDA - Search for Threat Actor groups and their tools.
- FortiGuard Labs - Powered by FortiGuard Labs, our Threat Actor Encyclopedia provides actionable insights, helping security teams prepare and streamline advanced threat hunting and response.
- KNOWLEDGENOW - Trending Threats.
- lazarusholic - Total 203 threat actors.
- Malpedia - Get List of threat actor groups.
- MISP Galaxy - Known or estimated adversary groups as identified by 360.net.
- OPENHUNTING.IO - Threat Library Collecting Information.
- SOCRadar LABS - Know threat actor tactics, techniques, and past activities. Access detailed profiles and track their activities.Keep up with the latest threats and Tactics, Techniques, and Procedures (TTPs).
- Thales - Find Threat actor groups in a graphical attack explorer.
- Threat Actor Usernames Scrape - A collection of fresh intel and 900k+
这是一份精心整理的“awesome list”（精选清单），收录了数百个免费和付费的 OSINT（开源情报）工具与资源，按通用搜索、Google dorks、数据泄露查询、社交媒体、威胁行为体和暗网等分类组织。