Directory
Every listing, one search.
Filter by the job, the price, and how you want to work — terminal, GUI, API, or an AI-assisted product. Press / to focus search.
Showing 52 of 52
AbuseIPDB
Check and report IP addresses tied to abusive traffic.
Amass
OWASP tool for mapping a domain’s attack surface.
Blackbird
Fast username search across sites, from the command line.
BuiltWith
Looks up the technologies a website appears to use.
Censys
Search internet-wide host and certificate data.
Copernicus Browser
A browser for Sentinel satellite imagery from the EU data space.
DeHashed
Breach search, monitoring, an API, and WHOIS from one vendor.
DNSDumpster
Passive DNS research for hosts related to a domain.
ExifTool
Read and edit metadata in images, video, and documents.
Flashpoint
Paid intelligence platform for illicit communities and threat data.
Flightradar24
A live map of aircraft built from receiver data.
Fog Reveal
Paid device-location analysis from advertising IDs, sold as Reveal.
FotoForensics
A website for analyzing whether a digital photo was altered.
Ghidra
NSA's open-source framework for disassembling and decompiling binaries.
GhidraMCP
An MCP server that exposes a running Ghidra to an AI client.
GHunt
Free command-line framework for Google account and Drive lookups.
Google Hacking Database
A catalog of search operators, maintained by Exploit-DB.
GreyNoise
Tells you how an IP shows up in internet-wide scan traffic.
Have I Been Pwned
Check whether an email address appears in known data breaches.
Holehe
See whether an email is registered on other sites.
Hunchly
Captures web pages, timestamps, and hashes while you research.
Hunter
Find professional emails for a domain, and check whether they look deliverable.
Instaloader
Download public Instagram media with captions and metadata.
Intelligence X
IntelX archive search for leaked data, historical pages, and selectors.
Maigret
Build a dossier from a username across thousands of sites.
Maltego
Graph link analysis for people, infrastructure, and documents.
MalwareBazaar
A public exchange for malware samples and their hashes.
MISP
Open-source platform for storing and sharing threat indicators.
Octoprobe
Investigation graph from Redwing Technologies LLC.
OpenCTI
Open-source platform for storing and linking threat intelligence.
OSINT Framework
A visual map of OSINT tools and sources, sorted by task.
OSINT Industries
Paid selector search across live accounts, with credits and an API.
PhoneInfoga
Local framework for basic facts about an international phone number.
Recon-ng
Modular reconnaissance console with workspaces and a marketplace.
Recorded Future
Paid intelligence platform that reads open sources at team scale.
ShadowDragon
Paid social OSINT suite: SocialNet inside the Horizon platform.
Sherlock
Check whether a username exists across hundreds of sites.
Shodan
Search engine for devices and services on the public internet.
sigtop
Export messages and attachments from a local Signal Desktop install.
Skopenow
Paid investigation platform for public records and the open web.
sn0int
A small OSINT framework that maps public data into one database.
Social Analyzer
API, CLI, and a local web app for username searches.
SpiderFoot
Automated OSINT from a local web UI and hundreds of modules.
Subfinder
Fast passive subdomain discovery from ProjectDiscovery.
theHarvester
Collect emails, names, and hosts from public sources.
urlscan
Open a URL in a sandbox and keep the screenshot, DOM, and requests.
UserSearch
Free username search on .org, paid modules and credits on .com.
Venntel
Commercial device-location data sold to government and defense teams.
VirusTotal
Multi-engine lookups for files, URLs, domains, and IP addresses.
Wayback Machine
Historical copies of public web pages from the Internet Archive.
WhatsMyName
A community list for checking whether a username exists on a site.
WiGLE
A public map of wireless networks people have uploaded.
FROM REDWING TECHNOLOGIES
Rook Intelligence
Licensed private detective agency in Washington, DC. Senior analysts for OSINT, threat hunting, due diligence, and vetting, on retainer or by project.
Visit rook-intel.com
Octoprobe
OSINT investigation platform from Redwing Technologies LLC at octoprobe.ai. One identifier runs through premium APIs, public records, and facial recognition, then lands on a sourced graph.
Visit octoprobe.ai