Modern days OSINT

A small list of super useful many tools/services to catch bad guys that i am using myself regularly

Many of these have been taken from other sources. I also recommend to read Michael Bazzell's book, it's amazing.

Table of Contents

• Telegram OSINT
• Toolkits
• E-mail
• Data Breaches
• Password
• Google Dorks
• Social Media
• Search Engines
• Misc
• Books

↑ Telegram OSINT

https://t.me/fvcksystem_bot - Eye of God

https://t.me/osint_maigret_bot - Maigret

https://t.me/telesint_bot - Telesint

https://t.me/OverloadCyberBot - Overload

https://t.me/TgAnalyst_bot - Telegram Analyst

https://t.me/GTA_search2Bot - Gta Search

https://t.me/tgscanrobot - Search for user's groups

https://t.me/PasswordSearchBot - Password Search

https://t.me/UniversalSearchXBot - Universal Search (free version of @HowToFindRU_Robot)

https://t.me/NewLeakOSINTbot - Leak Osint (useful asfuck)

https://t.me/US2UserBox_bot_Bot / https://link.usersbox.net/ - User's Box

↑ Toolkits

https://inteltechniques.com/tools/index.html - some tools of Michael Bazzell on his website

https://intelx.io/tools - intelx osint tools

https://www.osintessentials.com/ - some of osint investigation tools

https://infosecurity.by/osint-tools - same as above

https://doxbin.com/ - doxxing pastes on ppl

https://osintframework.com/ - osint framework tree

https://inventory.raw.pm/tools.html#title-tools-osint-and-reconnaissance - OSINT and Reconnaissance

↑ E-Mail

https://github.com/mxrch/ghunt - Google osint / collecting data about account

https://github.com/megadose/holehe - Check email registration on more than 120 sites

https://emailrep.io/ - Mail verification service with some features

↑ Data Breaches

https://intelx.io/ - search across ip/email/domain/bitcoin address and etc.

https://www.dehashed.com - almost the same as intelx

https://leakcheck.io/ - email / username pass breaches check

https://haveibeenpwned.com - based

https://spycloud.com.com - Database identities aren't really available to see, just using to check

usage https://portal.spycloud.com/endpoint/enriched-stats/[email protected]

https://hudsonrock.com - Check if the email show up in someone's stealer logs

usage https://cavalier.hudsonrock.com/api/json/v2/preview/search-by-login/[email protected]

↑ Passwords

https://leakpeek.com

https://breachdirectory.org/ - Gives you a password's hash

SHA-1 Password decryption - md5decrypt.net/en/Sha1

https://psbdmp.ws/api/search/[email protected] - Monitors the entire Pastebin

site:xlek.com "[email protected]"

↑ Google Dorks

https://sankalppatil12112001.medium.com/google-hacking-google-dorks-for-sensitive-information-f1d5a8eedb32 - Google Hacking: Google Dorks for Sensitive Information

https://habr.com/ru/companies/postuf/articles/510766/ - Google Dorking Usage

https://www.exploit-db.com/google-hacking-database

↑ Social Media

https://vk.watch - vk profile history

https://findclone.ru/ searching by face on social media(vk as i remember)

https://search4faces.com - search user's profile picture on social media

https://github.com/th3unkn0n/osi.ig - instagram monitoring

https://webresolver.nl/ - skype osint

↑ Search Engines

Search Engines Mini-Cheatsheet

https://www.shodan.io/ - search by ip, name, or domain

↑ Misc

https://web.archive.org/ ¯_(ツ)_/¯

https://geospy.web.app/ - get location from the picture

https://findclone.ru/ - searching by face on social media(vk as i remember)

https://search4faces.com - search user's profile picture on social media

https://whatsmyname.app/ - searching thru everything with a username

EVERY Car Plate on the map

↑ Books

https://www.amazon.com/OSINT-Techniques-Resources-Uncovering-Information/dp/B0BRDR9P4Q ^(pdf) - Osint Technique by Michael Bazzell

created this repo initially for myself, now updating it everytime i use something new