#
🌐 Websites for OSINT
A list of tools, websites, and queries to aid in Open Source Intelligence (OSINT) investigations. This list is for educational purposes only-always operate within legal boundaries.
#
📷 Instagram
#
🔍 Shodan
Shodan is a search engine for Internet-connected devices. You can use it to explore exposed services, search by technologies, and pivot on network ranges.
#
🛠 Install
Install and initialize Shodan with your API key (requires a premium account):
pip install shodan
shodan init <API-KEY>
#
📡 Queries
#
IP Range
net:"10.10.10.0/24" Org:"Company Name"Use alongside Amass results or ASN ranges of known ISPs.
Danger
Using Amass is going to make a lot of noise and you wont be in the passive information gathering anymore.
#
Services
#
Outlook Web Access
http.component:"Outlook Web App"
#
👻 Snapchat
#
🎵 TikTok
- Profile search:
https://tiktok.com/@USERNAME
#
🐦 Twitter
#
📡 Physical / Wireless Networks
#
🧠 Tools for People
#
Social Accounts Gathering
#
mosint
Source GitHub: https://github.com/alpkeskin/mosint
go install -v github.com/alpkeskin/mosint@latest
#
Phone Number OSINT
#
phoneinfoga
GitHub: https://github.com/sundowndev/phoneinfoga
#
External Resources
#
Deleted Accounts
#
Username Checker
#
whatsmyname
GitHub: https://github.com/WebBreacher/WhatsMyName
💡 This list is ever-evolving. If you know of more tools or sources, feel free to contact me.