🌐 Websites for OSINT
A list of tools, websites, and queries to aid in Open Source Intelligence (OSINT) investigations. This list is for educational purposes only-always operate within legal boundaries.
🔍 Shodan
Shodan is a search engine for Internet-connected devices. You can use it to explore exposed services, search by technologies, and pivot on network ranges.
🛠 Install
Install and initialize Shodan with your API key (requires a premium account):
pip install shodan
shodan init <API-KEY>
📡 Queries
IP Range
net:"10.10.10.0/24" Org:"Company Name"
Use alongside Amass results or ASN ranges of known ISPs.
Danger
Using Amass is going to make a lot of noise and you wont be in the passive information gathering anymore.
Services
Outlook Web Access
http.component:"Outlook Web App"
👻 Snapchat
🎵 TikTok
- Profile search:
https://tiktok.com/@USERNAME
📡 Physical / Wireless Networks
🧠 Tools for People
Social Accounts Gathering
mosint
Source GitHub: https://github.com/alpkeskin/mosint
go install -v github.com/alpkeskin/mosint@latest
Phone Number OSINT
phoneinfoga
GitHub: https://github.com/sundowndev/phoneinfoga
External Resources
Deleted Accounts
Username Checker
whatsmyname
GitHub: https://github.com/WebBreacher/WhatsMyName
💡 This list is ever-evolving. If you know of more tools or sources, feel free to contact me.
