🌐 Websites for OSINT

By

A list of tools, websites, and queries to aid in Open Source Intelligence (OSINT) investigations. This list is for educational purposes only-always operate within legal boundaries.


📷 Instagram


🔍 Shodan

Shodan is a search engine for Internet-connected devices. You can use it to explore exposed services, search by technologies, and pivot on network ranges.

🛠 Install

Install and initialize Shodan with your API key (requires a premium account):

pip install shodan
shodan init <API-KEY>

📡 Queries

IP Range

net:"10.10.10.0/24" Org:"Company Name"

Use alongside Amass results or ASN ranges of known ISPs.

Services

Outlook Web Access
http.component:"Outlook Web App"

👻 Snapchat


🎵 TikTok

  • Profile search: https://tiktok.com/@USERNAME

🐦 Twitter


📡 Physical / Wireless Networks


🧠 Tools for People

Social Accounts Gathering

mosint

Source GitHub: https://github.com/alpkeskin/mosint

go install -v github.com/alpkeskin/mosint@latest

Phone Number OSINT

phoneinfoga

GitHub: https://github.com/sundowndev/phoneinfoga

External Resources

Deleted Accounts

Username Checker

whatsmyname

GitHub: https://github.com/WebBreacher/WhatsMyName


💡 This list is ever-evolving. If you know of more tools or sources, feel free to contact me.