My collection of awesome, easy-to-use OSINT archives for hackers and penetration testers 🔍🧙♂️
Data archives
- Intelligence X - Big data archive
- Phonebook.cz - Mails and subdomains for the domain
- Seclists - Lots of free data
Email info
- Have i Been Pwned - Check if your email address is in a data breach
- DeHashed - Mails, passwords and other personal data
- Hudson Rock - Free cybercrime intelligence toolkit to check if an email address, username, or domain was compromised in a global Infostealer malware attack.
find leaked passwords by email, username, hash etc<strong?
Find where a given username appears
- whatsmyname.app - all the internet
- https://www.namecheckr.com/ - social media
Fin where email addres exists
Web scanners
- Shodan Search Engine - Web scanner
country:pl has_screenshot:yes city:"Warszawa" - ZoomEye - Chinese Shodan
- Censys - Prolly free Chinese Shodan
Network Search
- wigle.net - check the Advanced Search tab for information related to Wi-Fi
URL info
- VirustTotal - Check if the website is infected
- WHOIS
- URLscan
- Wannabrowser - Simulate any Browser
- Wappalyzer - Technologies used on websites
- crt.sh - Certificate search
Subdomains info
- Subdomain Center
- Phonebook.cz - Mails and subdomains for the domain
- Sublist3r - enumerate subdomains
IP info
Email headers info
Vulnerabilities
- nvd.nist.gov - National Vulnerability Database
- cvedetails.com
- cve.mitre.org
Geolocation
Ppl info
Other
- OWASP Favicon Database
- example_hashes - hashcat wiki
Web archives
- WaybackMachine
- archive.today - If some websites are banned or unavailable on WaybackMachine, you will very likely find them here.
Million most popular Polish passwords
Everything a Hacker needs to know about getting busted by the fed (From Federal Prison, 1997 😮)
//todo https://tryhackme.com/room/threatinteltools make soc osint defence tools
Leave a ⭐