Hunt Osint Framework

Dozens of online tools for different stages of #osint investigations.

https://nitinpandey.in/ihunt/

Creator twitter.com/initinpandey

GoMapEnum

Gather emails on Linkedin (via Linkedin and via Google)

User enumeration and password bruteforce on Azure, ADFS, OWA, O365 (this part seems to be still in development)

https://github.com/nodauf/GoMapEnum

#go #opensource

Broken Link Hijacker

Crawls the website and searches for all the broken links (in "<a href" and "<img src").

Three levels of scanning depth can be selected.

https://github.com/MayankPandey01/BrokenLinkHijacker

TheTimeMachine

Toolkit to use http://archive.org to search for vulnerabilities:

Fetch /api/ endpoint

Fetch JSON in URL

Fetch conf(Config Possibility) in URL

All Possible Sensitive instances in URL (Searches from Fuzz List)

and much more

Creator twitter.com/fr13nd0x7f

Since 3rd January 2022 thedevilseye stopped working due to http://darksearch.io public access getting deprecated.

This new release uses Ahmia resources:

https://github.com/rly0nheart/thedevilseye/releases/tag/2022.1.0.0-hellfire/

"Backlink dorks" is not directly related to cybersecurity and is a term from SEO.

But I put them in my collection anyway, to show the variety of uses for Google Dorks.

https://github.com/cipher387/Dorks-collections-list

#googledorks #seo

Geekflare Tools

39 online free tools for website testing (#SEO, #DNS, #HOSTING, #SECURITY, #PERFORMANCE)

https://gf.dev/toolbox

Update of Worldwide #OSINT tools map

New links for Cuba and North Korea, street three datasets for Canadian cities and many more

614 links
167 countries
72 regions
27 cities/towns

https://cipher387.github.io/osintmap/

http://Domaincodex.com

Source code search engine (315 million domains indexed). Search by title, metadata, javascript files, server name, location and more.

+ detailed website scanning tool (whois, dns, technology search, etc.)

Awesome Pentest

A huge collection of several hundred tools, sites, and training materials for #pentesters and anyone interested in #cybersecurity.

https://github.com/enaqx/awesome-pentest

Contributor twitter.com/enaqx

"What every Browser knows about you"

This site not only shows what information your browser provides to third-party sites, but also explains how it can be dangerous and suggests what extensions will help to ensure your anonymity.

https://webkay.robinlinus.com

Creator twitter.com/robin_linus

System Hardening Checklist

(detailed #privacy and #security guide from Whonix
)

https://whonix.org/wiki/System_Hardening_Checklist

One of the most comprehensive collections of techniques for ensuring #anonymity online of varying levels of complexity.

Deep image layers (Supperimposed, Red, Green, Blue) and properties (Zsteg, Steghide, Outguess, Exif, Binwalk, Foremost) analyze tool.

#osint #forensic #imint #steganography

https://aperisolve.fr
https://github.com/Zeecka/AperiSolve

25.01.2022 YouTube Geofind (tool for search video by location) received a big update. Added share, export, import, and dark mode

Also note the the ability to filter Life events, HD, Creative Commons and 3D video in the results.

http://mattw.io/youtube-geofind/

#osint #socmint #youtube

http://fig.io

Adds #VSCode style autocomplete to #MacOS terminal.

(personal and project shortcuts, personal mixins, logging enable)

https://github.com/withfig/autocomplete

#opensource

If you use #Zapier or #IFTTT to automate your daily work and personal tasks, I also recommend trying their free #opensource counterpart https://n8n.io:

support for triggers for several hundred applications and services;
the ability to run automations on your own server.

http://opensanctions.org

Open source data on sanctioned people and companies in various countries from 35 (!) different sources.

twitter.com/open_sanctions

#osint #corpint

http://openownership.org

Wordwide beneficial ownership data.
(The concept of beneficial ownership helps understand how companies and other legal entities are owned and controlled. Over 110 countries have committed to beneficial ownership transparency).

twitter.com/OpenOwnership


#corpint

http://fansmetrics.com

Search in 20 millions #OnlyFans accounts:
free accounts
accounts linked with TikTok profiles
accounts near your location
deals and trials

Creator twitter.com/martinglvc


#osint #socmint

FireFly

Get information about phone number using Numverify API

(API key for the test can be obtained for free and in a few seconds)

https://github.com/Lexxrt/FireFly

#python #opensource

SickNerd

A tool for researching domain lists using Google Dorking. You can automatically load fresh dorks from GHDB (@GoogleHacking) and customize the maximum number of results.

https://github.com/JakeWnuk/SickNerd

Creator twitter.com/JakeWnuk


#python #opensource #github