Skip to main content

Tools, OSINT & Open Source

🔎 OSINT & Data Discovery Tools

These tools are useful for uncovering publicly accessible information, exposed data, malware indicators, code leaks, documents, and file indexing across the internet.

🗃️ Paste, Code, and Source Scanning

  • psbdmp – Largest archive of leaked {paste} dumps from pastebin-style sites.
  • Search-Pastebin – Google CSE-powered meta-search across 33 paste sites.
  • RedHuntlabs Online IDE Search – Search keywords across online IDEs, code sharing platforms, and pastebins.
  • NerdyData – Find websites using specific technologies or HTML/JavaScript code.
  • Publicwww – Source code search engine indexing 480+ million pages.
  • CybDetective Code Search – Custom search across 20+ code hosting platforms.
  • grep.app – Fast regex-capable search engine for 500k+ Git repos.
  • searchcode – Search 75 billion lines of code from 40 million public projects.

📁 File & Directory Indexing

  • Open Directory Search Tool – Search files in unprotected open directories.
  • Mamont FTP – Largest public FTP search engine.
  • NAPALM FTP Indexer – Index of over 894 million FTP files across thousands of servers.
  • DeDigger – Discover publicly shared files in Google Drive.
  • UVRX – Search files from older hosting sites (e.g., Mega, Mediafire, Zshare).

📚 Document & Content Discovery

  • PDF Drive – Download from a library of over 75 million free PDFs.
  • SlideShare – Explore millions of user-submitted presentations.
  • Scribd – Document repository with 195+ million user-uploaded files.

🧪 Threat Intelligence & IOC Lookup

  • VirusTotal – Multi-engine scanner and IOC search platform for files, hashes, domains, and URLs.
  • Shodan – Search engine for internet-connected devices and exposed systems.
  • YARAify – Run YARA rules across a large malware sample dataset.
  • ThreatFox – Community-driven IOC feed focused on current threats.
  • URLhaus – Malicious URL tracker and database.
  • Feodo Tracker – Monitor and block IPs related to Feodo/Bugat/Dridex botnets.
  • SSL Blacklist – Collection of blacklisted SSL certificates and JA3 fingerprints.
  • MalwareBazaar – Repository for sharing malware samples.
  • AbuseIPDB – Check and report malicious or abusive IP addresses.
  • Cisco Talos Intelligence – Lookup IPs, domains, file hashes, and view threat intelligence data.
  • CyberChef – Powerful web-based tool for data transformation, decoding, and analysis.
  • AlienVault OTX – Threat sharing platform with global IOC and pulse feeds.
  • Redirect Detective – Analyze and visualize HTTP redirects for URLs.

🦠 Malware Analysis & Reverse Engineering

Resources for researching malware, downloading samples, reverse engineering binaries, and analyzing malware behavior.

  • VX-Underground – Largest collection of malware samples and research on the internet.
  • VirusSign – Curated list of malware sample sources for researchers.
  • Ghidra – Open-source reverse engineering framework created by the NSA.
  • Binary Ninja – Modern reverse engineering platform with scripting and automation support.
  • IDA Free – Free version of the IDA disassembler and debugger.
  • ANY.RUN Blog – Guides and insights for understanding malware analysis reports.
  • x64dbg – Open-source Windows debugger for malware analysis.
  • Sysinternals Suite – Advanced Windows system monitoring and diagnostics tools.
  • Detect It Easy (DIE) – Portable executable analyzer to identify packers and compilers.
  • MalwareBazaar UA Verifier – Identify malicious User-Agent strings linked to malware.
Back to top