Skip to main content

Tools, OSINT & Open Source

🔎 OSINT & Data Discovery Tools

These tools are useful for uncovering publicly accessible information, exposed data, malware indicators, code leaks, documents, and file indexing across the internet.

🗃️ Paste, Code, and Source Scanning

  • psbdmp – Largest archive of leaked {paste} dumps from pastebin-style sites.
  • Search-Pastebin – Google CSE-powered meta-search across 33 paste sites.
  • RedHuntlabs Online IDE Search – Search keywords across online IDEs, code sharing platforms, and pastebins.
  • NerdyData – Find websites using specific technologies or HTML/JavaScript code.
  • Publicwww – Source code search engine indexing 480+ million pages.
  • CybDetective Code Search – Custom search across 20+ code hosting platforms.
  • grep.app – Fast regex-capable search engine for 500k+ Git repos.
  • searchcode – Search 75 billion lines of code from 40 million public projects.

📁 File & Directory Indexing

  • Open Directory Search Tool – Search files in unprotected open directories.
  • Mamont FTP – Largest public FTP search engine.
  • NAPALM FTP Indexer – Index of over 894 million FTP files across thousands of servers.
  • DeDigger – Discover publicly shared files in Google Drive.
  • UVRX – Search files from older hosting sites (e.g., Mega, Mediafire, Zshare).

📚 Document & Content Discovery

  • PDF Drive – Download from a library of over 75 million free PDFs.
  • SlideShare – Explore millions of user-submitted presentations.
  • Scribd – Document repository with 195+ million user-uploaded files.

🧪 Threat Intelligence & IOC Lookup

  • VirusTotal – Multi-engine scanner and IOC search platform for files, hashes, domains, and URLs.
  • Shodan – Search engine for internet-connected devices and exposed systems.
  • YARAify – Run YARA rules across a large malware sample dataset.
  • ThreatFox – Community-driven IOC feed focused on current threats.
  • URLhaus – Malicious URL tracker and database.
  • Feodo Tracker – Monitor and block IPs related to Feodo/Bugat/Dridex botnets.
  • SSL Blacklist – Collection of blacklisted SSL certificates and JA3 fingerprints.
  • MalwareBazaar – Repository for sharing malware samples.
  • MalwareBazaar UA Verifier – Identify malicious User-Agent strings linked to malware.
  • AbuseIPDB – Check and report malicious or abusive IP addresses.
  • Talos Reputation Center – IP, domain, and file reputation check.
  • PaloAlto URL Filtering – Link classification and reputation check.
  • OTX AlienVault – Threat sharing platform with global IOC and pulse feeds.
  • Hybrid Analysis – Free malware sandbox that performs hybrid static/dynamic analysis.
  • URLScan – Scan and analyze websites in a sandboxed environment.
  • Browserling – Online browser sandbox for testing malicious or suspicious URLs.

🌐 Network, Routing, and Metadata Tools

🧰 Analysis & Development Utilities

  • CyberChef – Web-based data transformation and analysis toolkit.
  • Regex101 – Online regex tester, debugger, and explanation tool.
  • API Tester – Build and run complex API request workflows with JavaScript logic.
  • KeyCDN Tools – Network diagnostics including HTTP headers, ping, traceroute, and more.
  • PunyCoder – Convert between Punycode and Unicode.
  • Snorpy – Visual SNORT rule builder and analyzer.
  • Deobfuscate.io – Web-based JavaScript deobfuscation tool.
Back to top