Tools, OSINT & Open Source
🔎 OSINT & Data Discovery Tools
These tools are useful for uncovering publicly accessible information, exposed data, malware indicators, code leaks, documents, and file indexing across the internet.
🔍 Privacy Search Engines
- DuckDuckGo – Privacy-focused search engine that doesn’t track users.
- Startpage – Google results with privacy protection and no tracking.
🗃️ Paste, Code, and Source Scanning
- psbdmp – Largest archive of leaked {paste} dumps from pastebin-style sites.
- Search-Pastebin – Google CSE-powered meta-search across 33 paste sites.
- RedHuntlabs Online IDE Search – Search keywords across online IDEs, code sharing platforms, and pastebins.
- NerdyData – Find websites using specific technologies or HTML/JavaScript code.
- Publicwww – Source code search engine indexing 480+ million pages.
- CybDetective Code Search – Custom search across 20+ code hosting platforms.
- grep.app – Fast regex-capable search engine for 500k+ Git repos.
- searchcode – Search 75 billion lines of code from 40 million public projects.
📁 File & Directory Indexing
- Open Directory Search Tool – Search files in unprotected open directories.
- Mamont FTP – Largest public FTP search engine.
- NAPALM FTP Indexer – Index of over 894 million FTP files across thousands of servers.
- DeDigger – Discover publicly shared files in Google Drive.
- UVRX – Search files from older hosting sites (e.g., Mega, Mediafire, Zshare).
📚 Document & Content Discovery
- PDF Drive – Download from a library of over 75 million free PDFs.
- SlideShare – Explore millions of user-submitted presentations.
- Scribd – Document repository with 195+ million user-uploaded files.
🧪 Threat Intelligence & IOC Lookup
- VirusTotal – Multi-engine scanner and IOC search platform for files, hashes, domains, and URLs.
- Hybrid Analysis – Free malware sandbox that performs hybrid static/dynamic analysis.
- Sucuri SiteCheck – Website malware and security scanner.
- URLhaus – Malicious URL tracker and database.
- Feodo Tracker – Monitor and block IPs related to Feodo/Bugat/Dridex botnets.
- SSL Blacklist – Collection of blacklisted SSL certificates and JA3 fingerprints.
- MalwareBazaar – Repository for sharing malware samples.
- Talos Reputation Center – IP, domain, and file reputation check.
- PaloAlto URL Filtering – Link classification and reputation check.
- OTX AlienVault – Threat sharing platform with global IOC and pulse feeds.
- URLScan – Scan and analyze websites in a sandboxed environment.
- McAfee Threat Center – Threat intelligence and malware information.
- National Vulnerability Database (NVD) – US government vulnerability database with CVSS scores.
- CVE Database – Public list of common vulnerabilities and exposures.
- Website Reputation Checker (URLVoid) – Checks domain/IP reputation using multiple sources.
- Google Safe Browsing Status – Checks if a site is flagged by Google Safe Browsing.
- Looky Luu - Online Sandbox for Domain Checks
🌐 Network, Routing, and Metadata Tools
- Nmap – Network scanner and host discovery tool.
- Yersinia – Penetration testing tool for attacking network protocols.
- Passive OS Fingerprinter (p0f) – Passive network OS fingerprinting tool.
🛡️ Offensive Security & Exploitation
- Kali Linux – Penetration testing and security auditing Linux distribution.
- Metasploit – Exploit development and penetration testing framework.
- Aircrack-ng – Wireless network security auditing tool.
- Powerfuzzer – Automated web application vulnerability scanner.
- ShellNoob – Shellcode writing toolkit.
- Backdoor Factory – Patch binaries with custom backdoors.
- Capstone Engine – Multi-architecture disassembly framework.
🧰 Analysis & Development Utilities
- CyberChef – Web-based data transformation and analysis toolkit.
- CyberChef (Offline) – Local instance for offline data analysis and transformation.
- JavaScript Beautifier – Formats and beautifies JavaScript code for readability.
- UnPacker – JavaScript deobfuscation/unpacking tool.
- Awesome Malware Analysis – Curated list of malware analysis tools and resources.
📰 News & Security Feeds
- Inside-IT – Swiss IT and tech news.
- Heise Security – 7-Tage-News – German IT security news overview (last 7 days).
- CERT-EU News Monitor – EU cybersecurity news and advisories.
📬 Disposable Email Services
- Trash-Mail – Temporary disposable email inbox.
- Mailinator – Public temporary email service.
🖥️ Internal/Local Resources
- Sandbox – Likely internal sandbox environment for testing malware or files.
- DPI (NetWitness) – Network analysis and deep packet inspection tool (internal link).