...Any scars heal. A much worse scar is that these people can go unpunished and walk the streets next to us...
--
Ethnic and regional inequalities in the Russian military fatalities in Ukraine: Preliminary findings from crowdsourced data: https://osf.io/preprints/socarxiv/s43yf
Finding Geolocation Leads with Bellingcat's OpenStreetMap Search Tool: https://www.bellingcat.com/resources/how-tos/2023/05/08/finding-geolocation-leads-with-bellingcats-openstreetmap-search-tool/
How the “trolls” of Tajikistan and their Kazakhstani “colleagues” work: https://rus.azattyq.org/a/tajikstan-and-its-troll-factories/29926761.html
Espionage campaign linked to Russian intelligence services: https://www.gov.pl/web/baza-wiedzy/espionage-campaign-linked-to-russian-intelligence-services
OpenCorporates - The largest open database of companies in the world
https://id.occrp.org/ - Browse a global index of public registries for company, land and court records. We've pulled together over 1,000 sources from 181 countries.
osintframework.com - OSINT framework focused on gathering information from free tools or resources.
Spotlight Infosec LLC / Micah Hoffman https://webbreacher.com/ - multiple OSINT projects
https://spyonweb.com/ - We take the information from public sources, then structure it for your quick and convenient search for the websites that probably belong to the same owner.
https://www.xlek.com/ - Free public data search
Bashfuscator
- a fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team: https://github.com/Bashfuscator/Bashfuscator
Metlo
- an open-source API security platform: https://github.com/metlo-labs/metlo
Evilginx
- Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication: https://github.com/kgretzky/evilginx2
Postmaniac
- Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces: https://github.com/boringthegod/postmaniac
epieos
- Retrieve information linked to an email address: https://epieos.com/
mailcow
: dockerized Ubuntu mail server - https://github.com/mailcow/mailcow-dockerized
InstaOSINTbr
- Instagram OSINT tools collection: https://github.com/DavizinBR/InstaOSINTbr
Instagram Story Saver
: https://www.storysaver.net/
https://intelx.io/ - Intelligence X is an independent European technology company founded in 2018 by Peter Kleissner. The company is based in Prague, Czech Republic. Its mission is to develop and maintain the search engine and data archive.
https://www.nerdydata.com/ - Get a list of websites that use certain technologies, plus their company and spend data.
Perfect for lead generation, market analysis, and competitive research.
SubDomainizer
- A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github: https://github.com/nsonaniya2010/SubDomainizer
SecretKeyWords
- Secret Keywords patterns - aggregated from different sources: https://github.com/nsonaniya2010/SecretKeyWords
sanfinder
- it finds Subject Alternative Names for a given list of domains: https://github.com/nsonaniya2010/sanfinder
Napalm FTP Indexer
- Search for millons FTPs: https://www.searchftps.net/
Andriller
- is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices: https://github.com/den4uk/andriller
localsend
- an open source cross-platform alternative to AirDrop: https://github.com/localsend/localsend
wikit
- Wikipedia summaries from the command line: https://github.com/KorySchneider/wikit
gluetun
- VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in: https://github.com/qdm12/gluetun
deepdoctection
is a Python library that orchestrates document extraction and document layout analysis tasks using deep learning models. It does not implement models but enables you to build pipelines using highly acknowledged libraries for object detection, OCR and selected NLP tasks and provides an integrated framework for fine-tuning, evaluating and running models. For more specific text processing tasks use one of the many other great NLP libraries: https://github.com/deepdoctection/deepdoctection
FirebaseExploiter
is a vulnerability discovery tool that discovers Firebase Database which are open and can be exploitable. Primarily built for mass hunting bug bounties and for penetration testing: https://github.com/securebinary/firebaseExploiter
Aegis
- A free, secure and open source app for Android to manage your 2-step verification token: https://github.com/beemdevelopment/Aegis
Th3inspector
- tool for Information Gathering: https://github.com/Moham3dRiahi/Th3inspector
toxssin
is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool (toxin.js): https://github.com/t3l3machus/toxssin
GitHub: https://github.com/bormaxi8080/osint-timeline
LinkedIn: bormaxi8080 OSINT Featured Timeline
You can see Systematized list of my GitHub Starred OSINT Repositories
and contact me on Twitter: https://twitter.com/OSINTech_
If you like the projects that I do, I will be grateful for donations in private dialogue.
WARNING! All tools, programs and techniques published in this repository are used for informational, educational purposes or for information security purposes. The authors are not responsible for the activities that users of these tools and techniques may carry out, and urge them not to use them to carry out harmful or destructive activities directed against other users or groups on the Internet.