A small list of super useful many tools/services to catch bad guys that i am using myself regularly
Many of these have been taken from other sources. I also recommend to read Michael Bazzell's book, it's amazing.
- Telegram OSINT
- Toolkits
- Data Breaches
- Password
- Google Dorks
- Social Media
- Search Engines
- Misc
- Books
↑ Telegram OSINT
https://t.me/fvcksystem_bot - Eye of God
https://t.me/osint_maigret_bot - Maigret
https://t.me/telesint_bot - Telesint
https://t.me/OverloadCyberBot - Overload
https://t.me/TgAnalyst_bot - Telegram Analyst
https://t.me/GTA_search2Bot - Gta Search
https://t.me/tgscanrobot - Search for user's groups
https://t.me/PasswordSearchBot - Password Search
https://t.me/UniversalSearchXBot - Universal Search (free version of @HowToFindRU_Robot)
https://t.me/NewLeakOSINTbot - Leak Osint (useful asfuck)
https://t.me/US2UserBox_bot_Bot / https://link.usersbox.net/ - User's Box
↑ Toolkits
https://inteltechniques.com/tools/index.html - some tools of Michael Bazzell on his website
https://intelx.io/tools - intelx osint tools
https://www.osintessentials.com/ - some of osint investigation tools
https://infosecurity.by/osint-tools - same as above
https://doxbin.com/ - doxxing pastes on ppl
https://osintframework.com/ - osint framework tree
https://inventory.raw.pm/tools.html#title-tools-osint-and-reconnaissance - OSINT and Reconnaissance
https://github.com/mxrch/ghunt - Google osint / collecting data about account
https://github.com/megadose/holehe - Check email registration on more than 120 sites
https://emailrep.io/ - Mail verification service with some features
↑ Data Breaches
https://intelx.io/ - search across ip/email/domain/bitcoin address and etc.
https://www.dehashed.com - almost the same as intelx
https://leakcheck.io/ - email / username pass breaches check
https://haveibeenpwned.com - based
https://spycloud.com.com - Database identities aren't really available to see, just using to check
usage https://portal.spycloud.com/endpoint/enriched-stats/test@email.com
https://hudsonrock.com - Check if the email show up in someone's stealer logs
usage https://cavalier.hudsonrock.com/api/json/v2/preview/search-by-login/osint-tools?email=test@email.com
↑ Passwords
https://breachdirectory.org/ - Gives you a password's hash
SHA-1 Password decryption - md5decrypt.net/en/Sha1
https://psbdmp.ws/api/search/test@test.com - Monitors the entire Pastebin
site:xlek.com "test@test.com"
↑ Google Dorks
https://sankalppatil12112001.medium.com/google-hacking-google-dorks-for-sensitive-information-f1d5a8eedb32 - Google Hacking: Google Dorks for Sensitive Information
https://habr.com/ru/companies/postuf/articles/510766/ - Google Dorking Usage
https://www.exploit-db.com/google-hacking-database
↑ Social Media
https://vk.watch - vk profile history
https://findclone.ru/ searching by face on social media(vk as i remember)
https://search4faces.com - search user's profile picture on social media
https://github.com/th3unkn0n/osi.ig - instagram monitoring
https://webresolver.nl/ - skype osint
↑ Search Engines
Search Engines Mini-Cheatsheet
https://www.shodan.io/ - search by ip, name, or domain
↑ Misc
https://web.archive.org/ ¯_(ツ)_/¯
https://geospy.web.app/ - get location from the picture
https://findclone.ru/ - searching by face on social media(vk as i remember)
https://search4faces.com - search user's profile picture on social media
https://whatsmyname.app/ - searching thru everything with a username
↑ Books
https://www.amazon.com/OSINT-Techniques-Resources-Uncovering-Information/dp/B0BRDR9P4Q (pdf) - Osint Technique by Michael Bazzell
created this repo initially for myself, now updating it everytime i use something new