Cloudflare Resolver

Free online tool. Enter the name of the domain protected by CloudFlare and the service will find subdomains that are not protected by CloudFlare.

http://www.skypeipresolver.net/cloudflare.php

HASHMOB

Multifunctional online tool to search password hashes.

Search for hashes (copy the text or load the list from a file, 500 hashes per hour for free), verify hashes against a certain algorithm, check password strength, download hashes lists.

hashmob.net

🤖 Botnadzor.com - a platform to detect bots in VK.com by account, post, or group. API and browser extensions are available.

❓ The project is designed to disclose the scale of hidden propaganda, misinformation publicly, and lies coming from seemingly real profiles of existing people. The photos on these profiles are stolen from dating sites or other social networks.

👉 Link: https://botnadzor.org/

👉 How to detect botnets and artificial content: https://sowel.soxoj.com/artificial-content-botnets

#botnet #sowel

The Man in Seat 61.

Mark Smith's (twitter.com/seatsixtyone) train seat maps collection

A website with a huge variety of information about European trains. Its creator has been working on the project for over 17 years.

seat61.com

#osint #geoint

Partly free online tool for Instagram profile analyze.

- profile growth
- posts interactions
- hashtags

and more.

app.notjustanalytics.com

#osint #socmint

Awesome Google Dorks

List of operators and example queries in Google to search for:

- IOT devices
- google drive documents
- movies
- login pages
- files with emails and other contact info

and more.

https://github.com/Tobee1406/Awesome-Google-Dorks

Github Dorks

A simple free online query builder to search for different sensitive data in the repositories of a particular user or organisation.

https://github-dorks.vercel.app/

Contributor twitter.com/wthmanas

One Million Dorks

A repository with text files containing a million dorks for finding potentially vulnerable web pages and sensitive data (in Google and other search engines).

Can be used with various automation tools.


https://github.com/HackShiv/OneDorkForAll/tree/main/dorks/1M_dork

Contributor twitter.com/hack0Shiv

Incident Response Projects for Beginners

Hands-on projects designed to enhance your cybersecurity skills:

- Phishing Attack Investigation
- Malware Analysis and Containment
- Network Intrusion Detection and Response
- DDoS Attack Detection and Response

https://github.com/0xrajneesh/Incident-Response-Projects-for-Beginners

Wednesday Updates #1, our weekly newsletter is out now.

Highlights: 7 Interesting blogs, 7 awesome videos, 9 new tools, 5 job openings, one free eBook and many more.

https://osintambition.substack.com/p/wednesday-updates-1

Subscribe to the newsletter for receiving all OSINT updates directly in your inbox.

Join @osintambition for more.

Partly free tools for gathering info by VIN and US License Plates numbers:

faxvin.com
epicvin.com

Where can you find the VIN?

- on the car or a picture of it
- in data or document leaks

VATINT (Vehicle and Transportation Intelligence) Tools

Online services for search by VIN or License Plates numbers in different countries;
Stolen car database (Europe);
Container and ships tracking;
Flights, trains, drones tracking

and much more.

https://github.com/CScorza/Tool-VATINT

ChatGPT for #OSINT Analysts: Your AI-Powered Assistant for Organizing Collected Intelligence

- Structured ChatGPT Prompts
- Extracting Key Intel
- Achieving OSINT Excellence

Author twitter.com/ervin_zubic

(since May 2024 ChatGPT-4 is free)

https://publication.osintambition.org/chatgpt-for-osint-analysts-your-ai-powered-assistant-for-organizing-collected-intelligence-33bbe4b1fac5

TEETO

A simple and completely free extension to quickly analyse a web page.

Finds endpoints (URLs), secrets (API-keys etc) and URL parameters.

https://chromewebstore.google.com/detail/teeto/jkonpljnfkapenfcfdhmilkbmnbalnml

LAZYEGG

Tool for extracting different data from web pages:

- cookies
- leaked credentials
- domains
- ips
- images
- links

and more.

https://github.com/schooldropout1337/nuclei-templates/blob/main/lazyegg.py

Creator twitter.com/gudetama_bf

#python #osint

SUBPROBER

A simple tool for scanning a list of websites. Allows you to collect a lot of data - IP address, status code, title, response length, content type, redirect info etc.

https://github.com/RevoltSecurities/SubProber

Tip by twitter.com/Dinosn

Advanced Search Tools

- regional search engines
- privacy search engines
- search engines dorking
- fact checking tools
- database search tools


and more.

https://starwww.tg-me.com/p/nRADzL/advanced-search-tools

Contributor twitter.com/intel0logist

#osint

Google & Shodan Dorks for web cameras search

Large list of search queries to find internet-connected webcams. Can be used in Google as well as various IP search engines (Shodan, Netlas, Censys etc).

https://github.com/ExploitXpErtz/WebCam-Google-Shodan-Dorks

What Telegram channels about #OSINT would you advise me to read?

Building a Versatile Threat Intelligence Program for Any Environment

A very detailed and in-depth article by twitter.com/ervin_zubic on how to put the Threat Intelligence Cycle to work with examples of tools for each stage.

https://publication.osintambition.org/building-a-versatile-threat-intelligence-program-for-any-environment-fe2d6935baa2