10 November 2021. Update #14Welcome to @cyb_detective OSINT tools collection newsletter.68 new tools were added last week. There are now 644 tools in the collection.Here’s a list of last updates:Tiktok Timestamp - determines the time of publication of the video to the nearest second. Just copy the link. (https://bellingcat.github.io/tiktok-timestamp/)Instagram Location Search - Get the names and links to all the locations on Instagram tied to specific geographic coordinates. (https://github.com/bellingcat/instagram-location-search)Raymond - Framework for gathering information about website (https://github.com/hamza07-w/raymond)Twitter account detector - A simple and fast Chrome extension that finds all Twitter accounts on a site. (https://chrome.google.com/webstore/detail/twitter-account-detector/papcdbgfejihdinhieggiamjnkclhkck/related)Dnstwister - The anti-phishing domain name search engine and DNS monitoring service (https://dnstwister.report/)Dnstwist - Command line anti-phishing domain name search engine and DNS monitoring service (https://github.com/elceef/dnstwist)CloudUnflare - Reconnaissance Real IP address for Cloudflare Bypass (https://github.com/greycatz/CloudUnflare)Gravatar check - Just enter email and see what the person's Gravatar avatar looks like. (https://en.gravatar.com/site/check/)Telegago - Telegram search engine (https://cse.google.com/cse?q=+&cx=006368593537057042503:efxu7xprihg#gsc.tab=0&gsc.q=%20&gsc.page=1)UserFinder - tool for finding profiles by username (https://github.com/mishakorzik/UserFinder)Broken Link Checker - shows which links on the page are giving out errors. It helps to find sites that have been working recently but are no longer working. (https://chrome.google.com/webstore/detail/broken-link-checker/nibppfobembgfmejpjaaeocbogeonhch/related)Domaintracker - webapp and mobile app, which helps you keep track of payment deadlines (expired dates) for domains (sends push notifications and notifications to email) (https://domaintracker.app/)Stevemorse.org - Searching the Social Security Death Index (https://stevemorse.org/ssdi/ssdi.html)UK Census Online - Database of deaths, births, and marriages. From 1841 to the beginning of the 21st century. Only the first and last names can be searched. (https://ukcensusonline.com/search/)Montage.meedan.com - Search #YouTube video by date (uploaded or recording) and by geolocation. (https://montage.meedan.com)Thorndyke - Checks the availability of a specified username on over 200 websites (https://github.com/rlyonheart/thorndyke)RemindWhen - Simple app that reminds you on email if your favorite country opens for tourists from your country. (http://www.remindmewhen.io/)FindMyBID - Toolkit for collecting data from social networks (https://findmyfbid.in/)Copy all links and image links to CSV or JSON - Download all links from current webpage in CSV (for open in #Excel) or JSON (https://chrome.google.com/webstore/detail/copy-all-links-and-image/ccddopnnikeeoogpfbnfommfoeliaidg/related)FindMyAss (HostSpider) - Domain investigations toolkit (https://github.com/h3x0crypt/HostSpider)Drishti - Nodejs toolkit for OSINT (https://github.com/indiancyberops/Drishti)Social Analyzer - extension for Google Chrome that simplifies and speeds up daily monitoring of social networks. Create your own list of keywords and regularly check what's new and related to them. (https://chrome.google.com/webstore/detail/socialanalyzer-social-sen/efeikkcpimdfpdlmlbjdecnmkknjcfcp)Ericom Page Risk Analysis - Get a detailed report with links to CSS, Javascript, Fonts, XHR, Images and domains web pages (https://chrome.google.com/webstore/detail/analyzer/bmbhpmmhjkbmcachipmccnlcemaoiiji/related)SingleHire - Tool for search contacts by full name, location and job title. Shows phones, emails, #Linkedin, #Facebook, #Twitter and other social media profile (https://www.signalhire.com/candidates/47dc037faace4abeb0727d6f4d0f3079)Legrooms for Google Flights - An extension that displays the size of the legroom between the seats next to the flight information. (https://chrome.google.com/webstore/detail/legrooms-for-google-fligh/nhonfddkgankhjilponlbdccpabaaknp/related)Zspotify - Spotify track downloader. Download mp3 by link or by keywords (https://github.com/Footsiefat/zspotify)GoFindWhois - More than 180 online tool for domain investigaions in one. What's not to be found here: reverse whois, hosting history, cloudfare resolver, redirect check, reputation analyze. (https://gofindwhois.com/)GoFindWho People Search - More than 300 tools for gathering information about people in one. Search by name, username, phone, adress, company name. (https://gofindwho.com/)Spyfu - tool to collect seo information about the domain, which provide a lot of data partly for free (https://www.spyfu.com/overview/domain)Cloudmare - Simple tool to find origin servers of websites protected by #Cloudflare, #Sucuri or #Incapsula with a misconfiguration DNS (https://github.com/MrH0wl/Cloudmare)Lookyloo - Webapp allowing to scrape a website and then displays a tree of domains calling each other (redirects, frames, javascript, css, fonts, images etc) (https://lookyloo.circl.lu/)VKDownloader - Search for videos on all video hosting platforms and immediately get links to download them in different formats. (https://github.com/therealvk/VKRdownloader)Web--proxy - free web proxy (https://web--proxy.herokuapp.com/)SovaWeb - web version of a famous Russian bot in Telegram for searching by email, nickname, IMSI, IMEI, MSISDN, BTS, IP, BSSID (http://sovaweb.herokuapp.com/)Complete Email Scraper - Paste the link to the site and the bot finds the sitemap. The bot then goes through all the links on the site looking for email addresses (strings contains @). (https://freemailscraper.herokuapp.com/complete-website-email-scraper)Slideshare Downloader - A very simple and fast tool for downloading Slideshare presentations in PDF format (recommend to choose High quality at once) (https://github.com/mohan3d/slideshare-go)Regex Checker - Search and highlight (in webpage): Emails, Phone numbers, Dates, Prices, Addresses (https://chrome.google.com/webstore/detail/regex-checker/gkcnkoebkkppbapcjifgokmpcflfhbde)Whois Domain Search Tool - A tool that allows you to query whois data for a site name in several domain zones at once. (https://whois.marcaria.com/en)IP Neighbors - Find the hosting neighbors for a specific web site or hostname (https://www.ip-neighbors.com/host/)Find Who Events - Google CSE for finding events by location (keywords) in #Facebook, #Eventbrite, #Xing, #Meetup, #Groupon, #Ticketmaster, #Yepl, #VK, #Eventective, #Nextdoor (https://cse.google.com/cse?cx=017922636351918147428:v7m0tfgk6uj#gsc.tab=0)The Favicon Finder - Instantly finds the favicon and all .ico files on the site, and then generates links to download them quickly. (http://besticon.herokuapp.com/)SecretFinder - Tool for find sensitive data (apikeys, accesstoken,jwt,..) or search anything with #regexp on #javascript files (https://github.com/m4ll0k/SecretFinder)CompressedCrack - Simple tool for brute passwords for ZIP and RAR archives (https://github.com/mnismt/CompressedCrack)Encrytped ZIP file creator - Create ZIP archive online (https://www.protectedzip.com/)Python Code Checker - quick find errors in code (https://extendsclass.com/python-tester.html)EveryPixel - Reverse image search engine. Search across 50 leading stock images agencies. It's possible to filter only free or only paid images. (https://www.everypixel.com/)openi.nlm.nih.gov - Reverse image search engine for scientific and medical images (https://openi.nlm.nih.gov/gridquery)BBC News Visual Search - Enter the name of the item and the service will show in which news stories and at what time interval it appeared (http://zeus.robots.ox.ac.uk/bbc_search/)Portrait Matcher - Upload a picture of a face and get three paintings that show similar people. (http://zeus.robots.ox.ac.uk/portraitmatcher/index?error=agree)SpyDialer - Free search contact information by phone number, name, address or email (https://www.spydialer.com/)Khalil Shreateh Social Applications - More than 20 tools to extend the standard functionality of #Facebook, #TikTok, #Instagram, #Twitter (information gathering, random pickers for contests, content downloaders etc.) (https://khalil-shreateh.com/khalil.shtml/social_applications/)Hackertarget - 14 tools for gathering information about domain using Hackerarget API (http://hackertarget.com) (https://github.com/pyhackertarget/hackertarget)Face Generator - Face Generator for creating #sockpuppets. Customize gender, age, head position, emotions, hair and skin color, makeup and glasses. (https://generated.photos/face-generator/)Many Passwords - Default passwords for IoT devices and for web applications (for ex. MySQL and PostgreSQL admin panels) (https://many-passwords.github.io/)PassHunt - Command line tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords (https://github.com/Viralmaniar/Passhunt)TheLordEye - Tool that searches for devices directly connected to the internet with a user specified query. It returns results for webcams, traffic lights, routers, smart TVs etc (https://github.com/rlyonheart/thelordseye)PeeringDB - Freely available, user-maintained, database of networks, and the go-to location for interconnection data. (https://www.peeringdb.com/)Google Docs to Markdown online converter - just copy text from document to the site (https://mr0grog.github.io/google-docs-to-markdown/)Talend API Tester Free Edition - tool that allows to quickly test requests to different APIs directly in the browser, send requests and inspect responses, validate API behavior (https://chrome.google.com/webstore/detail/talend-api-tester-free-ed/aejoelaoggembcahagimdiliamlcdmfm/related?hl=ru)Fast Google Dorks Scan - Search the website for vulnerable pages and files with sensitive information using 45 types of Google Dorks. (https://github.com/IvanGlinkin/Fast-Google-Dorks-Scan)Turbolist3r - An improved and accelerated version of famous sublist3r. Looks for subdomains in 11 sources (see picture). It's possible to apply bruteforce (flag -b) (https://github.com/alex14324/Turbolist3r)BlockCypher - Blockchain explorer for Bitcoin, Ethereum, Litecoin, DogeCoin, Dash. Getting into about address, transactions and block hashes, block number or wallet name. (https://blockcypher.herokuapp.com/)Listennotes - Podcast Search Engine (https://www.listennotes.com/)WhoDidIt - Click on an area on the OpenStreetMap to get a list of nicknames of users who have made changes on it (with dates). (https://simon04.dev.openstreetmap.org/whodidit/)Online metadata viewer and editor - High-quality and well-made. Support docx, xlsx, msg, pptx, jpeg, vsd, mpp. (https://products.groupdocs.app/metadata/)IQWhois - Search whois data by address, city, name, surname, phonenumber (https://iqwhois.com/advanced-search)Google (universal) Dork Builder - Quick create queries with advanced search operator for Google, Bing, Yandex etc. Copy dorks from Google Hacking Database. Save dorks in your own database (https://addons.mozilla.org/ru/firefox/addon/google-dork-builder/)Auto Searcher - One by one types words from a given list into the search bar of #Google, #Bing, or another search engine (https://chrome.google.com/webstore/detail/auto-searcher/hhggekcjcdgenbgejmkhineppclnkbkn/related)
Cyber detective OSINT tools collection. Update #14
Cyber detective OSINT tools collection…
Cyber detective OSINT tools collection. Update #14
10 November 2021. Update #14Welcome to @cyb_detective OSINT tools collection newsletter.68 new tools were added last week. There are now 644 tools in the collection.Here’s a list of last updates:Tiktok Timestamp - determines the time of publication of the video to the nearest second. Just copy the link. (https://bellingcat.github.io/tiktok-timestamp/)Instagram Location Search - Get the names and links to all the locations on Instagram tied to specific geographic coordinates. (https://github.com/bellingcat/instagram-location-search)Raymond - Framework for gathering information about website (https://github.com/hamza07-w/raymond)Twitter account detector - A simple and fast Chrome extension that finds all Twitter accounts on a site. (https://chrome.google.com/webstore/detail/twitter-account-detector/papcdbgfejihdinhieggiamjnkclhkck/related)Dnstwister - The anti-phishing domain name search engine and DNS monitoring service (https://dnstwister.report/)Dnstwist - Command line anti-phishing domain name search engine and DNS monitoring service (https://github.com/elceef/dnstwist)CloudUnflare - Reconnaissance Real IP address for Cloudflare Bypass (https://github.com/greycatz/CloudUnflare)Gravatar check - Just enter email and see what the person's Gravatar avatar looks like. (https://en.gravatar.com/site/check/)Telegago - Telegram search engine (https://cse.google.com/cse?q=+&cx=006368593537057042503:efxu7xprihg#gsc.tab=0&gsc.q=%20&gsc.page=1)UserFinder - tool for finding profiles by username (https://github.com/mishakorzik/UserFinder)Broken Link Checker - shows which links on the page are giving out errors. It helps to find sites that have been working recently but are no longer working. (https://chrome.google.com/webstore/detail/broken-link-checker/nibppfobembgfmejpjaaeocbogeonhch/related)Domaintracker - webapp and mobile app, which helps you keep track of payment deadlines (expired dates) for domains (sends push notifications and notifications to email) (https://domaintracker.app/)Stevemorse.org - Searching the Social Security Death Index (https://stevemorse.org/ssdi/ssdi.html)UK Census Online - Database of deaths, births, and marriages. From 1841 to the beginning of the 21st century. Only the first and last names can be searched. (https://ukcensusonline.com/search/)Montage.meedan.com - Search #YouTube video by date (uploaded or recording) and by geolocation. (https://montage.meedan.com)Thorndyke - Checks the availability of a specified username on over 200 websites (https://github.com/rlyonheart/thorndyke)RemindWhen - Simple app that reminds you on email if your favorite country opens for tourists from your country. (http://www.remindmewhen.io/)FindMyBID - Toolkit for collecting data from social networks (https://findmyfbid.in/)Copy all links and image links to CSV or JSON - Download all links from current webpage in CSV (for open in #Excel) or JSON (https://chrome.google.com/webstore/detail/copy-all-links-and-image/ccddopnnikeeoogpfbnfommfoeliaidg/related)FindMyAss (HostSpider) - Domain investigations toolkit (https://github.com/h3x0crypt/HostSpider)Drishti - Nodejs toolkit for OSINT (https://github.com/indiancyberops/Drishti)Social Analyzer - extension for Google Chrome that simplifies and speeds up daily monitoring of social networks. Create your own list of keywords and regularly check what's new and related to them. (https://chrome.google.com/webstore/detail/socialanalyzer-social-sen/efeikkcpimdfpdlmlbjdecnmkknjcfcp)Ericom Page Risk Analysis - Get a detailed report with links to CSS, Javascript, Fonts, XHR, Images and domains web pages (https://chrome.google.com/webstore/detail/analyzer/bmbhpmmhjkbmcachipmccnlcemaoiiji/related)SingleHire - Tool for search contacts by full name, location and job title. Shows phones, emails, #Linkedin, #Facebook, #Twitter and other social media profile (https://www.signalhire.com/candidates/47dc037faace4abeb0727d6f4d0f3079)Legrooms for Google Flights - An extension that displays the size of the legroom between the seats next to the flight information. (https://chrome.google.com/webstore/detail/legrooms-for-google-fligh/nhonfddkgankhjilponlbdccpabaaknp/related)Zspotify - Spotify track downloader. Download mp3 by link or by keywords (https://github.com/Footsiefat/zspotify)GoFindWhois - More than 180 online tool for domain investigaions in one. What's not to be found here: reverse whois, hosting history, cloudfare resolver, redirect check, reputation analyze. (https://gofindwhois.com/)GoFindWho People Search - More than 300 tools for gathering information about people in one. Search by name, username, phone, adress, company name. (https://gofindwho.com/)Spyfu - tool to collect seo information about the domain, which provide a lot of data partly for free (https://www.spyfu.com/overview/domain)Cloudmare - Simple tool to find origin servers of websites protected by #Cloudflare, #Sucuri or #Incapsula with a misconfiguration DNS (https://github.com/MrH0wl/Cloudmare)Lookyloo - Webapp allowing to scrape a website and then displays a tree of domains calling each other (redirects, frames, javascript, css, fonts, images etc) (https://lookyloo.circl.lu/)VKDownloader - Search for videos on all video hosting platforms and immediately get links to download them in different formats. (https://github.com/therealvk/VKRdownloader)Web--proxy - free web proxy (https://web--proxy.herokuapp.com/)SovaWeb - web version of a famous Russian bot in Telegram for searching by email, nickname, IMSI, IMEI, MSISDN, BTS, IP, BSSID (http://sovaweb.herokuapp.com/)Complete Email Scraper - Paste the link to the site and the bot finds the sitemap. The bot then goes through all the links on the site looking for email addresses (strings contains @). (https://freemailscraper.herokuapp.com/complete-website-email-scraper)Slideshare Downloader - A very simple and fast tool for downloading Slideshare presentations in PDF format (recommend to choose High quality at once) (https://github.com/mohan3d/slideshare-go)Regex Checker - Search and highlight (in webpage): Emails, Phone numbers, Dates, Prices, Addresses (https://chrome.google.com/webstore/detail/regex-checker/gkcnkoebkkppbapcjifgokmpcflfhbde)Whois Domain Search Tool - A tool that allows you to query whois data for a site name in several domain zones at once. (https://whois.marcaria.com/en)IP Neighbors - Find the hosting neighbors for a specific web site or hostname (https://www.ip-neighbors.com/host/)Find Who Events - Google CSE for finding events by location (keywords) in #Facebook, #Eventbrite, #Xing, #Meetup, #Groupon, #Ticketmaster, #Yepl, #VK, #Eventective, #Nextdoor (https://cse.google.com/cse?cx=017922636351918147428:v7m0tfgk6uj#gsc.tab=0)The Favicon Finder - Instantly finds the favicon and all .ico files on the site, and then generates links to download them quickly. (http://besticon.herokuapp.com/)SecretFinder - Tool for find sensitive data (apikeys, accesstoken,jwt,..) or search anything with #regexp on #javascript files (https://github.com/m4ll0k/SecretFinder)CompressedCrack - Simple tool for brute passwords for ZIP and RAR archives (https://github.com/mnismt/CompressedCrack)Encrytped ZIP file creator - Create ZIP archive online (https://www.protectedzip.com/)Python Code Checker - quick find errors in code (https://extendsclass.com/python-tester.html)EveryPixel - Reverse image search engine. Search across 50 leading stock images agencies. It's possible to filter only free or only paid images. (https://www.everypixel.com/)openi.nlm.nih.gov - Reverse image search engine for scientific and medical images (https://openi.nlm.nih.gov/gridquery)BBC News Visual Search - Enter the name of the item and the service will show in which news stories and at what time interval it appeared (http://zeus.robots.ox.ac.uk/bbc_search/)Portrait Matcher - Upload a picture of a face and get three paintings that show similar people. (http://zeus.robots.ox.ac.uk/portraitmatcher/index?error=agree)SpyDialer - Free search contact information by phone number, name, address or email (https://www.spydialer.com/)Khalil Shreateh Social Applications - More than 20 tools to extend the standard functionality of #Facebook, #TikTok, #Instagram, #Twitter (information gathering, random pickers for contests, content downloaders etc.) (https://khalil-shreateh.com/khalil.shtml/social_applications/)Hackertarget - 14 tools for gathering information about domain using Hackerarget API (http://hackertarget.com) (https://github.com/pyhackertarget/hackertarget)Face Generator - Face Generator for creating #sockpuppets. Customize gender, age, head position, emotions, hair and skin color, makeup and glasses. (https://generated.photos/face-generator/)Many Passwords - Default passwords for IoT devices and for web applications (for ex. MySQL and PostgreSQL admin panels) (https://many-passwords.github.io/)PassHunt - Command line tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords (https://github.com/Viralmaniar/Passhunt)TheLordEye - Tool that searches for devices directly connected to the internet with a user specified query. It returns results for webcams, traffic lights, routers, smart TVs etc (https://github.com/rlyonheart/thelordseye)PeeringDB - Freely available, user-maintained, database of networks, and the go-to location for interconnection data. (https://www.peeringdb.com/)Google Docs to Markdown online converter - just copy text from document to the site (https://mr0grog.github.io/google-docs-to-markdown/)Talend API Tester Free Edition - tool that allows to quickly test requests to different APIs directly in the browser, send requests and inspect responses, validate API behavior (https://chrome.google.com/webstore/detail/talend-api-tester-free-ed/aejoelaoggembcahagimdiliamlcdmfm/related?hl=ru)Fast Google Dorks Scan - Search the website for vulnerable pages and files with sensitive information using 45 types of Google Dorks. (https://github.com/IvanGlinkin/Fast-Google-Dorks-Scan)Turbolist3r - An improved and accelerated version of famous sublist3r. Looks for subdomains in 11 sources (see picture). It's possible to apply bruteforce (flag -b) (https://github.com/alex14324/Turbolist3r)BlockCypher - Blockchain explorer for Bitcoin, Ethereum, Litecoin, DogeCoin, Dash. Getting into about address, transactions and block hashes, block number or wallet name. (https://blockcypher.herokuapp.com/)Listennotes - Podcast Search Engine (https://www.listennotes.com/)WhoDidIt - Click on an area on the OpenStreetMap to get a list of nicknames of users who have made changes on it (with dates). (https://simon04.dev.openstreetmap.org/whodidit/)Online metadata viewer and editor - High-quality and well-made. Support docx, xlsx, msg, pptx, jpeg, vsd, mpp. (https://products.groupdocs.app/metadata/)IQWhois - Search whois data by address, city, name, surname, phonenumber (https://iqwhois.com/advanced-search)Google (universal) Dork Builder - Quick create queries with advanced search operator for Google, Bing, Yandex etc. Copy dorks from Google Hacking Database. Save dorks in your own database (https://addons.mozilla.org/ru/firefox/addon/google-dork-builder/)Auto Searcher - One by one types words from a given list into the search bar of #Google, #Bing, or another search engine (https://chrome.google.com/webstore/detail/auto-searcher/hhggekcjcdgenbgejmkhineppclnkbkn/related)