Search engines
Curated Google dorks for finding exposed assets and information leaks.
Search engines
Privacy-respecting search; useful for second-opinion queries against Google's personalised results.
Search engines
Strong on RU/CIS content + reverse image search that often finds matches Google misses.
Search engines
Primary search index for the China region; complements Google when investigating PRC targets.
Search engines
Search excluding the most-popular sites — surfaces long-tail / niche pages.
Social media
Date-bounded, account-bounded, language-filtered tweet search. Login wall increasingly restrictive.
Social media
Twitter analytics, hashtag search, location-bounded queries.
Social media
Cross-instance Mastodon search (Fedi Tools).
Social media
Native Bluesky search — author + keyword + date filters.
Social media
Subreddit-bounded keyword search; pair with site: dorks for archived comments.
Username search
CLI tool that hunts a username across 400+ services. The reference implementation.
Username search
Web-based username search across hundreds of sites with categorised filters.
Username search
Quick brand-availability scan across ~100 social/domain destinations.
Email recon
Authoritative breach-disclosure database; check email and password exposure.
Email recon
Reputation lookup for an email address — domain age, SMTP signals, social presence.
Email recon
Email finder + verifier; surfaces patterns and known emails for a given domain.
Email recon
Email lookup pivoting to Google account ID, public reviews, reverse phone-to-email.
Email recon
Public Gravatar profile by MD5 of an email — confirms registration + sometimes reveals real name.
Phone-number recon
Crowdsourced caller-ID; useful when the number is in their database.
Phone-number recon
Phone-number validation, carrier, location.
Phone-number recon
Google's libphonenumber demo — country, region, carrier, line type.
Domain / IP / network
Domain registration data, historical WHOIS, reverse-WHOIS pivots.
Domain / IP / network
Aggregate of WHOIS, DNS, port scan, IP history, reverse IP, MX.
Domain / IP / network
Internet-wide scan data — hosts, certificates, services. Strong CT-log-based pivots.
Domain / IP / network
Service-banner search engine; classic for finding exposed devices and services.
Domain / IP / network
Sandboxed URL submission with screenshot, DOM, network calls. Public corpus is searchable.
Domain / IP / network
Certificate Transparency log search — find subdomains via cert issuance.
Domain / IP / network
Quick subdomain + DNS-record visualisation for a domain.
Domain / IP / network
ASN / prefix / peering visualisations for incident-network attribution.
Domain / IP / network
Anonymous-traffic intelligence (residential proxies, VPN, Tor, infrastructure tagging).
Image & video
Reverse image search; strong on first-known-occurrence + crop-tolerance.
Image & video
Largest reverse-image index. Drop an image to find similar across the web.
Image & video
Best-in-class for face matching — finds matches Google routinely misses.
Image & video
Browser extension for video / image verification — keyframe extraction, EXIF, reverse search.
Image & video
In-browser image-forensics suite — ELA, clone detection, magnifier, geo metadata.
Geolocation
AI-driven photo geolocation — guesses location from visual cues.
Geolocation
Query OpenStreetMap with Overpass QL — find every petrol station within X metres of a coord.
Geolocation
Crowd-density estimation for events / protests / footage.
Geolocation
Sun azimuth + elevation by location and time — confirm a photo's claimed time/place by shadow direction.
People search
Identity-resolution database; fee but high-quality cross-source pivots.
People search
US-focused free people-search — name → phone, address, family.
People search
US directory aggregator; has opt-out for the privacy-conscious.
Company / corporate
Largest open registry of companies — ownership, filings, jurisdiction crossover.
Company / corporate
Global Legal Entity Identifier registry — verify legal-entity identity across borders.
Company / corporate
Public company filings (US). 8-K incident disclosures land here.
Company / corporate
UK company / officer / address search. Free API on top.
Company / corporate
Indian Ministry of Corporate Affairs — directors, ROC filings, charges.
Archive / Wayback
The de-facto web archive. Save Page Now + CDX API for snapshots.
Archive / Wayback
On-demand snapshot service that tends to capture pages Wayback declines.
Archive / Wayback
Aggregator for cached versions across Google, Bing, archive.today, Wayback.
Dark web / CTI
Active leak-site tracker with API + RSS. See also /threatintel/darkweb on this site.
Dark web / CTI
Live ransomware victim and group tracker.
Dark web / CTI
Search engine across darknet, leaks, paste sites. Limited free tier.
Dark web / CTI
Continuously updated repository of dark web and CTI sources, by fastfire.
Dark web / CTI
Free malware repository; researcher-oriented sample sharing.
Cryptocurrency
BTC / ETH / BCH explorer with address tracking.
Cryptocurrency
Bitcoin transaction graph + entity clustering — strong for tracing flows.
Cryptocurrency
On-chain analytics + entity attribution across BTC, ETH, and many EVM chains.
Cryptocurrency
Visual crypto-flow tracing across multiple chains.
Transport / tracking
Live flight tracking + historical playback (paid for full history).
Transport / tracking
Unfiltered ADS-B feed including aircraft other trackers redact.
Transport / tracking
AIS-based vessel tracking — port calls, voyages, ownership.
Public records
Free index of US federal and many state court filings (RECAP archive).
Public records
Official US federal court records — pay-per-page, but authoritative.
Public records
Free US case-law / case-record search across many state systems.
Search engines
Comprehensive OSINT platform — username search (50+ platforms), geolocation, email/domain recon, metadata extraction, dark-web link checking, and crypto wallet tracking.
Search engines
Curated OSINT tools directory with community collections, featured tools, and new-tool discovery feed.
Search engines
Curated OSINT and cybersecurity tools directory — categorized tools for reconnaissance, social media investigation, and digital forensics.
Dark web / CTI
OSINT and threat intelligence search platform — unified queries across data sources for indicator lookups and infrastructure discovery.
Domain / IP / network
All-in-one website analysis — DNS, SSL/TLS, security headers, WHOIS, tech stack, and performance audit from a single URL.
Email recon
Breach search platform — check if credentials or personal data have been exposed in known data breaches.
Search engines
OPSEC and privacy toolkit — operational security guides, digital footprint reduction checklists, and secure communications reference.
Search engines
Curated list of privacy-focused tools — VPNs, encrypted messaging, password managers, and privacy-first software alternatives.