picman995+3
Advanced Member
- Joined
- April 20, 2026
- Messages
- 225
- Reaction score
- 1,327
- Points
- 93
- Thread Author
- #1
To give ya a hand with explorin' the massive expanses of the open, deep, and dark web, here's a list of twenty-one sweet tools that could make yer work a breeze.
1. Check out Free OSINT resources with OSINT Framework:
OSINT Framework indexes all sorts of connections to different URLs, suggestin' where to have a squiz next when conductin' an investigation.
It also provides tips on what services can help you find specific information that might help with yer research.
Use Case:
When you drop a piece of data (like an email address, phone number, name, etc.) into the framework, it spits back all the known online sources that contains info relevant to that data. The OSINT Framework also offers a list of potentials where more information related to that specific source can be found.
2. Run a Top-notch Binary Code Check with IDA Pro:
The original source code might not always be available. A disassembler like IDA Pro turns machine-readable computer code into a readable format, allowing experts to inspect and review suspicious software programs that may potentially have malware / spyware.
3. Grab Geolocation Data with Cree.py:
Cree.py is a geo-visualisation tool that brings together and shows data from different places.
Use Case:
Once set up, you can give the tool a social media thingy. Creepy marks everything about the places on a big picture, so you can see where the devices were when the post was made.
4. Mine, Merge, and Map Info with Maltego:
Integrate data from public sources, commercial vendors, and internal sources through the Maltego Transform Hub. All data comes pre-packed as Transforms, ready to be used in investigations. Maltego takes one artifact and snags more.
Use Case:
Use it to feed Maltego domain names, IP addresses, domain records, URLs, or emails. The system finds connections and relationships within the data and allows users to create graphs in an intuitive point-and-click logic.
5. Check out DNS Records with DNSdumpster:
DNSdumpster's a free tool for diggin' up info on domains.
Use Case:
After ya enter a domain name, DNS Dumpster finds and shows all associated subdomains.
6. TinEye for Reverse Image Search:
TinEye is an image-focused web crawler database. It lets you do a reverse image search to find where the same bloody pic has popped up online before. Pretty handy tool if you're after finding where a pic's been uploaded or used elsewhere on the internet.
7. Shodan, The Interwebs Search Engine for IoT:
Websites ain't the only thing out there. Shodan sorts out what devices are online and where they're at, and who's using them.
Use Case:
Shodan helps the smart folk keep an eye on all the devices they got connected to their network that can be accessed from the internet, and that's vulnerable to all sorts of attacks.
8. Wayback Machine a Massive Library of the Interwebs:
Wayback Machine is like a massive library of the interwebs, letting researchers dive deep into old versions of websites. They can see what the page looked like when it was first posted or changed, even if the info isn't available on other search engines anymore.
Use Case:
Say someone's website gets busted by the FBI, but the original content's been wiped clean. Wayback Machine can still bring up old info the feds might wanna get their hands on.
9. Follow the Bucks with CipherTrace Maltego Transform:
It's a right ripper of a program that can trace the flow of cryptocurrency funds by reading the Bitcoin blockchain. Maltego is a pretty nifty piece of work, it can ID all sorts of bad behaviour like criminal acts, coin mixing up, dodgy dealings on the dark web, ATM skullduggery, and shady goings on with exchanges. You get this as a plugin for Maltego.
Just remember this, you can't ever be sure about the purity of Bitcoin even with these mixing services. It's best to use Monero instead to throw the coppers off the scent.
10. Check up any Person's Public Info through Voter Records:
Voter Records is a free political research tool with access to over 70 million voter registration details.
You'll find info like linked public records, political ties, family, addresses past and present, and more.
Use Case:
Real handy for digging up all sorts of personal deets and connections. Could be real useful for a researcher or investigator.
11. Check out Whitepages for Info on Others:
They've got your back for reverse look-ups on names, addresses, and phone numbers.
Use Case:
It's a ripper for sorting the real from the fake. Good for confirming whether you're chatting with the actual person or business you think you're with. Helps in tracking down missing people and checking out businesses too. Might even dig up a full history report on anyone you need info on.
12. Disguise Your Identity with Fake Name Generator:
Fake Name spins up a whole new bogus tucker, includin' the full whack of false info, like a person's complete contact gubbins, a mother's maiden name, street address, email, credit cards, phone number, and the like.
Use Case:
A fake identity can be a real lifesaver when you need to fill in forms without coughing up your own details, using it as a nick online, testing out payment options with duds from a hat of randomly generated credit card numbers, and all other sorts of research where a nosey parker doesn't wanna expose their true self.
13. Check out Crime Spots with CityWatch:
CityWatch is a crime visualisation site. Chuck in a location within the US, plus a few other deets, and they'll sling ya detailed crime intel. The info is served up on a nifty map.
14. HoneyDB:
HunneyDB's got multiple honeypots scattered 'round the interwebs, just waitin' to get pwned. The service keeps a detailed log of any attacks, including the IP used and the bogan binary that launched the hack attempt. All this info is stored in the HunneyDB database. It also lets users search for known threats and trace 'em back to similar attacks or campaigns detected on its honeypots.
15. MrLooquer IOCFeed:
It's a cracking good reverse search engine for IOCs. This thing gathers up all sorts of IOC stuff like viruses, phishing attempts, or those security holes everyone's always whinging about. It then lays it all out for you, complete with the dodgy domains they originally came from.
MORE ?
1. Check out Free OSINT resources with OSINT Framework:
OSINT Framework indexes all sorts of connections to different URLs, suggestin' where to have a squiz next when conductin' an investigation.
It also provides tips on what services can help you find specific information that might help with yer research.
Use Case:
When you drop a piece of data (like an email address, phone number, name, etc.) into the framework, it spits back all the known online sources that contains info relevant to that data. The OSINT Framework also offers a list of potentials where more information related to that specific source can be found.
2. Run a Top-notch Binary Code Check with IDA Pro:
The original source code might not always be available. A disassembler like IDA Pro turns machine-readable computer code into a readable format, allowing experts to inspect and review suspicious software programs that may potentially have malware / spyware.
3. Grab Geolocation Data with Cree.py:
Cree.py is a geo-visualisation tool that brings together and shows data from different places.
Use Case:
Once set up, you can give the tool a social media thingy. Creepy marks everything about the places on a big picture, so you can see where the devices were when the post was made.
4. Mine, Merge, and Map Info with Maltego:
Integrate data from public sources, commercial vendors, and internal sources through the Maltego Transform Hub. All data comes pre-packed as Transforms, ready to be used in investigations. Maltego takes one artifact and snags more.
Use Case:
Use it to feed Maltego domain names, IP addresses, domain records, URLs, or emails. The system finds connections and relationships within the data and allows users to create graphs in an intuitive point-and-click logic.
5. Check out DNS Records with DNSdumpster:
DNSdumpster's a free tool for diggin' up info on domains.
Use Case:
After ya enter a domain name, DNS Dumpster finds and shows all associated subdomains.
6. TinEye for Reverse Image Search:
TinEye is an image-focused web crawler database. It lets you do a reverse image search to find where the same bloody pic has popped up online before. Pretty handy tool if you're after finding where a pic's been uploaded or used elsewhere on the internet.
7. Shodan, The Interwebs Search Engine for IoT:
Websites ain't the only thing out there. Shodan sorts out what devices are online and where they're at, and who's using them.
Use Case:
Shodan helps the smart folk keep an eye on all the devices they got connected to their network that can be accessed from the internet, and that's vulnerable to all sorts of attacks.
8. Wayback Machine a Massive Library of the Interwebs:
Wayback Machine is like a massive library of the interwebs, letting researchers dive deep into old versions of websites. They can see what the page looked like when it was first posted or changed, even if the info isn't available on other search engines anymore.
Use Case:
Say someone's website gets busted by the FBI, but the original content's been wiped clean. Wayback Machine can still bring up old info the feds might wanna get their hands on.
9. Follow the Bucks with CipherTrace Maltego Transform:
It's a right ripper of a program that can trace the flow of cryptocurrency funds by reading the Bitcoin blockchain. Maltego is a pretty nifty piece of work, it can ID all sorts of bad behaviour like criminal acts, coin mixing up, dodgy dealings on the dark web, ATM skullduggery, and shady goings on with exchanges. You get this as a plugin for Maltego.
Just remember this, you can't ever be sure about the purity of Bitcoin even with these mixing services. It's best to use Monero instead to throw the coppers off the scent.
10. Check up any Person's Public Info through Voter Records:
Voter Records is a free political research tool with access to over 70 million voter registration details.
You'll find info like linked public records, political ties, family, addresses past and present, and more.
Use Case:
Real handy for digging up all sorts of personal deets and connections. Could be real useful for a researcher or investigator.
11. Check out Whitepages for Info on Others:
They've got your back for reverse look-ups on names, addresses, and phone numbers.
Use Case:
It's a ripper for sorting the real from the fake. Good for confirming whether you're chatting with the actual person or business you think you're with. Helps in tracking down missing people and checking out businesses too. Might even dig up a full history report on anyone you need info on.
12. Disguise Your Identity with Fake Name Generator:
Fake Name spins up a whole new bogus tucker, includin' the full whack of false info, like a person's complete contact gubbins, a mother's maiden name, street address, email, credit cards, phone number, and the like.
Use Case:
A fake identity can be a real lifesaver when you need to fill in forms without coughing up your own details, using it as a nick online, testing out payment options with duds from a hat of randomly generated credit card numbers, and all other sorts of research where a nosey parker doesn't wanna expose their true self.
13. Check out Crime Spots with CityWatch:
CityWatch is a crime visualisation site. Chuck in a location within the US, plus a few other deets, and they'll sling ya detailed crime intel. The info is served up on a nifty map.
14. HoneyDB:
HunneyDB's got multiple honeypots scattered 'round the interwebs, just waitin' to get pwned. The service keeps a detailed log of any attacks, including the IP used and the bogan binary that launched the hack attempt. All this info is stored in the HunneyDB database. It also lets users search for known threats and trace 'em back to similar attacks or campaigns detected on its honeypots.
15. MrLooquer IOCFeed:
It's a cracking good reverse search engine for IOCs. This thing gathers up all sorts of IOC stuff like viruses, phishing attempts, or those security holes everyone's always whinging about. It then lays it all out for you, complete with the dodgy domains they originally came from.
MORE ?
