Research path
Public Web
A focused view of OSINT4ALL tool profiles mapped to this investigation path.
How to use this path
- Start broad here, then narrow in the directory filters.
- Open profiles for limits, pricing, and verification notes.
- Use collections when you need a workflow stack, not one tool.
Official-page screenshot
ViewDNS.info
Free web-based DNS and domain lookup tools
Best for: Use it when a domain investigation needs quick manual pivots across several lightweight DNS and hosting checks.
ViewDNS.info
Free web-based DNS and domain lookup tools
Official-page screenshot
DNSlytics
Reverse analytics, DNS, and domain intelligence
Best for: Use it when a website or domain needs passive pivots through analytics IDs, ad IDs, DNS clues, or…
DNSlytics
Reverse analytics, DNS, and domain intelligence
Official-page screenshot
Babel Street
Enterprise intelligence platform for multilingual risk and threat workflows
Best for: Enterprise teams evaluating commercial intelligence coverage for threat, identity, vendor-risk, or multilingual monitoring workflows.
Babel Street
Enterprise intelligence platform for multilingual risk and threat workflows
Official-page screenshot
Indiana University Observatory on Social Media
Claim and fact-check diffusion visualization for misinformation research
Best for: Visualizing how claims, rumors, and fact-checking content spread through public social-media signals.
Hoaxy
Claim and fact-check diffusion visualization for misinformation research
Repository screenshot
laramies
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Best for: Collecting first-pass public leads around an organization's domains, hosts, and exposed contact patterns.
theHarvester
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Editorial proof card
AbuseIPDB
IP abuse-report and reputation lookup service
Best for: Checking suspicious IP addresses against public abuse reports during security, exposure, and infrastructure triage.
AbuseIPDB
IP abuse-report and reputation lookup service
Official-page screenshot
EmailRep.io
Email reputation lookup for risk and identity-signal triage
Best for: Adding email reputation context to fraud, breach, contact-vetting, and people-research triage.
EmailRep.io
Email reputation lookup for risk and identity-signal triage
Official-page screenshot
Mapillary
Street-level imagery platform for geolocation and scene context
Best for: Corroborating roads, storefronts, landmarks, signage, and local scene context in geolocation workflows.
Mapillary
Street-level imagery platform for geolocation and scene context
Official-page screenshot
OSINT Framework
Reference index for OSINT tool categories and discovery paths
Best for: Finding OSINT tool categories and candidate resources during early workflow planning or training.
OSINT Framework
Reference index for OSINT tool categories and discovery paths
Repository screenshot
Megadose
Open-source email registration checker for public account-signal triage
Best for: Checking whether an email address may have public account-registration or account-recovery signals during authorized people or exposure research.
Holehe
Open-source email registration checker for public account-signal triage
Repository screenshot
lanmaster53
Open-source modular reconnaissance framework for technical OSINT
Best for: Technical analysts who need repeatable passive reconnaissance and enrichment around domains, organizations, contacts, or infrastructure leads.
Recon-ng
Open-source modular reconnaissance framework for technical OSINT
Repository screenshot
mxrch
Open-source Google account OSINT lead-generation tool
Best for: Checking public Google-account signals from an email, Gaia ID, Drive artifact, or account clue during authorized people, source,…
GHunt
Open-source Google account OSINT lead-generation tool
Repository screenshot
Sherlock Project
Open-source username discovery across public services
Best for: Generating public account leads from a distinctive username during social media, alias, or source research.
Sherlock
Open-source username discovery across public services
Repository screenshot
Soxoj
Open-source username search with broad site coverage and reports
Best for: Building a broad username lead list and exportable report for social-account, alias, or profile-clustering investigations.
Maigret
Open-source username search with broad site coverage and reports
Repository screenshot
ElevenPaths
Open-source document metadata analysis for OSINT and exposure review
Best for: Inspecting public document metadata for usernames, software clues, paths, and organization context during authorized research.
FOCA
Open-source document metadata analysis for OSINT and exposure review