Research path

Discovery

A focused view of OSINT4ALL tool profiles mapped to this investigation path.

75 mapped profiles No pay-to-rank ordering
Open filtered directory Browse collections

How to use this path

  • Start broad here, then narrow in the directory filters.
  • Open profiles for limits, pricing, and verification notes.
  • Use collections when you need a workflow stack, not one tool.

Tool profile

Shodan

Public-internet exposure search for hosts and services

WorkflowDiscovery AccessFreemium
Tested
Open profile
crt.sh official-page screenshot

Official-page screenshot

Sectigo

Source checked 2026-05-27

Free certificate-transparency lookup for domain pivots

Verification: Verification status not listed Workflow: Discovery Pricing: Free

Best for: Certificate-transparency pivots around domains, organizations, hostnames, SAN entries, fingerprints, and historical infrastructure naming patterns.

Editorial

Tool profile

crt.sh

Free certificate-transparency lookup for domain pivots

WorkflowDiscovery AccessFree
Editorial
Open profile
Intelligence X official-page screenshot

Official-page screenshot

Intelligence X

Source checked 2026-05-27

Sensitive-source and archive search context

Verification: Verification status not listed Workflow: Discovery Pricing: Paid

Best for: Selector-based search across archived, public-web, leak-adjacent, WHOIS, DNS, dark-web-adjacent, and document datasets when the identifier is already in…

Editorial

Tool profile

Intelligence X

Sensitive-source and archive search context

WorkflowDiscovery AccessPaid
Editorial
Open profile