Research path

Pivoting

A focused view of OSINT4ALL tool profiles mapped to this investigation path.

17 mapped profiles No pay-to-rank ordering

How to use this path

  • Start broad here, then narrow in the directory filters.
  • Open profiles for limits, pricing, and verification notes.
  • Use collections when you need a workflow stack, not one tool.
Silent Push official-page screenshot

Official-page screenshot

Silent Push

Source checked 2026-09-19

Infrastructure intelligence for connected domain and host leads

Verification: Pending Verification Workflow: Discovery, Pivoting, Verification Pricing: Freemium

Best for: Investigating a suspicious web footprint through DNS, certificate and content-related observations.

Editorial

Tool profile

Silent Push

Infrastructure intelligence for connected domain and host leads

WorkflowDiscovery, Pivoting, Verification AccessFreemium
Editorial
Open profile

Tool profile

Validin

Explore historical domain and internet infrastructure observations

WorkflowDiscovery, Pivoting, Verification AccessFreemium
Editorial
Open profile
Criminal IP official-page screenshot

Official-page screenshot

Criminal IP

Source checked 2026-09-19

Search public asset exposure and domain risk context

Verification: Pending Verification Workflow: Discovery, Pivoting, Verification Pricing: Freemium

Best for: An additional perspective on a scoped IP, service or suspicious domain during defensive triage.

Editorial

Tool profile

Criminal IP

Search public asset exposure and domain risk context

WorkflowDiscovery, Pivoting, Verification AccessFreemium
Editorial
Open profile
OWASP Amass official-page screenshot

Official-page screenshot

OWASP Amass

Source checked 2026-09-19

Map an authorized organization's external asset footprint

Verification: Pending Verification Workflow: Discovery, Pivoting, Verification Pricing: Free

Best for: Structured discovery of domains and related infrastructure for a clearly scoped asset inventory.

Editorial

Tool profile

OWASP Amass

Map an authorized organization's external asset footprint

WorkflowDiscovery, Pivoting, Verification AccessFree
Editorial
Open profile
Subfinder official-page screenshot

Official-page screenshot

Subfinder

Source checked 2026-09-19

Discover subdomains from passive sources

Verification: Pending Verification Workflow: Discovery, Pivoting, Verification Pricing: Free

Best for: Generating an initial domain inventory before validation and historical research.

Editorial

Tool profile

Subfinder

Discover subdomains from passive sources

WorkflowDiscovery, Pivoting, Verification AccessFree
Editorial
Open profile
dnstwist repository screenshot

Repository screenshot

dnstwist

Source checked 2026-09-19

Find lookalike domains for brand and phishing triage

Verification: Pending Verification Workflow: Discovery, Pivoting, Verification Pricing: Free

Best for: Checking suspicious typo, homoglyph and naming variants around an authorized brand or domain.

Editorial

Tool profile

dnstwist

Find lookalike domains for brand and phishing triage

WorkflowDiscovery, Pivoting, Verification AccessFree
Editorial
Open profile
Gitleaks official-page screenshot

Official-page screenshot

Gitleaks

Source checked 2026-09-19

Scan authorized repositories for possible exposed secrets

Verification: Pending Verification Workflow: Discovery, Pivoting, Verification Pricing: Free

Best for: Defensive checks of code and repository history that the analyst is authorized to examine.

Editorial

Tool profile

Gitleaks

Scan authorized repositories for possible exposed secrets

WorkflowDiscovery, Pivoting, Verification AccessFree
Editorial
Open profile

Tool profile

Osintly

Multi-module OSINT search and investigation workspace

WorkflowDiscovery, Enrichment, Pivoting AccessFreemium
Submitted
Open profile

Tool profile

DNSlytics

Reverse analytics, DNS, and domain intelligence

WorkflowEnrichment, Pivoting AccessFreemium
Editorial
Open profile
DNSDumpster official-page screenshot

Official-page screenshot

DNSDumpster

Source checked 2026-05-07

Passive DNS and subdomain reconnaissance

Verification: Verification status not listed Workflow: Discovery, Pivoting Pricing: Freemium

Best for: Use it when a domain is already in scope and the next job is quick passive mapping before…

Editorial

Tool profile

DNSDumpster

Passive DNS and subdomain reconnaissance

WorkflowDiscovery, Pivoting AccessFreemium
Editorial
Open profile

Tool profile

WhoisXML API

Domain, DNS, WHOIS, and threat intelligence APIs

WorkflowEnrichment, Pivoting AccessFreemium
Editorial
Open profile

Tool profile

Mitaka

Browser extension for quick IOC and threat-intelligence pivots

WorkflowEnrichment, Pivoting AccessFree
Editorial
Open profile

Tool profile

Sherlock

Open-source username discovery across public services

WorkflowDiscovery, Pivoting AccessFree
Editorial
Open profile

Tool profile

Maigret

Open-source username search with broad site coverage and reports

WorkflowDiscovery, Pivoting AccessFree
Editorial
Open profile

Tool profile

DomainTools

Commercial domain intelligence for WHOIS history and DNS pivots

WorkflowEnrichment, Pivoting AccessFreemium, Paid
Editorial
Open profile

Editorial proof card

Microsoft / RiskIQ

Source checked 2026-05-27

Legacy PassiveTotal context and Microsoft threat intelligence

Verification: Verification status not listed Workflow: Pivoting Pricing: Enterprise

Best for: Understanding legacy PassiveTotal-style passive-DNS, certificate, WHOIS, tracker, reputation, and infrastructure pivots inside current Microsoft threat-intelligence context.

Editorial

Tool profile

RiskIQ PassiveTotal

Legacy PassiveTotal context and Microsoft threat intelligence

WorkflowPivoting AccessEnterprise
Editorial
Open profile

Tool profile

Censys

Censys Platform search for hosts, web properties, and certificates

WorkflowPivoting AccessFreemium
Editorial
Open profile