Online Reconnaissance/OSINT tools


        
            
                Markdown 0.90 KB
                                    
                        | None                    
                
                                        |
    0    0                            

            
                
                                    raw
                    download
                    clone
                    embed
                    print
                
                                    report
                
                
                            
        
        
            OSINT CheckList [Reconnaissance] (Online Tools) -

Dnstrails - Best for enumerating Subdomains
Viewdns.info - Various tools [Finding Origin IP behind Cloudflare, and so on) - Recommended
Google ASE aka Google Dorking [Most effective in some cases]
Pentest-tools [Paid/Rate-Limited]
Dnsdumpster [Free]
VirusTotal [Free]
Crt.sh - Best for enumerating related domains [Free]
Dnsgoodies [Free]
Shodan [Paid/Rate-limited]
Censys [Free mostly]
Fofa.so [Free mostly]
Spiderfoot [Currently Free, just request for a Spiderfoot instance]
Zoomeye [Free mostly and works well]
Binaryedge [Paid/Rate-Limited]
onyphe.io [Free mostly]
GreyNoise.io [Free mostly]
Hunter.io [Free mostly]
Wigle.net
Ghostproject.fr

Did I miss out some, or, have more information regarding them? No problem, give me a shoutout on Twitter @payloadartist!