Security Advisory
CERT-EU 🌟
European Union CERT Security Advisories
CISA KEV 🌟
Know Exploited Vulnerabilities Catalog
CERT-FR
French CERT Security Advisories
MyCERT
Malaysia CERT Security Advisories
Attack Surface
Shodan 🌟
Intelligence Search Engine
Censys
Intelligence Search Engine
ZoomEye
Intelligence Search Engine
IntelligenceX
Intelligence Search Engine
FullHunt
Attack Surface Management
PhoneBook
Retrieve URLs from given Domain by IntelligenceX
Onyphe
Cyber Defense Search Engine
Greynoise
Asset and Vulnerabilities Search Engine
ShadowServer
Free Daily Reports Subscription
SOCRadar
Extended Threat Intelligence
SecurityTrails
Attack Surface Intelligence API
CriminalP
Intelligence Search
Sandbox and Reputation
BrowserLing
Online Browser Sandbox (2nd link)
VirusTotal 🌟
Free Malware Scanner by Google
HybridAnalysis
Free Malware Scanner by Crowdstrike
AppAnyRun
Interactive Malware Analysis
Urlscan 🌟
Public Sandbox
Cuckoo CERT
Online Malware Analysis Tool
IP Quality Score
IP Reputation Lookup
Google Safe
Google Transparency Report
Talos
Asset Reputation Lookup by Cisco
AbuseIP
Asset Reputation Lookup
URLVoid
Website Reputation Lookup
ScamAdviser
E-commerce Website Reputation Lookup
Triage
Analyze Malware Samples
Joe Sandbox
Windows, MacOS and Android Sanbox
CyberGordon
Amazing Multi-engine Cyber Reputation Check
MobSF
Mobile Security Framework (Android/iOS/Win)
IBM X-Force
Malware Analysis by IBM
PA Filtering
URL Reputation by Palo Alto
Bluecoat Review
URL Reputation by Symantec
Malwares
Hash, IP and Domain Malware Scan
DocGuard
Malware Threat Scan from Hash
MetaDefender
Scan Anything with OPSWAT
Filescan
Sandbox by OPSWAT
Opentip Kaspersky
File Analysis by Kaspersky
Blacklist Checker
IP, Domain and Email Blacklist Check
France Verif 🌟
E-commerce Reputation Checker (Extension Available)
RST Cloud
IoC (Indicators of Compromise) Lookup by RST Cloud
Scamalytics
IP address Fraud Score
Valkyrie Verdict
Free malware analysis for files and websites
Threatyeti
Investigate Host Risk Score
DNS
DigWebInterface 🌟
DNS Dig
DNSDumpseter
Deep DNS Lookup
SecurityTrails
DNS Lookup
MXToolBox 🌟
MX DNS Audit
DNSlytics
Reverse IP to get hosted domains on server
Where Goes
Where does a link go
Whatsmydns 🌟
DNS Whois Details
DomainTools
DNS Whois Lookup
DNS History
Domain DNS Records History
DiG GUI
DNS Dig (modern interface)
DNS Security
DNS Security Check & DMARC by Merox
Network
Hping
Send Custom Ping for security assessment
PeeringDB
Network, Internet Exchange and Facility DB
IP Tools
Basic IP and Network Tools
Nmap Online
Nmap IP Ports Scan
MxToolBox 🌟
Email Analyzer
PhishTool
Great Forensic Email Analysis
PhoneBook 🌟
Retrieve Emails from given Domain by IntelligenceX
Epieos
Retrieve Information from given email
Hunter
Retrieve Emails from given Domain
Dehashed 🌟
Retrieve Passwords from Domain
PhishTank
Phishing Databse
Email Security
Free Email Security Check by UK NCSC
hibp? 🌟
Check if an email is leaked
OSINT Industries
Map Email and Phone over 200 Websites
Predicta Seach
Email & Phone Digital Footprint
DomainSearch
Get notified if Your domain is in a breach
Web Vulnerabilities and Technologies Scanner
SSLLabs 🌟
Website SSL Certificate Scanner by Qualys
Cloudflare Radar
Amazing URL Scanner
OpenVAS Online
Online Vulnerability Scanner
NetCraft 🌟
Website Technologies and Infrastructure Scanner
BuiltWith
Assets Technologies Scanner
Web Archive
Internet Archive Machine
SSL Scan
SSL/TLS Scan
Wappalizer
Website Technologies Scanner
WafWoo
WAF Detection
Sucuri 🌟
Detecting Payloads, WAF and Security Patches
Similar Web
Website Approximative Traffic and Ranking
Exploits and CTI
LeakIX
Assets Leaks and Security Incident
BinaryEdge
Amazing Cyber Threat Intelligence Platform
ThreatBook CTI
Efficient Cyber Threat Intelligence
Pulsedive
Free Threat Intelligence
CVEShield
Find information about any vulnerabilities
CVE Details
Vulnerabilities database by SSC
Vulners
Exploit Search Engine
Exploit DB
Vulnerabilities Advanced Database
Alienvault OTX
Community Powered Open Threat Exchange Platform
OpenCTI
CTI Structuring Platform by French ANSSI
Carbon Black
VMware CB Real-time threat research data
Palo Alto ATOMs
Actionable Threat Objects and Mitigations
RiskIQ 🌟
Internet Intelligence by Microsoft
First.org
CVSS Score Adapted to your Context
Filesec
Latest Attackers File Extensions
LOLBIN
Attackers Binaries used out of their Purpose
GTFOBins
Binaries to Bypass Misconfigured Systems
Abuse.ch 🌟
Community Driven Threat Intelligence
Nuclear Leaks 🌟
Largest free websites databases leak collection
Authentication
Crt
Certificate History Search Engine
2FA Directory
Check if MFA/2FA is Supported
CyberChef
Analyzing and Encoding Data
NTLM 🌟
Database of +8,7 billion Password Hashes
Active Directory
Purple Knight
Active Directory Security Audit by Semperis
PingCastle 🌟
Active Directory Security at 80% by Vincent Le Toux
BloodHound 🌟
AD and AAD Complex Attack Path Audit
Harden AD
AD and M365 Infrastructure Hardening-
CRT
CrowdStrike Reporting Tool for Azure AD / O365
AADInternals
Extract openly available tenant information
Adalanche
Open-Source Active Directory ACL Visualizer
Endpoint
Browser Test
Web Browser Scan
Ransomware Risk
Ransomware Risk Assessment by Zscaler
Security Preview
Internet Threat Exposure Analysis
Grabify
Track Clicks on Your URL
Wicar
Test Your Anti-Malware Anti-Virus
OTX EndPoint Security
Community Powered Endpoint Security Tool
Surfshark
DNS Leak Test
Cyber Rating and Risk Intelligence
Coalition 🌟
Cyber Score for your Company
Bitsight
Free customized security ratings report
Security Scorecard
Security Score of your Partners (14 Days trial)
Boosters
Gray Hat Warfare
Buckets and Shorteners finder
Black Bird
Map Accounts by Username
Grep
Search Across Git Repositories
OSINTracker 🌟
Track Your Investigations Online
Pastebin
Combine with Google Dorks
Metacrawler
Aggregates Search Engines
Kasm Web
Browser-based Desktop for your investigations
OpenCorporates 🌟
Largest database to search professionnals and entities
Instant Data Scrapper 🌟
Browser extention for website data extraction
Obsidian
Create notes and visualise them in graphs
Telemetry
Advanced Search in Telegram
Any feedback or question contact me.
Goosint lists best web-based OSINT tools that specialises in cybersecurity, cyberdefense and digital investigation. Goosint helps you gathering information you need about your target through publicly available data. This data will let you know more about a specific target or about your organization’s internet exposure.
All listed tools (except Active Directory tools) are web-based and therefore require no download, just click and run!
If you want to add other tools or have any suggestions to improve this website, I’d be delighted to hear from you, contact me!
Disclaimer
I am not responsible for the use of these tools. All content and information on this website are for informational and educational purposes only. The tools presented on Goosint should be used in accordance with applicable laws ans contracts. The tools presented on Goosint are not affiliated with Goosint. Please use them at your own risk.
Thank you !