[༄Anna༄]

Ultimate OSINT / Recon Toolkit

A curated list of useful tools for infrastructure discovery, identity checks, web/code analysis, vulnerability research and OSINT workflows.

For authorized security research, defensive investigations and educational use only.

---

Categories Included

Infra • Identity • Web / Code • Vulnerabilities • OSINT • Automation Tip

---

🌐 Infrastructure / Attack Surface

• Shodan — Find exposed internet-connected devices.
  


• Censys — Internet-wide asset visibility and host/certificate data.
  


• FOFA — Asset discovery and external exposure search.
  


• ZoomEye — Attack surface mapping and device intelligence.
  

---

📧 Identity / Exposure Checks

• Hunter — Find and verify professional email addresses.
  


• HaveIBeenPwned — Check whether an email/domain appears in known breaches.
  


• DeHashed — Breach exposure monitoring and leaked data lookup for defensive purposes.
  

Note: Use breach-related services only for legitimate security checks, account protection, and authorized investigations.

---

💻 Web / Code Intelligence

• URLScan — Analyze websites, redirects, requests, scripts and page behavior.
  


• Grep.app — Search across public code repositories.
  


• crt.sh — SSL/TLS certificate transparency lookup.
  

---

🔐 Vulnerability Intelligence

• Vulners — Vulnerability database and CVE intelligence.
  


• GreyNoise — Filter internet background noise and identify common scanners.
  


• FullHunt — Attack surface discovery and external asset monitoring.
  

---

📡 OSINT / Data Discovery

• WiGLE — Wireless network mapping and WiFi intelligence.
  


• Intelligence X — Deep data search engine for OSINT research.
  


• LeakIX — Find exposed services, datasets and misconfigurations.
  


• SecurityTrails — DNS, IP, WHOIS and domain intelligence.
  

---

💡 Automation Tip

• SpiderFoot — Automate reconnaissance and OSINT collection across multiple data sources.
  

---

If you know other high-quality OSINT/recon tools worth adding, drop them below and I will update the list.

Stay legal. Stay ethical. Use these tools only where you have permission.

```

[Wake]

Sherlock has a web app tool for usernames here, well put together thread with some useful tools nice work!

[DAL-SHA]

You have a very interesting thread here ! Well done , really enjoyed it !

[Sift]

Sherlock is also good for usernames.