OSINT Tools & Internet Investigation Resources

Find the right tool for the job. Choose a tool based on your needs. Test its features and limits with the search forms.

NetBootCamp Custom Tools
Facebook | Instagram | Website | People | Paste Sites

Recent additions

Custom Search Forms

InfoIP Address SearchWhois Domain SearchDNS & Resource SearchRelated Site SearchSocial SearchPeople Search
Conduct a search. Compare the features and limits of a resource through search forms.
IP address search forms

See NetBootCamp’s Website Tool for more search forms and investigation options


Whois search forms

DNS & web asset search forms

Related site search forms

Social search forms

See NetBootCamp’s Website Tool for more search forms and investigation options


People search forms

See NetBootCamp’s Website Tool for more search forms and investigation options


Basic Internet

InfoReferencesIP SearchIP AddressIPv6TracerouteDNS SearchDNSMXCDNs/CloudFlareNetworks/ASNData centersServers/Packets
IP Addresses, networks, DNS, and data centers.

IP Addresses
Wikipedia

ASNs
Wikipedia

Border Gateway Protocol
Wikipedia

Network traffic exchange
Peering

 

RIPE Academy

 

Introduction to DNS

Introduction to Networks & BGP
OpenDNS.com Intro to Networks
OpenDNS.com Intro to Border Gateway Protocol

IP address search forms

See NetBootCamp’s Website Tool for more search forms and investigation options


IP address Whois

 

IP address by geo-location

 

IP address by Network, Route & Location

 

IP address Reputation

 

IP address by ISP contact info

 

Reverse IP address / Shared server

 

Browser add-ons

Traceroute

 

International Traceroute Origins

 

Visual Traceroute

 

Ping – International Origins

 

Other Ping Resources

 

Convert Ping time into distance traveled

DNS & web asset search forms

MX records
Reverse MX lookup

CloudFlare / CDN IP address resolver

Networks / ASN Whois

 

Networks – by ASN number

 

Networks – by name

 

Networks – sites / resources hosted

 

Networks – peering

 

Networks – route propagation / graphs

 

Internet Exchanges – IXP

 

Lookup by regional IP address allocation

  • ARIN rWhois – Regional lookup (Americas) Point of contact. Date of contact info.
  • RIPE  -Regional lookup (Europe)  Double check geolocation by MaxMind
  • LACNIC – Regional lookup (Latin America)
  • AFRINIC – Regional lookup (Africa)
  • APNIC – Regional lookup (Asia Pacific)

 

Misc Network Tools

 

WiFi networks

  • Wigle.net WiFi network names by address/neighborhood
  • Google – Hotspots by zip code

 

Datacenters

 

Internet Exchange Points

 

Peering

 

Server Details

 

IP address traffic

 

HTTP Traffic, URLs & Debuggers

 

Packet Analyzer

 

Website Investigations

InfoReferencesWhois SearchWhoisAnalysisRelated Site SearchShared Services/Designe-Commerce/AuctionAds/RevenueArchivesMiscMonitorCopy/Preserve

Domain registration/Whois, related websites, e-commerce, advertising, revenue, backup tools

Google hosts
Github.com Google subdomains & IP addresses

Commonly encountered online resources
Wiki-Domains.net

Maltego blog
Maltego.blogspot.com

Apache server log guide
Loggly.com

Whois search forms

See NetBootCamp’s Website Tool for more search forms and investigation options


General Whois lookup

 

Real-time Whois lookup

 

Bulk Whois lookup

 

Whois history

 

Reverse Whois
Search domains by registrant name, email, address, phone

 

Domains sharing keywords
ID domains sharing same keyword

 

Hosting history

 


Whois servers: ccTLD registry examples

Conduct Whois lookups at the registry of origin

  • Marcaria International Whois
  • Google: Find ccTLD Whois search engine
  • .ES – Spain
  • .EU – Europe
  • .ME – Montenegro (GoDaddy)

 

References for ccTLD Whois lookups

 

Desktop apps and Bookmarks

 

Traffic/Rank

 

General Analysis

 

Site construction/response

 

Sitemaps

 

Subdomains

 

Link analysis

 

Server response/HTTP Headers

 

Cloudflare Resolver

 

SSL validation

Related site search forms

See NetBootCamp’s Website Tool for more search forms and investigation options


Shared Services
Nameservers, mail servers, analytics, publisher codes, widget

 

Shared terms, scripts & resources
HTML, Robots.tx, network/IP addresses

 

Similar Design

 

Cross-domain: Inbound/Outbound links

Multi-site search: Craigslist, eBay, Etsy and more

 

Amazon

 

Amazon Sellers

 

CSEs: Craigslist

 

Craigslist

 

eBay

 

UPC bar code search

 

Advertising

 

Ad network servers

 

Browser addons

 

Ad blocker

Check and Monitor
Website uptime, Keyword changes, NS/MX/IP changes

 

Monitor domains point to/from IP address

Backup / Preserve websites
Also see the Evidence tab under Special Focus

 

Screenshot / Preserve web pages

Social Media Investigations

InfoReferencesOSINT LinksSocial SearchScreen nameForum/BlogFacebookGoogle+TwitterLinkedinInstagramPinterest/TumblrPeriscope/Vine+RedditVK.com/RegionalMore NetworksDating NetworksReal-timeMulti-searchBitly/Short URLsImages/Social

OSINT tools: Facebook, Twitter, Social Networks, Identity verification, and more

Social Network list
Addthis.com social network list

 

Facebook
Law enforcement guidelines
Information for law enforcement (2010)
Understanding Facebook IDs (fbids)
Recycling Old Facebook Searches
Facebook Sourcing Tutorial
BBC Social Media Tips for Journalists
Facebook Analytics

 

IACP resources
IACP tools and tutorials

 

PublicIntelligence.net
Facebook: Law enforcement guide (2010)
Facebook: Subpoena and data requests

 

Twitter
Information for law enforcement
Twitter search operators: Cnet.com
Twitter location search: Thoughtfacet.com
Twitter resources: Journalisttoolbox.org
Twitter RSS feeds: Labnol.org

 

Instagram
Information for law enforcement
Instagram Architecture

 

Linkedin
Linkedin Boolen tips PDF Note that Boolean may depend on the category searched
Linkedin Staff search tips
Linkedin Boolean tips from Booleanstrings.com
Linkedin Search operators from Linkedin.com
Google queries for professionals from Souringlab.io

 

Google+
Google+ Classic Select “back to classic G+” under Settings

 

Misc
Using Creepy, geoStalker & fbStalker
Hackmag.com

 

Corrborating information
BBC Tips for Journalists

 

OSINT Links / Resource Lists

IntelTechniques.com
https://inteltechniques.com/intel/links.html

i-Sight.com
http://i-sight.com/resources/101-osint-resources-for-investigators

Onstrat.com
http://onstrat.com/osint/#startingpoints

OSINTframework.com
http://osintframework.com

OSINTinsight.com
www.osintinsight.com/shared.php?user=Mediaquest

Pibuzz.com/resources/

Researchclinic.net
http://researchclinic.net/

Toddington.com
http://toddington.com/resources/

Tracetools.co.uk
http://tracetools.co.uk

UK-OSINT.net
http://www.uk-osint.net

Social search forms

See NetBootCamp’s Website, Facebook and Instagram Tools for more investigation options

NetBootCamp CSEs:Screen Names

 

More CSEs:Screen Names

 

Screen Names: Search Engines & Probes

 

Example Google Queries

 

Find related profiles

  • 360social.me Chrome Extension: Find additional social profiles for subject
  • Archively.com Store profile data online. Use in combo with Prophet or other addon.
  • Clearbit Connect Chrome extension: Find additional profiles
  • Connectifier Chrome extension: Find additional profiles like FitBit, About.me & Quora
  • Discoverly Chrome extension: Find additional profiles (test results against the above)
  • Falcon Chrome Extension: Find additional social profiles for subject
  • Prophet Chrome extension: Find additional profiles: FB, Linkedin, G+, Twitter
  • Rapporto Chrome extension: View contact profiles in Gmail. Rapportio resurrected.

 

NetBootCamp Facebook Search Tool

Facebook Graph Queries: Profiles, Photos, Pages, Employers, Groups & More

 

NetBootCamp Facebook Search Tips

 

Example queries created with NetBootCamp’s Facebook Tool:

 

More Custom Facebook Tools

 

Example Google Queries

 

Find Profiles on Facebook

 

Facebook Graph: API

 

Facebook Graph Queries: Get UserID

 

Facebook Video

 

Facebook Pages: Search

 

Facebook Page: Comment Activity Stats

 

URL Sharing: Facebook, Twitter, G+, and more

 

Facebook Archive (2010)

 

RSS Feed generators

 

Hashtags and Trends

 

Browser add-ons

 

Misc Facebook Tools

 

Facebook DMCA

Twitter: Advanced Keyword Search

 

Twitter: Example search options

  • Twitter.com User tweets by keyword and date range
  • Twitter.com Images tweeted by user with keyword in date range
  • Twitter.com Videos tweeted by user with keyword in date range
  • Twitter.com Photos by any user with keyword in date range (no retweets)
  • Twitter.com Tweets with keywords and links
  • Twitter.com Recent tweets with keywords and links
  • Twitter.com Recent tweets near location with keywords and links

 

CSEs: Twitter Search

 

Twitter Custom Tools

 

Twitter people directory

 

Profile

 

Profile Test: Email, Phone, Username

 

Real-time Tweets

 

Tweet Keywords by Date Range

 

Historical Tweets

 

Tweets with Images

Image and Video search

 

Tweets with Links

 

Tweet by location

 

Hashtags

 

Track keywords and posts

 

Twitter RSS feed

 

Visualizer

 

Twitter archives

 

Twitter DMCA

CSEs: Linkedin

 

Custom Linkedin Tools

 

Example Queries on Linkedin

 

Example Queries via Google

 

Linkedin: Locate profile by email address

 

Other Linkedin search tools

 

NetBootCamp Instagram Search Tool

Search Profiles, Photos and Locations

 

Instagram: Find Profiles & Posts via Google

 

Find profiles via Instagram Search Engines

 

Instagram: API and UserIDs

 

Instagram Followers

 

Instagram Following

 

Instagram Profile Stats

 

Locations: Images by Address, Lat/Long, Date & Keyword

 

Locations: Images by Instagram LocationID

 

Get Instagram LocationID

 

Hashtags

 

Alerts

 

Monitor: RSS feeds

  • Websta.me Change the account user name to generate RSS
  • Websta.me Change the tag keyword to generate RSS

Pinterest: Reverse image search

 

Pinterest: Track pins by domain

 

Pinterest: API

 

Tumblr: Keyword search

 

Tumblr: Image search

Twitter Vine videos

 

Periscope / Meerkat live stream videos

  • Xplore Periscope/Meerkat iOS search
  • Google search Recent or Live Periscope/Meerkat streams near location
  • Google search Past Periscope/Meerkat stream by date range and keyword

 

Twitch / Mirrativ live stream videos

  • Google search Recent or Live Twitch.tv / Mirrativ Twitter stream by location
  • Google Search Twitch.tv / Mirrativ Twitter stream by date range and keyword

Reddit Users

 

Reddit Posts

 

Monitor: Reddit

VK.com

  • VK.com VK public search page with graph widget (clean up the URL)
  • Google search Search VK for users by Name and Country

 

VK: Search examples

 

VK: API

 

VK: Example API searches (no OAuth required)

 

Examples of how to find VK userIDs (oid)
Right click and view Profile Image: vk.com/photo(OID)
Hover over “Send a Message: vk.com/write(OID)
Search HTML for “oid:”

EMEA Networks

 

APAC Networks

 

LATAM Networks

Real-time: Facebook, Twitter, Instagram, +

Bit.ly

  • Bit.ly API
  • Bit.ly View Click stats, destination, User (if public), and accts sharing link by adding “+ “

 

Goo.gl

  • Goo.gl API
  • Goo.gl View Click stats, destination, creation date by adding URL to this link

 

Twitter T.co

  • T.co Stats are only available for account originating the link
  • T.co API

 

Tiny.cc

  • Tiny.cc Add a tilde “~” to view click stats and destination

 

IP loggers

 

TLDrify.com

 

Reveal Shortened URLs

NOTE: Some revealers are unable to ID intermediary URLs, if any, that redirect traffic to the destination.

Get stats or previews from various Short URL services

CSEs: Social Images

Image Search

 

Reverse Image Search

 

Social Network Examples

 

Browser Addons

Email, Phone, Address, People

InfoPeople SearchEmailPhone U.S.Phone Int'lSkypeAddress PeopleCV/ResumesBusiness

Locate people and reverse engineer email, phone, and physical address info

People search forms

See NetBootCamp’s People Tool for more search forms and investigation options


CSEs: Email

 

Custom Email Tools

 

Email search

 

Email trace

 

Email Headers: Resource Guide

 

Read receipt – IP address capture

 

Verify/Guess email address

 

Locate MX / mail server for a domain

Get CallerID

 

Verify Carrier / Phone type

 

Reverse lookup: Name/Street/Phone

 

Listen to voicemail

 

IMEI Mobile phone verification

International: Locate Phone origin

 

International: Phone finder

 

Canada

 

Latin America

 

Europe

 

Asia Pacific

 

Skype resolvers

 

Skype Uptime

 

US Address
Reverse lookup: Street to Phone

 

Custom People Search Tools

 

People by name

 

People with the same name

 

School and business networks

 

Ancestry search

 

People via property

 

Unclaimed property & Foreclosures

 

Political Donor Search

 

Court Documents

 

Inmate / Offender search

 

International people search

CSEs: Resume search

 

Career and Job Networks

 

Business: Officers / Contacts

 

Business name search

 

Regional business search

 

Business email search

 

Building search

 

Browser addons

Search

InfoReferencesSearch AlertsSearch EnginesMeta searchReal-timeRefinedSocialIntl SearchDrive SearchPaid SearchPhoto SearchRSS SearchFTPLink CollectionMisc/Maps

Focus your query through a specialized search engine or search technique

Online references and background for search techniques.

Google

Email alerts on keywords

Search engines that crawl and generate own results

Major search engines

 

Alternative and anonymous search engines

 

Major foreign search engines: Language-oriented results

Also set language or location preferences on Google.com and Bing.com
Google Search by country

 

Google RSS Feed

  • Labnol.org Creating a Google search RSS Feed (complex)
  • Page2RSS.com Use a clean search URL, i.e. google.com/search?q=

 

Google search scraper

Meta search engines that query and aggregate results from other search engines

Real-time general search

 

Real-time social search

 

Refined search

 

Social search

 

Real-time social search

Major foreign search engines: Language-oriented results

Also set language or location preferences on Google.com and Bing.com
Try Google Translate to modify your keywords before searching

Google Drive, Onedrive, and more

Tip: Target specific file formats with filetype:mp4, doc, docx, pptx, etc

 

Subscription search services

Major photo sharing websites

 

Facebook and Twitter image search

 

Instagram image search

 

Instagram: Mapped images by Location, Date, Keyword

 

Tumblr: Image search

 

Pinterest: Reverse image search

 

Reverse image search

 

Drop image onto search box for Google Image search

Miscellaneous

RSS Search locates content and websites based on keywords within RSS feeds

Search FTP servers and dump sites
i.e. images, videos, documents+

Browser Add-ons
Capture and download links from pages/search results

Miscellaneous search options

Google

 

Others

 

Map /Address Search

 

Map Plotter

 

Media: Image, Video, and Document

InfoImageEXiFVideoDocumentHash & Metadata

Search for shared avatars, forum signatures, related websites, and more

Major photo sharing websites

 

Facebookand Twitter image search

 

Instagram image search

 

Instagram: Mapped images by Location, Date, Keyword

 

Tumblr: Image search

 

Pinterest: Reverse image search

 

Reverse image search

  • Tineye.com – Reverse image search (forum signatures, avatars, etc)
  • Image.Google.com – Reverse image search (avatars, signatures+)

Drop image onto search box for Google Image search

EXiF viewer

 

Image Meta data

 

Browser add-ons

Video search

 

Video downloaders

 

Video SWF Decompilers

General document search

 

Document sharing search

Tip: Target specific file formats in Google queries using filetype:pdf or doc, docx, mp3, mp4, pptx, etc

Document conversion

File hash analysis & Comparison

Special Focus

InfoEvidenceBitCoinPayment ProcessingParcel TrackingBitTorrent/FilesharingPastebin sitesGithubTORWebmasters and HTMLResourcesCopyright / TrademarkFirefoxGoogle ChromeMisc/Data Mgmt

Special focus areas, resources, and browser add-ons

References

 

Screenshots & Web Preservation

 

WARC web archives

 

HAR HTTP archives

 

HTTP – Web debugging

 

Browser add-ons

 

Charts and link analysis

BitCoin values and trends

 

BitCoin block chains / transaction histories

 

BitCoin wallets

 

BitCoin payment gateways

 

BitCoin visualizers

 

BitCoin FAQs

 

Payment gateways: Contacts and Locations

 

Credit Cards: BIN Bank Identification Number lookup

 

Misc tools

 

Overnight parcel tracking

BitTorrent FAQs

 

Torrent search 

 

Torrent search / Verified torrents

 

Cyberlocker file search

 

Cyberlocker Collect and Check Links

 

Examples of piracy terms for refining search strings
Video rip, x264, xvid, cam, scr, -trailer, -soundtrack
Music mp3, kpbs, m4a, aac
Games serial key, mod, crack, ntsc
Software repack, preactivated, crack, nulled
eBooks/Images PDF, ebook, res, set, HD, pic

Paste sites & Paste search

Monitor Paste searches. Use Page2RSS to convert a search URL in to an RSS feed

Gitrob Github Explorer
Michenriksen.com

Misc
Transparency Toolkit Linkedin Crawler and other scrapers
Govcode.org Open source projects related to government

TOR Browser

 

TOR nodes

 

TOR Search

 

Informal TOR directories

 

TOR Services

 

TOR FAQ

 

Webmaster / HTML tools

 

Encode / Decode / Deobfuscators

 

SEO and Keyword Search

 

Webmaster forums: Communications among operators, ISPs, Ad networks+

Coming soon

Copyright: U.S.

 

Trademark: U.S.

Open search server
Opensearchserver.com

Openrefine
Openrefine.org Data cleanup

Apps and Utilities

InfoBrowsers / AnonymityInspect app / PhoneVOIP Phone/SMSEmail/MailFile transferPC maintenancePortable AppsRSS/Social MediaVideo / DigitalWeb AnalysisScrapers/AutomationEvidence

Desktop applications and resources for investigations and PC maintenance

Browsers

 

Browsers: Test Headers & IP address

 

WebRTC blockers

 

Desktop VPN services

 

Online proxies

 

Ad blocker & Privacy protection

 

Check for compromised accounts/passwords

 

Anonymity resources

 

Inspect EXE files

 

Inspect iPhone files

 

Inspect Android files

 

VOIP and disposable phones

 

Online SMS & Messaging

Note: Apps are not intended to replace forensic tools

 

Disposable Email


Mail Forwarding

 

File transfer

 

FTP clients

 

Amazon S3 clients

 

BitTorrent clients

 

File storage

 

Portable Apps

RSS Readers and filters

 

Social media

 

DVD and digital video format analysis

 

Website and Network Analysis

 

HTTP Traffic, Headers, URLs, Debuggers:

 

Packets:  IP address traffic

 

Packet Sniffers

 

Website backup

 

Web page preservation

 

Screenshots and Recordings

 

Screenshots & Web Preservation

 

HTTP – Web debugging

 

Browser add-ons

 

HAR HTTP archives

 

WARC web archives