OSINT.SH is a collection of information gathering tools. It lists tools for finding public cloud buckets, subdomains, DNS history, reverse IP lookups, technology detection, certificate searches, DNS lookups, reverse Google Analytics and AdSense IDs, WHOIS history, reverse WHOIS, reverse domain searches, OCR text extraction, MD5 hash guessing, SSL checking, IP geolocation, and reverse MX and name server records.
Directory
Search results
Published directory entries matching your search.
Email search tool for finding public addresses and related information during OSINT investigations.
Reverse WHOIS lookup for finding domains connected to the same registrant, email, or ownership details.
OSINT.sh tool for detecting a website's technology stack, frameworks, and services.
OSINT.sh tool for discovering subdomains connected to a target domain.
OSINT.sh tool for finding domains that share the same mail exchanger records.
OSINT.sh tool for finding domains and websites hosted on the same IP address.
OSINT.sh tool for finding websites connected by shared Google Analytics tracking IDs.
OSINT.sh tool for finding websites connected by shared Google AdSense identifiers.
OSINT.sh reverse domain lookup for finding related domains and infrastructure links.
OSINT.sh SSL check for testing whether a host appears vulnerable to POODLE.
OSINT.sh online Nmap-style scanner for checking visible ports and network services.
OSINT.sh IP lookup for checking geolocation, ASN, network, and hosting information.
OSINT.sh SSL check for testing whether a host appears vulnerable to Heartbleed.
OSINT.sh tool for checking historical DNS records and domain infrastructure changes.
OSINT.sh certificate search for finding TLS certificates, domains, and certificate history.
OSINT.sh tool for checking historical WHOIS records and domain ownership changes.
OCR tool for extracting readable text from images, screenshots, and scanned files.
OSINT.sh tool for searching public cloud buckets and exposed storage resources.