osint.sh
OSINT.sh tool for discovering subdomains connected to a target domain.
Directory
Search results
Published directory entries matching your search.
Filters
addons.mozilla.org
Search Site WE is a cross-browser extension compatible with Firefox and Chrome. It allows users to search within the current subdomain or the entire domain using a selected search engine, accessible via the toolbar button or context menu. It is a no-restart alternative to the established Search Site add-on, built with the WebExtensions API with identical functions and user interfaces across both supported browsers.
certkit.io
CertKit Certificate Search is a tool that searches TLS certificate transparency logs to locate publicly issued certificates. It can identify new subdomains, certificate renewals, and suspicious activity, supporting security monitoring, domain research, and uncovering hidden infrastructure.
osint.sh
OSINT.SH is a collection of information gathering tools. It lists tools for finding public cloud buckets, subdomains, DNS history, reverse IP lookups, technology detection, certificate searches, DNS lookups, reverse Google Analytics and AdSense IDs, WHOIS history, reverse WHOIS, reverse domain searches, OCR text extraction, MD5 hash guessing, SSL checking, IP geolocation, and reverse MX and name server records.
one-plus.github.io
OSINT Toolkit Website Information is a collection of tools for researching websites, IP addresses, domains, emails and MAC addresses. It lists lookups including Ping Website, Whois, reverse Whois, network and TLD lookup, IP history and geolocation, MAC vendor lookup, DNS report and header and source code search. The page states that some tools require the IP address, email address, domain name or MAC address of the target.
md5.gromweb.com
A dictionary-based MD5 reverse lookup service. Users can convert a string to its MD5 hash or submit a hash to look it up in a database of several million entries. The site explains what MD5 is and notes that MD5 hashes are theoretically impossible to reverse directly. It also lists recent successful reverses and links to related cryptography resources.
github.com
Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.
osint.sh
OSINT.sh tool for checking historical DNS records and domain infrastructure changes.
dnslytics.com
DNSlytics is an online investigation tool for viewing information about IP addresses, domain names and providers. It offers DNS lookups, email testing, WHOIS lookups, and reports on AS/BGP, CIDR and TLD data. Premium website access and a premium API provide additional page views, monitors and data.
domainwat.ch
Domain monitoring tool for tracking DNS changes, records, and domain activity.
centralops.net
CentralOps collection of DNS, WHOIS, traceroute, email, and network lookup tools.
github.com
GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).
ipleak.net
IPLeak.net is a diagnostic page that shows the IP addresses, DNS resolvers, WebRTC and torrent address information a visitor's system exposes to websites. It also explains WebRTC and DNS leaks and lists request details such as user agent and headers.
merklemap.com
Merklemap is a subdomain and certificate transparency search engine. It collects Certificate Transparency data by live tailing CT logs and indexing certificates, and offers a web interface, an API, and a CLI for searching subdomains and SSL/TLS certificates.
securitytrails.com
Attack-surface and DNS intelligence platform for domains, subdomains, IPs, and historical records.
web1.0hosting.net
A static hosting service for smallweb and retro-computing projects. It offers free subdomains, 100 MB of free space, FTP upload, predefined scripts, web mail, a search engine and a web chat, with static sites accessible from old devices.