OSINT tools: my own list, updated

Recently, some of my followers asked me some updates on my list of OSINT tools, published some years ago. So, I collected a new list of tools, in order to enrich my previous post.

E-mail and Credentials

Email Lookup

Retrieve information linked to an email address, without notifying its user.

Have I been pwned?

Check if an email has been compromised in a data breach.

DeHashed

Data Breach search engine.

Intelligence X

Search engine that scans Tor, I2P, data leaks and the public web by email, domain, IP, CIDR, Bitcoin address and more.

LeakCheck

Very large data breach search engine

RiskIQ

CTI platform that allows information gathering about emails and domains.

365CHK

Simple Python script to check if there is an Office365 instance linked to a particular domain.

OH365UserFinder

Python script used for identifying valid Office 365 accounts and domains without the risk of account lockouts.

Onedrive_user_Enum

Python script used for identifying valid Onedrive user accounts.

WhatsMyName Web

Enumerate usernames across many websites and social networks.

Maigret

Collects a dossier on a person by username only, checking for accounts on a huge number of sites and gathering all the available information from web pages.

Messagging and Telephony services

SMSC.RU

Free service that allow to check any mobile number, find out the operator, subscriber status and other information with an HLR request.

Sync.me

Search any phone number worldwide using data collected by mobile app users.

Truecaller

Search any phone number worldwide using data collected by mobile app users.

Showcaller

Search any phone number worldwide using data collected by mobile app users. Can be used in Android emulator in order to simulate incoming call intent.

CallApp

Search any phone number worldwide using data collected by mobile app users. Can be used in Android emulator in order to simulate incoming call intent.