01
Start Here
Frameworks and toolkits that map the discipline before you pick a single tool.
OSINT Framework →
An interactive directory of hundreds of OSINT tools organized by category — the closest thing to a map of the field.
osintframework.com
Bellingcat's Online Investigation Toolkit →
Editorially vetted tools across geolocation, satellite imagery, social media, and corporate records, built by working investigators.
bellingcat.gitbook.io/toolkit
awesome-osint →
A long-running, community-maintained GitHub list of OSINT tools and resources across every category imaginable.
github.com/jivoi/awesome-osint
02
Courses & Training
Structured paths, from free and self-paced to formal certification.
FreeOSINT.org →
A fully open-source training project with modules built and maintained by OSINT professionals, added to weekly.
freeosint.github.io
IntelTechniques →
Michael Bazzell's training and tool suite — long the default reference point for practical, hands-on OSINT technique.
inteltechniques.com
SANS SEC497 →
The formal, certification-track option — practical OSINT methodology taught by working intelligence practitioners.
sans.org
03
Blogs & Newsletters
Where the field talks to itself — new technique, new tools, new tradecraft.
Week in OSINT →
Sector035's Monday newsletter, running since 2018 — a weekly distillation of what the OSINT community is finding and building.
sector035.nl
OSINT Curious (Archive) →
The project has wound down, but its library of webcasts, blogs, and technique write-ups remains freely available.
osintcurio.us
OSINT Team →
A publication and community covering technique, tooling, and the business side of OSINT work.
osintteam.com
04
Working Tools
A starting kit across recon, identity, and verification — not exhaustive, just the ones worth knowing first.
Shodan →
A search engine for internet-connected devices — cameras, servers, routers, industrial systems.
shodan.io
Censys →
Detailed data on hosts and infrastructure exposed to the public internet.
censys.io
Maltego →
Link-analysis software for mapping relationships between people, domains, and organizations.
maltego.com
SpiderFoot →
Open-source automation with 200+ modules for reconnaissance on domains, IPs, and identities.
spiderfoot.net
DNSDumpster →
Free domain research and subdomain enumeration.
dnsdumpster.com
Sherlock →
Command-line tool for finding usernames across hundreds of social platforms.
github.com/sherlock-project/sherlock
Wayback Machine →
The internet's memory — archived snapshots of pages that have since changed or disappeared.
web.archive.org
Have I Been Pwned →
Checks whether an email or phone number has appeared in a known data breach.
haveibeenpwned.com
Know a resource that belongs here?
Contact Us