OWASP Amass

Automated OSINT reconnaissance platform with over 200 data sources. Integrates Shodan, VirusTotal and HaveIBeenPwned.

Full-featured web reconnaissance framework designed to gather information from open sources quickly.

Tool for gathering emails, subdomains, IPs and URLs using multiple public data sources.

Find usernames across multiple social networks. Ideal for OSINT investigations.