Top OSINT Tools for Cybersecurity: Photo OSINT, Location OSINT & More
🧩 Top OSINT Tools You Must Know
Here’s a list of the most important OSINT tools for cybersecurity, investigations, and digital forensics — with emojis, short explanations, and links so readers can access them directly.
⚠️ Note: Always use these tools ethically and legally. OSINT only involves publicly available data.
🖼️ 1. FotoForensics
Use: Image forensics and Error Level Analysis (ELA) to check if an image has been tampered with.
🌐 Website: FotoForensics
🧩 2. Forensically
Use: Free browser-based photo forensics suite — clone detection, metadata extraction, ELA, noise analysis.
🌐 Website: Forensically
📝 3. ExifTool
Use: Industry-standard tool to read/write image, document, and media metadata (EXIF, IPTC, XMP). Great for GPS tags, timestamps, and camera info.
🌐 Website: ExifTool
🔍 4. TinEye / Google Reverse Image Search
Use: Reverse image search to find the original source of a photo or track its copies online.
🌐 Website: TinEye | Google Reverse Image Search
🕸️ 5. Maltego
Use: Visual link analysis platform — maps relationships between domains, emails, people, and social accounts.
🌐 Website: Maltego
📂 6. OSINT Framework
Use: A structured directory of OSINT tools categorized by task (people, social media, domains, geolocation, etc.).
🌐 Website: OSINT Framework
🌐 7. Shodan
Use: IoT / internet-connected device search engine. Finds exposed devices like webcams, routers, servers.
🌐 Website: Shodan
🕷️ 8. SpiderFoot
Use: Automated OSINT scanner for domains, IPs, emails, and names. Helps in reconnaissance and monitoring.
🌐 Website: SpiderFoot
📧 9. theHarvester
Use: Collects emails, domains, and hostnames from search engines and public sources.
🌐 Website / Repo: theHarvester GitHub
⚙️ 10. Recon-ng
Use: Web reconnaissance framework with modular setup for WHOIS, DNS, and social lookups.
🌐 Website / Repo: Recon-ng GitHub
👤 11. Social Mapper
Use: Cross-platform profile mapping using facial recognition to find matching social media accounts.
🌐 Website / Repo: Social Mapper GitHub
🔎 12. FaceCheck.id
Use: Reverse face search engine to locate social media profiles linked to a photo.
🌐 Website: FaceCheck.id
🗺️ 13. Mapillary + Geo Tools
Use: Geolocation and street imagery for location OSINT. Includes Mapillary, GeoGuessr, Google Earth, OpenStreetMap.
🌐 Websites: Mapillary | GeoGuessr | OpenStreetMap
🛡️ 14. Have I Been Pwned (HIBP)
Use: Check if emails or phone numbers appear in known breaches. Helps with defensive OSINT and security checks.
🌐 Website: Have I Been Pwned
📝 Other Useful Tools
- Google Dorks — advanced search operators
- Metagoofil — harvest metadata from public documents
- Wayback Machine — view historical versions of websites
🌟 Tip: Use OSINT Framework to explore more specialized tools for your investigations.
⚖️ Legal & Ethical Reminder
OSINT = working with publicly available data only.
Do not access private systems or restricted content. Ethical and legal compliance is critical.
