Cybersecurity · Top 10
Information gathering & OSINT tools
Reconnaissance starts with open sources. These are the tools I reach for first.
Draft — under review
- 01
Maltego ↗
Link analysis that turns scattered OSINT into a readable graph.
- 02
SpiderFoot
Automates hundreds of OSINT sources in one scan.
- 03
theHarvester
Fast collection of emails, subdomains and hosts from public sources.
- 04
Recon-ng
A modular recon framework with a Metasploit-style workflow.
- 05
OWASP Amass
In-depth subdomain enumeration and attack-surface mapping.
- 06
Shodan ↗
The search engine for internet-connected devices.
- 07
Censys
Internet-wide scan data and certificate search for exposure analysis.
- 08
OSINT Framework ↗
A curated map of free OSINT resources by category.
- 09
- 10