# OSINT

{% embed url="<https://networking.ringofsaturn.com/>" %}

{% embed url="<https://mxtoolbox.com/NetworkTools.aspx>" %}

{% embed url="<https://osintframework.com/>" %}

### Live maps & Feeds

{% tabs %}
{% tab title="FEEDS" %}

|            **Threat Intelligence Feeds**            |
| :-------------------------------------------------: |
| [IBM XFORCE](https://exchange.xforce.ibmcloud.com/) |
|  [**OTX ALIENVAULT**](https://otx.alienvault.com/)  |
|      [THREATFEEDS.IO](https://threatfeeds.io/)      |
|      [**OPENCTI**](https://www.opencti.io/en/)      |
|     [RiskIQ](https://community.riskiq.com/home)     |
|                <https://socradar.io/>               |
|                <https://vulners.com/>               |
|                     {% endtab %}                    |

{% tab title="LIVE MAPS" %}

|                                LIVE THREAT MAPS                                |
| :----------------------------------------------------------------------------: |
|                [**KASPERSKY**](https://cybermap.kaspersky.com/)                |
|         [**DETEQUE BOTNET**](https://www.deteque.com/live-threat-map/)         |
|                [**FORTINET**](https://threatmap.fortiguard.com/)               |
|         [**FIREYE**](https://www.fireeye.com/cyber-map/threat-map.html)        |
|              [**BITDEFENDER**](https://threatmap.bitdefender.com/)             |
| [**SONICWALL**](https://securitycenter.sonicwall.com/m/page/worldwide-attacks) |
|                  [**THREATBUTT**](https://threatbutt.com/map/)                 |
|                                  {% endtab %}                                  |
|                                  {% endtabs %}                                 |

### Threat Intel

|                       Cyber Engines                       |
| :-------------------------------------------------------: |
|            [**Shodan**](https://www.shodan.io/)           |
|             [fofa.info](https://en.fofa.info/)            |
|            [**Intelx.io**](https://intelx.io/)            |
|         [Sypse Search Engine](https://spyse.com/)         |
|              [**Censys**](https://censys.io/)             |
|           [Greynoise](https://viz.greynoise.io/)          |
|             [**Zoomeye**](https://zoomeye.org)            |
|              [Onyphe](https://www.onyphe.io/)             |
|        [**Binaryedge**](https://app.binaryedge.io/)       |
|            [Pulsedive](https://pulsedive.com/)            |
|      [**Threatminer**](https://www.threatminer.org/)      |
| [Talos Reputation Lookup](https://talosintelligence.com/) |
|    [**https://app.netlas.io/**](https://app.netlas.io/)   |
|                 <https://searchcode.com/>                 |
|    [**https://publicwww.com/**](https://publicwww.com/)   |
|                   <https://fullhunt.io/>                  |

|                                      Analysis                                      |
| :--------------------------------------------------------------------------------: |
|                  [Virustotal](https://www.virustotal.com/gui/home)                 |
|       [**Brightcloud**](https://www.brightcloud.com/tools/url-ip-lookup.php)       |
|                     [Threatcrowd](https://www.threatcrowd.org/)                    |
|                  [**Domain Big Data**](https://domainbigdata.com/)                 |
|                       [AbuseIPDB](https://www.abuseipdb.com/)                      |
|               [**Cisco Talos Intel**](https://talosintelligence.com/)              |
|                   [NormShield](https://services.normshield.com/)                   |
|                     [**Phishstats**](https://phishstats.info/)                     |
|                    [Securitytrials](https://securitytrails.com/)                   |
|                  [**Spamhaus**](https://www.spamhaus.org/lookup/)                  |
|                 [Sucuri site check](https://sitecheck.sucuri.net/)                 |
|                 [**URLhaus Db**](https://urlhaus.abuse.ch/browse/)                 |
|                          [urlscan.io](https://urlscan.io/)                         |
|                    [**domainiq.io**](https://www.domainiq.com/)                    |
|                         [urlvoid](https://www.urlvoid.com/)                        |
|                   [**kaspersky**](https://opentip.kaspersky.com/)                  |
|           [Metadefender Opswat](https://metadefender.opswat.com/?lang=en)          |
|                      [**CheckPhish**](https://checkphish.ai/)                      |
| [Google Safe Browsing](https://transparencyreport.google.com/safe-browsing/search) |
|                          [**hashdd**](https://hashdd.com/)                         |
|              [Joe Sandbox URL Analyzer](https://www.url-analyzer.net/)             |
|                    [**IsItPhishing**](http://isitphishing.org/)                    |
|           [Kaspersky Threat Intel Portal](https://opentip.kaspersky.com/)          |
| [**Palo Alto Networks URL Filtering**](https://urlfiltering.paloaltonetworks.com/) |
|                       [PhishTank](http://www.phishtank.com/)                       |
|           [**Reputation Authority**](http://www.reputationauthority.org/)          |
|                              [crt.sh](https://crt.sh/)                             |

### Opensource Malware Analysis

|                         Malware Analysis                        |
| :-------------------------------------------------------------: |
| [Metadefender Opswat](https://metadefender.opswat.com/?lang=en) |
|     [**Hybrid Analysis**](https://www.hybrid-analysis.com/)     |
|                  [ANY.RUN](https://app.any.run)                 |
|      [**Virustotal**](https://www.virustotal.com/gui/home)      |
|           [ANLYZ](https://sandbox.anlyz.io/dashboard)           |
|       [**Valkyrie Comodo**](https://valkyrie.comodo.com/)       |
|            [Intezer](https://analyze.intezer.com/#/)            |
|                [**Koodoo**](https://koodous.com/)               |
|            [Joe Sandbox](https://www.joesandbox.com/)           |

###

|   Interactive Cross Browsers   |
| :----------------------------: |
| <https://www.browserling.com/> |

### Tools

|                                                                 Tools                                                                |
| :----------------------------------------------------------------------------------------------------------------------------------: |
|                                          [**CyberChef**](https://gchq.github.io/CyberChef/)                                          |
|                                   [**UnPHP**](http://www.unphp.net/) ( Analyze malicious PHP Code )                                  |
|                               [**Jsunpack**](http://jsunpack.jeek.org/) ( Generic Javascirpt Unpacker )                              |
|                                    [https://www.base64decode.org/ ](https://www.base64decode.org/)                                   |
|                                      [https://www.urldecoder.org/ ](https://www.urldecoder.org/)                                     |
| [**http://lombokcyber.com/en/detools/decode-sourcecop**](http://lombokcyber.com/en/detools/decode-sourcecop) – Decode SourceCop v3.x |
|                                                 [**regex101**](https://regex101.com/)                                                |
|                                               [**regexpal**](http://www.regexpal.com/)                                               |
|                                        [**HashKiller**](https://hashkiller.co.uk/default.aspx)                                       |
|                                                                                                                                      |

|                 MISC                 |
| :----------------------------------: |
| [Wigle.net](https://wigle.net/stats) |
