Awesome BlackHat Arsenal

Collection of tools featured in Black Hat Arsenal events (2015-2025, Asia, Europe, USA, Canada, MEA):

- Lab Tools
- Web/AppSec
- Red Teaming
- #OSINT
- Blue Team & Detection
- Reverse Engineering


https://github.com/elbraino/awesome-blackhat-arsenal

Have LLMs Finally Mastered Geolocation

Test of 20 models against 25 photos, rating each from 0 (red) to 10 (dark green) for accuracy in geolocating the images

https://www.bellingcat.com/resources/how-tos/2025/06/06/have-llms-finally-mastered-geolocation/?utm_source=

#osint #geoint

SkyTruth

Free online map that help to find oil slicks in satellite imagery (with LLM) and identify vessels/oil platforms that may be responsible for those slicks.

https://cerulean.skytruth.org/

#osint #geoint

GeoGuessr Alternatives

geohub.gg
hideandseek.world
openguessr.com


#geoint

OnionLand

Darknet search engine (work in simple browser) + a series of article-guides on using Tor and other methods to access the .onion domain zone.

https://onionland.io/

Open Measures

Free online tool to analyse keyword post statistics across social media platforms (BlueSky, 4chan, Fediverse, Telegram, VK, Rutube, Rumble Video and others).

public.openmeasures.io

#osint #socmint

MerkleMap

A tool to search for domains using wildcards. Useful both for phishing and typosquatting investigations and for finding subdomains/linked sites.

Partially free. May work with a slight delay.

merklemap.com

#osint #CTI

PageCached

A simple and free online service for finding old versions of web pages in search engine caches and web archives.

https://pagecached.com/

#osint #socmint

VK WATCH

Face photo search tool for the VK social network (over a billion profiles worldwide).

https://vk.watch/

(don't pay to view profiles, just copy ID from VKwatch's URL and open profile by ID in VK)

#osint #socmint

Story Map

Free online tool for creating map-based visualisations (with captions, markers, photos). A lot of different options and customisations.

https://storymap.knightlab.com/

#geoint #visualisation

Blockchain OSINT

- Blockchain Explorers
- Crypto OSINT Analysis & Learning
- APIs & Data Sources
- Compliance, Risk, & AML Resources
- Learning Resources
- Investigation Workflows

https://github.com/codeluu/blockchain-osint

#osint #crypto

Rhino User Checker

Free online tool (looks like #cli, but it's a web app) to search profiles by username on different social networks. Export advanced profile data (avatars, denoscriptions, registration dates, etc.) to JSON.

https://usercheck.oscarzulu.org/

#osint #socmint

BadDNS

#Python #cli tool for detecting domain/subdomain takeovers (all kinds).

- check for dangling CNAME records, NS records, MX records

- enumerate subdomains by NSEC-walking

- check HTML content + TXT record content

https://github.com/blacklanternsecurity/baddns

FAKJS

Super fast #go tool that finds different sensitive data in JavaScript files:

- API keys, tokens, etc.
- Internal or hidden endpoints
- Configuration data
- Potential indicators of exposed logic or backend connections

https://github.com/thd3r/fakjs

Pentester Guide

- Certifications
- Pentesting Practice Platforms
- Foss Labs
- Bug Bounty Hunting Platforms
- Independent Pentesting Platforms
- 0Day Market
- Operating System for Hacking
- Hackers Manuals

https://github.com/ZishanAdThandar/pentest/

#cybersecurity

WEATHER2GEO

Python tool that filters cities by the weather that was in them on a certain date and time (MSN API).

The list of cities can be customised by changing the text file.

https://github.com/elliott-diy/Weather2Geo

Creator x.com/elliott_diy

#geoint

OSINT Tools India

Company Registries
Land Records / Property
Vehicle Information
People Search
Courts & Criminal Records
Archives
Procurement / Government Contracts
Maps

and more.

https://unishka.substack.com/p/osint-of-india

#osint

Awesome OSINT Chrome Extensions

A small list of Chrome/Brave extensions for various #OSINT related tasks:

Chrome extensions analysis
Content analysis
#socmint
Website analysis
#Geoint
Web archives
Screenshots

and more.


https://github.com/ubikron/awesome-osint-chrome-extensions

Telegram Intelligence: Getting Started Guide for Analysis

Guide by Braian Arroyo and Marcos Volpe:

- Existing structures in Telegram
- User profiling: Basic Profile Data, URL structure,
- Telegram Bots
- Recommended Safety Practices
- Telegram dorks

https://ciberprisma.org/2025/04/20/telegram-intelligence-guia-inicial-para-analistas/

FREE SHODAN TOOLS

cvedb.shodan.io
internetdb.shodan.io
geonet.shodan.io
entitydb.shodan.io
shdn.io
Browser Plugins

https://blog.shodan.io/5-free-things-for-everybody/

#cybersecurity

Shodan dorks

"An auto-updating list of Shodan dorks with info on the amount of results they return" (c)

https://github.com/dootss/shodan-dorks

#ipsearchengines #cybersecurity