Website OSINT

Website OSINT Framework

Web Check

Digital Certs

crt.sh | Certificate Search

Entrust Certificate Search - Entrust, Inc.

SSL Server Test (Powered by Qualys SSL Labs)

Censys SearchCensys

ShodanShodan

Google Dorks

site:*.tryhackme.com
-site:www.tryhackme.com  site:*.tryhackme.com \\except main website

DNS Records

https://dnsdumpster.com/dnsdumpster.com

https://securitytrails.com/securitytrails.com

https://bgp.he.net/bgp.he.net

DNS History

https://searchdns.netcraft.com/

dnsenum | Kali Linux ToolsKali Linux

dnsrecon | Kali Linux ToolsKali Linux

GitHub - mschwager/fierce: A DNS reconnaissance tool for locating non-contiguous IP space.GitHub

Reverse IP Lookup - MxToolboxMxToolbox

reverse DNS information

Whois Lookup, Domain Availability & IP Search - DomainTools

https://viewdns.info/viewdns.info

Finding Web Technology

Find out what websites are built with - Wappalyzer

https://builtwith.com/builtwith.com

Finding Subdomains

Pentest-Tools.com | 25+ Online Penetration Testing ToolsPentest-Tools.com

Internet Archive: Wayback Machine

GitHub - aboul3la/Sublist3r: Fast subdomains enumeration tool for penetration testersGitHub

GitHub - owasp-amass/amass: In-depth Attack Surface Mapping and Asset DiscoveryGitHub

Finding Load Balancer

lbd | Kali Linux ToolsKali Linux

WHOIS /ASN Information Checker

BrowserLeaks - Web Browser Fingerprinting - Browsing PrivacyBrowserLeaks

Whois Lookup, Domain Availability & IP Search - DomainTools

Free online network tools - traceroute, nslookup, dig, whois lookup, ping - IPv6

https://bgp.he.net/bgp.he.net

Security Headers

Analyse your HTTP response headerssecurityheaders