Alternatives
Products that do what Osint tool that finds exposed files on domains does
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
- 1IB
I work on R00M 101, a Reddit-based OSINT profiler. While building it, I realized most open-source intelligence (OSINT) tools are scattered across GitHub, outdated blog posts, or random Discords. So I put together a public-facing directory of 100+ OSINT tools used by analysts, journalists, and security folks, free, filterable, and categorized by risk, platform, and use case. The idea was to make something useful and no-friction. Built with static HTML + SQL backend + a lot of caffeine. Would love feedback on how to improve the UX or tool curation. If anyone wants to contribute tools or help…
2025 · r00m101.com
- 2
- 3IM
Yes, it's open source: https://github.com/lissy93/web-check :) Why I'm building this? There are a lot of tools out there for discovering meta and security data relating to a website, IP or server. But currently, there isn't anything that does everything, all in one place and without a paywall/ user sign up. It's still a WIP, and I'm working on a new version, with some more comprehensive checks, so any feedback would be much appreciated :)
2024 · v1.web-check.xyz
- 4
- 5
- 6SA
Slint is a declarative GUI toolkit written primarily in Rust, with API support for multiple programming languages such as C++ and JavaScript. It is designed for desktop and embedded usage. The Slint website has just been redesigned. And we added a new Royalty-Free License option besides GPL and commercial
2023 · slint.dev
- 7WB
Hey hn! I'm one of the co-founders of highlight.io, an open source monitoring tool. Today we're sharing a ClickHouse-based logging solution we've been working on. We wanted to showcase how we built it and share how you could try it out to give feedback. Since we started working on highlight.io, we've been hyper-focused on "cohesion", or ensuring that when you install your monitoring stack, all of the resources in that stack (user interactions, requests, traces, logs, etc.) are connected in a consumable way. We've written up more about our philosophy on this here [1]. We started building…
2023 · github.com
- 8
- 9
- 10RO
Finally open sourced an internal tool we've been using for managing secrets. It's similar to SOPS, but more opinionated, easier to configure/use correctly, and produces nicer git diffs. It also supports one-way encryption, so you don't have to know the private key to add secrets.
2023 · github.com
- 11IB
2024 · github.com
- 12
- 13BO
Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…
2023
- 14MS
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com
- 15
- 16AO
Hey HN. We’re Jay and Vadim from Highlight.io (https://highlight.io). We’re building an open source [1] monitoring platform for web applications. Today we’re excited to be sharing a performance tool we’ve been working on, which helps you inspect the latency of code execution from the client to the server. As engineers at past startups, we often had to debug slow queries, poor load times, inconsistent errors, etc... While tools like Jaegar [2] helped us inspect server-side performance, we had no way to tie user events to the traces we were inspecting. In other words, although we had…
2024 · github.com
- 17WF
This can be used to find phishing domains or domains matching any pattern you want if you select "custom filter." You can also connect over WebSocket at /ws and use any programming language you want. There may be duplicates because some domains are published in multiple logs. I get data from all of the logs currently included with Chrome, a list of which is available here: https://github.com/google/certificate-transparency-community....
2024 · firehose.lol
- 18OC
A project which groups together curated open source intelligence tools, frameworks, and techniques.
Apr 2026 · osintradar.com
- 19PT
PryingDeep is a dark web OSINT tool. It specializes in extracting information depending on modules chosen. Here's an overview of the features: - Email, PhoneNumber, Wordpress search - PGP keys, Certificates and 3 different cryptocurrencies (XMR,BTC,ETH) search - PostgreSQL database, docker container for Tor and docker-compose for the whole project - A built in exporter, currently only JSON, but possibly more. - Exporter has support for: offset, limit, query building via the command line, raw-sql and different modules you can specify, e.g you only want emails, you will only get emails and the…
2023 · github.com
- 20
- 21CT
2016 · sslmate.com
- 22
Everything the internet sees about your domains
May 2026 · osinteasy.com
- 23
- 24TO
OSINT tool is a browser extension and web application built for researchers, investigators, journalists and intelligence analysts. Our extension gives you access to a suite of OSINT utilities directly on any webpage you visit.
2023 · osint-tool.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →