Introduction
OSINT.SH - All in one Information Gathering Tools
OSINT.SH is an **All in one Information Gathering Tools** site. The official homepage lists tools across **Network**, **Website** and **Others**, including Subdomain Finder, DNS History, DNS Lookup, Reverse IP, NMAP Scanner, Reverse Name Server, Public Buckets, Technology Lookup, Reverse Google Analytics, Reverse Google Adsense, Certificate Search, Whois History, Email Finder, Reverse MX Record, Poodle Check, Heartbleed Check, IP GEO Location Lookup, OCR Scanner, Reverse Whois, Guess MD5 Hash, SSL Check and Reverse Domain.
- **Public Buckets**: Find public buckets on AWS S3 & Azure Blob by a keyword.
- **Subdomain Finder**: The fastest way to discover subdomains in your DNS recon.
- **DNS History**: View all DNS historical records for a specified domain name.
- **Reverse IP**: Perform a reverse IP lookup to find all A records associated with an IP address.
- **Technology Lookup**: Technology stack checker tool. Check out the technologies used on any website.
- **Certificate Search**: Find information about the target assets from their SSL certificate.
- **DNS Lookup**: Provides a report on DNS records for a specified domain or hostname.
- **Reverse Google Analytics**: Find domains with the same Google Analytics ID.
- **Reverse Google Adsense**: Find domains with the same Google AdSense ID.
- **Whois History**: Lets you see all the historical WHOIS records of a domain name.
- **Reverse Whois**: Allow you to find domain names owned by an email address.
- **Reverse Domain**: Allow you to find domain names by a keyword.
- **OCR Text Extractor**: Convert any images and PDF to plain text.
- **Guess MD5 Hash**: Paste a MD5 hash and search in our database.
- **SSL Checker**: Verify that the SSL Certificate on your web server is properly installed and trusted.
- **IP GEO Location Lookup**: Find a geolocation of an IP address including city, region and country.
- **Reverse MX Record**: Reveal all domains that use the same mail server.
- **Reverse Name Server**: Reveal all domains that use the same name server.
The provided official pages show an online tools site with an **API** link. The provided pricing page source is a **404 - OSINT.SH** page, and no self-hosting, source-code or resource specifications are shown in the supplied material.
Subdomain FinderDNS HistoryReverse IPWhois HistoryCertificate SearchTechnology LookupOCR ScannerSSL Checker
Screenshots

Deployment
官方云服务
直接访问 OSINT.SH 官网使用各类在线信息收集与查询工具,适合无需自托管、快速开展 OSINT 与安全调查的场景。
官方 API
通过官网提供的 API 入口集成查询能力,适合将 OSINT.SH 的信息收集功能接入自有工具或自动化流程。
Details
Type Commercial software
License freemium
Last verified 2026-07-28
Ad slot 300 × 250 Ad
About the data
Stars / commit times sync automatically from the GitHub API; pricing and features are human-verified.