SHERLOCK-OSINT: PROFESSIONAL INVESTIGATION IN YOUR POCKET
41 open-source intelligence and bug bounty tools in a single app, created by cybersecurity professionals. No registration required and no data collection.
═══ OSINT INVESTIGATION ═══
PHONE ANALYSIS
Operator, country, line type, and risk detection. Instantly verify suspicious calls.
USERNAME ANALYZER
Track the same username across more than 110 platforms: Instagram, X, TikTok, LinkedIn, GitHub, Telegram, Discord, Reddit, Twitch, and many more.
EMAIL FORENSICS
Analyze complete headers. Detect phishing and spoofing with SPF, DKIM, and DMARC verification, and geolocate the servers the message passed through.
DOMAIN ANALYSIS
WHOIS, DNS, SSL certificates, technologies used, reputation, and malicious site detection.
BUSINESS INTELLIGENCE
Contacts, technologies, and digital presence of a company, with integrated Google Dorks.
LEAKS AND PASSWORDS
Check if an account appears in known breaches and measure password strength.
METADATA EXTRACTOR
EXIF data from images: GPS coordinates, device, date, and editing software.
REVERSE IMAGE SEARCH · IP GEOLOCATION · MAC AND ASN LOOKUP
Identify origin, manufacturer, and responsible network.
BOE SEARCH · INTELLIGENCE MAP
Consult the Official State Gazette and connect your findings in a visual graph.
═══ BUG BOUNTY AND PENETESTING ═══
PORT SCANNER
TCP/UDP scanning to detect exposed services.
SUBDOMAIN ENUMERATION · SUBDOMAIN TAKEOVER
Discover forgotten subdomains and identify those that can be reclaimed by an attacker.
JS SECRET SCANNER · GITHUB SECRETS
Find leaked API keys and credentials in JavaScript and repositories.
S3 BUCKETS · EXPOSED FILES · WAYBACK URLS
Locate misconfigured storage and forgotten historical paths.
SECURITY HEADERS · CORS · CVE SEARCH
Audit a site's configuration and cross-reference its technologies with published vulnerabilities.
GOOGLE DORKING
More than 50 ready-to-use dorks.
SHODAN PRO SEARCH
Millions of connected devices: cameras, routers, and industrial servers. Requires tokens.
CENSYS · PASSIVE DNS · THREAT INTEL
Inventory of internet assets, DNS resolution history, and threat indicators.
HASHES AND MALWARE · IP AND URL REPUTATION
Verifies file integrity (MD5, SHA1, SHA256) and cross-references addresses and links with blacklists and malware databases.
TYPOSQUATTING · JWT ANALYZER
Detects domains registered to impersonate you and inspects JWT tokens on your own device.
═══ BLOCKCHAIN ═══
BITCOIN AND ETHEREUM
Analyzes addresses, transactions, and balances.
═══ AI ASSISTANT ═══
Sherlock AI answers OSINT methodology questions, interprets results, and suggests which module to use.
═══ PRIVACY BY DESIGN ═══
• No registration required
• We don't collect personal data
• Your searches are not stored or shared
• GDPR compliant
═══ PREMIUM ═══
Enjoy a 3-day free trial. After the trial ends, your subscription will automatically renew at the monthly price shown in the app, in your local currency. Cancel anytime from Google Play > Subscriptions.
• Ad-free browsing
• Full access to all modules
• Priority updates and support
Shodan PRO token packages are also available as a one-time purchase. Prices and quantities are available within the app.
═══ FOR WHOM ═══
Cybersecurity professionals, bug hunters, private investigators, journalists, auditors, intelligence analysts, and students.
═══ REQUIREMENTS ═══
· Android 7.0 or higher
· Internet connection
· Some modules require Premium or tokens
═══ LEGAL NOTICE ═══
Sherlock-OSINT works only with information from open and public sources for legitimate research and authorized testing. Each user is responsible for complying with the law and obtaining permission before analyzing third-party systems.
Developer: R00tedbrain · axivor.es
Sherlock-OSINT: Research Tools