tools / hudson-rock
Free tools that check whether an email, username, or domain appears in infostealer-malware logs, with infection date and the compromised machine's details.
field note
Infostealer hits show a real person's device was compromised. The computer name and OS can reveal a real first name.
used in playbooks
One identifier in, one reconciled view out: runs an email, username, phone or domain across the OSINT APIs you hold keys for (OSI, Dehashed, Opsis) and merges results with per-source attribution.
Breach data search engine with a free check of which breaches contain a selector, and paid access to the full records.
Breach search by email, username, phone, or domain that shows breach sources and dates. Paid plans include leaked fields such as passwords.
Graph-based link-analysis platform. Run "transforms" against entities (people, domains, emails, companies) to pull data from dozens of integrated sources.
Browser-based OSINT search across 700+ modules. 400+ username platform checks, 330+ email enrichment modules, plus WHOIS, DNS and reverse-WHOIS for domains.
OSINT automation framework with 200+ modules. Give it a domain, IP, email, name or username and it recursively correlates findings in a web UI.