12 Ferramentas OSINT Gratuitas para Investigações em 2026
Published in June 2026 · 12 min read
Open Source Intelligence (OSINT) relies on collecting publicly available data to build accurate investigative pictures. Whether you are conducting corporate due diligence, cyber threat analysis, or identity verification, having the right toolkit is critical.
PONTOS CHAVE
- •Command-line tools offer speed, but require technical knowledge and setup time.
- •Web services like Shodan and VirusTotal provide instant infrastructure mapping.
- •Combining multiple free modules into automated workflows like footpryx saves hours of manual searching.
FERRAMENTAS OSINT DESTAQUE (2026)
1. Ferramentas de Nome de Usuário e Username
Usernames are often reused across platforms. Tracking handles allows investigators to link forum posts, developer code, and social profiles to a single individual.
Sherlock — Verification across 400+ sites
Python CLI tool that queries hundreds of social networks simultaneously to see if a handle exists.
Maigret — Deep social profiling
A fork of Sherlock that goes further by parsing metadata, avatars, and profile IDs from pages.
2. Ferramentas de Infraestrutura e IP
Map server locations, exposed ports, active SSL certificates, and subdomains connected to target servers.
Shodan — Search engine for connected devices
Identifies open ports, running banners, and active services across any public IP address worldwide.
Censys — Certificate & Host search
Monitors domain certificates and host footprints to expose hidden staging environments.
Eficiência de Coleta Automática vs Manual
Tempo Salvo
3. Investigação de Email e Vazamentos
HaveIBeenPwned — Database breach lookup
Checks if an email address or password has been involved in known historical data dumps.
Holehe — Account registration finder
Checks if an email address is registered on 120+ sites without sending emails to the target.