ZeroTrace OSINT
Desktop OSINT suite, 100+ tools
Checking stock
- Instant license key
- Secure Stripe checkout
- Lifetime updates
- 100+ Focused Tools
- Free & Public Sources Only, No API Keys
- Investigation Profiles with PDF Export
Overview
ZeroTrace OSINT is a fully rebuilt desktop intelligence toolkit for security researchers, penetration testers, journalists and investigators.
100+ focused tools: network & IP intelligence, web reconnaissance, user & account discovery, hash & file analysis, lightweight cryptography, proxy workflows, OSINT specials, command builders for nmap / sqlmap / gobuster / sublist3r / Google dorks, a deep utilities pack, and an AI & intelligence layer.
Every tool is its own page, runs against free and public sources only (no API keys to manage), shows you exactly where its data came from, and feeds findings into Investigation Profiles you can export as a dark-themed PDF.
Cross-tool pivots, a Ctrl+K command palette, a categorized tools index and a live system-status dashboard round out the workflow.
- tools
- 100+
- license
- Lifetime
- API keys
- 0
- reports
- Lifetime Updates & Access
Features
Overview5
Dashboard
Live system-status banner (network, public IP, VPN), findings timeline and tool-usage chart at a glance.
Investigation Profiles
Open a case, attach findings from any tool, and export the whole profile as a dark-themed PDF report.
All Tools Index
Categorized landing page that lists every tool with a free-text filter across name, tags and description.
Command Palette (Ctrl+K)
Jump to any tool, profile or setting in two keystrokes from anywhere in the app.
Cross-Tool Pivots
Send a finding from one tool straight into another (username → email permutator, email → breach checker, IP → reputation, and more).
Network & IP11
IP Geolocation
Map an IP to country, region, city, ISP and ASN with multiple cross-checked free providers.
IP Reputation
Aggregated verdict from Spamhaus, Tor exit list, GreyNoise community, ThreatFox and URLhaus, degrades gracefully if any source is down.
Reverse DNS
Resolve an IP to its PTR record and surface known reverse-DNS patterns for major hosters.
DNS Lookup
Run A, AAAA, MX, NS, TXT, SOA, CAA and SRV queries against any domain and see authoritative answers.
DNS History
Walk historical DNS records to spot host migrations, abandoned servers and infrastructure pivots.
WHOIS / RDAP
Modern WHOIS plus RDAP parsing, registration metadata, registrar, nameservers, contacts.
ASN Lookup
Identify the autonomous system behind an IP, list its prefixes and explore neighbouring networks.
Internet DB (Shodan)
Free Shodan InternetDB lookup, open ports, hostnames, vulnerabilities and tags for any IPv4.
MAC OUI Lookup
Identify the manufacturer behind a MAC-address prefix from the official IEEE OUI database.
CIDR Calculator
Compute network address, broadcast, host count and supernet/subnet relationships for any CIDR.
IP Range Expander
Expand CIDR notation, hyphenated ranges or wildcards into a full deduplicated IP list.
Web Intelligence18
Website Analysis
One-shot fingerprint: server, framework, CMS, response headers, title and detected technologies.
TLS Inspector
Inspect a host's TLS certificate chain, cipher suites, expiry and protocol versions.
WAF Fingerprint
Detect web application firewalls (Cloudflare, Akamai, Imperva and more) by header and challenge-page fingerprints.
HTTP Methods
Probe an endpoint for GET, POST, PUT, DELETE, HEAD, OPTIONS, TRACE, PATCH and report what's exposed.
Cookie Auditor
Audit cookies for Secure, HttpOnly, SameSite and scope issues.
CSP Analyzer
Parse a Content-Security-Policy and flag weak directives, inline-script gaps and overly broad sources.
Robots.txt & Sitemap
Fetch /robots.txt and sitemap.xml, surface disallowed paths, sitemap index trees and unusual entries.
security.txt
Look up /.well-known/security.txt to find a site's responsible-disclosure contacts.
Favicon Hash
Compute the favicon's MMH3 hash so you can pivot to other sites that share the same favicon on Shodan/Censys.
URL Analyzer
Break a URL into scheme, host, path, query and fragment with parameter listings, handy for phishing analysis.
URL Redirect
Follow redirect chains hop-by-hop, including cookies and final landing page, with a clean trace.
Subdomain Enumeration
Active subdomain discovery against a domain using multiple free probes.
Subdomain Takeover Checker
Test a list of subdomains against known takeover signatures (Heroku, GitHub Pages, AWS S3, and more).
CT Subdomain (crt.sh)
Pull every subdomain ever issued in Certificate Transparency logs for a target domain.
Wayback Lookup
See how a page looked across years on the Internet Archive with a clean URL-history view.
Wayback Diff
Compare two snapshots of the same URL and surface what changed between them.
Web Crawler
Controlled crawl of a target site with link discovery, subdomain extraction and CSV export.
Typosquat Finder
Generate plausible typo and homoglyph variants of a domain and check which ones resolve.
User & Account7
Username Checker
Check 50+ social, dev, gaming and creative platforms for a handle. Multi-mode detection (proper 404s, missing-string fingerprints, native APIs) with a high/medium/low confidence label per result.
Profile Detail Enrichment
On supported platforms (GitHub, GitLab, Reddit, HackerNews, Mastodon, Lichess, Chess.com, Keybase, Codeforces, Dev.to) the result card shows display name, avatar, bio, location, joined date, follower / following / repos / karma / rating.
Email Analyzer
Validate an email, parse the domain, fetch its MX / SPF / DMARC, flag role-account addresses and free-mail providers, and link to a Gravatar lookup.
Email Permutator
Generate every plausible email format for a person (firstname.lastname, fl@, f.last@…) with optional MX deliverability hints and bulk export.
Password Breach Checker
Check a password against the Have-I-Been-Pwned k-anonymity API without sending the password itself anywhere.
Phone Lookup
Validate any international phone number, identify country, carrier and line type, and pull community-sourced caller info from WhoCalld (caller name, location, full carrier breakdown, filtered notes).
Username Generator
Generate username permutations from a name with year, l33t-substitution and pattern variants.
Hash & File4
File Hasher
Drop a file and get MD5, SHA-1, SHA-256, SHA-512, BLAKE2 and CRC32 in one pass with copy buttons.
Hash Detector
Identify likely hash algorithms for an unknown digest with confidence ranking.
Image Metadata
Read full EXIF, IPTC, XMP and the embedded thumbnail from JPEG, plus format / dimensions / perceptual hash from PNG, TIFF and WebP. Reverse-geocodes any GPS fix and renders a map preview.
JWT Secret Auditor
Offline, local wordlist testing of weak HMAC-signed JWT secrets, for authorized token-hardening reviews.
Crypto3
AES Encrypt / Decrypt
AES-128 / 192 / 256 in GCM mode with a hex key or PBKDF2-derived passphrase. Local only, no network.
HMAC Compute / Verify
Compute or constant-time-verify HMAC-SHA1 / SHA-256 / SHA-512 with a text or hex key.
Hash Compute
Compute MD5, SHA-1, SHA-256, SHA-512, BLAKE2b-256 and BLAKE2b-512 of any text or hex input.
Proxy4
Proxy Checker
Test a list of proxies for liveness, latency, anonymity and protocol support in parallel.
Proxy Parser
Normalise messy proxy lists from any source into a clean ip:port (and auth) format.
Proxy Scraper
Pull free-proxy lists from public sources for downstream filtering.
Proxy Viewer
Visit a target through a proxy and see the response from that vantage point.
OSINT Specials8
Geo Map View
Drop a coordinate or address and see it on a clean map with reverse-geocode details.
Geo Clue Matcher
Match user-supplied location clues (signage language, road color, plate format) against country candidate lists.
Commons Geo-Search
Search Wikimedia Commons for geotagged photos near a coordinate, place or bounding box, verify candidate locations against other people's photos of the same spot.
OSM Feature Finder
Describe what you see in a photo (church, stadium, river within 300m) and get back real-world coordinates that match, powered by free OpenStreetMap data.
Horizon Matcher
Paste an outdoor photo, define a candidate region, and the tool ranks viewpoints by silhouette match against free Mapzen terrain, pinpoint outdoor photos with mountains or distinctive ridgelines.
Geo Meta Reference
Searchable local catalog of country-specific visual cues, utility poles, road paint, license-plate fonts, bollards, language scripts. 120+ entries, no internet needed.
VIN Decoder
Decode a Vehicle Identification Number into make, model, year, plant and trim with NHTSA data.
ID Decoder
Recognize and decode IDs from Discord, Steam, Twitter, generic snowflakes and more, extracts embedded timestamps.
Command Builders5
nmap Builder
Build nmap command lines from preset profiles (quick, stealth, vuln, full TCP, top 100, OS fingerprint, UDP top 50).
sqlmap Builder
Compose sqlmap commands with target / detection / enumeration / tamper / output sections, every preset validated against the real binary.
gobuster Builder
Build gobuster commands for directory, DNS, vhost or fuzzing modes with sane defaults.
sublist3r / subfinder Builder
Generate subdomain-enumeration commands for sublist3r, subfinder, amass, assetfinder, findomain and chaos.
Google Dorks Builder
18 curated, target-aware dork templates (AWS creds, .env, Git config, Jenkins, Jira, Swagger, GraphQL, phpMyAdmin and more).
Utilities12
Base64 Encoder / Decoder
Encode or decode Base64 with standard or URL-safe alphabet.
Hex Converter
Encode text to hex or decode hex back to text, accepts 0x prefixes, colons and whitespace.
JSON Formatter
Pretty-print, minify and validate JSON with adjustable indent.
Timestamp Converter
Convert between Unix epoch, ISO 8601 and human-readable dates with relative-time output.
Port Reference
Search by port number or service name across the IANA registry with risk hints.
Defang / Refang
Bracket dots and rewrite scheme names so you can safely share IOCs in chat, refang back to active form when you need to.
JWT Decoder
Inspect a JWT's header, payload and signature without verifying, useful for triaging tokens.
User-Agent Parser
Decode a User-Agent string into browser, OS, device and bot detection.
Subdomain Wordlist Generator
Build a custom subdomain wordlist tailored to a target with stem, brand and language variants.
Wordlist Extractor
Crawl a target site, extract visible words, slugs and filenames, and export as a custom wordlist for fuzzing.
Data Extractor
Drop a blob of text and pull every email, IP, URL, hash and phone number out automatically.
Pastebin Search
Search the major paste-dumping grounds (pastebin.com, paste.ee, ghostbin, controlc, justpaste) for a term in one shot, useful for spotting leaked credentials, domains or names.
Settings1
Settings
Workspace appearance, storage paths, update checks, license info and reset, everything in a single Section-based page.
Specifications
Information
- License
- One license per account
- Activation Time
- Instant
In the box
ZeroTrace OSINT License
Compatible with
- Windows (64-bit)
- macOS (Intel & Apple Silicon)
- Linux (amd64 - AppImage, Debian)
Digital license
Questions
What is ZeroTrace OSINT used for?
ZeroTrace OSINT is built for authorized security testing, research, education and automation workflows.
Are updates included?
Yes. ZeroTrace products get lifetime firmware or software updates, with support straight from the developers.
Can teams buy in bulk?
Yes. Teams, labs and companies can order through the ZeroTrace business program: bulk hardware, lab bundles and software access.
No subscriptions, ever
One purchase, yours for life
Instant delivery
License key on purchase
Lifetime updates
No paid upgrades, ever
No-log policy
Your data stays local
Designed in Germany
Privacy-first by design
Secure payments
Processed by Stripe
