OZZI: IOC Search by mcortt
Use this extension to analyze IOCs using various freeware OSINT sites.
You'll need Firefox to use this extension
Extension Metadata
Screenshots
About this extension
Gives a popup that will allow you to search via a single input either IP address, file HASH, URL, or port number across multiple free use OSINT platforms. It opens the results as new tabs in the background.
=======
Usage
=======
Highlight an IOC on a webpage and right-click or right-click a link:
* Select Preferred Sites to search your chosen OSINT sites
* Select All Sites to search all OSINT sites
* Select IP,IPV6,HASH,URL,PORT to search a specific site for that type of IOC
--OR--
=======
Options
=======
You now have the option to select the OSINT sites you would like to search for each IOC type.
=======
Credit
=======
Icon/Logo
Created by Anna Bączkowska
Source: Daily Icon - Google Drive
OSINT Sources - IP
============
VirusTotal - IPv4 ONLY
Scamalytics
AbuseIPDB
IBM X-Force
ISC SANS
Cisco Talos
AlienVault
ARIN
Shodan - IPv4 ONLY
Threatminer - IPv4 ONLY
Pulsedive
OSINT Sources - HASH
==============
VirusTotal
Hybrid Analysis
IBM X-Force
Cisco Talos - SHA256 ONLY
AlienVault
Threatminer
URLHaus - MD5 and SHA256 ONLY
OSINT Sources - URL
==============
VirusTotal
Norton SafeWeb
Sucuri
IBM X-Force
Cisco Talos
AlienVault
Shodan
URLHaus
Pulsedive
OSINT Sources - PORT
==============
Speedguide
IANA
ISC SANS
=======
Usage
=======
Highlight an IOC on a webpage and right-click or right-click a link:
* Select Preferred Sites to search your chosen OSINT sites
* Select All Sites to search all OSINT sites
* Select IP,IPV6,HASH,URL,PORT to search a specific site for that type of IOC
--OR--
- Launch extension - click icon or keyboard shortcut: Ctrl + Shift + F
- Type or paste the IOC:
- IP address (IPv4 or IPv6)
- File HASH (MD5, SHA1, or SHA256)
- URL (including Defanged URLs)
- Port Number
- IP address (IPv4 or IPv6)
- Hit Enter or click Search
- The extension should launch relevant OSINT sources in background tabs, depending on your input type.
=======
Options
=======
You now have the option to select the OSINT sites you would like to search for each IOC type.
- Launch the extension and click the gear icon next to the search button.
- Check the OSINT sites you would like to use.
- You can also select which theme you would like to use for the extension.
- Hit save at the bottom when done selecting. You should get a message that your settings have been saved.
=======
Credit
=======
Icon/Logo
Created by Anna Bączkowska
Source: Daily Icon - Google Drive
OSINT Sources - IP
============
VirusTotal - IPv4 ONLY
Scamalytics
AbuseIPDB
IBM X-Force
ISC SANS
Cisco Talos
AlienVault
ARIN
Shodan - IPv4 ONLY
Threatminer - IPv4 ONLY
Pulsedive
OSINT Sources - HASH
==============
VirusTotal
Hybrid Analysis
IBM X-Force
Cisco Talos - SHA256 ONLY
AlienVault
Threatminer
URLHaus - MD5 and SHA256 ONLY
OSINT Sources - URL
==============
VirusTotal
Norton SafeWeb
Sucuri
IBM X-Force
Cisco Talos
AlienVault
Shodan
URLHaus
Pulsedive
OSINT Sources - PORT
==============
Speedguide
IANA
ISC SANS
Rate your experience
More information
- Add-on Links
- Version
- 2.1.1
- Size
- 84.28 KB
- Last updated
- 7 months ago (Apr 24, 2024)
- Related Categories
- License
- GNU General Public License v3.0
- Privacy Policy
- Read the privacy policy for this add-on
- Version History
- Tags
Add to collection
Release notes for 2.1.1
Added link search to context menu
Code refactor and cleanup
Minor bug fixes
Code refactor and cleanup
Minor bug fixes
More extensions by mcortt
- There are no ratings yet
- There are no ratings yet
- There are no ratings yet
- There are no ratings yet
- There are no ratings yet
- There are no ratings yet