OZZI: IOC Search by mcortt
Use this extension to analyze IOCs using various freeware OSINT sites.
39 Users39 Users
Extension Metadata
Screenshots
About this extension
Gives a popup that will allow you to search via a single input either IP address, file HASH, URL, or port number across multiple free use OSINT platforms. It opens the results as new tabs in the background.
=======
Usage
=======
Highlight an IOC on a webpage and right-click or right-click a link:
* Select Preferred Sites to search your chosen OSINT sites
* Select All Sites to search all OSINT sites
* Select IP,IPV6,HASH,URL,PORT to search a specific site for that type of IOC
--OR--
=======
Options
=======
You now have the option to select the OSINT sites you would like to search for each IOC type.
=======
Credit
=======
Icon/Logo
Created by Anna Bączkowska
Source: Daily Icon - Google Drive
OSINT Sources - IP
============
VirusTotal - IPv4 ONLY
Scamalytics
AbuseIPDB
IBM X-Force
ISC SANS
Cisco Talos
AlienVault
ARIN
Shodan - IPv4 ONLY
Threatminer - IPv4 ONLY
Pulsedive
OSINT Sources - HASH
==============
VirusTotal
Hybrid Analysis
IBM X-Force
Cisco Talos - SHA256 ONLY
AlienVault
Threatminer
URLHaus - MD5 and SHA256 ONLY
OSINT Sources - URL
==============
VirusTotal
Norton SafeWeb
Sucuri
IBM X-Force
Cisco Talos
AlienVault
Shodan
URLHaus
Pulsedive
OSINT Sources - PORT
==============
Speedguide
IANA
ISC SANS
=======
Usage
=======
Highlight an IOC on a webpage and right-click or right-click a link:
* Select Preferred Sites to search your chosen OSINT sites
* Select All Sites to search all OSINT sites
* Select IP,IPV6,HASH,URL,PORT to search a specific site for that type of IOC
--OR--
- Launch extension - click icon or keyboard shortcut: Ctrl + Shift + F
 - Type or paste the IOC: 
- IP address (IPv4 or IPv6)
 - File HASH (MD5, SHA1, or SHA256)
 - URL (including Defanged URLs)
 - Port Number
 
 - IP address (IPv4 or IPv6)
 - Hit Enter or click Search
 - The extension should launch relevant OSINT sources in background tabs, depending on your input type.
 
=======
Options
=======
You now have the option to select the OSINT sites you would like to search for each IOC type.
- Launch the extension and click the gear icon next to the search button.
 - Check the OSINT sites you would like to use.
 - You can also select which theme you would like to use for the extension.
 - Hit save at the bottom when done selecting. You should get a message that your settings have been saved.
 
=======
Credit
=======
Icon/Logo
Created by Anna Bączkowska
Source: Daily Icon - Google Drive
OSINT Sources - IP
============
VirusTotal - IPv4 ONLY
Scamalytics
AbuseIPDB
IBM X-Force
ISC SANS
Cisco Talos
AlienVault
ARIN
Shodan - IPv4 ONLY
Threatminer - IPv4 ONLY
Pulsedive
OSINT Sources - HASH
==============
VirusTotal
Hybrid Analysis
IBM X-Force
Cisco Talos - SHA256 ONLY
AlienVault
Threatminer
URLHaus - MD5 and SHA256 ONLY
OSINT Sources - URL
==============
VirusTotal
Norton SafeWeb
Sucuri
IBM X-Force
Cisco Talos
AlienVault
Shodan
URLHaus
Pulsedive
OSINT Sources - PORT
==============
Speedguide
IANA
ISC SANS
Rated 5 by 2 reviewers
More information
- Add-on Links
 - Version
 - 2.1.1
 - Size
 - 84.28 KB
 - Last updated
 - 2 years ago (Apr 24, 2024)
 - Related Categories
 - Privacy Policy
 - Read the privacy policy for this add-on
 - Version History
 - Add to collection