OSINT workspace
Most tools here run locally on text or on a file you choose, and the file never leaves your device. External scanners appear only as links that you open yourself.
The research file lives in this tab's session memory only.
Finds IP addresses, domains, links, email addresses, hash values, CVE numbers and cryptocurrency addresses in pasted text, counts repeats and exports the list. Text such as hxxp:// and example[.]com is read as the real value first.
Sent: nothing. The text is read in your browser and is not sent anywhere. Exports are created on this page.
Lists which algorithms can produce a hash value of that length and character set, and builds search links for services that index known files by hash.
Sent: nothing. Only the format of the value is examined, in your browser. The links open third-party sites that you choose to visit.
Checks the format and checksum of a Bitcoin, Ethereum or TRON address. A valid checksum means the address is well formed, not that anyone controls it or that it is safe.
Sent: nothing. The checksum is calculated in your browser. The explorer link opens a public blockchain explorer when you click it.
Checks the form of a CVE number and builds links to the public records that describe it.
Sent: nothing. Nothing is requested from here. The links open the record sites in a new tab.
Calculates the CVSS v3.1 base score and severity from the eight base metrics, following the FIRST specification. Paste a vector string to fill the metrics, or choose them.
Sent: nothing. The score is calculated in your browser. Temporal and environmental scores are not calculated: they depend on facts about a specific system.
Computes MD5, SHA-1, SHA-256 and SHA-512, identifies the file type from its first bytes and reads the metadata it can: Exif for photos, the document information of PDF files and the properties of Word, Excel and PowerPoint files.
Sent: nothing. The file is read in your browser and never uploaded.
Metadata is written by software and can be edited or removed. Its absence proves nothing, and a date inside a file is a claim by the program that wrote it. The file's last-modified date shown by the browser is the date on your copy, not the date the file was made.
These third-party services are not run by ZEKASTRA and nothing is sent to them from this page. Prefer searching by hash or address over uploading anything.