osint
🕵️♂️ Collect a dossier on a person by username from thousands of sites.
Maigret collects a dossier on a person by username only, checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys are required. Maigret is an easy-to-use and powerful fork of Sherlock.
Related contents:
Birdbrain is a local-first desktop app for capturing, organizing, and verifying web evidence.
Birdbrain is an open-source desktop app with a companion Chromium extension for capturing, organizing, and verifying web evidence. Captures include MHTML, a full-page screenshot, and extracted page text, sent to the desktop app over 127.0.0.1 and stored locally in per-case archives. Birdbrain has no cloud account and no telemetry; captures stay on your machine unless you export them.
AIL-Framework is a powerful open-source project designed for online data analysis and web crawling, tailored for cybersecurity researchers and analysts.
Related contents:
☆ An OSINT tool in python to find information about an email or phone number and get information about a URL then get information about an IP address
dns recon and research, find and lookup dns records.
DNSdumpster.com is a FREE domain research tool that can discover hosts related to a domain. Finding visible hosts from the attackers perspective is an important part of the security assessment process.
Gitxray (short for Git X-Ray) is a multifaceted security tool designed for use on GitHub repositories. It can serve many purposes, including OSINT and Forensics. gitxray leverages public GitHub REST APIs to gather information that would otherwise be very time-consuming to obtain manually. Additionally, it seeks out information in unconventional places.
How would you like to jumpstart your Open Source Intelligence investigation?
MetaOSINT enables open source intelligence ("OSINT") practitioners to jumpstart their investigations by quickly identifying relevant, publicly-available tools and resources, saving valuable time during investigations, research, and analysis.
Search Engine for the Internet of Everything Shodan is the world's first search engine for Internet-connected devices. Discover how Internet intelligence can help you make better decisions.
live satellite positions + open telemetry.
A real-time control room for the ~23 cubesats currently broadcasting decodable open telemetry: their positions on a MapLibre globe, their batteries, temperatures and currents decoded locally from their actual radio frames, and the network of volunteer ground stations that heard them — self-hosted in Europe on one small server.
Related contents:
Mine, merge, and map data for novel insights.
Open Source Intelligence. Fetch data from different sources and returns the results as visual entities that you can explore step-by-step.
🐙 Track down GitHub users. GitFive is an OSINT tool to investigate GitHub profiles.
MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.
Related contents:
User Lookup, Trends & Archive Search.
Six tools built on the same infrastructure that powers THINKPOL: a 30B+ post archive with sub-300ms response times. Used by investigators, SOC teams and OSINT professionals worldwide.
CT Log Scanner
Gungnir is a command-line tool written in Go that continuously monitors certificate transparency (CT) logs for newly issued SSL/TLS certificates. Its primary purpose is to aid security researchers and penetration testers in discovering new domains and subdomains as soon as they are issued certificates, allowing for timely security testing.
Community Insights for GitHub repos. Discover useful insights about your open-source project. A free tool to learn about adoption, contributions, diversity and governance of your GitHub repo.
Useful tool to track location or mobile number.
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
SpiderFoot is an open source intelligence (OSINT) automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate.
SpiderFoot has an embedded web-server for providing a clean and intuitive web-based interface but can also be used completely via the command-line. It's written in Python 3 and MIT-licensed.
🔍 OSINT tool for searching people's digital footprint and leaked passwords across various social networks, written in Go.
Related contents:
WebOSINT is a Python script to gather (passive) domain intelligence.
This is your place to discover tools! Our toolkit includes satellite and mapping services, tools for verifying photos and videos, websites to archive web pages, and much more. Most of the tools that we include can be used for free.
🕵️♂️ Collect a dossier on a person by username from 3000+ sites.
Maigret collects a dossier on a person by username only, checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling (demo).
Tool for complex approach to domain OSINT.
DPULSE is a software solution for conducting OSINT research in relation to a certain domain.
sunrise, sunset, shadow length, solar eclipse, sun position, sun phase, sun height, sun calculator, sun movement, map, sunlight phases, elevation, Photovoltaic system, Photovoltaic
Uncover evidence of internet censorship worldwide. Open data collected by the global OONI community.
OONI Explorer is an open data resource on internet censorship around the world.
Since 2012, millions of network measurements have been collected from more than 200 countries. OONI Explorer sheds light on internet censorship and other forms of network interference worldwide.
Check your IP reputation.
Check whether your public IP has been observed in a residential proxy network, and understand what to do next.
Domain Name Threat Intelligence.
The openSquat is a tool for identifying domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.
OSINT Community Open Source Intelligence. OSINT-FR is a global community, gathering experts and learners, willing to develop their knowledge on open source intelligence techniques.
Cybersecurity Search Engine.
Criminal IP is an OSINT search engine specialized in attack surface assessment and threat hunting.
It offers extensive cyber threat intelligence, including device reputation, geolocation, IP reputation for C2 or scanners, domain safety, malicious link detection, and APT attack vectors via search and API.
Pioneering Collaborative Journalism.
Lighthouse uses the power of partnerships and innovation to advance investigative journalism that informs change.
Investigate 12x faster with the world's most used cyber investigation platform
An OSINT tool to search for accounts by username in social networks. An OSINT tool to search fast for accounts by username across 574 sites.
D4TA-HUNTER is a tool created in order to automate the collection of information about the employees of a company that is going to be audited for ethical hacking.
In addition, in this tool we can find in the "search company" section by inserting the domain of a company, emails of employees, subdomains and IP's of servers.
🕵️♂️ Offensive Google framework.
GHunt (v2) is an offensive Google framework, designed to evolve efficiently. It's currently focused on OSINT, but any use related with Google is possible.
Domain Public Data Collection Service.
DPULSE is a software solution for conducting OSINT research in relation to a certain domain.
This is Sherlock's sister, Modern shiny CLI tool written with Golang to help you: 🔎 Hunt down social media accounts by username across social networks.
Related contents:
Track your OSINT investigations
Osintracker is focused on OSINT investigations. It's a source-oriented application, primarily focused on keeping track of your online findings.
I Know Where Your Cat Lives iknowwhereyourcatlives.com is a data experiment that locates a sample of 7 million public images of cats on a world map using the geocoordinates users unknowingly embedded in their metadata. The cats were accessed via publicly available APIs provided by popular photo sharing websites. The photos were then run through various clustering algorithms using a supercomputer in order to represent the enormity of the data source.
Dark-web intelligence, structured. Free Dark Web OSINT Tool.
Turn research queries into collection, enrichment, relationship mapping, and export — in one workflow.
VoidAccess automates dark web OSINT investigations end to end — scraping Tor, clearnet sources, and paste sites, then extracting indicators and building a structured intelligence graph without a subscription or vendor lock-in.
Hunt down social media accounts by username across 400+ social networks.
Passive hostname, domain and IP lookup tool for non-robots.
wtfis is a commandline tool that gathers information about a domain, FQDN or IP address using various OSINT services. Unlike other tools of its kind, it's built specifically for human consumption, providing results that are pretty (YMMV) and easy to read and understand.
Emora is an OSINT tool like sherlock but with a GUI, which search for accounts by username across social networks.
Emora allows you to search for accounts by username across social networks. Inspired by tools like Sherlock, Emora provides a user-friendly graphical interface to ease the usage and navigation through the results.
Weaponizing Wayback for Recon, BugBounties, OSINT & More!
Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not
You’ve heard of time travel in movies and comics, right? Well, this isn’t fiction anymore 😎. TheTimeMachine lets you dig through the past of any web app by scraping archived URLs from the Wayback Machine — and helps you find sensitive, forgotten, or deprecated endpoints for further exploitation.
Whether you’re into bug bounty, red teaming, or just love good ol’ recon, this tool was built to make my recon workflow faster, cleaner, and more effective. No more juggling multiple scripts — TheTimeMachine does it all in one shot.
Related contents:
Open Food Facts is a food products database made by everyone, for everyone. You can use it to make better food choices, and as it is open data, anyone can re-use it for any purpose.
Related contents:
An automated e-mail OSINT tool.
Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of information.
Find and verify secrets. Find leaked credentials.
TruffleHog is the most powerful secrets Discovery, Classification, Validation, and Analysis tool. In this context secret refers to a credential a machine uses to authenticate itself to another machine. This includes API keys, database passwords, private encryption keys, and more...
Related contents:
Quickly discover exposed hosts on the internet using multiple search engines.
uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with automation in mind, so you can query it and utilize the results with your current pipeline tools.
Automated Command Line Identity Generation Tool for OSINT Investigators. Command Line Sock Puppet Creator for Investigators.
Loki can create a sock puppet identity, that you can use to create a fake online presence to start your investigations. As an OSINT, Private or any other Investigator who seeks to conduct OSINT investigations; you need a sock puppet which cannot be traced back to you. Setting up a sock puppet is easy; only if you know where to look for.
Searching the TrashPanda OSINT bot API to check if your email/domain or password was leaked.
skytrack is a planespotting and aircraft OSINT tool made using Python 🛩🔍.
skytrack is a command-line based plane spotting and aircraft OSINT reconnaissance tool made using Python. It can gather aircraft information using various data sources, generate a PDF report for a specified aircraft, and convert between ICAO and Tail Number designations. Whether you are a hobbyist plane spotter or an experienced aircraft analyst, skytrack can help you identify and enumerate aircraft for general purpose reconnaissance.
Automated graph analysis & intelligence.
A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
Flowsint is an open-source OSINT graph exploration tool designed for ethical investigation, transparency, and verification.
Free email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required.
Self-hostable OSINT platform for investigating email addresses. Fan out across breach databases, social networks, DNS records, and the open web — get back a unified exposure score and structured findings you can export or pipe into Maltego.
The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
The OWASP Amass Project has developed a framework to help information security professionals perform network mapping of attack surfaces and external asset discovery using open source intelligence gathering and reconnaissance techniques.
Track C2 over time by framework and location.
C2Live is an open-source project aimed at providing a comprehensive and interactive platform for tracking Command and Control (C2) malicious IP addresses over time.
🕵️♂️ All-in-one OSINT tool for analysing any website. Comprehensive, on-demand open source intelligence for any website.
Get an insight into the inner-workings of a given website: uncover potential attack vectors, analyse server architecture, view security configurations, and learn what technologies a site is using.
Related contents:
🔍 An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.
Linkook is an OSINT tool for discovering linked/connected social accounts and associated emails across multiple platforms using a single username. It also supports exporting the gathered relationships in a Neo4j-friendly format for visual analysis.
Curated open-source intelligence tools for crypto forensics, digital investigations, and threat hunting — clean, fast, and field-ready.
Face Recognition Search Engine and Reverse Image Search. Upload photo and find out where images are published.
The best and most versatile OSINT utility for retrieving geolocation, DNS, WHOIS, phone, email, data breach information and much more (20 features). Perfect for investigators, pentesters, or anyone looking for an effective reconnaissance / OSINT tool.