🕵️♂️ Collect a dossier on a person by username from 6K websites
- osint
- social-network
- identification
- socmint
72,862 visible repositories in the index
1–24 of 32 · Most stars
🕵️♂️ Collect a dossier on a person by username from 6K websites
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
🕵️♂️ Offensive Google framework.
Incredibly fast crawler designed for OSINT.
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
Dark Web OSINT Tool
AI powered OSINT engine to discover and map 7,700+ social media identities across the web
The Ultimate Information Gathering Toolkit
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
Snoop — инструмент разведки на основе открытых данных (OSINT world)
A DNS meta-query spider that enumerates DNS records, and subdomains.
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
Python terminal multitool — OSINT, network utilities, Rich TUI dashboard. Educational use only.
All In One Web Recon
8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path templates · ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and bug-bounty engagements.
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic report generation.
Reconnaissance Swiss Army Knife
The Offensive Manual Web Application Penetration Testing Framework.