87,075 visible repositories in the index
25–48 of 100 · Most stars
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
Dark Web OSINT Tool
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
Fetch all the URLs that the Wayback Machine knows about for a domain
Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more
A Complete Osint Tool :mag:
Knock Subdomain Scan
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Snoop — инструмент разведки на основе открытых данных (OSINT world)
This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
🔍 Search anyone's digital footprint across 300+ websites
The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.
OnionScan is a free and open source tool for investigating the Dark Web.
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.
Simple OSINT script to find Instagram profiles by name and e-mail/phone
Quickly discover exposed hosts on the internet using multiple search engines.
Track any ip address with IP-Tracer. IP-Tracer is developed for Linux and Termux. you can retrieve any ip address information using IP-Tracer.
8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path templates · ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and bug-bounty engagements.
JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux
🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.