#1Email discovery, verification, pattern analysis, and OSINT email investigation tools.
Kitploit recommended

An OSINT tool to search for accounts by username and email in social networks.
Curated collection of 1000+ online OSINT tools and services for geolocation, social media, domain/IP, email, image and archive investigations.

Collects email addresses for a target domain by querying search engines, GitHub API, PhoneBook, Snov, Skymem and other OSINT sources, saving results…

OSINT identity investigation tool. Pivot from an e-mail, username, phone or wallet across 46 sources into one profile and relationship graph.

🔎 Username, email & phone OSINT — 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and expert-reviewed…

Quick script to scrape personal information from Logineo instances

Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic…

AI powered OSINT engine to discover and map 840+ social media identities across the web

a passive OSINT toolkit in python and c++ usernames, emails, domains, ips, phones, hashes. no keys, no logins.

The Ultimate Information Gathering Toolkit

Local-first, keyboard-driven OSINT workbench for the terminal with 28 modules covering username, domain, IP, email, breach, and geolocation lookups…

Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

Burp Suite extension for JavaScript static analysis: extracts API endpoints, URLs, secrets, and emails with noise filtering for web security testing.

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys


Searches Elasticsearch database for email addresses

A workflow to gather responsible disclosure emails from a given host(s).

Recon, Subdomain Bruting, Zone Transfers