#1Email discovery, verification, pattern analysis, and OSINT email investigation tools.
Kitploit recommended

OSINT identity investigation tool. Pivot from an e-mail, username, phone or wallet across 46 sources into one profile and relationship graph.

This tools will extracts and dumps Email + SMTP from vBulletin database server

Python script that uses the hunter.io API to scrape email addresses from a target domain, generating a target list for password spraying attacks.

a passive OSINT toolkit in python and c++ usernames, emails, domains, ips, phones, hashes. no keys, no logins.

Local-first, keyboard-driven OSINT workbench for the terminal with 28 modules covering username, domain, IP, email, breach, and geolocation lookups…

Simple tool for extracting emails from websites

CVE-2026-XXXX: Atlassian GraphQL Email Enumeration Oracle (CWE-204, CVSS 5.3 MEDIUM)

Python 2.7

An easy-to-use Python tool for performing subdomain enumeration, endpoint recognition, and more

A workflow to gather responsible disclosure emails from a given host(s).

Scan and analyze Tor hidden services (.onion) to extract metadata, SSH banners, email addresses, and potential IP leaks via mod_status, with a…

Quick script to scrape personal information from Logineo instances

Searches Elasticsearch database for email addresses

Python script for enumerating SMTP users by leveraging VRFY and EXPN commands to identify valid email accounts on a target mail server.

Collects email addresses for a target domain by querying search engines, GitHub API, PhoneBook, Snov, Skymem and other OSINT sources, saving results…

An OSINT tool to search for accounts by username and email in social networks.

Curated collection of 1000+ online OSINT tools and services for geolocation, social media, domain/IP, email, image and archive investigations.