OSINT tool researched and designed to hunt down IG handles
Created by @shredzwho | 💖 Sponsor this project
IG-Detective is a high-performance, Python-based Open Source Intelligence (OSINT) tool for Instagram. It offers a premium interactive shell to perform deep analysis on Instagram accounts, extract location history, mapping interactions, and generating automated investigative reports.
[!WARNING] Disclaimer: This tool is for educational and research purposes only. Use it responsibly and in accordance with Instagram's Terms of Service. The author is not responsible for any misuse.
chromium browser with playwright-stealth to mimic a real environment, completely bypassing Cloudflare and CDN rate-limiting.data archival command, drastically speeding up complete profile media replication.interactive_map.html with readable addresses and clickable pins.sna): Maps interactions to identify the "Inner Circle"—the top 10 users most highly connected to the target.temporal): Uses DBSCAN clustering to identify the target's "sleep gap" and predict their primary Time Zone.stories): Fetch active story URLs.recovery): Trigger password reset flow to reveal masked contact tips for administrative email verification.intersect): Identify physical physical meeting points by cross-referencing GPS/Time intersections between two targets.stylometry): Generate a digital "Linguistic Signature" to link multiple accounts based on bigram and emoji distribution.audit): Statistical detection of inauthentic bot activity via temporal jitter variance.data): Automatically download a target's followers list, following list, and timeline media (with metadata JSON), packaged into a single ZIP archive.data/<target>/.Clone the repository
git clone https://github.com/shredzwho/IG-Detective.git
cd IG-Detective
Set up Virtual Environment
python3 -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
Install Dependencies
pip install -r requirements.txt
You can run IG-Detective entirely within Docker to avoid dependency issues. The container requires an interactive TTY (-it) and a volume mount to save your forensic reports.
Using Docker Compose (Easiest)
docker-compose run --rm detective
Using standard Docker
docker build -t ig-detective .
docker run -it -v $(pwd)/data:/app/data ig-detective
Launch the Shell
python3 main.py
# or use the provided wrapper:
./run.sh
Core Commands Once inside the shell, you must first set a target before running analysis modules:
| Command | Description |
|---|---|
target <user> | Set the investigation target (Required first step) |
info | View basic profile OSINT (bio, external links, metadata) |
posts | Fetch the target's recent timeline activity & stats |
addrs | Extract geographical targets from embedded GPS |
data | Export target footprints (media, followers) to a ZIP File |
surveillance | Continuously monitor and trace target metrics/bio changes live |
sna | Perform Social Network Analysis to map the "Inner Circle" |
temporal | Calculate timezone and sleep behavior via DBSCAN |
stylometry | NLP linguistic profiling on captions (Emojis & N-grams) |
recovery | Trigger password reset flow to reveal masked contacts |
intersect | Cross-reference GPS/Time intersections between two targets |
audit | Statistical detection of inauthentic bot activity |
help | Display the interactive help menu |
exit | Exit the CLI cleanly |
For a deep dive into the system architecture, forensic methodologies, and evasion logic, see: 👉 DOCUMENTATION.md
main.py: Main entrypoint for the shell.run.sh: Launch wrapper script.src/api/: Network layer containing the Playwright stealth client and auth manager.src/core/: Foundation layer with data models and config.src/modules/: Business logic layer with scrapers and deep analytics tools.src/cli/: Presentation layer with the interactive prompt and Rich formatters.data/: Automated investigative reports (git-ignored).Feel free to fork this project and submit pull requests. For major changes, please open an issue first to discuss what you would like to change.
[MIT]