Tools

t-beckett/h-osint

Local-first, keyboard-driven OSINT workbench for the terminal with 28 modules covering username, domain, IP, email, breach, and geolocation lookups…

tq17oa7/spyder-osint

Open-source intelligence (OSINT) tool for gathering information from phone numbers, IP addresses, social media, emails, usernames, domains, and…

webbreacher/whatsmyname

Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

jenish-sojitra/jsanalyzer

Burp Suite extension for JavaScript static analysis: extracts API endpoints, URLs, secrets, and emails with noise filtering for web security testing.

0xbharath/censys-enumeration

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys

laramies/metagoofil

Metadata harvester

randomrobbiebf/elastic-search-email-extractor

Searches Elasticsearch database for email addresses

k3ystr0k3r/emat

Emat: An email scraper that will scrape any website for Gmail, Yahoo, Hotmail and government email accounts.

rxerium/responsible-disclosure-email-gathering

A workflow to gather responsible disclosure emails from a given host(s).

darryllane/bluto-old

Recon, Subdomain Bruting, Zone Transfers

h3x0v3rl0rd/smtp_userenum

Python script for enumerating SMTP users by leveraging VRFY and EXPN commands to identify valid email accounts on a target mail server.

jenderal92/email_extract_gmass.co_validator

Python 2.7

wh4l3x/cve-2026-xxxx-atlassian-email-enumeration

CVE-2026-XXXX: Atlassian GraphQL Email Enumeration Oracle (CWE-204, CVSS 5.3 MEDIUM)

siv-nick/whocord

Scans Discord links across mutual guilds to extract profiles, cross‑references 700+ sites, searches usernames with 30+ tools, and generates an…

jivoi/awesome-osint

😱 A curated list of amazingly awesome OSINT

h4k6/cve-2023-2982-poc

WordPress社交登录和注册（Discord，Google，Twitter，LinkedIn）<=7.6.4-绕过身份验证

n3ph0s/onionscan

Scan and analyze Tor hidden services (.onion) to extract metadata, SSH banners, email addresses, and potential IP leaks via mod_status, with a…

qeeqbox/social-analyzer

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites