Tools

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

sherlock-project/sherlock

Hunt down social media accounts by username across social networks

soxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

jivoi/awesome-osint

😱 A curated list of amazingly awesome OSINT

lissy93/web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

qeeqbox/social-analyzer

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

sundowndev/phoneinfoga

Information gathering framework for phone numbers

laramies/theharvester

E-mails, subdomains and names Harvester - OSINT

datalux/osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

megadose/holehe

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten…

lockfale/osint-framework

Curated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…

s0md3v/photon

Incredibly fast crawler designed for OSINT.

instaloader/instaloader

Download pictures (or videos) along with their captions and other metadata from Instagram.

projectdiscovery/subfinder

Fast passive subdomain enumeration tool.

smicallef/spiderfoot

Automates OSINT data collection and analysis for threat intelligence, attack surface mapping, and reconnaissance. Integrates 200+ modules for DNS,…

mxrch/ghunt

Async offensive Google framework for OSINT, enabling email/Gaia ID/Drive/geolocation reconnaissance via CLI or Python library with JSON export.

owasp-amass/amass

In-depth attack surface mapping and asset discovery

p1ngul1n0/blackbird

An OSINT tool to search for accounts by username and email in social networks.