General OSINT

theHarvester

Python

Gathers emails, names, subdomains, IPs, and URLs from multiple public sources for passive recon.

SpiderFoot

Python

Featured

Automated OSINT with 200+ modules. Web UI for scanning IPs, domains, emails, names, and more.

Maltego CE

Java

Visual link analysis tool for OSINT. Maps relationships between people, companies, domains, and infrastructure.

Holehe

Python

Check if an email is registered on 120+ sites. Uses password recovery mechanisms to verify without logging in.

ExifTool

Perl

Read, write, and edit metadata in files. Supports EXIF, GPS, IPTC, XMP, and more across dozens of formats.

PhoneInfoga

Go

Advanced phone number OSINT. Scans phone numbers using free resources to gather standard and disposable info.

Recon-ng

Python

Full-featured reconnaissance framework. Modular design with a Metasploit-like interface for OSINT gathering.

EmailHarvester

Python

Email harvesting from search engines. Supports Google, Bing, Yahoo, and ASK with proxy rotation.

Photon

Python

Incredibly fast crawler designed for OSINT. Extracts URLs, emails, files, JS, and secret keys from targets.

TruffleHog

Go

Featured

Find leaked credentials in Git repos, S3 buckets, and filesystems. Regex and entropy-based detection.

Gitleaks

Go

Scan Git repos for hardcoded secrets like passwords, API keys, and tokens. CI/CD ready.

h8mail

Python

Email OSINT and password breach hunting tool that queries multiple breach databases and paste sites.

Maryam

Python

Modular open-source OSINT framework with search engine scraping, DNS enum, and social media gathering modules.

sn0int

Rust

Semi-automatic OSINT framework and package manager for gathering intelligence about IPs, emails, domains, and people.

Ignorant

Python

Phone number OSINT. Check if a phone number is registered on various platforms without alerting the target.

web-check

TypeScript

All-in-one OSINT tool for analysing any website including DNS, SSL, headers, security audit, and performance.

dnstwist

Python

Domain name permutation engine for detecting homograph phishing, typo squatting, and brand impersonation.

seekr

Go

Multi-purpose OSINT toolkit with web interface for investigations.

waybackpy

Python

Python wrapper for the Wayback Machine API with CDX search support.

ExifLooter

Python

Find geolocation data from image EXIF metadata across target websites.

pagodo

Python

Automate Google Hacking Database dorking for passive reconnaissance at scale.

changedetection.io

Python

Self-hosted website change monitoring and notification tool. Tracks DOM changes, price drops, and content alterations.

OnionScan

Go

Dark web OPSEC analyzer that discovers identifying information leaks from Tor hidden services.

waybackpack

Python

Downloads entire website archives from the Wayback Machine. Retrieves historical snapshots for OSINT and content recovery.

WorldMonitor

TypeScript

Featured

Real-time global intelligence dashboard with AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking across 500+ feeds.

Crucix

JavaScript

Personal intelligence agent aggregating 27 real-time feeds including satellite, flight, radiation, and conflict data on a local-first dashboard.

ShadowBroker

Python

GEOINT dashboard tracking aircraft, ships, satellites, and 11,000+ CCTV cameras with SAR anomaly detection and AI agent integration.