Username / Social
6 tools
Maigret
Username search across 3000+ sites, builds full dossier
Tookie-OSINT
CLI ONLY
Username discovery across 300+ platforms, Tor support
007-TheBond: Username
Cross-platform username search
Sherlock
Hunt usernames across 400+ social networks with CSV/TXT output
GitFive
CLI ONLY
GitHub user OSINT — discover real emails, linked accounts, and commit activity patterns
sylva
Link social accounts to real identities — correlate usernames across platforms
Instagram
5 tools
Toutatis
Extract phone/email from Instagram profiles
InstagramPrivSniffer
View private-account posts via collaboration feature
007-TheBond: Instagram
Instagram profile OSINT — followers, posts, bio, links
Osintgram
CLI ONLY
Interactive Instagram OSINT shell — 30+ commands for followers, hashtags, and activity analysis
Instaloader
Download posts, reels, stories & metadata from public Instagram profiles
Email
7 tools
Holehe
Check if email is registered on 120+ sites (silent)
007-TheBond: Email
Email breach check via Have I Been Pwned
h8mail
Email breach hunting across Dehashed, IntelX, Leak-Lookup and 17 more
Socialscan
Fast async check for email/username availability across 15 platforms
GHunt
CLI ONLY
Google account OSINT — discover profiles, reviews, location, and linked services from an email
mosint
WSL
Automated email OSINT — registered accounts, breaches, social media, DNS records (Go binary)
Eyes
Check email presence across 100+ websites — fast registration lookup
Phone
4 tools
007-TheBond: Phone
Phone number lookup — carrier, country, line type
PhoneInfoga
Phone number OSINT — carrier, line type, VoIP provider, 20+ free sources
ignorant
Check if a phone number is registered on Snapchat and Instagram — silent, no alert sent to target
PyWhatKit
CLI ONLY
Send WhatsApp messages to a phone number via WhatsApp Web automation
IP / Network
6 tools
007-TheBond: IP Lookup
IP geolocation, ASN, and reverse-DNS
X-OSINT
CLI ONLY
16+ features: IP, email, subdomain enum, CVE, DNS, VIN…
wafw00f
Identify Web Application Firewalls protecting a target — detects 180+ WAF products
fierce
DNS reconnaissance — zone walking, subdomain brute-force, non-contiguous IP block discovery
Shodan
Query Shodan's global scan database — open ports, banners, CVEs, SSL certs for any IP
Photon
OSINT web crawler — extracts URLs, emails, social links, API keys, DNS records, secrets
Frameworks
4 tools
Mr.Holmes
CLI ONLY
Username / domain / phone OSINT + Google Dorks, PDF reports
OwlTrack 2.6
CLI ONLY
36-tool suite: phone tracking, web scanning, social scraping
BAT Tool
CLI ONLY
IP/phone tracking, Instagram downloader, YouTube ripper
SpiderFoot
DOCKER
Automated OSINT — 200+ modules, persistent Docker container, web UI at localhost:5001
Docker
READY
2 tools
007-TheBond (Docker)
DOCKER
CLI ONLY
Full 007-TheBond suite in isolated container
Holehe (Docker)
DOCKER
Email recon on 120+ sites — containerised, no local deps needed
Kali / WSL
NO DISTRO
7 tools
theHarvester
WSL
Emails, subdomains, hosts, IPs from public sources
Recon-ng
WSL
CLI ONLY
Full-featured web recon framework with 100+ modules
Nmap
WSL
Network/port scanner — raw sockets, blocked on Windows natively
Amass
WSL
In-depth subdomain enumeration and attack surface mapping
SET (Social-Engineer Toolkit)
WSL
CLI ONLY
Penetration testing framework for social engineering — phishing, credential harvesting, payloads
subfinder
WSL
Fast passive subdomain discovery using 40+ data sources — ProjectDiscovery
Nuclei
WSL
Fast vulnerability scanner — 9000+ community templates for web, network, DNS, SSL, CVEs
Dark Web
TOR OFFLINE
2 tools
OnionSearch
TOR
Search 16 .onion search engines simultaneously — Ahmia, Phobos, Tor66 and more
darkdump
Search the deep web from your terminal via Ahmia search engine — no Tor required
Metadata
2 tools
Metagoofil
Extract author, email, path metadata from public PDFs and Office files
exiftool
WSL
Extract all metadata from any file — GPS, camera model, author, software, edit history
Telegram
1 tools
Telepathy
CLI ONLY
Telegram OSINT — archive chats, membership lists, message flow mapping
Ubuntu / Linux
3 tools
WhatWeb
WSL
Web fingerprinting — CMS, frameworks, analytics, server version, plugins
Nikto
WSL
Web server vulnerability scanner — misconfigs, outdated software, dangerous files
DNSrecon
WSL
DNS reconnaissance — A/MX/NS/SOA records, zone transfer, reverse lookup
Social Media Intelligence
34 tools
instagram_monitor ACTIVE
github.com/misiektoja/instagram_monitor
Real-time Instagram account monitoring — track posts, stories, followers, and activity changes.
InstagramPrivSniffer IN HUB
github.com/obitouka/InstagramPrivSniffer
Inspect and analyze private Instagram account metadata and public signal data.
toutatis IN HUB
github.com/megadose/toutatis
Extract information from Instagram accounts including email and phone numbers via the API.
osi.ig
github.com/th3unkn0n/osi.ig
Instagram OSINT tool for gathering information about accounts, followers, and following.
ignorant PIP IN HUB
pypi.org/project/ignorant
Check if a phone number is used on platforms like Snapchat and Instagram without alerting the target.
maigret PIP IN HUB
pypi.org/project/maigret
Collect a dossier on a person by username across 3000+ sites. Checks proxies and builds a profile.
holehe IN HUB
github.com/megadose/holehe
Check if an email is linked to an account on 120+ sites (Twitter, Instagram, Imgur, etc.).
sherlock IN HUB
github.com/sherlock-project/sherlock
Hunt down social media accounts by username across 400+ social networks. The gold standard.
GHunt
github.com/mxrch/GHunt
Google account OSINT — Maps contributions, Photos, Calendar, and linked services.
mosint
github.com/alpkeskin/mosint
All-in-one email OSINT: breaches, social accounts, phone info, and more in one shot.
Osintgram
github.com/Datalux/Osintgram
Interactive CLI for Instagram OSINT — download followers, following, tagged posts, comments.
buster
github.com/sham00n/buster
Email OSINT and face search combo — aggregates data across people-search engines.
sylva
github.com/ppfeister/sylva
People-search OSINT — aggregates Spokeo, Pipl-style sources to build target profiles.
Tinder-OSINT
github.com/j0rd1s3rr4n0/Tinder-Osint-Tool
Tinder profile OSINT — unique coverage not found in any other tool in this hub.
SOCMINT Dashboard WEB
start.me/p/Wp1kpe/socmint
Curated start.me page with SOCMINT (Social Media Intelligence) tools and resources.
Recon & Tracking
seeker GEO
github.com/thewhiteh4t/seeker
Accurately locate smartphones by hosting a phishing page to grab GPS coordinates via browser API.
GhostTrack GEO
github.com/HunxByts/GhostTrack
Track phone numbers and locate targets using GPS + open data source lookups.
darkdump DARK WEB IN HUB
github.com/josh0xA/darkdump
Search the deep web from your terminal using the Ahmia search engine API.
OwlTrack IN HUB
github.com/IccTeam/OwlTrack
Advanced tracking and OSINT framework for gathering digital footprints and metadata.
Mr.Holmes IN HUB
github.com/Lucksi/Mr.Holmes
OSINT reconnaissance tool for gathering information on usernames, emails, and domains.
seekr
github.com/seekr-osint/seekr
All-in-one OSINT note-taking and research management tool with integrated lookups.
IntelligenceX SDK
github.com/IntelligenceX/SDK
SDK for IntelligenceX — search engine for darknet, leaks, Tor, and public data sources.
theHarvester IN HUB
github.com/laramies/theHarvester
Gather emails, subdomains, hosts, and IPs from public sources. Core Kali tool.
OSINT Framework WEB
osintframework.com
Interactive clickable tree covering every OSINT technique and tool category.
Malfrats OSINT Map WEB
map.malfrats.industries
Visual OSINT tool map — explore and discover tools by category and technique.
Tool Collections & Frameworks
hackingtool ALL-IN-ONE
github.com/Z4nzu/hackingtool
All-in-one hacking tool menu with hundreds of tools organized by category. Termux compatible.
Awesome-Hacking
github.com/Hack-with-Github/Awesome-Hacking
Curated list of awesome hacking lists and resources for security professionals and researchers.
007-TheBond IN HUB
github.com/Deadshot0x7/007-TheBond
Information gathering and OSINT toolkit inspired by intelligence tradecraft.
Awesome-OSINT-For-Everything
github.com/Astrosp/Awesome-OSINT-For-Everything
Massive curated OSINT resource list covering nearly every investigation scenario.
tookie-osint IN HUB
github.com/Alfredredbird/tookie-osint
Fast OSINT toolkit for username lookups, email tracing, and social profile discovery.
awesome-dutch-osint
github.com/wvanderp/awesome-dutch-osint
Curated OSINT resources specifically for Netherlands-based investigations and Dutch open data.
batTool IN HUB
github.com/Kcisti/batTool
Multi-purpose utility toolkit for information gathering and basic network analysis tasks.
Resources & Databases
osinttools.io WEB
osinttools.io
Online OSINT tool directory and resource hub with categorized search across hundreds of tools.
GitHub: OSINT Topics
github.com/topics/osint-tools
Browse all GitHub repositories tagged with #osint-tools, sorted by stars and activity.
Root-Me WEB
root-me.org
Practice platform for security challenges — web, network, forensics, steganography, and more.
OverAPI WEB
overapi.com
Cheat-sheet collection covering nearly every major programming language and tool.
Phishing & Security Awareness
CyberPhish AWARENESS
github.com/Cyber-Dioxide/CyberPhish
Phishing simulation framework for security awareness training and testing.
zphisher
github.com/Garrettiscool101/zphisher
Automated phishing tool with 30+ templates for testing credential harvesting defenses.
Social-Engineer Toolkit WSL IN HUB
github.com/trustedsec/social-engineer-toolkit
The industry-standard open-source penetration testing framework for social engineering — credential harvesting, spear-phishing, and payload delivery. Available via hub.bat tool 22.
Dark Web & Tor
OnionSearch TOR IN HUB
github.com/megadose/OnionSearch
Search 16 .onion search engines simultaneously (Ahmia, Phobos, Tor66, Onionland…). Requires Tor running on localhost:9050. Available as hub tool 23.
darkdump IN HUB
github.com/josh0xA/darkdump
Search the deep web from your terminal using the Ahmia search engine API — no Tor required. Available as hub tool 34.
IntelligenceX SDK
github.com/IntelligenceX/SDK
SDK and CLI for IntelligenceX — search engine indexing darknet, Tor, leaks, and public data sources.
Tor Browser WEB
torproject.org
Official Tor Browser — enables anonymous browsing and exposes the SOCKS5 proxy on localhost:9050 required by dark web CLI tools.
No results found