FAQ: 90 best OSINT resources for hacking (2025)

[spalr]

1. Alfred
   
   https://github.com/Alfredredbird/alfred
   
   Alfred is a advanced OSINT information gathering tool
   


2. Awesome OSINT Blockchain Analysis
   
   https://github.com/aaarghhh/awesome_...chain_analysis
   
   A list of useful Crypto resources for OSINT investigations
   


3. BBOT
   
   https://github.com/blacklanternsecurity/bbot
   
   BBOT is inspired by Spiderfoot but takes it to the next level with features like multi-target scans, lightning-fast asyncio performance, and NLP-powered subdomain mutations.
   


4. Bellingcat
   
   https://github.com/bellingcat
   
   The Bellingcat Tech team develops tools for open source investigations and explores tech-focused research techniques
   


5. Bellingcat Telegram Phone Number Check
   
   https://github.com/bellingcat/telegr...number-checker
   
   Check if phone numbers are connected to Telegram accounts
   


6. Bitquery Explorer
   
   https://github.com/bitquery/explorer
   
   Open source unified blockchain explorer
   


7. Blackbird
   
   https://github.com/p1ngul1n0/blackbird
   
   An OSINT tool to search for accounts by username in social networks.
   


8. CCTV
   
   https://github.com/IvanGlinkin/CCTV
   
   Close-Circuit Telegram Vision revolutionizes location tracking with its open-source design and Telegram API integration. Offering precise tracking within 50-100 meters, users can monitor others in real-time for logistics or safety, redefining how we navigate our surroundings
   


9. Chiasmodon
   
   https://github.com/chiasmod0n/chiasmodon
   
   OSINT tool designed to assist in the process of gathering information about a target domain
   


10. Creepy
    
    https://github.com/jkakavas/creepy
    
    A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.
    


11. CrossLinked
    
    https://github.com/m8sec/CrossLinked
    
    CrossLinked is a LinkedIn enumeration tool that uses search engine scraping to collect valid employee names from an organization. This technique provides accurate results without the use of API keys, credentials, or accessing LinkedIn directly!
    


12. D4TA-Hunter
    
    https://github.com/micro-joan/D4TA-HUNTER
    
    GUI OSINT Framework with Kali Linux
    


13. DataSploit
    
    https://github.com/DataSploit/datasploit
    
    An OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.
    


14. DNSWatch
    
    https://github.com/HalilDeniz/DNSWatch
    
    DNSWatch is a Python-based tool that allows you to sniff and analyze DNS (Domain Name System) traffic on your network. It listens to DNS requests and responses and provides insights into the DNS activity.
    


15. DocMan
    
    https://github.com/AnonCatalyst/DocMan
    
    Document management system designed to improve efficiency and streamline workflows in OSINT investigations.
    


16. DPulse
    
    https://github.com/OSINT-TECHNOLOGIES/dpulse
    
    Domain Public Data Collection Service
    


17. EagleOsint
    
    https://github.com/retr0-g04t/EagleOsint
    
    Simple Information Gathering Tool
    


18. EDGAR
    
    https://github.com/bellingcat/EDGAR
    
    Free tools for the efficient and consistent retrieval of corporate and financial data from the SEC
    


19. Eyes
    
    https://github.com/N0rz3/Eyes
    
    Eyes is an OSINT tool to get existing accounts from an email
    


20. FOCA (Fingerprinting Organizations with Collected Archives)
    
    https://github.com/ElevenPaths/FOCA
    
    Tool to find metadata and hidden information in the documents
    


21. Geogramint
    
    https://github.com/Alb-310/Geogramint
    
    An OSINT Geolocalization tool for Telegram that find nearby users and groups
    


22. geOSINT
    
    https://github.com/coldfusion39/geOSINT
    
    Search physical locations for geo tagged photos
    


23. GHunt
    
    https://github.com/mxrch/GHunt
    
    An offensive Google framework, designed to evolve efficiently
    


24. Go Get Crawl
    
    https://github.com/karust/gogetcrawl
    
    gogetcrawl is a tool and package that helps you download URLs and Files from popular Web Archives like Common Crawl and Wayback Machine. You can use it as a command line tool or import the solution into your Go project.
    


25. Google Maps Scraper
    
    https://github.com/gosom/google-maps-scraper
    
    Extracts data such as the name, address, phone number, website URL, rating, reviews number, latitude and longitude, reviews,email and more for each place
    


26. H.I.V.E.
    
    https://github.com/Shad0w-ops/H.I.V.E
    
    H.I.V.E is an automated OSINT (Open Source Intelligence) multi-tool that enables efficient data gathering from various sources through the utilization of a single, unified platform.
    


27. Holehe
    
    https://github.com/C3n7ral051nt4g3ncy/holehe
    
    holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
    


28. Horus
    
    https://github.com/6abd/horus
    
    An OSINT / digital forensics tool built in Python (formerly 'Sentinel')
    


29. InfoHound
    
    https://github.com/Fundacio-i2CAT/InfoHound
    
    InfoHound is an OSINT to extract a large amount of data given a web domain name.
    


30. Kamerka
    
    https://github.com/woj-ciech/Kamerka-GUI
    
    Ultimate Internet of Things/Industrial Control Systems reconnaissance tool
    


31. Masto
    
    https://github.com/C3n7ral051nt4g3ncy/Masto
    
    Masto is an OSINT tool written in python to gather intelligence on Mastodon users and instances.
    


32. Metagoofil
    
    https://github.com/laramies/metagoofil
    
    Metagoofil is a tool for extracting metadata of public documents (pdf, doc, xls, ppt, etc.) availables in the target websites.
    


33. Moriarty Project
    
    https://github.com/AzizKpln/Moriarty-Project
    
    Gives information about the phone number that you entered
    


34. Mosint
    
    https://github.com/alpkeskin/mosint
    
    An automated e-mail OSINT tool
    


35. OnionScan
    
    https://github.com/s-rah/onionscan
    
    OnionScan is a free and open source tool for investigating the Dark Web
    


36. OpenCTI
    
    https://github.com/OpenCTI-Platform/opencti
    
    Open Cyber Threat Intelligence Platform
    


37. OSINT Geolocation Databases Search
    
    https://github.com/conflict-investig...-search-engine
    
    Search geolocations for (social) media posts in databases like Bellingcat, Cen4InfoRes etc.
    


38. OSINTBuddy
    
    https://github.com/jerlendds/osintbuddy
    
    Node graphs, OSINT data mining, and plugins. Connect unstructured and public data for transformative insights
    


39. OSINTEye
    
    https://github.com/rly0nheart/osinteye
    
    Username enumeration & reconnaisance suite
    


40. OSINTgram
    
    https://github.com/Datalux/Osintgram
    
    OSINT tool on Instagram to collect, analyze, and run reconnaissance
    


41. OSINTTube
    
    https://github.com/SamueleAmato/OsintTube
    
    OsintTube offers an interactive shell to perform analysis on Youtube account of any users by its id
    


42. OWASP Amass Project
    
    https://github.com/owasp-amass/amass
    
    In-depth attack surface mapping and asset discovery
    


43. Owlculus
    
    https://github.com/be0vlk/owlculus
    
    Python GUI application for managing OSINT investigation cases
    


44. Poastal
    
    https://github.com/jakecreps/poastal
    
    Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information.
    


45. Postman OSINT Tool
    
    https://github.com/boringthegod/postmaniac
    
    Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces
    


46. Postman OSINT Tool
    
    https://github.com/boringthegod/postmaniac
    
    Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces
    


47. PyOSINT
    
    https://github.com/syamsv/Pyosint
    
    An OSINT Framework project based on Python
    


48. Recon-ng
    
    https://github.com/lanmaster53/recon-ng
    
    Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
    


49. ReconDog
    
    https://github.com/s0md3v/ReconDog
    
    Reconnaissance Swiss Army Knife
    


50. ReconHound
    
    https://github.com/indiancybertroops/ReconHound
    
    OSINT Tool For Enumeration
    


51. ReconSpider
    
    https://github.com/bhavsec/reconspider
    
    Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations
    


52. reNgine
    
    https://github.com/yogeshojha/rengine
    
    An automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface
    


53. Sagemode
    
    https://github.com/senran101604/sagemode
    
    Track and Unveil Online identities across social media platforms
    


54. Sarenka
    
    https://github.com/KTZgraph/sarenka
    
    SARENKA is an Open Source Intelligence (OSINT) tool that helps you in obtaining and understanding Attack Surface.
    


55. SatIntel
    
    https://github.com/ANG13T/SatIntel
    
    Extract satellite telemetry, receive orbital predictions, and parse TLEs
    


56. Search Grid Generator
    
    https://github.com/bellingcat/open-s...enerator.ipynb
    
    A tool for generating a grid of rectangular polygons in a KML file. The resulting KML file can be opened in Google Earth and used for systematically searching an area.
    


57. Security Onion
    
    https://github.com/Security-Onion-So.../securityonion
    
    For threat hunting, enterprise security monitoring, and log management
    


58. Seekr
    
    https://github.com/seekr-osint/seekr
    
    Multi-purpose toolkit for gathering and managing OSINT-data
    


59. Sherlock
    
    https://github.com/C3n7ral051nt4g3ncy/sherlock
    
    Hunt down social media accounts by username across social networks
    


60. Social Analyzer
    
    https://github.com/qeeqbox/social-analyzer
    
    API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media\websites
    


61. Social-Engineer Toolkit (SET)
    
    https://github.com/trustedsec/social-engineer-toolkit
    
    An open-source penetration testing framework designed for social engineering
    


62. SocialPwned
    
    https://github.com/C3n7ral051nt4g3ncy/SocialPwned
    
    SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to find possible credentials leaks in PwnDB or Dehashed and obtain Google account information via GHunt.
    


63. Steam OSINT Tool
    
    https://github.com/C3n7ral051nt4g3ncy/Steam-OSINT-TOOL
    
    This tool will help you find a close friend
    


64. Steganography
    
    https://github.com/C3n7ral051nt4g3ncy/Steganography
    
    Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.
    


65. StellarSolver
    
    https://github.com/rlancaste/stellarsolver
    
    Cross Platform SEP-based Star Extractor and Astrometry.net-Based Internal Astrometric Solver
    


66. Telegram Nearby Map
    
    https://github.com/tejado/telegram-nearby-map
    
    Discover the location of nearby Telegram users
    


67. Telepathy
    
    https://github.com/proseltd/Telepathy-Community
    
    Public release of Telepathy, an OSINT toolkit for investigating Telegram chats
    


68. Th3Inspector
    
    https://github.com/Moham3dRiahi/Th3inspector
    
    All in one tool for Information Gathering
    


69. The Harvester
    
    https://github.com/C3n7ral051nt4g3ncy/theHarvester
    
    Performs open source intelligence (OSINT) gathering to help determine a domain's external threat landscape. The tool gathers names, emails, IPs, subdomains, and URLs by using multiple public resources.
    


70. The OSINT Toolbox
    
    https://github.com/The-Osint-Toolbox
    
    Collection of OSINT, Privacy, & OPSEC bookmarks/links
    


71. TikTok Scraper
    
    https://github.com/C3n7ral051nt4g3ncy/tiktok-scraper
    
    Download video posts, collect user/trend/hashtag/music feed metadata, sign URL and etc.
    


72. Tookie
    
    https://github.com/Alfredredbird/tookie-osint
    
    advanced OSINT information gathering tool that finds social media accounts based on inputs
    


73. TorBot
    
    https://github.com/DedSecInside/TorBot
    
    Open Source Intelligence Tool for the Dark Web
    


74. Trape
    
    https://github.com/jofpin/trape
    
    People tracker on the Internet: OSINT analysis and research tool
    


75. Trimaxion
    
    https://github.com/MrSkittles456/Trimaxion
    
    Trimaxion is a browser extension designed to streamline OSINT investigations by enabling users to perform searches across multiple search engines simultaneously
    


76. Tweeds
    
    https://github.com/achyuthjoism/tweeds
    
    Scrape tweets from any Twitter user profile. Twitter API alternative to scrape Twitter hashtags, threads, images, videos, statistics, and Twitter history. Export data in JSON and CSV format. This project enables you to extract large amounts of data from Twitter. It lets you do much more than the Twitter API, because it doesn't have rate limits and you don't even need to have a Twitter account, a registered app, or Twitter API key.
    


77. Twint
    
    https://github.com/C3n7ral051nt4g3ncy/twint
    
    An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
    


78. Twitark
    
    https://github.com/pantchox/Twitark
    
    Archive the Twitter sample firehose and daily trends
    


79. Unfurl
    
    https://github.com/obsidianforensics/unfurl
    
    Extract and Visualize Data from URLs using Unfurl
    


80. UntappdScraper
    
    https://github.com/WebBreacher/untappdScraper
    
    Script to scrape untappd.com content
    


81. Uscrapper
    
    https://github.com/z0m31en7/Uscrapper
    
    Uscrapper 2.0, A powerfull OSINT webscrapper that allows users to extract various personal information from a website
    


82. Visual Site Mapper
    
    https://github.com/alentum/sitemapper-nodejs
    
    Visual Site Mapper is a free service that can quickly show a map of a site
    


83. W3b0s1nt
    
    https://github.com/C3n7ral051nt4g3ncy/WebOSINT
    
    W3b0s1nt (WebOSINT) is a Python tool/script for passive Domain Intelligence gathering.
    


84. Web-Check
    
    https://github.com/lissy93/web-check
    
    All-in-one website OSINT tool for analysing any website
    


85. Website Internal Links
    
    https://github.com/devbret/website-internal-links
    
    Use Python to map a website's internal links. And then apply D3 to visualize those connections as a network graph.
    


86. WhatsMyName
    
    https://github.com/WebBreacher/WhatsMyName
    
    This repository has the unified data required to perform user enumeration on various websites. Content is in a JSON file and can easily be used in other projects.
    


87. X-osint
    
    https://github.com/TermuxHackz/X-osint
    
    This is an OSINT framework which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more.
    


88. XRay
    
    https://github.com/evilsocket/xray
    
    XRay is a tool for recon, mapping and OSINT gathering from public networks
    


89. YesItsMe
    
    https://github.com/0x0be/yesitsme
    
    Simple OSINT script to find Instagram profiles by name and e-mail/phone
    


90. YOGA
    
    https://github.com/WebBreacher/yoga
    
    Your OSINT Graphical Analyzer