{"id":136367,"url":"https://github.com/edwardtay/awesome-osint","name":"awesome-osint","description":"A curated list of 360+ OSINT tools: people search, domains, social media, geolocation, breach data, forensics, and frameworks","projects_count":370,"last_synced_at":"2026-09-23T00:00:31.049Z","repository":{"id":368197595,"uuid":"1283886953","full_name":"edwardtay/awesome-OSINT","owner":"edwardtay","description":"A curated list of 360+ OSINT tools: people search, domains, social media, geolocation, breach data, forensics, and frameworks","archived":false,"fork":false,"pushed_at":"2026-08-31T12:00:33.000Z","size":173,"stargazers_count":10,"open_issues_count":5,"forks_count":5,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-09-03T02:06:09.296Z","etag":null,"topics":["awesome","awesome-list","information-gathering","osint","osint-tools","reconnaissance","security","threat-intelligence"],"latest_commit_sha":null,"homepage":"https://github.com/edwardtay/awesome-OSINT","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"cc0-1.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/edwardtay.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2026-06-29T10:26:30.000Z","updated_at":"2026-08-31T12:12:08.000Z","dependencies_parsed_at":"2026-08-14T09:27:32.285Z","dependency_job_id":null,"html_url":"https://github.com/edwardtay/awesome-OSINT","commit_stats":null,"previous_names":["edwardtay/awesome-osint"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/edwardtay/awesome-OSINT","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/edwardtay%2Fawesome-OSINT","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/edwardtay%2Fawesome-OSINT/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/edwardtay%2Fawesome-OSINT/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/edwardtay%2Fawesome-OSINT/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/edwardtay","download_url":"https://codeload.github.com/edwardtay/awesome-OSINT/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/edwardtay%2Fawesome-OSINT/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37604195,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-22T02:00:07.665Z","response_time":55,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"created_at":"2026-07-07T04:30:38.455Z","updated_at":"2026-09-23T00:00:31.050Z","primary_language":null,"list_of_lists":false,"displayable":true,"categories":["🗺️ Geolocation \u0026 GEOINT","🌐 Domain, DNS \u0026 Infrastructure","📡 Internet Scan Engines \u0026 Attack Surface","🦠 Threat Intel \u0026 Malware OSINT","🖼️ Image \u0026 Reverse Image Search","⛓️ Crypto / Blockchain OSINT","🏛️ Business, Records \u0026 Archives","📱 Phone \u0026 Identity","🕵️ Username \u0026 People Search","📧 Email \u0026 Breach Data","✈️ Transport, RF \u0026 SIGINT","💬 Social Media Intelligence (SOCMINT)","🧰 Frameworks \u0026 All-in-One","🧅 Dark Web \u0026 Paste Sites","🔎 Google Dorking \u0026 Search Operators","🧩 Browser Extensions \u0026 Bookmarklets","🔬 Image, Video \u0026 Media Forensics","☁️ Cloud, IoT \u0026 Web Recon","📚 Datasets, Lists \u0026 APIs","📨 Messaging-App OSINT","🔗 Related Awesome Lists","Contributing"],"sub_categories":[],"readme":"# Awesome OSINT [![Awesome](https://awesome.re/badge.svg)](https://awesome.re)\n\n[![Stars](https://img.shields.io/github/actions/workflow/status/edwardtay/awesome-OSINT/update-stars.yml?label=star%20updates)](https://github.com/edwardtay/awesome-OSINT/actions/workflows/update-stars.yml)\n[![Links](https://img.shields.io/github/actions/workflow/status/edwardtay/awesome-OSINT/links.yml?label=links)](https://github.com/edwardtay/awesome-OSINT/actions/workflows/links.yml)\n[![Last Commit](https://img.shields.io/github/last-commit/edwardtay/awesome-OSINT)](https://github.com/edwardtay/awesome-OSINT/commits/main)\n[![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](https://github.com/edwardtay/awesome-OSINT/pulls)\n[![License: CC0](https://img.shields.io/badge/License-CC0-lightgrey.svg)](LICENSE)\n\n\u003e A curated list of open-source intelligence (OSINT) tools — people search, domains, social media, geolocation, breach data, and investigation frameworks.\n\n\u003e ⚠️ = known maintenance concern; verify repository status before adoption.\n\n## How to Choose\n\n| I need to... | Start here |\n|---|---|\n| Find someone by username | [Username \u0026 People Search](#️-username--people-search) |\n| Tie an email to leaked accounts | [Email \u0026 Breach Data](#-email--breach-data) |\n| Map a domain's attack surface | [Domain, DNS \u0026 Infrastructure](#-domain-dns--infrastructure) |\n| Search the whole internet for exposed hosts | [Internet Scan Engines \u0026 Attack Surface](#-internet-scan-engines--attack-surface) |\n| Geolocate a photo | [Geolocation \u0026 GEOINT](#️-geolocation--geoint) |\n| Reverse-search an image or face | [Image \u0026 Reverse Image Search](#️-image--reverse-image-search) |\n| Check breach exposure | [Email \u0026 Breach Data](#-email--breach-data) |\n| Investigate a phone number | [Phone \u0026 Identity](#-phone--identity) |\n| Trace a wallet | [Crypto / Blockchain OSINT](#️-crypto--blockchain-osint) |\n| Track a flight/ship | [Transport Tracking](#️-transport-tracking) |\n| Triage a malicious file/URL/IP | [Threat Intel \u0026 Malware OSINT](#-threat-intel--malware-osint) |\n| Run one platform that does it all | [Frameworks \u0026 All-in-One](#-frameworks--all-in-one) |\n\n---\n\n## Contents\n\n- [🧰 Frameworks \u0026 All-in-One](#-frameworks--all-in-one)\n- [🕵️ Username \u0026 People Search](#-username--people-search)\n- [📧 Email \u0026 Breach Data](#-email--breach-data)\n- [🌐 Domain, DNS \u0026 Infrastructure](#-domain-dns--infrastructure)\n- [📡 Internet Scan Engines \u0026 Attack Surface](#-internet-scan-engines--attack-surface)\n- [☁️ Cloud, IoT \u0026 Web Recon](#-cloud-iot--web-recon)\n- [💬 Social Media Intelligence (SOCMINT)](#-social-media-intelligence-socmint)\n- [📨 Messaging-App OSINT](#-messaging-app-osint)\n- [🖼️ Image \u0026 Reverse Image Search](#-image--reverse-image-search)\n- [🔬 Image, Video \u0026 Media Forensics](#-image-video--media-forensics)\n- [🗺️ Geolocation \u0026 GEOINT](#-geolocation--geoint)\n- [📱 Phone \u0026 Identity](#-phone--identity)\n- [🔎 Google Dorking \u0026 Search Operators](#-google-dorking--search-operators)\n- [✈️ Transport, RF \u0026 SIGINT](#-transport-rf--sigint)\n- [⛓️ Crypto / Blockchain OSINT](#-crypto--blockchain-osint)\n- [🦠 Threat Intel \u0026 Malware OSINT](#-threat-intel--malware-osint)\n- [🧅 Dark Web \u0026 Paste Sites](#-dark-web--paste-sites)\n- [🏛️ Business, Records \u0026 Archives](#-business-records--archives)\n- [🧩 Browser Extensions \u0026 Bookmarklets](#-browser-extensions--bookmarklets)\n- [📚 Datasets, Lists \u0026 APIs](#-datasets-lists--apis)\n- [🪦 Deprecated Tools Graveyard](#-deprecated-tools-graveyard)\n\n\n## 🧰 Frameworks \u0026 All-in-One\n\nHeavyweight platforms that orchestrate dozens of OSINT modules, transforms and link-analysis into one investigation surface.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Maltego](https://www.maltego.com/) | — | — | Visual link-analysis platform mapping relationships between people, domains, infrastructure and social accounts via transforms. |\n| [SpiderFoot](https://github.com/smicallef/spiderfoot) | 22k | Python | Automated OSINT engine with 200+ modules correlating data on IPs, domains, emails, names and more. |\n| [Recon-ng](https://github.com/lanmaster53/recon-ng) | 6k | Python | Full-featured modular web reconnaissance framework with a Metasploit-style interface. |\n| [OSINT Framework](https://osintframework.com/) | 9k | JavaScript | Web directory tree linking OSINT resources by data type — the canonical jumping-off map for investigators. |\n| [IntelTechniques Tools](https://inteltechniques.com/tools/) | — | — | Michael Bazzell's curated online search tools and workflows for people, email, username and domain investigations. |\n| [Mr.Holmes](https://github.com/Lucksi/Mr.Holmes) | 4k | Python | All-in-one information-gathering framework for usernames, phone numbers and domains. |\n| [OSINT-SPY](https://github.com/SharadKumar97/OSINT-SPY) | 2k | Python | Performs OSINT on emails, domains, IPs, devices and Bitcoin addresses from a single CLI. |\n| [Datasploit](https://github.com/DataSploit/datasploit) | 3k | Python | Archived but influential OSINT framework that aggregated intel on domains, emails, usernames and phones. ⚠️ |\n| [Mitaka](https://github.com/ninoseki/mitaka) | 2k | TypeScript | Browser extension that extracts and pivots IOCs (IPs, hashes, domains) to 70+ search engines via right-click. |\n| [Hunchly](https://www.hunch.ly/) | — | — | Commercial web-capture tool that automatically logs, hashes and indexes every page visited during an investigation. |\n| [Osmedeus](https://github.com/j3ssie/osmedeus) | 7k | Go | Workflow engine for automated reconnaissance and attack-surface mapping. |\n| [FinalRecon](https://github.com/thewhiteh4t/FinalRecon) | 3k | Python | All-in-one web recon tool (whois, DNS, headers, crawl, Wayback, subdomains). |\n| [sn0int](https://github.com/kpcyrd/sn0int) | 3k | Rust | Semi-automatic OSINT framework and package manager for entity-graph recon. |\n| [OWASP Maryam](https://github.com/saeeddhqan/maryam) | 1k | Python | Modular open-source framework for web-based OSINT and data mining. |\n| [maltego-trx](https://github.com/MaltegoTech/maltego-trx) | 298 | Python | Official library for writing custom Maltego transforms and TDS servers. |\n| [gOSINT](https://github.com/Nhoya/gOSINT) | 676 | Go | Modular CLI OSINT framework for emails, PGP, Telegram and more. ⚠️ |\n| [Tsurugi Linux](https://tsurugi-linux.org/) | — | Distro | DFIR/OSINT-focused Linux distribution with a dedicated OSINT tool set. |\n| [CSI Linux](https://csilinux.com/) | — | Distro | Investigation-focused Linux platform bundling OSINT, DFIR and dark-web tooling. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 🕵️ Username \u0026 People Search\n\nPivot a username, real name or handle into a person's accounts and public-records footprint across the web.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Sherlock](https://github.com/sherlock-project/sherlock) | 92k | Python | Hunts a username across hundreds of social networks and websites to find a person's accounts. |\n| [Maigret](https://github.com/soxoj/maigret) | 38k | Python | Builds a dossier on a person by username from 3000+ sites, extracting profile details and relations. |\n| [GHunt](https://github.com/mxrch/GHunt) | 20k | Python | Investigates Google accounts and objects — emails, profiles, reviews, photos — from a Gmail address or ID. |\n| [blackbird](https://github.com/p1ngul1n0/blackbird) | 8k | Python | Fast OSINT username and email search across hundreds of sites with WhatsMyName metadata. |\n| [socialscan](https://github.com/iojw/socialscan) | 2k | Python | Checks email and username availability/registration on online platforms with accurate signup-flow queries. |\n| [WhatsMyName](https://whatsmyname.app/) | 2k | Python | Community-driven username enumeration project and web app with a large, validated site list. |\n| [Creepy](https://github.com/ilektrojohn/creepy) | 1k | Python | Geolocation OSINT tool that gathers location data from a target's social-media posts and image metadata. |\n| [FastPeopleSearch](https://www.fastpeoplesearch.com/) | — | — | Free US people-search returning addresses, phones, relatives and associates from public records by name. |\n| [TruePeopleSearch](https://www.truepeoplesearch.com/) | — | — | Free US public-records lookup for current/past addresses, phone numbers and known relatives. |\n| [IDCrawl](https://www.idcrawl.com/) | — | — | People-search aggregator that surfaces social profiles, usernames and public records by name or handle. |\n| [Namechk](https://namechk.com/) | — | — | Instantly checks a username and domain across many social networks for availability/registration. |\n| [Snoop](https://github.com/snooppr/snoop) | 4k | Python | Username search across 5400+ sites with its own web DB and IP/geo plugins. |\n| [Nexfil](https://github.com/thewhiteh4t/nexfil) | 3k | Python | Finds profiles by username across 350+ sites with low false positives. ⚠️ |\n| [Tookie-osint](https://github.com/Alfredredbird/tookie-osint) | 3k | Python | Discovers social media accounts from a username, Sherlock-style. |\n| [Octosuite](https://github.com/bellingcat/octosuite) | 2k | Python | Terminal toolkit for GitHub account/repo/org OSINT (Bellingcat). |\n| [CrossLinked](https://github.com/m8sec/CrossLinked) | 2k | Python | Enumerates valid LinkedIn employee names via search-engine scraping. |\n| [socid-extractor](https://github.com/soxoj/socid-extractor) | 1k | Python | Extracts account IDs/metadata from profile pages across 130+ sites. |\n| [GitFive](https://github.com/mxrch/GitFive) | 1k | Python | Tracks down GitHub users; pivots email to account and dumps SSH keys. |\n| [Profil3r](https://github.com/Greyjedix/Profil3r) | 667 | Python | Finds a person's accounts and emails, with data-leak alerting. |\n| [Marple](https://github.com/soxoj/marple) | 326 | Python | Collects profile links by username through 10+ search engines. |\n| [WebMii](https://webmii.com) | — | Web | People-search engine aggregating public web profiles by name with \"PeopleRank\". |\n| [That'sThem](https://thatsthem.com) | — | Web | Free people search with reverse email/phone/address lookups. |\n| [Spokeo](https://www.spokeo.com) | — | Web | People search aggregating 12B+ records by name, phone, email, or address. |\n| [Predicta Search](https://www.predictasearch.com) | — | Web | Reverse email/phone/username/name lookup to 100+ social profiles. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 📧 Email \u0026 Breach Data\n\nTie an email to accounts, leaked credentials and breach corpora — registration enumeration to dump search.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Have I Been Pwned](https://haveibeenpwned.com/) | — | — | Checks whether an email or phone appears in known data breaches; offers a domain-monitoring API. |\n| [Holehe](https://github.com/megadose/holehe) | 15k | Python | Checks whether an email is registered on dozens of sites using password-reset and signup flows. |\n| [h8mail](https://github.com/khast3x/h8mail) | 5k | Python | Email OSINT and breach-hunting tool that pulls passwords from local dumps and online services. |\n| [Mosint](https://github.com/alpkeskin/mosint) | 6k | Go | Fast automated email OSINT tool aggregating breach checks, related emails and social lookups. |\n| [breach-parse](https://github.com/hmaverickadams/breach-parse) | 2k | Shell | Parsing tool for the COMB/large credential dumps to extract emails and passwords for a target domain. |\n| [buster](https://github.com/sham00n/buster) | 1k | Python | Advanced email OSINT tool that finds linked accounts, breaches and social profiles for an address. |\n| [Dehashed](https://www.dehashed.com/) | — | — | Searchable breach-data engine to query emails, usernames, passwords, names and IPs across leaks. |\n| [Snusbase](https://snusbase.com/) | — | — | Commercial breach-database search across billions of leaked records by email, hash, IP or name. |\n| [LeakCheck](https://leakcheck.io/) | — | — | Data-breach search engine and API for checking emails, usernames and keywords against leak corpora. |\n| [EmailRep](https://emailrep.io/) | — | — | Email reputation service returning risk signals, linked profiles and breach appearance for an address. |\n| [Hunter.io](https://hunter.io/) | — | — | Finds and verifies professional email addresses for a domain and reveals common address patterns. |\n| [check-if-email-exists](https://github.com/reacherhq/check-if-email-exists) | 10k | Rust | Verifies whether an email address exists without sending mail (SMTP probe). |\n| [WhatBreach](https://github.com/Ekultek/WhatBreach) | 2k | Python | Finds breaches, databases and pastes tied to an email address. |\n| [EmailHarvester](https://github.com/maldevel/EmailHarvester) | 980 | Python | Retrieves a domain's email addresses from multiple search engines. |\n| [MailFinder](https://github.com/mishakorzik/MailFinder) | 590 | Python | OSINT tool to find an email address from a first and last name. |\n| [EmailFinder](https://github.com/Josue87/EmailFinder) | 426 | Python | Searches a domain's emails through search engines. ⚠️ |\n| [XposedOrNot](https://xposedornot.com) | — | Web | Free data-breach search engine and open API for emails and domains. |\n| [BreachDirectory](https://breachdirectory.org) | — | Web | Searches public breaches by email/username; free tier plus API. |\n| [Hudson Rock Cavalier](https://cavalier.hudsonrock.com) | — | Web | Free infostealer-infection lookup for emails, domains and usernames. |\n| [LeakPeek](https://leakpeek.com/) | — | Web | Hosted breach search over 8.2B+ records by email, username, password, domain or name. |\n| [Leak-Lookup](https://leak-lookup.com/) | — | Web | Breach search across thousands of dumps; email/username/IP/phone/domain fields. |\n| [LeakRadar](https://leakradar.io/en) | — | Web | Stealer-log/combolist engine indexing 507B+ credentials; free search, paid reveal. |\n| [Whiteintel](https://whiteintel.io/) | — | Web | Dark-web/infostealer credential monitoring with free domain-compromise search. |\n| [ransomware.live](https://www.ransomware.live/) | 334 | Python | Ransomware gang tracker scraping data-leak sites; API and live victim map. |\n| [RansomLook](https://www.ransomlook.io/) | 629 | Python | Open-source aggregator tracking 580+ ransomware groups and their leak-site posts. |\n| [DDoSecrets](https://ddosecrets.org/) | — | Web | Nonprofit archive publishing/searching 100M+ hacked and leaked documents. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 🌐 Domain, DNS \u0026 Infrastructure\n\nFootprint a target's domains, subdomains, DNS, certificates and tech stack from passive public sources.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [OWASP Amass](https://github.com/owasp-amass/amass) | 15k | Go | In-depth attack-surface mapping and external asset discovery via passive and active DNS reconnaissance. |\n| [theHarvester](https://github.com/laramies/theHarvester) | 18k | Python | Gathers emails, names, subdomains, IPs and URLs for a domain from search engines and certificate logs. |\n| [subfinder](https://github.com/projectdiscovery/subfinder) | 14k | Go | Fast passive subdomain enumeration tool that pulls from many online sources via their APIs. |\n| [Sublist3r](https://github.com/aboul3la/Sublist3r) | 11k | Python | Classic subdomain enumeration tool using search engines, VirusTotal, Netcraft and DNSdumpster. |\n| [dnstwist](https://github.com/elceef/dnstwist) | 6k | Python | Domain-permutation engine that detects typosquats, phishing and brand-impersonation domains. |\n| [knockpy](https://github.com/guelfoweb/knock) | 4k | Python | Subdomain scanner that enumerates hostnames via wordlists and resolves them with reporting. |\n| [assetfinder](https://github.com/tomnomnom/assetfinder) | 4k | Go | Quickly finds domains and subdomains related to a target from multiple passive sources. |\n| [crt.sh](https://crt.sh/) | — | — | Certificate Transparency log search that surfaces subdomains via every TLS certificate issued for a domain. |\n| [DNSDumpster](https://dnsdumpster.com/) | — | — | Free domain research tool mapping a domain's hosts, DNS records and network as a visual diagram. |\n| [SecurityTrails](https://securitytrails.com/) | — | — | Historical DNS, WHOIS and domain/IP intelligence platform with deep records and an API. |\n| [WHOIS / RDAP](https://www.whois.com/whois/) | — | — | Look up registration details, registrar, dates and contacts for domains and IP allocations. |\n| [ViewDNS.info](https://viewdns.info/) | — | — | Free toolbox of DNS, WHOIS, reverse-IP, IP-history and port-check utilities in one place. |\n| [BuiltWith](https://builtwith.com/) | — | — | Profiles the technology stack behind a website — CMS, analytics, frameworks, hosting and more. |\n| [Wappalyzer](https://www.wappalyzer.com/) | — | — | Technology profiler identifying the CMS, frameworks, analytics and servers a website is built with. |\n| [Netlas.io](https://netlas.io/) | — | — | Internet-wide scan and attack-surface search engine for hosts, domains, certificates and responses. |\n| [dnsx](https://github.com/projectdiscovery/dnsx) | 3k | Go | Fast multi-purpose DNS toolkit for bulk A/AAAA/CNAME/PTR queries and brute-force. |\n| [shuffledns](https://github.com/projectdiscovery/shuffledns) | 2k | Go | massdns wrapper for active subdomain brute-force and resolution with wildcard filtering. |\n| [massdns](https://github.com/blechschmidt/massdns) | 4k | C | High-performance stub DNS resolver for bulk lookups (millions of names/sec). |\n| [puredns](https://github.com/d3mondev/puredns) | 2k | Go | Fast domain resolver and subdomain bruteforcer that filters wildcards and poisoned entries. |\n| [Findomain](https://github.com/Findomain/Findomain) | 4k | Rust | Cross-platform subdomain enumerator pulling from cert transparency and dozens of sources. |\n| [chaos-client](https://github.com/projectdiscovery/chaos-client) | 884 | Go | Client for ProjectDiscovery's Chaos dataset of internet-wide DNS/subdomain data. |\n| [asnmap](https://github.com/projectdiscovery/asnmap) | 1k | Go | Maps an organization's network ranges/CIDRs from ASN, org name, IP, or domain. |\n| [mapcidr](https://github.com/projectdiscovery/mapcidr) | 1k | Go | CIDR/IP range utility for slicing, expanding, and aggregating network ranges. |\n| [cero](https://github.com/glebarez/cero) | 693 | Go | Scrapes domain names directly from TLS certificates of live hosts at scale. |\n| [CTFR](https://github.com/UnaPibaGeek/ctfr) | 2k | Python | Enumerates HTTPS subdomains by abusing Certificate Transparency logs (no brute-force). |\n| [hakrevdns](https://github.com/hakluke/hakrevdns) | 2k | Go | Small, fast tool for performing reverse DNS (PTR) lookups en masse. |\n| [dnsgen](https://github.com/AlephNullSK/dnsgen) | 1k | Python | Generates intelligent subdomain name permutations from a seed wordlist. |\n| [dnsrecon](https://github.com/darkoperator/dnsrecon) | 3k | Python | Versatile DNS recon: zone transfers, brute-force, SRV/PTR enumeration, cache snooping. |\n| [Fierce](https://github.com/mschwager/fierce) | 2k | Python | DNS reconnaissance scanner for locating non-contiguous IP space and hostnames. |\n| [Gobuster](https://github.com/OJ/gobuster) | 14k | Go | Brute-force tool with DNS subdomain, vhost, and directory/file enumeration modes. |\n| [alterx](https://github.com/projectdiscovery/alterx) | 1k | Go | Pattern-based subdomain wordlist/permutation generator for active enumeration. |\n| [Hurricane Electric BGP Toolkit](https://bgp.he.net) | — | Web | Web portal for ASN, BGP prefix, peering, and reverse-IP intelligence lookups. |\n| [RapidDNS](https://rapiddns.io) | — | Web | Free DNS query service for reverse-IP, subdomain, and shared-host lookups. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 📡 Internet Scan Engines \u0026 Attack Surface\n\nSearch engines for the whole internet — query exposed hosts, devices, banners and certificates without scanning yourself.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Shodan](https://www.shodan.io/) | — | — | Search engine for internet-connected devices — exposed services, banners, ICS/IoT and vulnerabilities. |\n| [Censys Search](https://search.censys.io/) | — | — | Continuously updated internet-wide scan dataset for hosts and certificates with rich filtering and an API. |\n| [ZoomEye](https://www.zoomeye.org/) | — | — | Internet-wide search engine mapping exposed hosts, devices and services with banner/fingerprint data. |\n| [FOFA](https://en.fofa.info/) | — | — | Cyberspace search engine indexing internet-exposed assets, services and fingerprints for recon. |\n| [BinaryEdge](https://www.binaryedge.io/) | — | — | Internet-scanning data platform exposing open ports, services, leaked data and attack-surface signals. |\n| [Onyphe](https://www.onyphe.io/) | — | — | Cyber-defense search engine correlating internet scan, threat and OSINT data for an IP or domain. |\n| [GreyNoise](https://www.greynoise.io/) | — | — | Tells you whether an IP is mass-internet background noise or a targeted threat, cutting alert fatigue. |\n| [nuclei](https://github.com/projectdiscovery/nuclei) | 31k | Go | Community-powered, YAML-template vulnerability and exposure scanner. |\n| [masscan](https://github.com/robertdavidgraham/masscan) | 26k | C | Asynchronous TCP port scanner capable of scanning the entire internet in minutes. |\n| [RustScan](https://github.com/RustScan/RustScan) | 20k | Rust | Modern port scanner that scans all 65k ports in seconds and pipes into Nmap. |\n| [naabu](https://github.com/projectdiscovery/naabu) | 6k | Go | Fast SYN/CONNECT port scanner built for piping into attack-surface workflows. |\n| [httpx](https://github.com/projectdiscovery/httpx) | 10k | Go | Fast multi-purpose HTTP probing toolkit for fingerprinting live web servers at scale. |\n| [ZMap](https://github.com/zmap/zmap) | 6k | C | Fast single-packet network scanner designed for internet-wide research surveys. |\n| [uncover](https://github.com/projectdiscovery/uncover) | 3k | Go | Queries Shodan, Censys, FOFA, Hunter and Quake from one CLI to find exposed hosts. |\n| [Smap](https://github.com/s0md3v/Smap) | 3k | Go | Drop-in Nmap replacement returning port/CVE data passively via Shodan's free API. |\n| [nrich](https://gitlab.com/shodan-public/nrich) | 1.4k | Rust | Enriches a list of IPs with open ports and known CVEs using Shodan's InternetDB. |\n| [IVRE](https://github.com/ivre/ivre) | 4k | Python | Self-hosted network recon framework/database for building your own Shodan-like map. |\n| [reconFTW](https://github.com/six2dez/reconftw) | 8k | Shell | Automated recon orchestrator chaining dozens of subdomain, scan, and vuln tools. |\n| [Sn1per](https://github.com/1N3/Sn1per) | 11k | Shell | Automated pentest and attack-surface management platform with recon/scan modules. |\n| [Criminal IP](https://www.criminalip.io) | — | Web | Search engine for exposed devices, open ports, and internet-facing asset intelligence. |\n| [FullHunt](https://fullhunt.io) | — | Web | Attack-surface database/search engine to discover and monitor exposed assets. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n\n## ☁️ Cloud, IoT \u0026 Web Recon\n\nFind exposed buckets, cloud assets, internet-connected devices, and a site's technology and archived footprint.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [S3Scanner](https://github.com/sa7mon/S3Scanner) | 3k | Go | Scans for open/misconfigured buckets across S3-compatible APIs and dumps permissions. |\n| [cloud_enum](https://github.com/initstring/cloud_enum) | 2k | Python | Multi-cloud OSINT tool enumerating public AWS, Azure, and GCP resources. |\n| [CloudBrute](https://github.com/0xsha/CloudBrute) | 1k | Go | Finds a company's files/apps/infrastructure across the major cloud providers. |\n| [cloudlist](https://github.com/projectdiscovery/cloudlist) | 1k | Go | Lists assets/hostnames from multiple cloud providers using their APIs. |\n| [GCPBucketBrute](https://github.com/RhinoSecurityLabs/GCPBucketBrute) | 574 | Python | Enumerates Google Storage buckets and checks for privilege-escalation paths. |\n| [GrayhatWarfare](https://buckets.grayhatwarfare.com) | — | Web | Searchable index of public S3/Azure/GCP buckets and exposed files. |\n| [ScoutSuite](https://github.com/nccgroup/ScoutSuite) | 8k | Python | Multi-cloud security auditing tool that surfaces misconfigured/exposed assets. |\n| [Kamerka](https://github.com/woj-ciech/Kamerka-GUI) | 868 | Python | Maps exposed IoT devices, webcams, and ICS on a map using Shodan/Censys/BinaryEdge. |\n| [Insecam](http://www.insecam.org) | — | Web | Directory of internet-accessible, unsecured IP cameras worldwide. |\n| [webanalyze](https://github.com/rverton/webanalyze) | 1k | Go | Go port of Wappalyzer for fast mass web technology fingerprinting. |\n| [WhatWeb](https://github.com/urbanadventurer/WhatWeb) | 7k | Ruby | Web scanner identifying CMS, frameworks, analytics IDs, and 1800+ technology plugins. |\n| [FavFreak](https://github.com/devanshbatham/FavFreak) | 1k | Python | Pivots on favicon.ico hashes to discover related assets/IPs via Shodan. ⚠️ |\n| [waybackurls](https://github.com/tomnomnom/waybackurls) | 5k | Go | Fetches all URLs the Wayback Machine knows about for a domain. |\n| [gau](https://github.com/lc/gau) | 5k | Go | Pulls known URLs from Wayback, Common Crawl, OTX, and URLScan for a target. |\n| [waymore](https://github.com/xnl-h4ck3r/waymore) | 3k | Python | Deep archive recon across Wayback, Common Crawl, OTX, URLScan and VirusTotal. |\n| [hakrawler](https://github.com/hakluke/hakrawler) | 5k | Go | Fast web crawler for discovering endpoints, assets, and URLs on a target. |\n| [web-check](https://github.com/lissy93/web-check) | 35k | TypeScript | All-in-one website OSINT dashboard: DNS, headers, tech stack, certs, archives, and more. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n## 💬 Social Media Intelligence (SOCMINT)\n\nScrape, archive and analyze posts, profiles and channels across the major social and messaging platforms.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Social-Analyzer](https://github.com/qeeqbox/social-analyzer) | 24k | Python | API/CLI/web tool to find and analyze a person's profiles across 1000+ social media sites. |\n| [Osintgram](https://github.com/Datalux/Osintgram) | 14k | Python | Interactive Instagram OSINT tool to pull followers, emails, phones, tagged photos and locations. |\n| [Instaloader](https://instaloader.github.io/) | 9k | Python | Downloads Instagram posts, stories, profile metadata and comments for archival and analysis. |\n| [snscrape](https://github.com/JustAnotherArchivist/snscrape) | 5k | Python | Scrapes social networks (X/Twitter, Telegram, Reddit, etc.) without API keys for posts and profiles. |\n| [toutatis](https://github.com/megadose/toutatis) | 4k | Python | Extracts obfuscated emails, phone numbers and account info from Instagram profiles. |\n| [Telepathy](https://github.com/jordanwildon/Telepathy) | 1k | Python | Telegram OSINT toolkit for archiving channels and analysing members, messages and forwards. |\n| [twint](https://github.com/twintproject/twint) | 16k | Python | Once-popular Twitter scraping tool needing no API — now deprecated/broken after X API changes. ⚠️ |\n| [Telegago](https://cse.google.com/cse?cx=006249643689091525507) | — | — | Google custom search engine for discovering public Telegram channels, groups and messages. |\n| [TGStat](https://tgstat.com/) | — | — | Telegram analytics and catalog for discovering channels and measuring reach and activity. |\n| [YouTube DataViewer](https://citizenevidence.amnestyusa.org/) | — | — | Amnesty tool extracting a YouTube video's exact upload time and thumbnails for reverse search. |\n| [twscrape](https://github.com/vladkens/twscrape) | 3k | Python | X/Twitter scraper with account-pool auth: search, profiles, followers, tweets, retweeters. |\n| [Scweet](https://github.com/Altimis/Scweet) | 2k | Python | Scrapes tweets, profiles and followers from X without an API key, with proxy pooling. |\n| [Ultimate Social Scrapers](https://github.com/harismuneer/Ultimate-Social-Scrapers) | 3k | Python | Scrapes Facebook/Instagram profile posts, photos and friend/follower lists without the API. |\n| [linkedin2username](https://github.com/initstring/linkedin2username) | 2k | Python | Generates likely username/email permutations for all employees of a company from LinkedIn. |\n| [Osintgraph](https://github.com/XD-MHLOO/Osintgraph) | 958 | Python | Maps an Instagram target's followers/followees into Neo4j to visualize their network. |\n| [youtube-metadata](https://github.com/mattwright324/youtube-metadata) | 509 | JavaScript | Gathers metadata for a YouTube video/playlist/channel with thumbnail reverse-search. |\n| [fb_friend_list_scraper](https://github.com/n0kovo/fb_friend_list_scraper) | 331 | Python | Scrapes names and usernames from large Facebook friend lists without hitting rate limits. |\n| [SnapIntel](https://github.com/Kr0wZ/SnapIntel) | 338 | Python | Investigates Snapchat users: stories, spotlights, lenses, bitmojis and upload heatmaps. |\n| [youtube-geofind](https://github.com/mattwright324/youtube-geofind) | 160 | JavaScript | Finds geotagged YouTube videos by channel, topic or location radius, with CSV export. |\n| [tik-spyder](https://github.com/estebanpdl/tik-spyder) | 102 | Python | CLI that collects TikTok posts, videos and metadata via Google search for investigations. |\n| [reddit-user-analyser](https://github.com/atomiks/reddit-user-analyser) | 12 | JavaScript | Analyzes a Reddit user's activity: top subreddits, posting times and word breakdowns. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n\n## 📨 Messaging-App OSINT\n\nInvestigate Telegram, Discord, WhatsApp and fediverse accounts, channels and groups.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [DiscordChatExporter](https://github.com/Tyrrrz/DiscordChatExporter) | 12k | C# | Exports any Discord channel, DM, group or server history to HTML/JSON/CSV for offline review. |\n| [telegram-phone-number-checker](https://github.com/bellingcat/telegram-phone-number-checker) | 2k | Python | Checks whether phone numbers are tied to Telegram accounts, returning username and IDs (Bellingcat). |\n| [Telerecon](https://github.com/sockysec/Telerecon) | 1k | Python | Reconnaissance framework to scrape Telegram channels/groups, map forwards and profile users. |\n| [tgscan](https://github.com/tgscan-dev/tgscan) | 718 | Java | Search engine for discovering Telegram channels, groups and chat history by keyword. |\n| [telegram-tracker](https://github.com/estebanpdl/telegram-tracker) | 383 | Python | Collects and analyzes messages/metadata from Telegram channels for disinformation research. |\n| [Masto](https://github.com/C3n7ral051nt4g3ncy/Masto) | 272 | Python | Gathers intelligence on Mastodon users/instances and finds all accounts a user holds. |\n| [WhatsApp-OSINT](https://github.com/kinghacker0/WhatsApp-OSINT) | 1k | Python | Pulls WhatsApp profile pic, About/status, business verification and linked-device data from a number. |\n| [DiscordOSINT](https://github.com/husseinmuhaisen/DiscordOSINT) | 599 | — | Curated techniques for investigating Discord accounts, servers and bots (snowflake decoding, pivots). |\n| [doxcord](https://github.com/boringthegod/doxcord) | 89 | Python | Scans Discord servers for shared tracker links that leak each sender's identity. |\n| [tgcrawler](https://github.com/iggisv9t/tgcrawler) | 19 | Python | Crawls Telegram channels by following t.me links to map channel networks. |\n| [blueskynet](https://github.com/jakecreps/blueskynet) | 16 | JavaScript | Web app to search, analyze and CSV-export results from the Bluesky API for OSINT. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n## 🖼️ Image \u0026 Reverse Image Search\n\nFind where a photo came from, who's in it, and whether it's been manipulated — reverse search, face search and forensics.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Google Lens / Images](https://images.google.com/) | — | — | Reverse image search to identify objects, places and the origin of a photo across the web. |\n| [Yandex Images](https://yandex.com/images/) | — | — | Reverse image search engine widely regarded as strongest for faces and location matching. |\n| [TinEye](https://tineye.com/) | — | — | Reverse image search specialising in finding exact copies, edits and the oldest occurrence of an image. |\n| [Bing Visual Search](https://www.bing.com/visualsearch) | — | — | Microsoft's reverse image search, often complementary to Google and Yandex for Western web matches. |\n| [PimEyes](https://pimeyes.com/) | — | — | Facial-recognition search engine that finds other photos of a face across the public web. |\n| [FotoForensics](https://fotoforensics.com/) | — | — | Image-manipulation analysis using Error Level Analysis and metadata to spot edits and fakes. |\n| [Forensically](https://29a.ch/photo-forensics/) | — | — | Browser-based image forensics toolkit: clone detection, ELA, noise analysis, magnifier and metadata. |\n| [Karma Decay](http://karmadecay.com/) | — | — | Reverse image search for Reddit to find where and when an image was previously posted. |\n| [ExifTool](https://exiftool.org/) | 1k | Perl | Reads, writes and edits metadata in images, documents and media — essential for media verification. |\n| [DeepFace](https://github.com/serengil/deepface) | 23k | Python | Lightweight face recognition and facial attribute (age, gender, emotion) framework. |\n| [InsightFace](https://github.com/deepinsight/insightface) | 30k | Python | State-of-the-art 2D and 3D face analysis (detection, recognition, alignment) toolkit. |\n| [face_recognition](https://github.com/ageitgey/face_recognition) | 57k | Python | Dlib-based \"world's simplest\" face recognition API for Python and CLI. ⚠️ |\n| [CompreFace](https://github.com/exadel-inc/CompreFace) | 8k | Java | Self-hosted, dockerized open-source face recognition system with REST API. |\n| [trace.moe](https://trace.moe/) | 5k | JavaScript | Anime scene search that finds the show, episode, and timestamp from a screenshot. |\n| [SmartImage](https://github.com/Decimation/SmartImage) | 1k | C# | Windows desktop reverse image search aggregator (SauceNAO, IQDB, Ascii2D, trace.moe). |\n| [FaceCheck.ID](https://facecheck.id/) | — | Web | Reverse face search that finds where a person's face appears across the public web. |\n| [Search4faces](https://search4faces.com/en/) | — | Web | Facial recognition search across VK, Odnoklassniki, TikTok, and Clubhouse avatars. |\n| [Lenso.ai](https://lenso.ai/en) | — | Web | AI reverse image search sorting matches into people, places, duplicates, and related. |\n| [SauceNAO](https://saucenao.com/) | — | Web | Reverse image search for art/anime across Pixiv, Danbooru, Gelbooru, and more. |\n| [ascii2d](https://ascii2d.net/) | — | Web | Japanese reverse image search matching by color and feature hashes. |\n| [IQDB](https://iqdb.org/) | — | Web | Multi-service image search across booru sites (Danbooru, Konachan, Gelbooru, Sankaku). |\n| [ImgOps](https://imgops.com/) | — | Web | Meta-tool routing an image to many reverse-search, EXIF, and editing utilities. |\n| [Photo Sherlock](https://photosherlock.com/) | — | App | Android/iOS app for reverse image search to check if a photo is fake or stolen. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n\n## 🔬 Image, Video \u0026 Media Forensics\n\nDetect manipulation, deepfakes and AI-generated media, and verify provenance.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Sherloq](https://github.com/GuidoBartoli/sherloq) | 3k | Python | Open-source desktop image forensics suite: ELA, JPEG/quantization, noise and resampling analysis. |\n| [DeepfakeBench](https://github.com/SCLBD/DeepfakeBench) | 1k | Python | Benchmark unifying datasets and 36 state-of-the-art deepfake-detection models. |\n| [FaceForensics++](https://github.com/ondyari/FaceForensics) | 3k | Python | Benchmark dataset and detection code for face-manipulation methods. ⚠️ |\n| [InVID-WeVerify Plugin](https://weverify.eu/verification-plugin/) | — | Web | Browser-extension verification toolbox: video keyframes, magnifier, metadata, reverse search. |\n| [MeVer Verification Assistant](https://mever.iti.gr/forensics/) | — | Web | CERTH service bundling tampering-detection, EXIF, GPS and reverse-search for media verification. |\n| [Deepware Scanner](https://scanner.deepware.ai/) | — | Web | Free online scanner analyzing videos for facial-manipulation deepfakes with confidence scores. |\n| [Content Credentials Verify](https://contentcredentials.org/verify) | — | Web | Official CAI tool to inspect C2PA provenance manifests embedded in images, video and files. |\n| [c2patool](https://github.com/contentauth/c2pa-rs) | 422 | Rust | Official C2PA SDK and CLI to read, verify and write content-provenance manifests. |\n| [Illuminarty](https://illuminarty.ai/) | — | Web | Detector estimating whether an image is AI-generated, which model made it, and which regions. |\n| [ExifCleaner](https://github.com/szTheory/exifcleaner) | 3k | TypeScript | Cross-platform GUI (ExifTool-based) to view and strip metadata from images, video and PDFs. |\n| [yt-dlp](https://github.com/yt-dlp/yt-dlp) | 192k | Python | Feature-rich CLI downloader for thousands of sites, used to pull source video and frames. |\n| [AI or Not](https://www.aiornot.com/) | — | Web | Service classifying images, audio and video as AI-generated or real, including deepfakes. |\n| [Reality Defender](https://www.realitydefender.com/) | — | Web | Multimodal deepfake-detection platform (web app + API/SDK) for image, video, audio and text. |\n| [Metadata2Go](https://www.metadata2go.com/) | — | Web | Free browser tool to view, edit and remove EXIF/metadata from images, video, audio and PDFs. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n## 🗺️ Geolocation \u0026 GEOINT\n\nPin down where an image or video was captured using maps, street-level imagery, sun position and feature queries.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [SunCalc](https://www.suncalc.org/) | — | — | Computes sun position and shadow direction for a time and place to verify or chronolocate photos. |\n| [Overpass Turbo](https://overpass-turbo.eu/) | — | — | Query and visualize OpenStreetMap data to find places by feature and narrow a geolocation. |\n| [Mapillary](https://www.mapillary.com/) | — | — | Crowdsourced street-level imagery for visual ground-truthing where Street View is absent. |\n| [KartaView](https://kartaview.org/) | — | — | Open crowdsourced street-level imagery platform, an alternative source for ground-truthing locations. |\n| [GeoSpy](https://geospy.ai/) | — | — | AI geolocation engine that predicts where a photo was taken from visual scene features. |\n| [GeoHints](https://geohints.com/) | — | — | Reference of country-specific visual clues — bollards, signs, plates — to narrow image geolocation. |\n| [Google Earth](https://earth.google.com/) | — | — | Satellite/3D imagery with historical timeline for matching terrain, buildings and confirming a location. |\n| [Bellingcat ShadowFinder](https://github.com/bellingcat/ShadowFinder) | 607 | Python | Estimates possible locations of a photo from a known shadow length and timestamp. |\n| [Wikimapia](https://wikimapia.org/) | — | — | Crowdsourced map with labelled places and points of interest useful for matching landmarks. |\n| [Copernicus Browser](https://browser.dataspace.copernicus.eu/) | — | Web | Free browser for Sentinel and Landsat satellite imagery with time-lapse and band analysis. |\n| [NASA Worldview](https://worldview.earthdata.nasa.gov/) | — | Web | Browse 1,200+ global daily satellite imagery layers, many within ~3 hours of observation. |\n| [Zoom Earth](https://zoom.earth/) | — | Web | Live satellite and weather imagery with storm tracking, fire detection, and overlays. |\n| [USGS EarthExplorer](https://earthexplorer.usgs.gov/) | — | Web | Search and download Landsat, aerial photography, and satellite archive datasets. |\n| [OpenAerialMap](https://openaerialmap.org/) | — | Web | Open repository of openly-licensed drone and aerial imagery searchable by location. |\n| [Maxar Open Data](https://vantor.com/company/open-data-program) | — | Web | Free near-real-time high-resolution satellite imagery for major disaster events. |\n| [Picarta](https://www.picarta.ai/) | — | Web | AI photo geolocation predicting where an image was taken from visual clues, no EXIF needed. |\n| [Shadowmap](https://shadowmap.org/) | — | Web | Global 3D sun and shadow simulation for any date/time, for shadow-based chronolocation. |\n| [PeakVisor](https://peakvisor.com/) | — | Web | 3D mountain and peak identification with AR overlays for terrain-based geolocation. |\n| [Instant Street View](https://www.instantstreetview.com/) | — | Web | Jump directly to any address in Google Street View, including historical imagery. |\n| [Liveuamap](https://liveuamap.com/) | — | Web | Live interactive map of conflict and security events geolocated from open-source reporting. |\n| [Geograph](https://www.geograph.org.uk/) | — | Web | Archive of 8M+ geotagged ground-level photos across Britain and Ireland. |\n| [Bellingcat OSM Search](https://github.com/bellingcat/osm-search) | 208 | Vue | Proximity search of OpenStreetMap features to geolocate images by nearby objects. |\n| [Nominatim](https://github.com/osm-search/Nominatim) | 4k | Python | OpenStreetMap geocoding/reverse-geocoding engine for names, addresses, and coordinates. |\n| [QGIS](https://github.com/qgis/QGIS) | 14k | C++ | Free open-source GIS for geospatial analysis and layering imagery, with 200+ algorithms. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 📱 Phone \u0026 Identity\n\nInvestigate a phone number's carrier, footprint and the accounts and identities linked to it.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [PhoneInfoga](https://github.com/sundowndev/phoneinfoga) | 18k | Go | Reconnaissance framework for phone numbers — identifies carrier, line type, location and footprints. |\n| [ignorant](https://github.com/megadose/ignorant) | 2k | Python | Checks whether a phone number is registered on sites like Amazon, Instagram and Snapchat. |\n| [Epieos](https://epieos.com/) | — | — | Reverse email and phone lookup revealing linked Google info, profile photos and registered services. |\n| [Phonebook.cz](https://phonebook.cz/) | — | — | IntelligenceX tool listing all emails, subdomains and URLs for a domain from indexed data. |\n| [NumLookup](https://www.numlookup.com/) | — | — | Free reverse phone lookup returning carrier, line type and registered-name details where available. |\n| [Sync.me](https://sync.me/) | — | — | Caller-ID and reverse phone lookup crowdsourced from a large community address book. |\n| [libphonenumber](https://github.com/google/libphonenumber) | 18k | C++ | Google's library for parsing, validating and formatting numbers with carrier/region metadata. |\n| [email2phonenumber](https://github.com/martinvigo/email2phonenumber) | 3k | Python | Derives a target's phone number from their email via password-reset scraping. |\n| [Moriarty-Project](https://github.com/AzizKpln/Moriarty-Project) | 2k | Python | Phone-number intelligence: owner, spam risk, related links and socials. |\n| [PhoneNumber-OSINT](https://github.com/spider863644/PhoneNumber-OSINT) | 867 | Python | Gathers OSINT information about a given phone number. |\n| [numverify](https://numverify.com) | — | API | Phone-number validation API with carrier, line-type and location data. |\n| [Twilio Lookup](https://www.twilio.com/docs/lookup) | — | API | Phone validation, carrier, line type and caller-name (CNAM) lookup API. |\n| [Truecaller](https://www.truecaller.com) | — | App | Global caller-ID and spam database covering 3B+ phone numbers. |\n| [Spy Dialer](https://www.spydialer.com) | — | Web | Free anonymous reverse phone lookup returning US name/carrier data. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 🔎 Google Dorking \u0026 Search Operators\n\nAdvanced search operators and document-harvesting tools to surface exposed files, metadata and hidden pages.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Photon](https://github.com/s0md3v/Photon) | 13k | Python | Fast crawler that extracts URLs, emails, files, secrets and intel from a target for OSINT. |\n| [Pagodo](https://github.com/opsdisk/pagodo) | 3k | Python | Automates Google dorking — passively scrapes GHDB dorks and runs them against a target domain. |\n| [FOCA](https://github.com/ElevenPaths/FOCA) | 4k | C# | Finds metadata and hidden info in documents scraped from a target site to map users and software. |\n| [Metagoofil](https://github.com/laramies/metagoofil) | 1k | Python | Harvests public documents (PDF, DOC, XLS) for a domain and extracts metadata like users and paths. |\n| [Google Hacking Database (GHDB)](https://www.exploit-db.com/google-hacking-database) | — | — | Exploit-DB's curated catalog of Google dork queries that surface exposed files, devices and data. |\n| [DorkSearch](https://dorksearch.com/) | — | — | Pre-built dork builder and library that speeds up crafting advanced Google search operators. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## ✈️ Transport, RF \u0026 SIGINT\n\nTrack aircraft, ships and wireless networks in real time using ADS-B, AIS and wardriving datasets.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Flightradar24](https://www.flightradar24.com/) | — | — | Live and historical flight tracking with aircraft details, routes and playback. |\n| [ADS-B Exchange](https://www.adsbexchange.com/) | — | — | Unfiltered, community-fed flight tracking showing military and blocked aircraft other trackers hide. |\n| [FlightAware](https://www.flightaware.com/) | — | — | Flight tracking and aviation data platform with history, airport activity and aircraft ownership lookups. |\n| [MarineTraffic](https://www.marinetraffic.com/) | — | — | Global ship-tracking platform using AIS data with vessel details, positions and port calls. |\n| [VesselFinder](https://www.vesselfinder.com/) | — | — | Real-time AIS vessel tracking with ship particulars, photos and historical voyage data. |\n| [OpenSky Network](https://opensky-network.org/) | — | — | Research-grade ADS-B flight dataset and API for historical and live aircraft position queries. |\n| [WiGLE](https://wigle.net/) | — | — | Crowdsourced database of wireless networks and cell towers mapped by location for wardriving OSINT. |\n| [dump1090](https://github.com/flightaware/dump1090) | 1k | C | Real-time ADS-B Mode S decoder for RTL-SDR with a live aircraft web map. |\n| [readsb](https://github.com/wiedehopf/readsb) | 683 | C | High-performance ADS-B decoder and feeder powering many receiver builds. |\n| [tar1090](https://github.com/wiedehopf/tar1090) | 2k | JavaScript | Web interface for live visualization of ADS-B aircraft tracks. |\n| [AIS-catcher](https://github.com/jvde-github/AIS-catcher) | 782 | C++ | Multi-SDR AIS receiver decoding ship NMEA with a built-in map server. |\n| [OpenRailwayMap](https://www.openrailwaymap.org/) | — | Web | OSM-based worldwide map of railway tracks, signals and infrastructure. |\n| [Gqrx](https://github.com/csete/gqrx) | 4k | C++ | SDR receiver with spectrum/waterfall for RTL-SDR, Airspy and HackRF. |\n| [SDR++](https://github.com/AlexandreRouma/SDRPlusPlus) | 6k | C++ | Cross-platform modern SDR receiver supporting most popular radios. |\n| [Universal Radio Hacker](https://github.com/jopohl/urh) | 13k | Python | Investigate and reverse-engineer wireless protocols from raw RF captures. |\n| [rtl_433](https://github.com/merbanan/rtl_433) | 8k | C | Decodes ISM-band devices (sensors, TPMS, weather stations, key fobs). |\n| [SatDump](https://github.com/SatDump/SatDump) | 2k | C++ | Capture and decode weather and imaging satellite downlinks. |\n| [Gpredict](https://github.com/csete/gpredict) | 1k | C | Real-time satellite tracking and pass prediction. |\n| [Kismet](https://www.kismetwireless.net/) | — | C++ | Wireless network/device detector, sniffer and WIDS for Wi-Fi, BT and SDR. |\n| [OpenALPR](https://github.com/openalpr/openalpr) | 11k | C++ | Automatic license-plate recognition library for images and video streams. ⚠️ |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## ⛓️ Crypto / Blockchain OSINT\n\nTrace wallets, transactions and entity attribution across Bitcoin, Ethereum and beyond.\n\n\u003e For the full picture (forensics platforms, sanctions screening, incident analysis, mixer tracing), see the dedicated **[awesome-crypto-investigation](https://github.com/edwardtay/awesome-crypto-investigation)** list.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Etherscan](https://etherscan.io/) | — | — | Block explorer for Ethereum — inspect addresses, transactions, tokens and smart contracts. |\n| [Blockchain.com Explorer](https://www.blockchain.com/explorer) | — | — | Bitcoin and multi-chain block explorer for tracing addresses, transactions and balances. |\n| [Blockchair](https://blockchair.com/) | — | — | Multi-blockchain explorer and analytics with powerful filtering across 17+ chains. |\n| [Arkham Intelligence](https://www.arkhamintelligence.com/) | — | — | On-chain analytics that de-anonymises wallets and labels entities to follow flows of funds. |\n| [Breadcrumbs](https://www.breadcrumbs.app/) | — | — | Visual blockchain investigation tool for mapping and monitoring fund flows between wallets. |\n| [WalletExplorer](https://www.walletexplorer.com/) | — | — | Bitcoin wallet-clustering explorer that groups addresses and links them to known services/exchanges. |\n| [Chainabuse](https://www.chainabuse.com/) | — | — | Community scam-reporting database for crypto addresses, exchanges and fraudulent schemes. |\n| [OXT](https://oxt.me/) | — | — | Bitcoin analytics and exploration platform focused on transaction-graph and clustering research. |\n| [Nansen](https://nansen.ai) | — | Web | Wallet-labeling analytics with 500M+ labeled addresses for \"smart money\" tracking. |\n| [MetaSleuth](https://metasleuth.io) | — | Web | Visual cross-chain fund-flow tracing of stolen/scam funds with auto-pathing to CEX/mixers. |\n| [MistTrack](https://misttrack.io) | — | Web | AML/sanctions tracking across 19 chains with OFAC/HMT screening and 400M+ labels. |\n| [Crystal Intelligence](https://crystalintelligence.com) | — | Web | Blockchain analytics across 330+ chains for tracing illicit funds and entity screening. |\n| [GraphSense](https://graphsense.org) | 134 | Python | Open-source, self-hostable cryptoasset analytics for BTC/ETH/Tron money-flow investigation. |\n| [OKLink](https://www.oklink.com) | — | Web | Multi-chain Web3 explorer (40+ chains) with address labels and CEX fund-flow dashboards. |\n| [Bubblemaps](https://bubblemaps.io) | — | Web | Visual token-holder analytics mapping wallet clusters to expose insider/sybil concentration. |\n| [Dune Analytics](https://dune.com) | — | Web | Community SQL/dashboard platform over 100+ chains for custom on-chain queries. |\n| [mempool.space](https://mempool.space) | 3k | TypeScript | Open-source Bitcoin block/mempool explorer for fees, unconfirmed tx, RBF and Lightning. |\n| [Cielo](https://cielo.finance) | — | Web | Smart-money wallet tracking across 30+ chains with real-time Telegram/Discord alerts. |\n| [Bitquery](https://bitquery.io) | — | API | GraphQL/streaming API indexing 40+ chains with Coinpath money-flow tracing. |\n| [WalletLabels](https://www.walletlabels.xyz) | — | Web | Labels 200M+ crypto addresses (exchanges, entities, contracts) via web app and API. |\n| [Orbit](https://github.com/s0md3v/Orbit) | 619 | Python | Recursively crawls a wallet's history and graphs sources, sinks and suspicious links. ⚠️ |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 🦠 Threat Intel \u0026 Malware OSINT\n\nReputation, sandboxing and IOC sources to triage files, URLs, domains and IPs against threat data.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [MISP](https://www.misp-project.org/) | 5.6k | PHP | Open-source threat-intelligence platform for storing, correlating and sharing indicators of compromise. |\n| [VirusTotal](https://www.virustotal.com/) | — | — | Analyzes files, URLs, domains and IPs against dozens of AV engines and surfaces related intelligence. |\n| [urlscan.io](https://urlscan.io/) | — | — | Sandboxes and screenshots a URL, recording requests, domains, certificates and resources it touches. |\n| [Hybrid Analysis](https://www.hybrid-analysis.com/) | — | — | Free malware sandbox that detonates files and URLs and returns behavioural reports and IOCs. |\n| [AbuseIPDB](https://www.abuseipdb.com/) | — | — | Community database of reported malicious IPs with abuse-confidence scores and a lookup API. |\n| [abuse.ch](https://abuse.ch/) | — | — | URLhaus, MalwareBazaar and ThreatFox — free community feeds of malware samples, URLs and IOCs. |\n| [AlienVault OTX](https://otx.alienvault.com/) | — | — | Open Threat Exchange — community-shared pulses of indicators tied to campaigns and malware. |\n| [Pulsedive](https://pulsedive.com/) | — | — | Threat-intelligence search engine enriching and scoring indicators with feeds and risk context. |\n| [ThreatMiner](https://www.threatminer.org/) | — | — | Free data-mining portal for pivoting on domains, IPs, hashes and malware with passive intel. |\n| [Maltiverse](https://maltiverse.com/) | — | — | Threat-intel platform aggregating and classifying IOCs across hundreds of feeds with an API. |\n| [ANY.RUN](https://any.run/) | — | Web | Interactive online malware sandbox for detonating samples across Windows, Linux and Android. |\n| [Joe Sandbox](https://www.joesecurity.org/) | — | Web | Deep automated dynamic malware/phishing analysis with behavioral reports and IOCs. |\n| [Hatching Triage](https://tria.ge/) | — | Web | Scalable automated malware sandbox with config extraction and a free public tier. |\n| [CAPE Sandbox](https://github.com/kevoreilly/CAPEv2) | 4k | Python | Cuckoo-derived open-source sandbox specializing in unpacking and malware config extraction. |\n| [Intezer](https://analyze.intezer.com/) | — | Web | Genetic malware analysis dissecting binaries into code \"genes\" to trace malware lineage. |\n| [MalShare](https://malshare.com/) | — | Web | Free community malware repository for uploading, searching and downloading samples. |\n| [vx-underground](https://vx-underground.org/) | — | Web | Largest open collection of malware source code, samples and research papers. |\n| [Malpedia](https://malpedia.caad.fkie.fraunhofer.de/) | — | Web | Fraunhofer FKIE's curated malware family intelligence database for family identification. |\n| [YARAify](https://yaraify.abuse.ch/) | — | Web | Scans files against a large repository of YARA rules to hunt malware across samples. |\n| [OpenCTI](https://github.com/OpenCTI-Platform/opencti) | 10k | TypeScript | Open-source platform for managing CTI knowledge and observables, built on STIX2. |\n| [IntelOwl](https://github.com/intelowlproject/IntelOwl) | 5k | Python | Open-source platform to enrich and manage threat intelligence at scale via a unified API. |\n| [Cortex](https://github.com/TheHive-Project/Cortex) | 2k | Scala | Engine for analyzing security observables (IPs, emails, URLs, files, hashes) at scale. |\n| [Validin](https://www.validin.com/) | — | Web | Pivots across historical DNS, SSL certs and header/favicon hashes to map malicious infra. |\n| [JARM](https://github.com/salesforce/jarm) | 1k | Python | Active TLS server fingerprinting to group and identify servers (including C2). ⚠️ |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 🧅 Dark Web \u0026 Paste Sites\n\nSearch Tor hidden services, paste dumps and leak archives for selectors tied to a target.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [OnionSearch](https://github.com/megadose/OnionSearch) | 2k | Python | Scrapes URLs from multiple dark-web search engines for a given keyword. |\n| [Ahmia](https://ahmia.fi/) | 1k | Python | Search engine that indexes and lists .onion hidden services on the Tor network. |\n| [Intelligence X](https://intelx.io/) | — | — | Search engine and archive for leaks, breaches, the dark web, document repos and historical web data. |\n| [psbdmp](https://psbdmp.ws/) | — | — | Searchable archive of deleted and public Pastebin dumps for leaked emails, credentials and data. |\n| [Pastebin](https://pastebin.com/) | — | — | Public paste host frequently used to dump leaks; searchable via Google dorks for selectors. |\n| [DarkOwl](https://www.darkowl.com/) | — | — | Commercial darknet content platform indexing Tor, I2P and paste data for breach and threat monitoring. |\n| [TorBot](https://github.com/DedSecInside/TorBot) | 5k | Python | Dark web OSINT crawler mapping .onion link relationships and extracting page metadata. |\n| [OnionScan](https://github.com/s-rah/onionscan) | 3k | Go | Scans Tor hidden services for OPSEC leaks that can deanonymize operators. ⚠️ |\n| [TorCrawl.py](https://github.com/MikeMeliz/TorCrawl.py) | 539 | Python | Crawls and extracts regular or .onion pages through Tor with JSON/SQLite export. |\n| [darc](https://github.com/JarryShaw/darc) | 234 | Python | Darkweb crawler using requests and Selenium to fetch, render and screenshot sites. |\n| [PasteHunter](https://github.com/kevthehermit/PasteHunter) | 1k | Python | Scans Pastebin, Gist and ~100 paste sites against YARA rules for exposed secrets. |\n| [pystemon](https://github.com/cvandeplas/pystemon) | 335 | Python | Monitors Pastebin-alike sites for regex/keyword hits and stores or alerts on pastes. |\n| [pwndb](https://github.com/davidtavarez/pwndb) | 1k | Python | CLI tool to search leaked credentials via the pwndb onion service over Tor. ⚠️ |\n| [Haystak](https://haystak.com/) | — | Web | Hosted Tor search engine indexing 1.5B+ .onion pages with free and premium tiers. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 🏛️ Business, Records \u0026 Archives\n\nCorporate registries, leak archives, financial filings and web time machines for following people, money and entities.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Aleph (OCCRP)](https://aleph.occrp.org/) | 2k | Python | Search engine over leaks, public records and corporate datasets for following people, money and entities. |\n| [OpenCorporates](https://opencorporates.com/) | — | — | The largest open database of companies — directors, registrations and filings across jurisdictions. |\n| [ICIJ Offshore Leaks](https://offshoreleaks.icij.org/) | — | — | Searchable database from the Panama/Paradise/Pandora Papers linking offshore entities and officers. |\n| [SEC EDGAR](https://www.sec.gov/edgar) | — | — | US Securities \u0026 Exchange Commission filings — company financials, ownership and disclosure records. |\n| [UK Companies House](https://find-and-update.company-information.service.gov.uk/) | — | — | Free official UK registry of companies, officers, filings and ownership. |\n| [GLEIF LEI Search](https://search.gleif.org/) | — | — | Global Legal Entity Identifier index for verifying and linking legal entities worldwide. |\n| [LittleSis](https://littlesis.org/) | — | — | Free database mapping connections between powerful people, companies and institutions. |\n| [Wayback Machine](https://web.archive.org/) | — | — | Internet Archive's web time machine for viewing and citing historical snapshots of web pages. |\n| [archive.today](https://archive.ph/) | — | — | On-demand web-page archiver that captures and freezes a snapshot of a URL for evidence. |\n| [OpenSanctions](https://www.opensanctions.org/) | — | Web | Consolidated global sanctions, PEP and watchlist database with search and API. |\n| [North Data](https://www.northdata.com/) | — | Web | Free aggregator of European company data (21+ countries) with officer/shareholder networks. |\n| [Pappers](https://www.pappers.fr/) | — | Web | Free French company register (SIREN, accounts, beneficial owners, BODACC notices). |\n| [EU BRIS](https://e-justice.europa.eu/topics/registers-business-insolvency-land/business-registers-search-company-eu_en) | — | Web | Official EU portal interconnecting all member-state business registers. |\n| [Unternehmensregister](https://www.unternehmensregister.de/en) | — | Web | Germany's central company register: filings, financial accounts and Handelsregister data. |\n| [Rusprofile](https://www.rusprofile.ru/) | — | Web | Free profiles of Russian legal entities (EGRUL data, directors, finances, court cases). |\n| [Zauba Corp](https://www.zaubacorp.com/) | — | Web | India company research platform with directors, charges and MCA filings. |\n| [Tianyancha](https://www.tianyancha.com/) | — | Web | Large Chinese company-information platform (ownership, shareholders, litigation). |\n| [ACRA BizFile](https://www.bizfile.gov.sg/) | — | Web | Singapore's official business registry portal for company searches and profiles. |\n| [Equasis](https://www.equasis.org/) | — | Web | Free maritime database of vessel ownership, managers and safety/inspection history. |\n| [CourtListener](https://www.courtlistener.com/) | — | Web | Free archive of millions of US court opinions plus PACER (RECAP) federal dockets. |\n| [judyrecords](https://www.judyrecords.com/) | — | Web | Free full-text search across hundreds of millions of US court cases. |\n| [Sayari](https://sayari.com/) | — | Web | Commercial corporate-network and trade-risk graph across global registries. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n\n## 🧩 Browser Extensions \u0026 Bookmarklets\n\nRun lookups, reverse-image searches and page capture without leaving the browser.\n\n| Tool | Stars | Language | Description |\n|------|-------|----------|-------------|\n| [Sputnik](https://github.com/Tek-Yum/Sputnik-OSINT-Extension) | 600 | JavaScript | Context-menu OSINT lookups for IPs, domains, hashes, emails and usernames. |\n| [Web Archives](https://github.com/dessant/web-archives) | 2k | JavaScript | View archived/cached versions of a page across Wayback, Google, Bing and more. |\n| [Search by Image](https://github.com/dessant/search-by-image) | 4k | JavaScript | Reverse-image search any picture across many engines from the context menu. |\n| [RevEye](https://github.com/steven2358/reveye) | 92 | JavaScript | One-click reverse image search via Google, Bing, Yandex, TinEye and Baidu. |\n| [Vortimo OSINT Tool](https://www.vortimo.com/) | — | Web | Captures, tags and enriches visited pages into a local searchable evidence store. |\n| [Distill Web Monitor](https://distill.io/) | — | Web | Monitors pages or page regions for changes and triggers alerts. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n## 📚 Datasets, Lists \u0026 APIs\n\nCurated tool catalogs, training resources and machine-readable datasets that feed and structure OSINT workflows.\n\n| Tool | Stars | Description |\n|------|-------|-------------|\n| [Awesome OSINT](https://github.com/jivoi/awesome-osint) | 30k | The canonical community-maintained curated list of OSINT tools and resources by category. |\n| [Trace Labs OSINT VM](https://github.com/tracelabs/tlosint-live) | 833 | Kali-based live OSINT operating system preloaded with investigation tools for missing-persons CTFs. |\n| [Bellingcat Online Investigation Toolkit](https://bellingcat.gitbook.io/toolkit) | — | Bellingcat's regularly updated, categorized toolkit of investigation tools and guides. |\n| [osint-tool-database](https://github.com/tomvaillant/osint-tool-database) | — | Machine-readable structured dataset of OSINT tools for powering apps and finders. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 🪦 Deprecated Tools Graveyard\n\n| Dead Tool | Why | Use Instead |\n|-----------|-----|-------------|\n| twint | Archived Mar 2023, broken by X API changes | snscrape, official X API. |\n| Datasploit | Archived, no longer maintained | SpiderFoot, Recon-ng. |\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n---\n\n## Disclosure\n\nAny referral or affiliate links are clearly relevant to OSINT work, and all tools are included based on merit — affiliation does not influence placement or rankings.\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme\"\u003e⬆ back to top\u003c/a\u003e)\u003c/p\u003e\n\n## 🔗 Related Awesome Lists\n\n| List | Description |\n|------|-------------|\n| [awesome-scrapers](https://github.com/edwardtay/awesome-scrapers) | Scrapers, crawlers and extraction tooling — the collection layer that feeds OSINT pipelines. |\n| [awesome-ai-apis](https://github.com/edwardtay/awesome-ai-apis) | AI APIs, tools, frameworks and platforms for building intelligent applications. |\n| [awesome-robotics](https://github.com/edwardtay/awesome-robotics) | Robotics frameworks, simulators and platforms. |\n| [awesome-web3-ai](https://github.com/edwardtay/awesome-web3-ai) | Web3 x AI tools, agent frameworks and protocols. |\n| [awesome-compute](https://github.com/edwardtay/awesome-compute) | GPU and compute platforms for training and inference. |\n\n## Contributing\n\nContributions welcome! Please read the [contribution guidelines](CONTRIBUTING.md) first.\n\n- Add tools you've actually used or evaluated\n- Include star count and language where applicable\n- Note if a tool is unmaintained (last commit \u003e1 year ago)\n- Commercial tools/services are fine but must be clearly labeled\n\nUse OSINT responsibly: respect platform terms, privacy law and local regulations. This list is for lawful research, journalism, due diligence and defensive security.\n\n\nTo the extent possible under law, [Edward Tay](https://github.com/edwardtay) has waived all copyright and related or neighboring rights to this work.\n","projects_url":"https://awesome.ecosyste.ms/api/v1/lists/edwardtay%2Fawesome-osint/projects"}