Skip to content
Projects

Muhib-Mehdi/OSINT-NEXUS has 46 GitHub stars and 9 forks. GitHot measured 0 stars in 24 hours and 0 in 7 days. Last checked 2026-11-09 16:39 UTC. Last push 2026-08-15.

How these counts are measured

A powerful, cross-platform Open Source Intelligence tool featuring AI-driven entity correlation, advanced graph analytics, breach intelligence, and professional reporting. Built with Python & PyQt6

Measured star growth

in 24h
0
in 7 days
0
in 15 days
Update delayed
in 1 month
Update delayed

Net star changes over overlapping periods, not daily totals. Missing measurements are left blank. Stars measure attention, not software quality.

README.md

Original

🔍 OSINT-Nexus

Next-Generation Open Source Intelligence Platform

Combining the power of passive reconnaissance with AI-driven analysis and stunning visual link exploration

Python PyQt6 AI Powered NetworkX License Platform

GitHub stars Buy Me A Coffee


Features • Installation • Screenshots • Usage • Architecture • Contributing


📋 Table of Contents


🎯 Overview

OSINT-Nexus is a powerful, cross-platform Open Source Intelligence (OSINT) gathering and visualization application. It combines the passive reconnaissance capabilities of tools like TheHarvester and SpiderFoot with the powerful visual link analysis of Maltego — enhanced with AI-powered analysis using Google Gemini and advanced graph analytics using cutting-edge algorithms.

💡 Built for security researchers, penetration testers, and intelligence analysts who need comprehensive, actionable insights from public data.


🏆 Why OSINT-Nexus?

Feature OSINT-Nexus Maltego SpiderFoot TheHarvester
Interactive Graph Visualization ✅ Force-directed ✅ Commercial ❌ Basic ❌ None
AI-Powered Analysis ✅ Gemini Integration ❌ None ❌ None ❌ None
Graph Analytics (PageRank, Louvain) ✅ Built-in ❌ None ❌ None ❌ None
Breach Intelligence ✅ HaveIBeenPwned 💰 Paid Add-on ✅ Basic ❌ None
Professional Reporting ✅ HTML/PDF/STIX ✅ PDF ✅ HTML ❌ None
Cross-Platform ✅ Windows/Linux ✅ All ✅ Web-based ✅ CLI
Open Source ✅ MIT License ❌ Proprietary ✅ MIT ✅ GPL
Price 🆓 Free 💰 $999+/year 🆓 Free 🆓 Free

✨ Features

🔍 Intelligence Gathering

Module Capabilities Input Types
Email Harvester Discover emails, names, subdomains Domain
Social Profiler Find social media accounts Username, Email
Phone Recon Carrier, location, line type Phone Number
Domain Infrastructure WHOIS, DNS, MX, NS records Domain, IP
GitHub Recon Repos, commits, collaborators Username
Breach Intelligence Password exposure, breach history Email, Domain
Image Forensics EXIF metadata, GPS extraction Domain, URL

🤖 AI-Powered Analysis

  • Entity Correlation - Automatically discover hidden relationships
  • Threat Assessment - AI-generated risk scores and narratives
  • Natural Language Queries - Ask questions in plain English
  • Executive Summaries - Auto-generate professional reports

📊 Advanced Analytics

  • Community Detection - Louvain algorithm for clustering
  • Centrality Analysis - PageRank, betweenness, closeness
  • Anomaly Detection - Statistical outlier identification
  • Path Finding - Shortest paths between entities

📄 Professional Reporting

  • HTML Reports - Beautiful, dark-themed interactive reports
  • PDF Reports - Print-ready professional documents
  • STIX 2.1 Export - CTI standard for threat sharing

📸 Screenshots

Target Scan Interface

Configure your OSINT scan parameters with an intuitive dark-mode interface

Target Scan


Interactive Graph Visualization

Explore entity relationships with force-directed graph layout and real-time analysis

Graph View


🚀 Installation

Prerequisites

Requirement Version Purpose
Python 3.10+ Runtime
pip Latest Package manager
Git Any Clone repository
Gemini API Key Optional AI features
HIBP API Key Optional Breach intelligence

Quick Start

# Clone the repository
git clone https://github.com/Muhib-Mehdi/OSINT-NEXUS.git
cd OSINT-NEXUS

# Create virtual environment
python -m venv venv

# Activate virtual environment
# Windows:
.\venv\Scripts\activate
# Linux/Mac:
source venv/bin/activate

# Install dependencies
pip install -r requirements.txt

# Run the application
python src/main.py
📦 Building Standalone Executable

Windows

# Install PyInstaller
pip install pyinstaller

# Build executable
pyinstaller build.spec

# The executable will be in dist/OSINT-Nexus/

Linux

# Install PyInstaller
pip install pyinstaller

# Build executable
pyinstaller build.spec

# Run installer (optional)
sudo ./installers/installer_linux.sh

📖 Usage

Workflow Overview

flowchart LR
    A[🎯 Enter Target] --> B[📡 Select Modules]
    B --> C[🚀 Run Scan]
    C --> D[🔗 View Graph]
    D --> E[🤖 AI Analysis]
    E --> F[📄 Export Report]
    
    style A fill:#58a6ff,color:#fff
    style B fill:#3fb950,color:#fff
    style C fill:#f0883e,color:#fff
    style D fill:#a371f7,color:#fff
    style E fill:#db61a2,color:#fff
    style F fill:#79c0ff,color:#fff

Step-by-Step Guide

  1. Create/Open Project

    • File → New Project or Ctrl+N
    • Enter project name and description
  2. Configure Target

    • Select target type (Username, Domain, Email, IP, Phone)
    • Enter target value
    • Choose data sources (Google, GitHub, Shodan, etc.)
  3. Run Scan

    • Click 🚀 Run Full Scan
    • Monitor progress in the log panel
    • Modules run in parallel for speed
  4. Explore Results

    • Switch to Graph View tab
    • Click nodes to inspect entities
    • Right-click for transforms and actions
  5. Analyze with AI

    • Configure Gemini API in Settings
    • Use natural language queries
    • Generate threat assessments
  6. Export Report

    • File → Export → HTML/PDF/STIX
    • Professional reports ready for sharing

🏗️ Architecture

graph TB
    subgraph UI["🖥️ User Interface (PyQt6)"]
        MW[Main Window]
        ST[Scan Tab]
        GT[Graph Tab]
        SD[Settings Dialog]
    end
    
    subgraph Core["⚙️ Core Engine"]
        OE[OSINT Engine]
        TP[Thread Pool]
        DB[(SQLite DB)]
    end
    
    subgraph Modules["🔌 OSINT Modules"]
        EH[Email Harvester]
        SL[Social Lookup]
        BI[Breach Intel]
        IF[Image Forensics]
        TR[Transforms]
    end
    
    subgraph Advanced["🧠 Advanced Features"]
        AI[AI Engine<br/>Gemini]
        GA[Graph Analytics<br/>NetworkX]
        RG[Report Generator]
    end
    
    MW --> ST
    MW --> GT
    MW --> SD
    ST --> OE
    OE --> TP
    TP --> Modules
    OE --> DB
    GT --> GA
    GT --> AI
    MW --> RG
    
    style UI fill:#21262d,color:#e6edf3
    style Core fill:#161b22,color:#e6edf3
    style Modules fill:#0d1117,color:#e6edf3
    style Advanced fill:#30363d,color:#e6edf3

📐 System Design Diagrams

To better understand the internal workings of OSINT-Nexus, here are some additional architectural diagrams.

🔄 Data Flow Sequence

This sequence diagram illustrates how data flows from the user input through the system components during a scan operation.

sequenceDiagram
    participant User
    participant GUI as Main Window
    participant Engine as OSINT Engine
    participant Module as Data Module
    participant DB as SQLite DB
    participant Graph as Graph View

    User->>GUI: Initiates Scan
    GUI->>Engine: start_scan(target)
    Engine->>DB: create_scan_record()
    Engine->>Module: run(target)
    activate Module
    Module->>Module: Fetch External Data
    Module-->>Engine: return ScanResult
    deactivate Module
    Engine->>DB: save_entities(results)
    Engine->>GUI: signal_scan_complete()
    GUI->>Graph: update_graph()
    Graph->>User: Display Network Visualization

🧩 Class Structure

A high-level view of the core class relationships and inheritance hierarchy.

classDiagram
    class MainWindow {
        +init_ui()
        +setup_tabs()
    }
    class OSINTEngine {
        +start_scan()
        +register_module()
    }
    class BaseModule {
        <<Abstract>>
        +run()
        +process()
    }
    class Database {
        +get_entities()
        +save_project()
    }
    class GraphView {
        +add_node()
        +apply_layout()
    }

    MainWindow *-- OSINTEngine
    MainWindow *-- Database
    MainWindow *-- GraphView
    OSINTEngine o-- BaseModule
    BaseModule <|-- EmailHarvester
    BaseModule <|-- SocialLookup
    BaseModule <|-- BreachIntel

🚦 Scan Lifecycle State Machine

The states a scan operation goes through from initiation to completion.

stateDiagram-v2
    [*] --> Idle
    Idle --> Initializing : Start Scan
    Initializing --> Running : Modules Loaded
    state Running {
        [*] --> FetchingData
        FetchingData --> Processing
        Processing --> SavingResults
        SavingResults --> FetchingData : More Targets
        SavingResults --> [*]
    }
    Running --> Completed : All Tasks Done
    Running --> Failed : Error Occurred
    Running --> Cancelled : User Abort
    Completed --> Idle
    Failed --> Idle
    Cancelled --> Idle

🔌 OSINT Modules

📧 Email Harvester

Discovers emails, names, and subdomains from target domains.

Input: Domain
Output: Emails, Names, Subdomains
Sources: Google, Bing, DuckDuckGo, LinkedIn

👤 Social Profile Lookup

Finds social media profiles across 300+ platforms.

Input: Username, Email
Output: Social profiles, Account URLs
Platforms: Twitter, Instagram, GitHub, LinkedIn, Reddit, etc.

📱 Phone Recon

Extracts carrier and location information from phone numbers.

Input: Phone Number
Output: Carrier, Country, Line Type, Valid Status

🌐 Domain Infrastructure

Comprehensive domain and IP reconnaissance.

Input: Domain, IP
Output: WHOIS, DNS records, MX, NS, Subdomains

🔓 Breach Intelligence

Checks emails against known data breaches.

Input: Email, Domain
Output: Breach records, Exposure dates, Compromised data types
API: HaveIBeenPwned

📷 Image Forensics

Extracts hidden metadata from images.

Input: Domain, URL
Output: EXIF data, GPS coordinates, Camera info, Timestamps


🤖 AI-Powered Features

⚠️ Requires Google Gemini API Key — Get yours free at aistudio.google.com

Entity Correlation

🧠 AI Analysis: "Found connection between target email and 
3 GitHub repositories. High likelihood of same individual 
based on commit patterns and timezone analysis."

Threat Assessment

Entity Risk Score Level Recommendation
[email protected] 7.2/10 High Investigate breach exposure
192.168.1.1 2.1/10 Low No immediate concerns

Natural Language Queries

Ask questions like:

  • "Show me all emails from gmail.com"
  • "Find connections between domain and GitHub accounts"
  • "What entities have the highest risk score?"

📊 Graph Analytics

Algorithms Implemented

Algorithm Purpose Academic Reference
Louvain Community detection Blondel et al. 2008
PageRank Node importance Brin & Page 1998
Betweenness Bridge identification Freeman 1977
Closeness Information spread Sabidussi 1966

Anomaly Detection

Automatically identifies:

  • 🔴 Outliers - Unusually connected entities
  • 🟡 Hubs - Central connection points
  • 🟠 Bridges - Entities connecting communities
  • ⚪ Isolated - Disconnected nodes

⚙️ Configuration

API Keys Setup

Navigate to Tools → Settings → API Keys

🔑 Google Gemini (AI Features)
  1. Visit aistudio.google.com/app/apikey
  2. Click "Create API Key"
  3. Copy and paste into OSINT-Nexus settings

Features Enabled: Entity correlation, threat assessment, NL queries, executive summaries

🔐 HaveIBeenPwned (Breach Intelligence)
  1. Visit haveibeenpwned.com/API/Key
  2. Purchase API key ($3.50/month)
  3. Enter in OSINT-Nexus settings

Features Enabled: Email breach lookup, domain breach search

🔍 Shodan (Infrastructure Scanning)
  1. Create account at shodan.io
  2. Navigate to Account → API Key
  3. Enter in OSINT-Nexus settings

Features Enabled: Open port scanning, service detection, vulnerability lookup


📄 Report Generation

Export Formats

Format Use Case Features
HTML Web sharing, presentations Interactive, dark theme, responsive
PDF Formal reports, printing Professional layout, print-ready
STIX 2.1 CTI platforms Industry standard, machine-readable

Report Contents

  • 📊 Executive Summary with statistics
  • 🔍 Entity breakdown by type
  • 🔗 Relationship mapping
  • 📈 Analytics insights
  • 🤖 AI-generated narratives (if enabled)

⌨️ Keyboard Shortcuts

Shortcut Action
Ctrl+N New Project
Ctrl+O Open Project
Ctrl+S Save Project
Ctrl+L Relayout Graph
Ctrl+0 Fit Graph to View
Ctrl++ Zoom In
Ctrl+- Zoom Out
Ctrl+Q Exit Application

🤝 Contributing

Contributions are welcome! Here's how you can help:

Development Setup

# Fork and clone
git clone https://github.com/YOUR_USERNAME/OSINT-NEXUS.git
cd OSINT-NEXUS

# Install dev dependencies
pip install -r requirements.txt

# Create feature branch
git checkout -b feature/amazing-feature

# Make changes and test
python src/main.py

# Commit and push
git commit -m "Add amazing feature"
git push origin feature/amazing-feature

Contribution Guidelines

  1. 🍴 Fork the repository
  2. 🌿 Create a feature branch
  3. 💻 Write clean, documented code
  4. ✅ Test your changes
  5. 📝 Update documentation if needed
  6. 🔄 Submit a Pull Request

Areas for Contribution

  • 🔌 New OSINT modules
  • 🤖 AI analysis improvements
  • 📊 Additional graph algorithms
  • 🌍 Internationalization
  • 📱 Mobile responsiveness
  • 🧪 Test coverage

⚖️ Legal Disclaimer

⚠️ IMPORTANT: This tool is designed for legitimate security research and authorized penetration testing only.

By using OSINT-Nexus, you agree to:

  • ✅ Only gather information you are authorized to access
  • ✅ Comply with all applicable laws and regulations
  • ✅ Use gathered information responsibly and ethically
  • ✅ Respect privacy and data protection requirements

The developers are not responsible for any misuse of this tool.


📜 License & Contact

MIT License

This project is licensed under the MIT License - see the LICENSE file for details.


👨‍💻 Author

Muhib Mehdi

GitHub Buy Me A Coffee


⭐ Star History

If you find this project useful, please consider giving it a star!

Star this repo


Made with ❤️ for the Security Community

Combining the power of AI, graph analytics, and comprehensive OSINT capabilities

Explore related projects