Projects
View on GitHub Awesome OSINT
## 💬 Social Media Intelligence (SOCMINT)
## 🖼️ Image & Reverse Image Search
## 🗺️ Geolocation & GEOINT
## 📚 Datasets, Lists & APIs
edwardtay/awesome-OSINT
edwardtay/awesome-OSINT has 31 GitHub stars and 21 forks. GitHot measured 0 stars in 24 hours and +1 in 7 days. Last checked 2026-11-15 05:34 UTC. Last push 2026-11-02.
Measured star growth
- in 24h
- 0
- in 7 days
- +1
- in 15 days
- Collecting history
- in 1 month
- Collecting history
Net star changes over overlapping periods, not daily totals. Missing measurements are left blank. Stars measure attention, not software quality.
About
A curated list of 360+ OSINT tools: people search, domains, social media, geolocation, breach data, forensics, and frameworks
SecurityREADME.md
Original
Awesome OSINT 
A curated list of open-source intelligence (OSINT) tools: people search, domains, social media, geolocation, breach data, and investigation frameworks.
⚠️ = known maintenance concern; verify repository status before adoption.
How to Choose
| I need to... | Start here |
|---|---|
| Find someone by username | Username & People Search |
| Tie an email to leaked accounts | Email & Breach Data |
| Map a domain's attack surface | Domain, DNS & Infrastructure |
| Search the whole internet for exposed hosts | Internet Scan Engines & Attack Surface |
| Geolocate a photo | Geolocation & GEOINT |
| Reverse-search an image or face | Image & Reverse Image Search |
| Check breach exposure | Email & Breach Data |
| Investigate a phone number | Phone & Identity |
| Trace a wallet | Crypto / Blockchain OSINT |
| Track a flight/ship | Transport Tracking |
| Triage a malicious file/URL/IP | Threat Intel & Malware OSINT |
| Run one platform that does it all | Frameworks & All-in-One |
Contents
- 🧰 Frameworks & All-in-One
- 🕵️ Username & People Search
- 📧 Email & Breach Data
- 🌐 Domain, DNS & Infrastructure
- 📡 Internet Scan Engines & Attack Surface
- ☁️ Cloud, IoT & Web Recon
- 💬 Social Media Intelligence (SOCMINT)
- 📨 Messaging-App OSINT
- 🖼️ Image & Reverse Image Search
- 🔬 Image, Video & Media Forensics
- 🗺️ Geolocation & GEOINT
- 📱 Phone & Identity
- 🔎 Google Dorking & Search Operators
- ✈️ Transport, RF & SIGINT
- ⛓️ Crypto / Blockchain OSINT
- 🦠 Threat Intel & Malware OSINT
- 🧅 Dark Web & Paste Sites
- 🏛️ Business, Records & Archives
- 🧩 Browser Extensions & Bookmarklets
- 📚 Datasets, Lists & APIs
- 🪦 Deprecated Tools Graveyard
🧰 Frameworks & All-in-One
Heavyweight platforms that orchestrate dozens of OSINT modules, transforms and link-analysis into one investigation surface.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Maltego | n/a | n/a | Visual link-analysis platform mapping relationships between people, domains, infrastructure and social accounts via transforms. |
| SpiderFoot | 24k | Python | Automated OSINT engine with 200+ modules correlating data on IPs, domains, emails, names and more. |
| Recon-ng | 6k | Python | Full-featured modular web reconnaissance framework with a Metasploit-style interface. |
| OSINT Framework | 9k | JavaScript | Web directory tree linking OSINT resources by data type, the canonical jumping-off map for investigators. |
| IntelTechniques Tools | n/a | n/a | Michael Bazzell's curated online search tools and workflows for people, email, username and domain investigations. |
| Mr.Holmes | 4k | Python | All-in-one information-gathering framework for usernames, phone numbers and domains. |
| OSINT-SPY | 2k | Python | Performs OSINT on emails, domains, IPs, devices and Bitcoin addresses from a single CLI. ⚠️ |
| Datasploit | 3k | Python | Archived but influential OSINT framework that aggregated intel on domains, emails, usernames and phones. ⚠️ |
| Mitaka | 2k | TypeScript | Browser extension that extracts and pivots IOCs (IPs, hashes, domains) to 70+ search engines via right-click. |
| Hunchly | n/a | n/a | Commercial web-capture tool that automatically logs, hashes and indexes every page visited during an investigation. |
| Osmedeus | 7k | Go | Workflow engine for automated reconnaissance and attack-surface mapping. |
| FinalRecon | 3k | Python | All-in-one web recon tool (whois, DNS, headers, crawl, Wayback, subdomains). |
| sn0int | 3k | Rust | Semi-automatic OSINT framework and package manager for entity-graph recon. |
| OWASP Maryam | 1k | Python | Modular open-source framework for web-based OSINT and data mining. Archived. ⚠️ |
| maltego-trx | 298 | Python | Official library for writing custom Maltego transforms and TDS servers. Archived. ⚠️ |
| gOSINT | 674 | Go | Modular CLI OSINT framework for emails, PGP, Telegram and more. ⚠️ |
| Tsurugi Linux | n/a | Distro | DFIR/OSINT-focused Linux distribution with a dedicated OSINT tool set. |
| CSI Linux | n/a | Distro | Investigation-focused Linux platform bundling OSINT, DFIR and dark-web tooling. |
🕵️ Username & People Search
Pivot a username, real name or handle into a person's accounts and public-records footprint across the web.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Sherlock | 95k | Python | Hunts a username across hundreds of social networks and websites to find a person's accounts. |
| Maigret | 40k | Python | Builds a dossier on a person by username from 3000+ sites, extracting profile details and relations. |
| GHunt | 20k | Python | Investigates Google accounts and objects, emails, profiles, reviews, photos, from a Gmail address or ID. |
| blackbird | 10k | Python | Fast OSINT username and email search across hundreds of sites with WhatsMyName metadata. ⚠️ |
| socialscan | 2k | Python | Checks email and username availability/registration on online platforms with accurate signup-flow queries. |
| WhatsMyName | 2k | Python | Community-driven username enumeration project and web app with a large, validated site list. |
| Creepy | 2k | Python | Geolocation OSINT tool that gathers location data from a target's social-media posts and image metadata. ⚠️ |
| FastPeopleSearch | n/a | n/a | Free US people-search returning addresses, phones, relatives and associates from public records by name. |
| TruePeopleSearch | n/a | n/a | Free US public-records lookup for current/past addresses, phone numbers and known relatives. |
| IDCrawl | n/a | n/a | People-search aggregator that surfaces social profiles, usernames and public records by name or handle. |
| Namechk | n/a | n/a | Instantly checks a username and domain across many social networks for availability/registration. |
| Snoop | 4k | Python | Username search across 5400+ sites with its own web DB and IP/geo plugins. |
| Nexfil | 3k | Python | Finds profiles by username across 350+ sites with low false positives. ⚠️ |
| Tookie-osint | 3k | Python | Discovers social media accounts from a username, Sherlock-style. |
| Octosuite | 2k | Python | Terminal toolkit for GitHub account/repo/org OSINT (Bellingcat). |
| CrossLinked | 2k | Python | Enumerates valid LinkedIn employee names via search-engine scraping. ⚠️ |
| socid-extractor | 1k | Python | Extracts account IDs/metadata from profile pages across 130+ sites. |
| GitFive | 1k | Python | Tracks down GitHub users; pivots email to account and dumps SSH keys. ⚠️ |
| Profil3r | 669 | Python | Finds a person's accounts and emails, with data-leak alerting. ⚠️ |
| Marple | 333 | Python | Collects profile links by username through 10+ search engines. |
| WebMii | n/a | Web | People-search engine aggregating public web profiles by name with "PeopleRank". |
| That'sThem | n/a | Web | Free people search with reverse email/phone/address lookups. |
| Spokeo | n/a | Web | People search aggregating 12B+ records by name, phone, email, or address. |
| Predicta Search | n/a | Web | Reverse email/phone/username/name lookup to 100+ social profiles. |
📧 Email & Breach Data
Tie an email to accounts, leaked credentials and breach corpora, from registration enumeration to dump search.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Have I Been Pwned | n/a | n/a | Checks whether an email or phone appears in known data breaches; offers a domain-monitoring API. |
| Holehe | 15k | Python | Checks whether an email is registered on dozens of sites using password-reset and signup flows. ⚠️ |
| h8mail | 5k | Python | Email OSINT and breach-hunting tool that pulls passwords from local dumps and online services. ⚠️ |
| Mosint | 6k | Go | Fast automated email OSINT tool aggregating breach checks, related emails and social lookups. ⚠️ |
| breach-parse | 2k | Shell | Parsing tool for the COMB/large credential dumps to extract emails and passwords for a target domain. ⚠️ |
| buster | 1k | Python | Advanced email OSINT tool that finds linked accounts, breaches and social profiles for an address. ⚠️ |
| Dehashed | n/a | n/a | Searchable breach-data engine to query emails, usernames, passwords, names and IPs across leaks. |
| Snusbase | n/a | n/a | Commercial breach-database search across billions of leaked records by email, hash, IP or name. |
| LeakCheck | n/a | n/a | Data-breach search engine and API for checking emails, usernames and keywords against leak corpora. |
| EmailRep | n/a | n/a | Email reputation service returning risk signals, linked profiles and breach appearance for an address. |
| Hunter.io | n/a | n/a | Finds and verifies professional email addresses for a domain and reveals common address patterns. |
| check-if-email-exists | 10k | Rust | Verifies whether an email address exists without sending mail (SMTP probe). |
| WhatBreach | 2k | Python | Finds breaches, databases and pastes tied to an email address. ⚠️ |
| EmailHarvester | 993 | Python | Retrieves a domain's email addresses from multiple search engines. |
| MailFinder | 603 | Python | OSINT tool to find an email address from a first and last name. |
| EmailFinder | 431 | Python | Searches a domain's emails through search engines. ⚠️ |
| XposedOrNot | n/a | Web | Free data-breach search engine and open API for emails and domains. |
| BreachDirectory | n/a | Web | Searches public breaches by email/username; free tier plus API. |
| Hudson Rock Cavalier | n/a | Web | Free infostealer-infection lookup for emails, domains and usernames. |
| LeakPeek | n/a | Web | Hosted breach search over 8.2B+ records by email, username, password, domain or name. |
| Leak-Lookup | n/a | Web | Breach search across thousands of dumps; email/username/IP/phone/domain fields. |
| LeakRadar | n/a | Web | Stealer-log/combolist engine indexing 507B+ credentials; free search, paid reveal. |
| Whiteintel | n/a | Web | Dark-web/infostealer credential monitoring with free domain-compromise search. |
| ransomware.live | 334 | Python | Ransomware gang tracker scraping data-leak sites; API and live victim map. |
| RansomLook | 629 | Python | Open-source aggregator tracking 580+ ransomware groups and their leak-site posts. |
| DDoSecrets | n/a | Web | Nonprofit archive publishing/searching 100M+ hacked and leaked documents. |
🌐 Domain, DNS & Infrastructure
Footprint a target's domains, subdomains, DNS, certificates and tech stack from passive public sources.
| Tool | Stars | Language | Description |
|---|---|---|---|
| OWASP Amass | 15k | Go | In-depth attack-surface mapping and external asset discovery via passive and active DNS reconnaissance. |
| theHarvester | 18k | Python | Gathers emails, names, subdomains, IPs and URLs for a domain from search engines and certificate logs. |
| subfinder | 15k | Go | Fast passive subdomain enumeration tool that pulls from many online sources via their APIs. |
| Sublist3r | 11k | Python | Classic subdomain enumeration tool using search engines, VirusTotal, Netcraft and DNSdumpster. ⚠️ |
| dnstwist | 6k | Python | Domain-permutation engine that detects typosquats, phishing and brand-impersonation domains. ⚠️ |
| knockpy | 4k | Python | Subdomain scanner that enumerates hostnames via wordlists and resolves them with reporting. |
| assetfinder | 4k | Go | Quickly finds domains and subdomains related to a target from multiple passive sources. ⚠️ |
| crt.sh | n/a | n/a | Certificate Transparency log search that surfaces subdomains via every TLS certificate issued for a domain. |
| DNSDumpster | n/a | n/a | Free domain research tool mapping a domain's hosts, DNS records and network as a visual diagram. |
| SecurityTrails | n/a | n/a | Historical DNS, WHOIS and domain/IP intelligence platform with deep records and an API. |
| WHOIS / RDAP | n/a | n/a | Look up registration details, registrar, dates and contacts for domains and IP allocations. |
| ViewDNS.info | n/a | n/a | Free toolbox of DNS, WHOIS, reverse-IP, IP-history and port-check utilities in one place. |
| BuiltWith | n/a | n/a | Profiles the technology stack behind a website, CMS, analytics, frameworks, hosting and more. |
| Wappalyzer | n/a | n/a | Technology profiler identifying the CMS, frameworks, analytics and servers a website is built with. |
| Netlas.io | n/a | n/a | Internet-wide scan and attack-surface search engine for hosts, domains, certificates and responses. |
| dnsx | 3k | Go | Fast multi-purpose DNS toolkit for bulk A/AAAA/CNAME/PTR queries and brute-force. |
| shuffledns | 2k | Go | massdns wrapper for active subdomain brute-force and resolution with wildcard filtering. |
| massdns | 4k | C | High-performance stub DNS resolver for bulk lookups (millions of names/sec). |
| puredns | 2k | Go | Fast domain resolver and subdomain bruteforcer that filters wildcards and poisoned entries. |
| Findomain | 4k | Rust | Cross-platform subdomain enumerator pulling from cert transparency and dozens of sources. |
| chaos-client | 892 | Go | Client for ProjectDiscovery's Chaos dataset of internet-wide DNS/subdomain data. |
| asnmap | 1k | Go | Maps an organization's network ranges/CIDRs from ASN, org name, IP, or domain. |
| mapcidr | 1k | Go | CIDR/IP range utility for slicing, expanding, and aggregating network ranges. |
| cero | 699 | Go | Scrapes domain names directly from TLS certificates of live hosts at scale. ⚠️ |
| CTFR | 2k | Python | Enumerates HTTPS subdomains by abusing Certificate Transparency logs (no brute-force). ⚠️ |
| hakrevdns | 2k | Go | Small, fast tool for performing reverse DNS (PTR) lookups en masse. |
| dnsgen | 1k | Python | Generates intelligent subdomain name permutations from a seed wordlist. ⚠️ |
| dnsrecon | 3k | Python | Versatile DNS recon: zone transfers, brute-force, SRV/PTR enumeration, cache snooping. |
| Fierce | 2k | Python | DNS reconnaissance scanner for locating non-contiguous IP space and hostnames. ⚠️ |
| Gobuster | 14k | Go | Brute-force tool with DNS subdomain, vhost, and directory/file enumeration modes. |
| alterx | 1k | Go | Pattern-based subdomain wordlist/permutation generator for active enumeration. |
| Hurricane Electric BGP Toolkit | n/a | Web | Web portal for ASN, BGP prefix, peering, and reverse-IP intelligence lookups. |
| RapidDNS | n/a | Web | Free DNS query service for reverse-IP, subdomain, and shared-host lookups. |
📡 Internet Scan Engines & Attack Surface
Search engines for the whole internet: query exposed hosts, devices, banners and certificates without scanning yourself.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Shodan | n/a | n/a | Search engine for internet-connected devices, exposed services, banners, ICS/IoT and vulnerabilities. |
| Censys Search | n/a | n/a | Continuously updated internet-wide scan dataset for hosts and certificates with rich filtering and an API. |
| ZoomEye | n/a | n/a | Internet-wide search engine mapping exposed hosts, devices and services with banner/fingerprint data. |
| FOFA | n/a | n/a | Cyberspace search engine indexing internet-exposed assets, services and fingerprints for recon. |
| BinaryEdge | n/a | n/a | Internet-scanning data platform exposing open ports, services, leaked data and attack-surface signals. |
| Onyphe | n/a | n/a | Cyber-defense search engine correlating internet scan, threat and OSINT data for an IP or domain. |
| GreyNoise | n/a | n/a | Tells you whether an IP is mass-internet background noise or a targeted threat, cutting alert fatigue. |
| nuclei | 33k | Go | Community-powered, YAML-template vulnerability and exposure scanner. |
| masscan | 26k | C | Asynchronous TCP port scanner capable of scanning the entire internet in minutes. |
| RustScan | 21k | Rust | Modern port scanner that scans all 65k ports in seconds and pipes into Nmap. |
| naabu | 6k | Go | Fast SYN/CONNECT port scanner built for piping into attack-surface workflows. |
| httpx | 11k | Go | Fast multi-purpose HTTP probing toolkit for fingerprinting live web servers at scale. |
| ZMap | 6k | C | Fast single-packet network scanner designed for internet-wide research surveys. |
| uncover | 3k | Go | Queries Shodan, Censys, FOFA, Hunter and Quake from one CLI to find exposed hosts. |
| Smap | 3k | Go | Drop-in Nmap replacement returning port/CVE data passively via Shodan's free API. |
| nrich | 1.4k | Rust | Enriches a list of IPs with open ports and known CVEs using Shodan's InternetDB. |
| IVRE | 4k | Python | Self-hosted network recon framework/database for building your own Shodan-like map. |
| reconFTW | 8k | Shell | Automated recon orchestrator chaining dozens of subdomain, scan, and vuln tools. |
| Sn1per | 12k | Shell | Automated pentest and attack-surface management platform with recon/scan modules. |
| Criminal IP | n/a | Web | Search engine for exposed devices, open ports, and internet-facing asset intelligence. |
| FullHunt | n/a | Web | Attack-surface database/search engine to discover and monitor exposed assets. |
☁️ Cloud, IoT & Web Recon
Find exposed buckets, cloud assets, internet-connected devices, and a site's technology and archived footprint.
| Tool | Stars | Language | Description |
|---|---|---|---|
| S3Scanner | 3k | Go | Scans for open/misconfigured buckets across S3-compatible APIs and dumps permissions. |
| cloud_enum | 2k | Python | Multi-cloud OSINT tool enumerating public AWS, Azure, and GCP resources. |
| CloudBrute | 1k | Go | Finds a company's files/apps/infrastructure across the major cloud providers. ⚠️ |
| cloudlist | 1k | Go | Lists assets/hostnames from multiple cloud providers using their APIs. |
| GCPBucketBrute | 574 | Python | Enumerates Google Storage buckets and checks for privilege-escalation paths. ⚠️ |
| GrayhatWarfare | n/a | Web | Searchable index of public S3/Azure/GCP buckets and exposed files. |
| ScoutSuite | 8k | Python | Multi-cloud security auditing tool that surfaces misconfigured/exposed assets. ⚠️ |
| Kamerka | 874 | Python | Maps exposed IoT devices, webcams, and ICS on a map using Shodan/Censys/BinaryEdge. |
| Insecam | n/a | Web | Directory of internet-accessible, unsecured IP cameras worldwide. |
| webanalyze | 1k | Go | Go port of Wappalyzer for fast mass web technology fingerprinting. |
| WhatWeb | 7k | Ruby | Web scanner identifying CMS, frameworks, analytics IDs, and 1800+ technology plugins. |
| FavFreak | 1k | Python | Pivots on favicon.ico hashes to discover related assets/IPs via Shodan. ⚠️ |
| waybackurls | 5k | Go | Fetches all URLs the Wayback Machine knows about for a domain. ⚠️ |
| gau | 5k | Go | Pulls known URLs from Wayback, Common Crawl, OTX, and URLScan for a target. |
| waymore | 3k | Python | Deep archive recon across Wayback, Common Crawl, OTX, URLScan and VirusTotal. |
| hakrawler | 5k | Go | Fast web crawler for discovering endpoints, assets, and URLs on a target. |
| web-check | 35k | TypeScript | All-in-one website OSINT dashboard: DNS, headers, tech stack, certs, archives, and more. |
Scrape, archive and analyze posts, profiles and channels across the major social and messaging platforms.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Social-Analyzer | 24k | Python | API/CLI/web tool to find and analyze a person's profiles across 1000+ social media sites. |
| Osintgram | 15k | Python | Interactive Instagram OSINT tool to pull followers, emails, phones, tagged photos and locations. |
| Instaloader | 9k | Python | Downloads Instagram posts, stories, profile metadata and comments for archival and analysis. |
| snscrape | 5k | Python | Scrapes social networks (X/Twitter, Telegram, Reddit, etc.) without API keys for posts and profiles. ⚠️ |
| toutatis | 4k | Python | Extracts obfuscated emails, phone numbers and account info from Instagram profiles. ⚠️ |
| Telepathy | 1k | Python | Telegram OSINT toolkit for archiving channels and analysing members, messages and forwards. |
| twint | 16k | Python | Once-popular Twitter scraping tool needing no API, now deprecated/broken after X API changes. ⚠️ |
| Telegago | n/a | n/a | Google custom search engine for discovering public Telegram channels, groups and messages. |
| TGStat | n/a | n/a | Telegram analytics and catalog for discovering channels and measuring reach and activity. |
| YouTube DataViewer | n/a | n/a | Amnesty tool extracting a YouTube video's exact upload time and thumbnails for reverse search. |
| twscrape | 3k | Python | X/Twitter scraper with account-pool auth: search, profiles, followers, tweets, retweeters. |
| Scweet | 2k | Python | Scrapes tweets, profiles and followers from X without an API key, with proxy pooling. |
| Ultimate Social Scrapers | 3k | Python | Scrapes Facebook/Instagram profile posts, photos and friend/follower lists without the API. ⚠️ |
| linkedin2username | 2k | Python | Generates likely username/email permutations for all employees of a company from LinkedIn. |
| Osintgraph | 973 | Python | Maps an Instagram target's followers/followees into Neo4j to visualize their network. |
| youtube-metadata | 518 | JavaScript | Gathers metadata for a YouTube video/playlist/channel with thumbnail reverse-search. |
| fb_friend_list_scraper | 338 | Python | Scrapes names and usernames from large Facebook friend lists without hitting rate limits. ⚠️ |
| SnapIntel | 361 | Python | Investigates Snapchat users: stories, spotlights, lenses, bitmojis and upload heatmaps. |
| youtube-geofind | 159 | JavaScript | Finds geotagged YouTube videos by channel, topic or location radius, with CSV export. |
| tik-spyder | 102 | Python | CLI that collects TikTok posts, videos and metadata via Google search for investigations. |
| reddit-user-analyser | 13 | JavaScript | Analyzes a Reddit user's activity: top subreddits, posting times and word breakdowns. ⚠️ |
| Bright Data | n/a | n/a | Commercial scraper APIs and ready-made datasets for public profiles and posts on the major social platforms. |
📨 Messaging-App OSINT
Investigate Telegram, Discord, WhatsApp and fediverse accounts, channels and groups.
| Tool | Stars | Language | Description |
|---|---|---|---|
| DiscordChatExporter | 12k | C# | Exports any Discord channel, DM, group or server history to HTML/JSON/CSV for offline review. |
| telegram-phone-number-checker | 2k | Python | Checks whether phone numbers are tied to Telegram accounts, returning username and IDs (Bellingcat). |
| Telerecon | 1k | Python | Reconnaissance framework to scrape Telegram channels/groups, map forwards and profile users. ⚠️ |
| tgscan | 715 | Java | Search engine for discovering Telegram channels, groups and chat history by keyword. ⚠️ |
| telegram-tracker | 383 | Python | Collects and analyzes messages/metadata from Telegram channels for disinformation research. |
| Masto | 274 | Python | Gathers intelligence on Mastodon users/instances and finds all accounts a user holds. ⚠️ |
| WhatsApp-OSINT | 1k | Python | Pulls WhatsApp profile pic, About/status, business verification and linked-device data from a number. |
| DiscordOSINT | 609 | n/a | Curated techniques for investigating Discord accounts, servers and bots (snowflake decoding, pivots). ⚠️ |
| doxcord | 90 | Python | Scans Discord servers for shared tracker links that leak each sender's identity. |
| tgcrawler | 19 | Python | Crawls Telegram channels by following t.me links to map channel networks. ⚠️ |
| blueskynet | 16 | JavaScript | Web app to search, analyze and CSV-export results from the Bluesky API for OSINT. ⚠️ |
Find where a photo came from, who's in it, and whether it's been manipulated: reverse search, face search and forensics.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Google Lens / Images | n/a | n/a | Reverse image search to identify objects, places and the origin of a photo across the web. |
| Yandex Images | n/a | n/a | Reverse image search engine widely regarded as strongest for faces and location matching. |
| TinEye | n/a | n/a | Reverse image search specialising in finding exact copies, edits and the oldest occurrence of an image. |
| Bing Visual Search | n/a | n/a | Microsoft's reverse image search, often complementary to Google and Yandex for Western web matches. |
| PimEyes | n/a | n/a | Facial-recognition search engine that finds other photos of a face across the public web. |
| FotoForensics | n/a | n/a | Image-manipulation analysis using Error Level Analysis and metadata to spot edits and fakes. |
| Forensically | n/a | n/a | Browser-based image forensics toolkit: clone detection, ELA, noise analysis, magnifier and metadata. |
| Karma Decay | n/a | n/a | Reverse image search for Reddit to find where and when an image was previously posted. |
| ExifTool | 1k | Perl | Reads, writes and edits metadata in images, documents and media, essential for media verification. |
| DeepFace | 24k | Python | Lightweight face recognition and facial attribute (age, gender, emotion) framework. |
| InsightFace | 30k | Python | State-of-the-art 2D and 3D face analysis (detection, recognition, alignment) toolkit. |
| face_recognition | 57k | Python | Dlib-based "world's simplest" face recognition API for Python and CLI. ⚠️ |
| CompreFace | 8k | Java | Self-hosted, dockerized open-source face recognition system with REST API. ⚠️ |
| trace.moe | 5k | JavaScript | Anime scene search that finds the show, episode, and timestamp from a screenshot. |
| SmartImage | 1k | C# | Windows desktop reverse image search aggregator (SauceNAO, IQDB, Ascii2D, trace.moe). |
| FaceCheck.ID | n/a | Web | Reverse face search that finds where a person's face appears across the public web. |
| Search4faces | n/a | Web | Facial recognition search across VK, Odnoklassniki, TikTok, and Clubhouse avatars. |
| Lenso.ai | n/a | Web | AI reverse image search sorting matches into people, places, duplicates, and related. |
| SauceNAO | n/a | Web | Reverse image search for art/anime across Pixiv, Danbooru, Gelbooru, and more. |
| ascii2d | n/a | Web | Japanese reverse image search matching by color and feature hashes. |
| IQDB | n/a | Web | Multi-service image search across booru sites (Danbooru, Konachan, Gelbooru, Sankaku). |
| ImgOps | n/a | Web | Meta-tool routing an image to many reverse-search, EXIF, and editing utilities. |
| Photo Sherlock | n/a | App | Android/iOS app for reverse image search to check if a photo is fake or stolen. |
🔬 Image, Video & Media Forensics
Detect manipulation, deepfakes and AI-generated media, and verify provenance.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Sherloq | 3k | Python | Open-source desktop image forensics suite: ELA, JPEG/quantization, noise and resampling analysis. |
| DeepfakeBench | 1k | Python | Benchmark unifying datasets and 36 state-of-the-art deepfake-detection models. ⚠️ |
| FaceForensics++ | 3k | Python | Benchmark dataset and detection code for face-manipulation methods. ⚠️ |
| InVID-WeVerify Plugin | n/a | Web | Browser-extension verification toolbox: video keyframes, magnifier, metadata, reverse search. |
| MeVer Verification Assistant | n/a | Web | CERTH service bundling tampering-detection, EXIF, GPS and reverse-search for media verification. |
| Deepware Scanner | n/a | Web | Free online scanner analyzing videos for facial-manipulation deepfakes with confidence scores. |
| Content Credentials Verify | n/a | Web | Official CAI tool to inspect C2PA provenance manifests embedded in images, video and files. |
| c2patool | 438 | Rust | Official C2PA SDK and CLI to read, verify and write content-provenance manifests. |
| Illuminarty | n/a | Web | Detector estimating whether an image is AI-generated, which model made it, and which regions. |
| ExifCleaner | 3k | TypeScript | Cross-platform GUI (ExifTool-based) to view and strip metadata from images, video and PDFs. |
| yt-dlp | 205k | Python | Feature-rich CLI downloader for thousands of sites, used to pull source video and frames. |
| AI or Not | n/a | Web | Service classifying images, audio and video as AI-generated or real, including deepfakes. |
| Reality Defender | n/a | Web | Multimodal deepfake-detection platform (web app + API/SDK) for image, video, audio and text. |
| Metadata2Go | n/a | Web | Free browser tool to view, edit and remove EXIF/metadata from images, video, audio and PDFs. |
Pin down where an image or video was captured using maps, street-level imagery, sun position and feature queries.
| Tool | Stars | Language | Description |
|---|---|---|---|
| SunCalc | n/a | n/a | Computes sun position and shadow direction for a time and place to verify or chronolocate photos. |
| Overpass Turbo | n/a | n/a | Query and visualize OpenStreetMap data to find places by feature and narrow a geolocation. |
| Mapillary | n/a | n/a | Crowdsourced street-level imagery for visual ground-truthing where Street View is absent. |
| KartaView | n/a | n/a | Open crowdsourced street-level imagery platform, an alternative source for ground-truthing locations. |
| GeoSpy | n/a | n/a | AI geolocation engine that predicts where a photo was taken from visual scene features. |
| GeoHints | n/a | n/a | Reference of country-specific visual clues, bollards, signs, plates, to narrow image geolocation. |
| Google Earth | n/a | n/a | Satellite/3D imagery with historical timeline for matching terrain, buildings and confirming a location. |
| Bellingcat ShadowFinder | 623 | Python | Estimates possible locations of a photo from a known shadow length and timestamp. |
| Wikimapia | n/a | n/a | Crowdsourced map with labelled places and points of interest useful for matching landmarks. |
| Copernicus Browser | n/a | Web | Free browser for Sentinel and Landsat satellite imagery with time-lapse and band analysis. |
| NASA Worldview | n/a | Web | Browse 1,200+ global daily satellite imagery layers, many within ~3 hours of observation. |
| Zoom Earth | n/a | Web | Live satellite and weather imagery with storm tracking, fire detection, and overlays. |
| USGS EarthExplorer | n/a | Web | Search and download Landsat, aerial photography, and satellite archive datasets. |
| OpenAerialMap | n/a | Web | Open repository of openly-licensed drone and aerial imagery searchable by location. |
| Maxar Open Data | n/a | Web | Free near-real-time high-resolution satellite imagery for major disaster events. |
| Picarta | n/a | Web | AI photo geolocation predicting where an image was taken from visual clues, no EXIF needed. |
| Shadowmap | n/a | Web | Global 3D sun and shadow simulation for any date/time, for shadow-based chronolocation. |
| PeakVisor | n/a | Web | 3D mountain and peak identification with AR overlays for terrain-based geolocation. |
| Instant Street View | n/a | Web | Jump directly to any address in Google Street View, including historical imagery. |
| Liveuamap | n/a | Web | Live interactive map of conflict and security events geolocated from open-source reporting. |
| Geograph | n/a | Web | Archive of 8M+ geotagged ground-level photos across Britain and Ireland. |
| Bellingcat OSM Search | 213 | Vue | Proximity search of OpenStreetMap features to geolocate images by nearby objects. |
| Nominatim | 5k | Python | OpenStreetMap geocoding/reverse-geocoding engine for names, addresses, and coordinates. |
| QGIS | 15k | C++ | Free open-source GIS for geospatial analysis and layering imagery, with 200+ algorithms. |
📱 Phone & Identity
Investigate a phone number's carrier, footprint and the accounts and identities linked to it.
| Tool | Stars | Language | Description |
|---|---|---|---|
| PhoneInfoga | 18k | Go | Reconnaissance framework for phone numbers, identifies carrier, line type, location and footprints. |
| ignorant | 2k | Python | Checks whether a phone number is registered on sites like Amazon, Instagram and Snapchat. ⚠️ |
| Epieos | n/a | n/a | Reverse email and phone lookup revealing linked Google info, profile photos and registered services. |
| Phonebook.cz | n/a | n/a | IntelligenceX tool listing all emails, subdomains and URLs for a domain from indexed data. |
| NumLookup | n/a | n/a | Free reverse phone lookup returning carrier, line type and registered-name details where available. |
| Sync.me | n/a | n/a | Caller-ID and reverse phone lookup crowdsourced from a large community address book. |
| libphonenumber | 18k | C++ | Google's library for parsing, validating and formatting numbers with carrier/region metadata. |
| email2phonenumber | 3k | Python | Derives a target's phone number from their email via password-reset scraping. ⚠️ |
| Moriarty-Project | 2k | Python | Phone-number intelligence: owner, spam risk, related links and socials. |
| PhoneNumber-OSINT | 907 | Python | Gathers OSINT information about a given phone number. |
| numverify | n/a | API | Phone-number validation API with carrier, line-type and location data. |
| Twilio Lookup | n/a | API | Phone validation, carrier, line type and caller-name (CNAM) lookup API. |
| Truecaller | n/a | App | Global caller-ID and spam database covering 3B+ phone numbers. |
| Spy Dialer | n/a | Web | Free anonymous reverse phone lookup returning US name/carrier data. |
🔎 Google Dorking & Search Operators
Advanced search operators and document-harvesting tools to surface exposed files, metadata and hidden pages.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Photon | 13k | Python | Fast crawler that extracts URLs, emails, files, secrets and intel from a target for OSINT. |
| Pagodo | 3k | Python | Automates Google dorking, passively scrapes GHDB dorks and runs them against a target domain. |
| FOCA | 4k | C# | Finds metadata and hidden info in documents scraped from a target site to map users and software. ⚠️ |
| Metagoofil | 1k | Python | Harvests public documents (PDF, DOC, XLS) for a domain and extracts metadata like users and paths. ⚠️ |
| Google Hacking Database (GHDB) | n/a | n/a | Exploit-DB's curated catalog of Google dork queries that surface exposed files, devices and data. |
| DorkSearch | n/a | n/a | Pre-built dork builder and library that speeds up crafting advanced Google search operators. |
✈️ Transport, RF & SIGINT
Track aircraft, ships and wireless networks in real time using ADS-B, AIS and wardriving datasets.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Flightradar24 | n/a | n/a | Live and historical flight tracking with aircraft details, routes and playback. |
| ADS-B Exchange | n/a | n/a | Unfiltered, community-fed flight tracking showing military and blocked aircraft other trackers hide. |
| FlightAware | n/a | n/a | Flight tracking and aviation data platform with history, airport activity and aircraft ownership lookups. |
| MarineTraffic | n/a | n/a | Global ship-tracking platform using AIS data with vessel details, positions and port calls. |
| VesselFinder | n/a | n/a | Real-time AIS vessel tracking with ship particulars, photos and historical voyage data. |
| OpenSky Network | n/a | n/a | Research-grade ADS-B flight dataset and API for historical and live aircraft position queries. |
| WiGLE | n/a | n/a | Crowdsourced database of wireless networks and cell towers mapped by location for wardriving OSINT. |
| dump1090 | 1k | C | Real-time ADS-B Mode S decoder for RTL-SDR with a live aircraft web map. |
| readsb | 703 | C | High-performance ADS-B decoder and feeder powering many receiver builds. |
| tar1090 | 2k | JavaScript | Web interface for live visualization of ADS-B aircraft tracks. |
| AIS-catcher | 805 | C++ | Multi-SDR AIS receiver decoding ship NMEA with a built-in map server. |
| OpenRailwayMap | n/a | Web | OSM-based worldwide map of railway tracks, signals and infrastructure. |
| Gqrx | 4k | C++ | SDR receiver with spectrum/waterfall for RTL-SDR, Airspy and HackRF. |
| SDR++ | 7k | C++ | Cross-platform modern SDR receiver supporting most popular radios. |
| Universal Radio Hacker | 13k | Python | Investigate and reverse-engineer wireless protocols from raw RF captures. Archived. ⚠️ |
| rtl_433 | 8k | C | Decodes ISM-band devices (sensors, TPMS, weather stations, key fobs). |
| SatDump | 2k | C++ | Capture and decode weather and imaging satellite downlinks. |
| Gpredict | 1k | C | Real-time satellite tracking and pass prediction. |
| Kismet | n/a | C++ | Wireless network/device detector, sniffer and WIDS for Wi-Fi, BT and SDR. |
| OpenALPR | 11k | C++ | Automatic license-plate recognition library for images and video streams. ⚠️ |
⛓️ Crypto / Blockchain OSINT
Trace wallets, transactions and entity attribution across Bitcoin, Ethereum and beyond.
For the full picture (forensics platforms, sanctions screening, incident analysis, mixer tracing), see the dedicated awesome-crypto-investigation list.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Etherscan | n/a | n/a | Block explorer for Ethereum, inspect addresses, transactions, tokens and smart contracts. |
| Blockchain.com Explorer | n/a | n/a | Bitcoin and multi-chain block explorer for tracing addresses, transactions and balances. |
| Blockchair | n/a | n/a | Multi-blockchain explorer and analytics with powerful filtering across 17+ chains. |
| Arkham Intelligence | n/a | n/a | On-chain analytics that de-anonymises wallets and labels entities to follow flows of funds. |
| Breadcrumbs | n/a | n/a | Visual blockchain investigation tool for mapping and monitoring fund flows between wallets. |
| WalletExplorer | n/a | n/a | Bitcoin wallet-clustering explorer that groups addresses and links them to known services/exchanges. |
| Chainabuse | n/a | n/a | Community scam-reporting database for crypto addresses, exchanges and fraudulent schemes. |
| OXT | n/a | n/a | Bitcoin analytics and exploration platform focused on transaction-graph and clustering research. |
| Nansen | n/a | Web | Wallet-labeling analytics with 500M+ labeled addresses for "smart money" tracking. |
| MetaSleuth | n/a | Web | Visual cross-chain fund-flow tracing of stolen/scam funds with auto-pathing to CEX/mixers. |
| MistTrack | n/a | Web | AML/sanctions tracking across 19 chains with OFAC/HMT screening and 400M+ labels. |
| Crystal Intelligence | n/a | Web | Blockchain analytics across 330+ chains for tracing illicit funds and entity screening. |
| GraphSense | 134 | Python | Open-source, self-hostable cryptoasset analytics for BTC/ETH/Tron money-flow investigation. |
| OKLink | n/a | Web | Multi-chain Web3 explorer (40+ chains) with address labels and CEX fund-flow dashboards. |
| Bubblemaps | n/a | Web | Visual token-holder analytics mapping wallet clusters to expose insider/sybil concentration. |
| Dune Analytics | n/a | Web | Community SQL/dashboard platform over 100+ chains for custom on-chain queries. |
| mempool.space | 3k | TypeScript | Open-source Bitcoin block/mempool explorer for fees, unconfirmed tx, RBF and Lightning. |
| Cielo | n/a | Web | Smart-money wallet tracking across 30+ chains with real-time Telegram/Discord alerts. |
| Bitquery | n/a | API | GraphQL/streaming API indexing 40+ chains with Coinpath money-flow tracing. |
| WalletLabels | n/a | Web | Labels 200M+ crypto addresses (exchanges, entities, contracts) via web app and API. |
| Orbit | 624 | Python | Recursively crawls a wallet's history and graphs sources, sinks and suspicious links. ⚠️ |
🦠 Threat Intel & Malware OSINT
Reputation, sandboxing and IOC sources to triage files, URLs, domains and IPs against threat data.
| Tool | Stars | Language | Description |
|---|---|---|---|
| MISP | 5.6k | PHP | Open-source threat-intelligence platform for storing, correlating and sharing indicators of compromise. |
| VirusTotal | n/a | n/a | Analyzes files, URLs, domains and IPs against dozens of AV engines and surfaces related intelligence. |
| urlscan.io | n/a | n/a | Sandboxes and screenshots a URL, recording requests, domains, certificates and resources it touches. |
| Hybrid Analysis | n/a | n/a | Free malware sandbox that detonates files and URLs and returns behavioural reports and IOCs. |
| AbuseIPDB | n/a | n/a | Community database of reported malicious IPs with abuse-confidence scores and a lookup API. |
| abuse.ch | n/a | n/a | URLhaus, MalwareBazaar and ThreatFox, free community feeds of malware samples, URLs and IOCs. |
| AlienVault OTX | n/a | n/a | Open Threat Exchange, community-shared pulses of indicators tied to campaigns and malware. |
| Pulsedive | n/a | n/a | Threat-intelligence search engine enriching and scoring indicators with feeds and risk context. |
| ThreatMiner | n/a | n/a | Free data-mining portal for pivoting on domains, IPs, hashes and malware with passive intel. |
| Maltiverse | n/a | n/a | Threat-intel platform aggregating and classifying IOCs across hundreds of feeds with an API. |
| ANY.RUN | n/a | Web | Interactive online malware sandbox for detonating samples across Windows, Linux and Android. |
| Joe Sandbox | n/a | Web | Deep automated dynamic malware/phishing analysis with behavioral reports and IOCs. |
| Hatching Triage | n/a | Web | Scalable automated malware sandbox with config extraction and a free public tier. |
| CAPE Sandbox | 4k | Python | Cuckoo-derived open-source sandbox specializing in unpacking and malware config extraction. |
| Intezer | n/a | Web | Genetic malware analysis dissecting binaries into code "genes" to trace malware lineage. |
| MalShare | n/a | Web | Free community malware repository for uploading, searching and downloading samples. |
| vx-underground | n/a | Web | Largest open collection of malware source code, samples and research papers. |
| Malpedia | n/a | Web | Fraunhofer FKIE's curated malware family intelligence database for family identification. |
| YARAify | n/a | Web | Scans files against a large repository of YARA rules to hunt malware across samples. |
| OpenCTI | 10k | TypeScript | Open-source platform for managing CTI knowledge and observables, built on STIX2. |
| IntelOwl | 5k | Python | Open-source platform to enrich and manage threat intelligence at scale via a unified API. |
| Cortex | 2k | Scala | Engine for analyzing security observables (IPs, emails, URLs, files, hashes) at scale. |
| Validin | n/a | Web | Pivots across historical DNS, SSL certs and header/favicon hashes to map malicious infra. |
| JARM | 1k | Python | Active TLS server fingerprinting to group and identify servers (including C2). ⚠️ |
🧅 Dark Web & Paste Sites
Search Tor hidden services, paste dumps and leak archives for selectors tied to a target.
| Tool | Stars | Language | Description |
|---|---|---|---|
| OnionSearch | 2k | Python | Scrapes URLs from multiple dark-web search engines for a given keyword. ⚠️ |
| Ahmia | 1k | Python | Search engine that indexes and lists .onion hidden services on the Tor network. |
| Intelligence X | n/a | n/a | Search engine and archive for leaks, breaches, the dark web, document repos and historical web data. |
| psbdmp | n/a | n/a | Searchable archive of deleted and public Pastebin dumps for leaked emails, credentials and data. |
| Pastebin | n/a | n/a | Public paste host frequently used to dump leaks; searchable via Google dorks for selectors. |
| DarkOwl | n/a | n/a | Commercial darknet content platform indexing Tor, I2P and paste data for breach and threat monitoring. |
| TorBot | 5k | Python | Dark web OSINT crawler mapping .onion link relationships and extracting page metadata. |
| OnionScan | 3k | Go | Scans Tor hidden services for OPSEC leaks that can deanonymize operators. ⚠️ |
| TorCrawl.py | 545 | Python | Crawls and extracts regular or .onion pages through Tor with JSON/SQLite export. |
| darc | 239 | Python | Darkweb crawler using requests and Selenium to fetch, render and screenshot sites. |
| PasteHunter | 1k | Python | Scans Pastebin, Gist and ~100 paste sites against YARA rules for exposed secrets. |
| pystemon | 335 | Python | Monitors Pastebin-alike sites for regex/keyword hits and stores or alerts on pastes. ⚠️ |
| pwndb | 1k | Python | CLI tool to search leaked credentials via the pwndb onion service over Tor. ⚠️ |
| Haystak | n/a | Web | Hosted Tor search engine indexing 1.5B+ .onion pages with free and premium tiers. |
🏛️ Business, Records & Archives
Corporate registries, leak archives, financial filings and web time machines for following people, money and entities.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Aleph (OCCRP) | 2k | Python | Search engine over leaks, public records and corporate datasets for following people, money and entities. |
| OpenCorporates | n/a | n/a | The largest open database of companies, directors, registrations and filings across jurisdictions. |
| ICIJ Offshore Leaks | n/a | n/a | Searchable database from the Panama/Paradise/Pandora Papers linking offshore entities and officers. |
| SEC EDGAR | n/a | n/a | US Securities & Exchange Commission filings, company financials, ownership and disclosure records. |
| UK Companies House | n/a | n/a | Free official UK registry of companies, officers, filings and ownership. |
| GLEIF LEI Search | n/a | n/a | Global Legal Entity Identifier index for verifying and linking legal entities worldwide. |
| LittleSis | n/a | n/a | Free database mapping connections between powerful people, companies and institutions. |
| Wayback Machine | n/a | n/a | Internet Archive's web time machine for viewing and citing historical snapshots of web pages. |
| archive.today | n/a | n/a | On-demand web-page archiver that captures and freezes a snapshot of a URL for evidence. |
| OpenSanctions | n/a | Web | Consolidated global sanctions, PEP and watchlist database with search and API. |
| North Data | n/a | Web | Free aggregator of European company data (21+ countries) with officer/shareholder networks. |
| Pappers | n/a | Web | Free French company register (SIREN, accounts, beneficial owners, BODACC notices). |
| EU BRIS | n/a | Web | Official EU portal interconnecting all member-state business registers. |
| Unternehmensregister | n/a | Web | Germany's central company register: filings, financial accounts and Handelsregister data. |
| Rusprofile | n/a | Web | Free profiles of Russian legal entities (EGRUL data, directors, finances, court cases). |
| Zauba Corp | n/a | Web | India company research platform with directors, charges and MCA filings. |
| Tianyancha | n/a | Web | Large Chinese company-information platform (ownership, shareholders, litigation). |
| ACRA BizFile | n/a | Web | Singapore's official business registry portal for company searches and profiles. |
| Equasis | n/a | Web | Free maritime database of vessel ownership, managers and safety/inspection history. |
| CourtListener | n/a | Web | Free archive of millions of US court opinions plus PACER (RECAP) federal dockets. |
| judyrecords | n/a | Web | Free full-text search across hundreds of millions of US court cases. |
| Sayari | n/a | Web | Commercial corporate-network and trade-risk graph across global registries. |
🧩 Browser Extensions & Bookmarklets
Run lookups, reverse-image searches and page capture without leaving the browser.
| Tool | Stars | Language | Description |
|---|---|---|---|
| Web Archives | 2k | JavaScript | View archived/cached versions of a page across Wayback, Google, Bing and more. |
| Search by Image | 4k | JavaScript | Reverse-image search any picture across many engines from the context menu. |
| RevEye | 95 | JavaScript | One-click reverse image search via Google, Bing, Yandex, TinEye and Baidu. ⚠️ |
| Vortimo OSINT Tool | n/a | Web | Captures, tags and enriches visited pages into a local searchable evidence store. |
| Distill Web Monitor | n/a | Web | Monitors pages or page regions for changes and triggers alerts. |
Curated tool catalogs, training resources and machine-readable datasets that feed and structure OSINT workflows.
| Tool | Stars | Description |
|---|---|---|
| Awesome OSINT | 31k | The canonical community-maintained curated list of OSINT tools and resources by category. |
| Trace Labs OSINT VM | 834 | Kali-based live OSINT operating system preloaded with investigation tools for missing-persons CTFs. ⚠️ |
| Bellingcat Online Investigation Toolkit | n/a | Bellingcat's regularly updated, categorized toolkit of investigation tools and guides. |
| Apify | n/a | Marketplace of ready-made scrapers (Actors) for social platforms, maps, and search results, with an API and scheduling. |
| DataForSEO | n/a | Pay-as-you-go APIs for Google SERPs, business listings, and backlink data. |
🪦 Deprecated Tools Graveyard
| Dead Tool | Why | Use Instead |
|---|---|---|
| twint | Archived Mar 2023, broken by X API changes | snscrape, official X API. |
| Datasploit | Archived, no longer maintained | SpiderFoot, Recon-ng. |
🔗 Related Awesome Lists
| List | Description |
|---|---|
| awesome-reverse-engineering | Reverse engineering tools with safety flags and maintenance data: binaries, Android, firmware, smart contracts, MCP servers. |
| awesome-scrapers | Scrapers, crawlers and extraction tooling, the collection layer that feeds OSINT pipelines. |
| awesome-ai-apis | AI APIs, tools, frameworks and platforms for building intelligent applications. |
| awesome-robotics | Robotics frameworks, simulators and platforms. |
| awesome-web3-ai | Web3 x AI tools, agent frameworks and protocols. |
| awesome-ai-infrastructure | GPU and compute platforms for training and inference. |
Contributing
Contributions welcome! Please read the contribution guidelines first.
- Add tools you've actually used or evaluated
- Include star count and language where applicable
- Note if a tool is unmaintained (last commit >1 year ago)
- Commercial tools/services are fine but must be clearly labeled
Use OSINT responsibly: respect platform terms, privacy law and local regulations. This list is for lawful research, journalism, due diligence and defensive security.
To the extent possible under law, Edward Tay has waived all copyright and related or neighboring rights to this work.
Some links are referral links.