information-gathering

sherlock-project/sherlock

Track a username's footprint across hundreds of social sites — Sherlock is a command-line OSINT tool that searches a given username across hundreds of social networks to reveal where an account exists. It's useful for investigators, red teamers, and researchers doing reconnaissance, forensics, or digital footprint checks on a target identity.

soxoj/maigret

OSINT username search across 6,000 sites, built on Sherlock — Maigret builds a profile dossier from a single username by scanning thousands of sites, extracting bios, photos, and linked accounts, then generating an HTML/PDF report with a page-recognition graph. Aimed at OSINT investigators, red teamers, and researchers who need deeper results than a basic Sherlock-style checker.

qeeqbox/social-analyzer

Finding a person's social profiles across 1000+ sites — Social Analyzer offers an API, CLI, and web app to locate a username or name across 1000+ social platforms. It uses a 0-100 rating system with multiple detection layers (OCR, metadata, patterns) to reduce false positives, and is already used by some law-enforcement agencies for OSINT investigations like cyberbullying or misinformation cases.

smicallef/spiderfoot

Automated OSINT recon with 200+ modules and built-in correlation — SpiderFoot automates OSINT gathering across 200+ modules, with a YAML-configurable correlation engine and 37 pre-defined rules to surface findings. It offers both a web UI and CLI, TOR integration, Docker support, and integrates external tools like Nmap and DNSTwist—useful for pentesters and threat intel analysts mapping attack surfaces.

HunxByts/GhostTrack

OSINT toolkit for tracking IPs, phone numbers, and usernames — GhostTrack (v2.2) is a Python OSINT tool with three menus: IP tracking (can combo with Seeker), phone number lookups, and username search across social media. Built for Linux and Termux, it suits pentesters and hobbyist OSINT researchers who want a lightweight, free info-gathering utility.

sundowndev/phoneinfoga

A Go-based OSINT toolkit for scanning and tracing phone numbers — PhoneInfoga gathers basic data like country, carrier and line type for a phone number, then chains scanners to try to find the VoIP provider or possible owner. It runs via CLI, Docker, or a REST API, making it useful for OSINT investigators and security researchers who need reconnaissance on phone numbers beyond simple lookups.

laramies/theHarvester

E-mails, subdomains and names Harvester - OSINT

megadose/holehe

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

owasp-amass/amass

OWASP's mature toolkit for mapping external attack surfaces — Amass is an OWASP project combining open source intelligence and active recon to discover subdomains, hosts, and network assets. It suits security teams and researchers doing attack surface mapping, with active development, Docker support, and a community Discord for help.

s0md3v/Photon

Incredibly fast crawler designed for OSINT.

alpkeskin/mosint

An automated e-mail OSINT tool

Tuhinshubhra/RED_HAWK

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers