SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

In-depth attack surface mapping and asset discovery

The most unusual OSINT guide you've ever seen. The repository is intended for bored professionals only. PRs are welcome!

Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.

Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬

A repository to monitor attack vectors from state-backed information operations

A passive subdomain finder

Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers

Querytool is an OSINT framework based on Google Spreadsheet. With this tool you can perform complex search of terms, people, email addresses, files and many more.

Monitor twitter stream from nodejs electron

Popular OSINT framework for online investigations.

bingip2hosts is a Bing.com web scraper that discovers websites by IP address

Collection of Most Useful tools for Social Media Intelligence

GitOSINT: The OSINT Powerhouse for Discord. The go-to Discord bot for Open Source Intelligence (OSINT).

An OSINT focused tool made with Nodejs!

Script to modify a Parrot OS distro with the most popular OSINT tools

📸 an Instagram tracking script that logs any changes to an Instagram account (followers, following, posts, and bio) written in Python.

OSINT Bookmarks for Firefox / Chrome / Edge / Safari

Seekolver is a tool focused on attack-surface mapping. It performs searches for subdomains associated with root domains and root domains associated with organisations using open sources, additionally, it resolves these domains and subdomains in search of HTTP and HTTPS services and then filters the information obtained based on their response.