515 Open source projects that are alternatives of or similar to Osint Tools

E-mails, subdomains and names Harvester - OSINT

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

Making Favicon.ico based Recon Great again !

Querytool is an OSINT framework based on Google Spreadsheets. With this tool you can perform complex search of terms, people, email addresses, files and many more.

PhoneInfoga is one of the most advanced tools to scan international phone numbers using only free resources. It allows you to first gather standard information such as country, area, carrier and line type on any international phone number. Then search for footprints on search engines to try to find the VoIP provider or identify the owner.

Pentest: Subdomains enumeration tool for penetration testers.

List of Awesome Asset Discovery Resources

In-depth Attack Surface Mapping and Asset Discovery

Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬

Information gathering tool - OSINT

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

A high performance offensive security tool for reconnaissance and vulnerability scanning

Reconnaissance tool for GitHub code search. Finds exposed API keys using pattern matching, commit history searching, and a unique result scoring system.

HostHunter a recon tool for discovering hostnames using OSINT techniques.

🏴‍☠️ Information Gathering tool 🏴‍☠️ DNS / Subdomains / Ports / Directories enumeration

🔎 Hunt down social media accounts by username across social networks

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

An OSINT tool to gather information about the real owner of a phone number

A passive subdomain finder

Enumerate information from NTLM authentication enabled web endpoints 🔎

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Semi-automatic OSINT framework and package manager

🔎 Find usernames and download their data across social media.

API, CLI & Web App for analyzing & finding a person's profile across +1000 social media \ websites (Detections are updated regularly by automated systems)

GitHub Recon — and what you can achieve with it!

Maryam: Open-source Intelligence(OSINT) Framework

🔎 Find usernames across social networks

DaProfiler allows you to create a profile on your target based in France only. The particularity of this program is its ability to find the e-mail addresses your target.

Fully automated offensive security framework for reconnaissance and vulnerability scanning

Related subdomains finder

Intelligence and Reconnaissance Package/Bundle installer.

Automated network asset, email, and social media profile discovery and cataloguing.

A tool to hunt for publicly accessible DigitalOcean Spaces

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.

OneForAll是一款功能强大的子域收集工具

XposedOrNot (XoN) tool is to search an aggregated repository of xposed passwords comprising of ~850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security.

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

Find emails of Github users

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

An advanced tool for email reconnaissance

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

Information Gathering Instagram.

Sifter aims to be a fully loaded Op Centre for Pentesters

ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

Striker is an offensive information and vulnerability scanner.

Links for the OSINT Team

A Tool for Domain Flyovers

a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc

Auto setup is a bash script compatible with Debian based distributions to install and setup necessary programs.

OnionSearch is a script that scrapes urls on different .onion search engines.

OSINT tool - gets data from services like shodan, censys etc. in one app

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Find usernames across over 170 social networks - Fast & flexible remake of sdushantha/sherlock

yotter - bash script that performs recon and then uses dirb to discover directories that might lead to information leakage

Infoga - Email OSINT

A fast GitHub stargazers information gathering tool