Ross ROSS = Recommend OSS · open-source software intelligence for agents

domain: osint

284 products, primary matches first, then adoption-weighted; health v2 shown.

ProductHealth v2StarsMaturity
sherlock-project/sherlock
Sherlock is a Python CLI tool that hunts down social media accounts by username across 400+ social networks. It is widely used for OSINT re…
7090369active
koala73/worldmonitor
World Monitor is an open-source, real-time global intelligence dashboard that aggregates news, markets, military, maritime, aviation, infra…
7384360active
Z4nzu/hackingtool
An all-in-one, menu-driven Python toolkit that aggregates 215 curated security testing tools across 21 categories such as recon, OSINT, web…
7779125active
soxoj/maigret
Maigret is a Python CLI OSINT tool that builds a dossier on a person from just a username, checking thousands of sites for accounts and ext…
9937084active
mukul975/Anthropic-Cybersecurity-Skills
A large open-source library of structured cybersecurity skills (Markdown files with YAML frontmatter) for AI coding agents, mapped to frame…
7831259active
qeeqbox/social-analyzer
Social Analyzer is an OSINT tool available as a Web App, CLI, and API that finds and analyzes a person's profile across 1000+ social media …
6023835active
SingleFile
SingleFile is an open-source browser extension for Chrome, Edge, Firefox, and Safari that saves an entire web page - including images, styl…
6722251stable
smicallef/spiderfoot
SpiderFoot is an open-source OSINT automation tool that integrates with over 200 data sources to gather and analyze intelligence about targ…
5721441active
mxrch/GHunt
GHunt is an offensive Google framework focused on OSINT, usable both as a CLI tool and as a Python library. It can gather information about…
5719425active
laramies/theHarvester
theHarvester is a Python CLI tool that gathers open-source intelligence (emails, subdomains, hostnames, IPs, names, URLs, ASNs) about a dom…
9117202active
owasp-amass/amass
OWASP Amass is a Go-based framework for in-depth attack surface mapping and external asset discovery using OSINT gathering and active recon…
8115047active
HunxByts/GhostTrack
GhostTrack is a Python-based OSINT CLI tool for gathering information about IP addresses, phone numbers, and usernames across social media.…
3014943active
projectdiscovery/subfinder
Subfinder is a fast, passive subdomain discovery tool written in Go that enumerates valid subdomains for target domains using online passiv…
9514315active
megadose/holehe
Holehe is an OSINT tool that checks whether an email address is registered on 120+ sites (Twitter, Instagram, Snapchat, etc.) by abusing th…
3214278active
Datalux/Osintgram
Osintgram is a Python-based OSINT tool for Instagram that provides an interactive shell to collect and analyze information about Instagram …
4014147active
instaloader/instaloader
Instaloader is a Python command-line tool and library for downloading pictures, videos, captions, comments, and metadata from Instagram. It…
8713240active
calesthio/Crucix
Crucix is a self-hosted OSINT intelligence terminal that aggregates 27 open-source data feeds (satellite fire detection, flight tracking, r…
5211566active
1N3/Sn1per
Sn1per is an open-source automated penetration testing and attack surface management platform that chains reconnaissance, scanning, exploit…
6311043active
BigBodyCobain/Shadowbroker
ShadowBroker is a self-hosted OSINT platform that aggregates 60+ real-time public intelligence feeds—aircraft, ships, satellites, CCTV, GPS…
8110971active
blacklanternsecurity/bbot
BBOT is a recursive, multipurpose internet scanner built in Python for automating OSINT reconnaissance, bug bounty hunting, and attack surf…
9910508active
projectdiscovery/httpx
httpx is a fast, multi-purpose HTTP toolkit written in Go that runs multiple probes (status codes, titles, TLS certificates, tech detection…
9310322active
shmilylty/OneForAll
OneForAll is a powerful Python-based subdomain collection and enumeration tool for reconnaissance. It gathers subdomains via brute forcing,…
5910029active
thewhiteh4t/seeker
Seeker is a security testing tool that hosts a fake website asking users for browser location permission, capturing GPS coordinates (longit…
729937active
OpenCTI-Platform/opencti
OpenCTI is an open-source platform for managing cyber threat intelligence knowledge, including observables, TTPs, and threat actor informat…
959854active
yogeshojha/rengine
reNgine is a self-hosted automated web reconnaissance and vulnerability scanning framework with configurable recon engines, data correlatio…
648795active
six2dez/reconftw
reconFTW is an open-source (MIT) automated reconnaissance framework written in Shell that orchestrates 80+ security tools to perform full r…
868025active
simplifaisoul/osiris
OSIRIS is an open-source, real-time global intelligence (OSINT) dashboard that aggregates live flight tracking, maritime, CCTV, seismic, fi…
587992active
p1ngul1n0/blackbird
Blackbird is a Python CLI OSINT tool that searches for user accounts by username or email across 600+ social networks and platforms, levera…
467861active
reconurge/flowsint
Flowsint is an open-source, self-hosted OSINT platform for visual, graph-based investigations, providing entity relationship visualization …
877752active
subzeroid/instagrapi
instagrapi is a fast Python wrapper for Instagram's unofficial private (mobile) and public web APIs, supporting login with 2FA, session per…
956713active
MISP/MISP
MISP is an open source threat intelligence platform for collecting, storing, correlating, and sharing cyber security indicators, malware an…
996490stable
apurvsinghgautam/robin
Robin is an AI-powered dark web OSINT investigation tool that uses LLMs to refine queries, filter results from dark web search engines, and…
846438active
alpkeskin/mosint
Mosint is an automated email OSINT tool written in Go that investigates target email addresses by consolidating multiple services. It check…
236008active
lanmaster53/recon-ng
Recon-ng is a full-featured, modular reconnaissance framework for conducting web-based open source intelligence (OSINT) gathering. It offer…
325871active
elceef/dnstwist
dnstwist is a Python command-line tool that generates permutations of a domain name (typos, homoglyphs, IDN tricks) and checks which ones r…
305730active
bilawalsidhu/gods-eye-view
God's Eye View is a browser-based photorealistic 3D globe application that visualizes live public data feeds — aircraft, ships, satellites,…
585574active
hakluke/hakrawler
Hakrawler is a fast command-line web crawler written in Go, built on the Gocolly library, that discovers URLs and JavaScript file locations…
665116active
lc/gau
gau (getallurls) is a Go CLI tool that fetches known URLs for a given domain from AlienVault's Open Threat Exchange, the Wayback Machine, C…
565076active
DedSecInside/TorBot
TorBot is a Python CLI tool for OSINT on the dark web, crawling .onion sites over the Tor network and building link trees. It can save craw…
974716active
intelowlproject/IntelOwl
IntelOwl is an open-source, self-hosted application for managing threat intelligence at scale, querying many online analyzers and malware a…
924683active
megadose/toutatis
Toutatis is a Python CLI tool that extracts public information from Instagram accounts, such as emails, phone numbers, follower counts, and…
324240active
ivre/ivre
IVRE is an open-source network recon framework written in Python that collects, stores, and analyzes network intelligence from active scann…
664119active
Lucksi/Mr.Holmes
Mr.Holmes is a Python-based OSINT (open-source intelligence) CLI tool that gathers information about usernames, domains, phone numbers, and…
534112active
jasonxtn/Argus
Argus is a Python-based all-in-one information gathering and reconnaissance toolkit with an interactive console and modular architecture. I…
474082active
alexandreborges/malwoverview
Malwoverview is a Python command-line first-response tool for threat hunting that queries many threat intelligence sources such as VirusTot…
974075active
sundowndev/phoneinfoga
PhoneInfoga is an information gathering framework for scanning international phone numbers, built in Go. It collects basic data like countr…
6717648maintenance
snooppr/snoop
Snoop is a Python-based OSINT CLI tool that searches for a given username/nickname across ~5400+ websites, with a focus on the CIS region. …
754009active
leebaird/discover
A collection of custom Bash and Python scripts that automate penetration testing tasks including reconnaissance, scanning, enumeration, and…
773928active
Findomain/Findomain
Findomain is a fast subdomain enumeration tool written in Rust that discovers subdomains via Certificate Transparency logs and APIs without…
763786active
edoardottt/cariddi
Cariddi is a fast command-line web crawler written in Go that takes a list of domains, crawls URLs, and scans for endpoints, secrets, API k…
843753active
ibnaleem/gosearch
GoSearch is a Go-based CLI OSINT tool that searches a username across 300+ websites to find a person's digital footprint, serving as a Sher…
843640active
blechschmidt/massdns
MassDNS is a high-performance DNS stub resolver written in C, capable of resolving millions to billions of domain names at over 350,000 loo…
573635stable
arxhr007/Aliens_eye
Aliens Eye is an AI-powered OSINT CLI tool that scans 840+ social media and web platforms to find accounts associated with a given username…
943587active
opsdisk/pagodo
pagodo is a Python CLI tool that automates passive Google dork searches by scraping the Google Hacking Database (GHDB) and running those qu…
493387active
kaifcodec/user-scanner
A 2-in-1 Python CLI OSINT suite that performs email and username intelligence across 440+ scan vectors (170+ email sites, 270+ username pla…
833319active
techgaun/github-dorks
A Python CLI tool that automates GitHub code searches using a curated list of dorks to find leaked secrets like credentials, private keys, …
433271active
pingc0y/URLFinder
URLFinder is a fast, easy-to-use Go CLI tool that extracts JS files, URLs, and sensitive information from web pages, including hidden unaut…
803170active
s0md3v/Photon
Photon is a fast Python-based web crawler designed for OSINT (open-source intelligence) tasks. It extracts URLs, emails, social media accou…
6613146maintenance
devanshbatham/ParamSpider
ParamSpider is a Python CLI tool that mines URLs for a domain or list of domains from web archives (Wayback Machine), filtering out uninter…
553160active
projectdiscovery/uncover
uncover is a Go CLI tool that queries multiple internet search engines (Shodan, Censys, FOFA, ZoomEye, and others) via their APIs to quickl…
843042active
thewhiteh4t/FinalRecon
FinalRecon is an all-in-one automatic web reconnaissance tool written in Python that provides a fast overview of a web target. It bundles h…
702953active
achillean/shodan-python
The official Python library and command-line interface for the Shodan search engine, which indexes Internet-connected devices and services.…
232950stable
Alfredredbird/tookie-osint
Tookie-OSINT is an open-source Python OSINT tool that finds social media accounts and gathers information based on user inputs. It offers a…
822841active
xnl-h4ck3r/waymore
waymore is a Python CLI tool that retrieves URLs from multiple web archive and intelligence sources (Wayback Machine, Common Crawl, Alien V…
902732active
aboul3la/Sublist3r
Sublist3r is a Python command-line tool that enumerates subdomains of a target domain using OSINT sources such as Google, Bing, Yahoo, Baid…
2311023maintenance
Moham3dRiahi/Th3inspector
Th3inspector is an all-in-one Perl CLI tool for information gathering (OSINT reconnaissance). It bundles lookups such as website info, whoi…
402662active
musana/CF-Hero
CF-Hero is a Go-based reconnaissance CLI tool that discovers the real origin IP addresses of Cloudflare-protected web applications. It aggr…
662632active
thewhiteh4t/pwnedOrNot
pwnedOrNot is a Python command-line OSINT tool that checks email addresses against the HaveIBeenPwned v3 API for past breaches and then sea…
662628active
TermuxHackz/X-osint
X-osint is an open-source Python-based OSINT framework for gathering information about phone numbers, email addresses, IP addresses, VINs, …
722627active
v0id4real/Void-Tools
Void-Tools is a Python terminal multitool with a Rich TUI dashboard bundling 150+ utilities for OSINT research, network diagnostics, and Di…
542524active
kpcyrd/sn0int
sn0int is a semi-automatic OSINT framework and package manager written in Rust that enumerates attack surface by processing public informat…
602515active
ShinMegamiBoson/OpenPlanter
OpenPlanter is a recursive-language-model investigation agent that ingests heterogeneous datasets (corporate registries, campaign finance, …
482434active
ArgeliusLabs/Chasing-Your-Tail-NG
A Python application that monitors Wi-Fi probe requests via Kismet to detect whether a device is being physically followed. It correlates s…
352386active
hisxo/gitGraber
gitGraber is a Python3 command-line tool that monitors GitHub search results in real time to find leaked sensitive data such as API keys an…
662376active
h9zdev/WireTapper
WireTapper is a wireless OSINT tool that passively detects and maps nearby radio-emitting devices such as Wi-Fi access points, Bluetooth de…
512310active
jofpin/trape
Trape is an OSINT analysis and research tool for tracking people online and executing real-time social engineering attacks, built in Python…
328978maintenance
smittix/intercept
iNTERCEPT is a free, open-source, web-based signal intelligence (SIGINT) platform that unifies dozens of software-defined radio tools into …
782269active
spyboy-productions/CloakQuest3r
CloakQuest3r is a Python-based open-source security research tool that identifies potential origin IP exposure of websites protected by Clo…
542250active
d3mondev/puredns
Puredns is a fast command-line domain resolver and subdomain bruteforcing tool written in Go. It uses massdns for bulk DNS lookups and appl…
542234active
lkarlslund/Adalanche
Adalanche is an open-source Active Directory attack graph visualizer and explorer written in Go. It collects data via LDAP and SYSVOL, anal…
672195active
Owez/yark
Yark is a Python CLI tool for archiving YouTube channels, downloading videos and accumulating metadata over time with change reports. It in…
662184active
bit4woo/domain_hunter_pro
Domain Hunter Pro is a Burp Suite plugin (Java jar) for automated domain and subdomain collection, web title fetching, and target managemen…
632145active
hanc00l/nemo_go
Nemo is an automated information-gathering platform for penetration testing that integrates common recon tools (Masscan, Nmap, Subfinder, H…
882086active
AzizKpln/Moriarty-Project
Moriarty Project is a web-based phone number investigation tool written in Python that gathers information about a given phone number. It a…
232074active
megadose/ignorant
Ignorant is a Python CLI tool and library that checks whether a phone number is registered on sites like Instagram, Snapchat, and Amazon wi…
322030active
kkbo8005/mitan
Mitan (密探) is an all-in-one penetration testing and security assessment desktop application integrating asset mapping, subdomain brute-forc…
791955active
nitefood/asn
A Bash-based command-line tool and self-hostable server for looking up ASN, RPKI validity, BGP stats, IP prefixes, AS paths, IP reputation,…
871926active
bee-san/pyWhat
pyWhat is a Python CLI tool that identifies what arbitrary text, files, or pcap network captures contain - emails, IP addresses, API keys, …
237313maintenance
bellingcat/octosuite
Octosuite is a terminal-based toolkit for analyzing GitHub data, usable as an interactive TUI, a CLI, or a Python library. It queries user,…
761895active
nsonaniya2010/SubDomainizer
SubDomainizer is a Python CLI tool that discovers hidden subdomains and secrets in webpages, external JavaScript files, GitHub, and local f…
661886active
silvertakana/worldwideview
WorldWideView is an open-source, plugin-driven geospatial intelligence platform that renders live global data streams (aircraft, ships, sig…
591886active
ninoseki/mitaka
Mitaka is a browser extension for Chrome and Firefox that simplifies OSINT (Open Source Intelligence) searches. It automatically detects an…
941846active
pirxthepilot/wtfis
wtfis is a Python command-line tool that performs passive lookups of hostnames, domains, and IP addresses using OSINT services like VirusTo…
741827active
iojw/socialscan
socialscan is a Python library and CLI tool that checks whether usernames and email addresses are taken, available, or invalid across onlin…
661826active
initstring/linkedin2username
A Python OSINT tool that scrapes LinkedIn employee lists for a target company and generates multiple probable username formats (e.g., first…
761825active
1N3/BlackWidow
BlackWidow is a Python-based web application spider that crawls a target site to collect URLs, dynamic parameters, subdomains, email addres…
571821active
unicodeveloper/globalthreatmap
A real-time global threat and event intelligence map that plots security events, conflicts, military bases, and geopolitical developments o…
561810active
wgpsec/fofa_viewer
Fofa Viewer is a JavaFX desktop client for the FOFA internet asset search engine, wrapping its API in a tabbed GUI. It helps security profe…
571800active
bellingcat/telegram-phone-number-checker
A Python CLI tool by Bellingcat that checks whether phone numbers are registered with Telegram accounts, retrieving usernames, names, and I…
871771active
HackUnderway/SearchPhone
SearchPhone is a Python CLI OSINT toolkit for investigating phone numbers across multiple sources, including Google (SerpAPI), DuckDuckGo, …
661765active

page 1 / 3 next →