OSINT CLI Tools Directory
Curated directory of OSINT command-line tools organized by use case. 55+ tools across 10 categories — username hunting, email intel, domain recon, social media, dorking, and more.
Hunt down social media accounts by username across 400+ sites
OSINT username checker with 5000+ site modules and async architecture
Fast username checker — search 100+ sites in seconds
Web enumeration username hunt via valid response code mapping
Check usernames across 350+ platforms in real-time
CLI, API, and web app to find profiles by name/username/phone/email
X/Twitter handle investigation — followers, tweets, metadata
Cross-platform username search with detailed results
Check if an email is linked to accounts on 120+ platforms
Investigate Google accounts — emails, calendars, Drive, maps
Email OSINT — breach check, password tracking, linked accounts
Gather emails, subdomains, hosts, employee names from public sources
Check email registration status on Instagram, Facebook, Twitter
Email OSINT — breach lookup, social profiles, domain intel
Email intelligence — find linked accounts and data breaches
Email reconnaissance — social media, breach data, reverse lookup
OWASP network mapping and attack surface discovery
Recursive crawling and subdomain enumeration with OSINT modules
Full OSINT automation — 200+ modules for recon on IP, domain, name
All-in-one web recon — headers, whois, DNS, subdomains, trace
Fast web crawler — extract emails, URLs, social accounts, files
OSINT framework — recon, forensics, trace, and visualization
Extract and analyze URLs — query params, paths, fragments
Subdomain enumeration and analysis tool
X/Twitter OSINT — profile info, followers, tweets, lists
Telegram OSINT — geolocate users via shared media and groups
Mastodon OSINT — profile search, instance enumeration
Snapchat OSINT — profile lookup and metadata extraction
Generate username permutations from LinkedIn company pages
WhatsApp OSINT — profile photo extraction and metadata
Google dorking automation — fast, multi-query search engine dorking
Google dork scanner — find exposed files, login panels, data leaks
Advanced dorking with Google, Bing, DuckDuckGo, Brave
Simple yet powerful Google dorking tool for OSINT
Full-featured reconnaissance framework with modules and database
Automated recon — subdomain takeovers, port scanning, web fuzzing
Multi-tool OSINT toolkit for red team operations
Multi-purpose OSINT and reconnaissance toolkit
OSINT toolkit optimized for Termux/Android
OSINT data collection and visualization framework
OSINT tool — email, username, IP, phone, domain lookups
Collection of OSINT tools organized by category and data type
Interactive OSINT tool map — visual navigation of tools by use case
Bellingcat's curated OSINT toolkit — investigations, verification, geolocation
Breach database search — emails, usernames, IPs, names, phone numbers
Intelligence search engine — breaches, darknet, paste sites
Telegram channel analytics — growth, reach, engagement stats
Telegram channel analytics and statistics platform