Curated directory of OSINT command-line tools organized by use case. 55+ tools across 10 categories - username hunting, email intel, domain recon, social media, dorking, and more.
Hunt down social media accounts by username across 400+ sites
OSINT username checker with 5000+ site modules and async architecture
Fast username checker - search 100+ sites in seconds
Web enumeration username hunt via valid response code mapping
Check usernames across 350+ platforms in real-time
CLI, API, and web app to find profiles by name/username/phone/email
X/Twitter handle investigation - followers, tweets, metadata
Cross-platform username search with detailed results
Check if an email is linked to accounts on 120+ platforms
Investigate Google accounts - emails, calendars, Drive, maps
Email OSINT - breach check, password tracking, linked accounts
Gather emails, subdomains, hosts, employee names from public sources
Check email registration status on Instagram, Facebook, Twitter
Email OSINT - breach lookup, social profiles, domain intel
Email intelligence - find linked accounts and data breaches
Email reconnaissance - social media, breach data, reverse lookup
OWASP network mapping and attack surface discovery
Recursive crawling and subdomain enumeration with OSINT modules
Full OSINT automation - 200+ modules for recon on IP, domain, name
All-in-one web recon - headers, whois, DNS, subdomains, trace
Fast web crawler - extract emails, URLs, social accounts, files
OSINT framework - recon, forensics, trace, and visualization
Extract and analyze URLs - query params, paths, fragments
Subdomain enumeration and analysis tool
X/Twitter OSINT - profile info, followers, tweets, lists
Telegram OSINT - geolocate users via shared media and groups
Mastodon OSINT - profile search, instance enumeration
Snapchat OSINT - profile lookup and metadata extraction
Generate username permutations from LinkedIn company pages
WhatsApp OSINT - profile photo extraction and metadata
Google dorking automation - fast, multi-query search engine dorking
Google dork scanner - find exposed files, login panels, data leaks
Advanced dorking with Google, Bing, DuckDuckGo, Brave
Simple yet powerful Google dorking tool for OSINT
Full-featured reconnaissance framework with modules and database
Automated recon - subdomain takeovers, port scanning, web fuzzing
Multi-tool OSINT toolkit for red team operations
Multi-purpose OSINT and reconnaissance toolkit
OSINT toolkit optimized for Termux/Android
OSINT data collection and visualization framework
OSINT tool - email, username, IP, phone, domain lookups
Collection of OSINT tools organized by category and data type
Interactive OSINT tool map - visual navigation of tools by use case
Bellingcat's curated OSINT toolkit - investigations, verification, geolocation
Breach database search - emails, usernames, IPs, names, phone numbers
Intelligence search engine - breaches, darknet, paste sites
Telegram channel analytics - growth, reach, engagement stats
Telegram channel analytics and statistics platform