Open source
DESKTOP / CLISpiderFoot
Automated OSINT recon across 200+ data sources, with a web UI.
github.com/smicallef/spiderfoot ↗
● Node // Cyber Armory
Cyber Armory
Free and open-source OSINT tooling, the public answer to "God's Eye." Every link goes to the project's official repo or site. HiTower doesn't host, run or vouch for these tools.
Rules of engagement
Use these tools only on yourself, on systems you own, or with written authorization, and only for lawful research, self-defense audits and journalism. Stalking, harassment, doxxing and unauthorized access are crimes (for example under 18 U.S.C. § 2261A and § 1030). Follow each site's terms and local privacy law. If you are being targeted, go to the Threat Lab.
iPhone ops
On iPhone, run the Python CLI tools (Sherlock, Maigret, holehe) in the free iSH app, a Linux shell for iOS: apk add python3 py3-pip, then pip install sherlock-project maigret holehe.
▣ Rack // Recon
Open source
DESKTOP / CLItheHarvester
Gathers emails, subdomains, hosts and names from public sources.
github.com/laramies/theHarvester ↗Open source
DESKTOP / CLIPhoton
Fast crawler that extracts URLs, emails, files and keys from a site.
github.com/s0md3v/Photon ↗Free service
MOBILE READYWayback Machine
Internet Archive history of web pages over time.
web.archive.org ↗▣ Rack // People / Username
Open source
DESKTOP / CLISherlock
Find a username across hundreds of social networks.
github.com/sherlock-project/sherlock ↗Open source
DESKTOP / CLIMaigret
Builds a profile dossier from a username across 3000+ sites.
github.com/soxoj/maigret ↗Open source
DESKTOP / CLIholehe
Checks which sites an email address is registered on.
github.com/megadose/holehe ↗Open source
DESKTOP / CLIGHunt
Investigates Google accounts from an email address.
github.com/mxrch/GHunt ↗Open source
DESKTOP / CLIPhoneInfoga
Phone number information gathering framework.
github.com/sundowndev/phoneinfoga ↗Open source
DESKTOP / CLISocial-Analyzer
Analyzes and finds a person's profile across social media.
github.com/qeeqbox/social-analyzer ↗▣ Rack // Infrastructure
Open source
DESKTOP / CLIOWASP Amass
In-depth attack surface mapping and subdomain discovery.
github.com/owasp-amass/amass ↗Freemium
MOBILE READYShodan
Search engine for internet-connected devices.
www.shodan.io ↗▣ Rack // Metadata
Open source
DESKTOP / CLIExifTool
Read, write and strip metadata in images, documents and media.
exiftool.org ↗Open source
DESKTOP / CLIMetagoofil
Finds public documents on a domain and extracts their metadata.
github.com/opsdisk/metagoofil ↗Open source
DESKTOP / CLIFOCA
Finds metadata and hidden info in documents (Windows).
github.com/ElevenPaths/FOCA ↗▣ Rack // Frameworks
Free directory
MOBILE READYOSINT Framework
Curated, categorized map of free OSINT resources.
osintframework.com ↗Open source
DESKTOP / CLIRecon-ng
Modular web reconnaissance framework, Metasploit-style.
github.com/lanmaster53/recon-ng ↗Open source
DESKTOP / CLIIntelOwl
Threat-intel platform that runs many analyzers at once.
github.com/intelowlproject/IntelOwl ↗Freemium
DESKTOP / CLIMaltego CE
Link-analysis graphing for investigations. Community Edition is free.
www.maltego.com ↗Freemium
DESKTOP / CLILampyre
Data analysis and OSINT platform.
lampyre.io ↗