A catalogue of open-source OSINT tools organized into 12 clear categories and concrete input types.
OSINT Tools Radar · Emerging Projects · Agentic AI OSINT · Catalogue Timeline · Repository Database CSV
OSINT Tools Radar is a repository-first catalogue of open-source investigative software. Every record represents a public source-code repository containing an identifiable tool or integration with a practical OSINT use case.
Each project has exactly one value in Categories. Target Input contains only concrete data accepted or investigated by the tool, such as Username, Domain, IP Address, URL, File Hash, or Onion Service. A project may have multiple target inputs.
Emerging Projects and Agentic AI OSINT are additional generated views selected through Source Files; they are not category values.
| File | What it contains |
|---|---|
README.md |
Main catalogue with one section for each of the 12 categories. |
EMERGING.md |
Early-stage tools and projects worth monitoring. |
AGENTIC.md |
Skills, plugins, MCP servers, and AI-agent integrations grouped by main category. |
TIMELINE.md |
Visual chronology of catalogue additions with descriptions, categories, and current star counts. |
osint-repositories.csv |
Canonical repository database in CSV format with all accepted records and current metadata. |
Important
Only implementation-bearing repositories with publicly accessible source code are included. Closed-source services, link collections, courses, articles, prompt-only lists, datasets without an implemented tool, and repository stubs are excluded.
marks projects added to the catalogue within the last 14 days.
- Identity 29 projects
- Social Media 69 projects
- Code Repositories 14 projects
- Infrastructure 56 projects
- Web 76 projects
- Dark Web 15 projects
- Threat Intelligence 22 projects
- Documents & Records 44 projects
- Media 46 projects
- Geolocation 34 projects
- Cryptocurrency 8 projects
- Investigation 26 projects
- Emerging projects 87 projects
- Agentic AI OSINT 124 projects
- Catalogue timeline
- Complete repository database (CSV) 439 unique repositories
Tools centered on people, names, contact identifiers, and identity resolution.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| GHunt | Python | Name | Collects public information associated with Google accounts and identifiers. | 2020-10-02 | 2026-04-10 | ⭐ 19,220 |
| PhoneInfoga | Go | Phone Number | Collects and correlates publicly available information about phone numbers. | 2018-10-25 | 2026-01-06 | ⭐ 17,032 |
| Holehe | Python | Checks whether an email address is registered with supported online services. | 2020-06-25 | 2024-09-10 | ⭐ 11,699 | |
| h8mail | Python | Searches breach sources and local datasets for email-related records. | 2018-06-15 | 2022-06-25 | ⭐ 5,098 | |
| pwnedOrNot | Python | Searches breach data for passwords associated with an email address. | 2018-05-25 | 2026-03-28 | ⭐ 2,598 | |
| username-anarchy | Ruby | Username | Generates likely username permutations from names and naming patterns. | 2012-11-07 | 2024-09-20 | ⭐ 1,431 |
| Phunter | Python | Phone Number | Aggregates several public phone number investigation methods. | 2023-12-30 | 2024-04-06 | ⭐ 1,089 |
| Zehef | Python | Aggregates public information associated with an email address. | 2023-06-13 | 2024-11-13 | ⭐ 1,042 | |
| iKy | Python | Builds profiles and timelines from email-based investigation modules. | 2018-12-14 | 2026-07-16 | ⭐ 963 | |
| SearchPhone | Python | Phone Number | Aggregates phone number searches and produces investigation reports. | 2024-11-12 | 2026-07-16 | ⭐ 946 |
| mailcat | Python | Finds existing email addresses derived from a nickname. | 2021-08-20 | 2026-05-24 | ⭐ 910 | |
| Emora | C# | Username | Provides a graphical interface for cross-platform username searches. | 2024-03-11 | 2026-02-07 | ⭐ 704 |
| GHOST OSINT CRM | JavaScript | Name | Manages people, relationships, evidence, and investigation notes locally. | 2025-05-16 | 2026-07-08 | ⭐ 635 |
| Leaker | Go | Username; Email | Performs passive leak enumeration across multiple breach sources. | 2025-12-25 | 2026-07-10 | ⭐ 548 |
| vesper | Rust | Username | Performs lightweight username checks across online services. | 2021-06-20 | 2026-06-15 | ⭐ 322 |
| FindME | HTML | Username | Searches social and online profiles associated with a username. | 2025-01-14 | 2026-07-03 | ⭐ 310 |
| Deanonymizer | TypeScript | Name | Compares public posting history and behavioral timing patterns. | 2026-06-02 | 2026-06-15 | ⭐ 309 |
| Nox Framework | Python | Name; Email | Automates identity pivots and risk analysis across public sources. | 2026-04-07 | 2026-05-06 | ⭐ 239 |
| MailAccess | Python | Name; Email | Clusters identities and checks service usage and breach references for emails. | 2026-05-18 | 2026-07-16 | ⭐ 209 |
 Telespot |
Python | Phone Number | Searches phone-number variations across public engines and correlates identity clues. | 2025-12-28 | 2026-02-26 | ⭐ 133 |
| OSINT Skill | Skill | Name | Runs phased people research with source grading, correlation, and report generation. | 2026-03-10 | 2026-03-10 | ⭐ 82 |
| Telespotter |
Rust | Phone Number | Searches phone numbers across public engines and people-search sources in a Rust CLI. | 2026-01-02 | 2026-02-27 | ⭐ 68 |
| glit | Rust | Extracts contributor email addresses from Git repositories and organizations. | 2022-11-14 | 2024-05-01 | ⭐ 58 | |
| Bellingcat Name Variant Search |
Python | Name | Generates and searches spelling and transliteration variants of personal names. | 2023-07-18 | 2026-06-25 | ⭐ 53 |
| Wiwok |
Python | Username; Email; Phone Number | Investigates usernames, email addresses, phone numbers, and names without mandatory API keys. | 2026-04-26 | 2026-05-22 | ⭐ 34 |
| odnoklassniki-checker | Python | Phone Number | Looks for public OK.ru account data using a phone number or email. | 2022-10-15 | 2024-10-02 | ⭐ 20 |
| OSINT AI Agent | Agent + skills | Name; Username; Email | Orchestrates Holehe, Sherlock, and GHunt for person-focused investigations. | 2026-01-11 | 2026-01-11 | ⭐ 7 |
| Deep Research Ladder | Skills + plugin | Name; URL | Scales from fact checks to long-form research and OSINT entity reconnaissance. | 2026-04-17 | 2026-04-29 | ⭐ 3 |
| Email Finder Batch | Skill | Coordinates public-source email discovery, pattern generation, and verification agents. | 2026-03-22 | 2026-03-22 | ⭐ 2 |
Tools for discovering and analyzing public accounts and content on social platforms.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| yt-dlp | Python | Username; Video | Downloads public video, audio, subtitles, comments, and metadata from supported platforms. | 2020-10-26 | 2026-07-14 | ⭐ 178,311 |
| Sherlock | Python | Username | Checks a username across many social networks. | 2018-12-24 | 2026-05-09 | ⭐ 86,672 |
| Agent Reach |
CLI + skill | Username; URL | Gives agents collection workflows for public content across multiple social and developer platforms. | 2026-02-24 | 2026-07-03 | ⭐ 57,123 |
| last30days | Skill + plugin | Username; URL | Researches recent discussion across social platforms, communities, prediction markets, and the web. | 2026-01-23 | 2026-07-16 | ⭐ 52,363 |
| Maigret | Python | Username | Builds username-based account reports across thousands of sites. | 2020-06-27 | 2026-07-16 | ⭐ 35,451 |
| Social Analyzer | JavaScript | Name; Username | Searches and analyzes profiles across numerous social platforms. | 2020-11-30 | 2026-01-12 | ⭐ 23,482 |
| Osintgram | Python | Name; Username; Image | Provides an interactive interface for collecting information from Instagram profiles. | 2019-06-07 | 2025-08-25 | ⭐ 13,572 |
| Nitter | Nim | Username | Provides a privacy-oriented front end for viewing public X content. | 2019-06-20 | 2026-07-11 | ⭐ 13,267 |
| Instaloader | Python | Name; Username; Image | Downloads Instagram posts, captions, profile data, and related metadata. | 2016-06-15 | 2026-07-13 | ⭐ 12,890 |
| DiscordChatExporter |
C# | Username | Exports accessible Discord message history and rich media to local files. | 2017-07-12 | 2026-07-14 | ⭐ 11,594 |
| Blackbird | Python | Username | Searches social platforms for accounts linked to a username or email. | 2022-05-06 | 2025-07-13 | ⭐ 7,035 |
| twikit |
Python | Username | Provides an alternative Python client for collecting and interacting with public X data. | 2024-01-20 | 2026-03-10 | ⭐ 4,559 |
| Snoop | Python | Username | Searches for username usage across a large collection of websites. | 2020-02-14 | 2026-07-15 | ⭐ 3,963 |
| gosearch | Go | Username | Searches for a person's digital footprint across hundreds of websites. | 2024-11-09 | 2026-07-08 | ⭐ 3,505 |
| user-scanner | Python | Username; Email | Runs username and email discovery checks across many services. | 2025-10-19 | 2026-07-16 | ⭐ 2,736 |
| WhatsMyName | Python | Username | Checks usernames using community-maintained site definitions and scripts. | 2015-10-02 | 2026-06-24 | ⭐ 2,673 |
| Aliens Eye | Python | Username | Searches for accounts associated with a username across hundreds of platforms. | 2021-09-22 | 2026-07-03 | ⭐ 2,629 |
| Tookie | Python | Username | Provides a multi-target information gathering toolkit. | 2023-08-22 | 2026-07-07 | ⭐ 2,598 |
| twscrape |
Python | Username | Collects public X data through supported GraphQL endpoints with account-pool rotation. | 2023-05-05 | 2026-06-26 | ⭐ 2,584 |
| Yark | Python | Name; Username; Video | Archives public YouTube channels, videos, and metadata for local analysis. | 2022-08-16 | 2025-12-17 | ⭐ 2,180 |
| linkedin2username | Python | Name; Organization Name | Generates possible corporate usernames from public LinkedIn employee data. | 2018-02-22 | 2026-05-20 | ⭐ 1,770 |
| Telegram Phone Number Checker | Python | Username | Checks whether supplied phone numbers are connected to Telegram accounts. | 2021-02-17 | 2026-01-06 | ⭐ 1,743 |
| Informer | Python | Username | Collects and indexes Telegram channel and group activity. | 2019-12-09 | 2025-10-20 | ⭐ 1,639 |
| CrossLinked | Python | Name; Organization Name | Extracts employee names from public LinkedIn search results. | 2019-05-16 | 2024-11-26 | ⭐ 1,572 |
| Telerecon | Python | Username | Provides a modular framework for researching Telegram entities. | 2023-08-30 | 2024-04-22 | ⭐ 1,311 |
| Arctic Shift | TypeScript | Username | Provides searchable Reddit archives through data dumps, an API, and a web interface. | 2023-08-03 | 2026-07-12 | ⭐ 1,240 |
| Telepathy Community | Python | Username | Collects and analyzes public Telegram chat data. | 2022-01-17 | 2024-07-12 | ⭐ 1,228 |
| Instagram Monitor | Python | Username; Image | Tracks public Instagram profile changes, activity, and captured content. | 2024-04-25 | 2026-07-01 | ⭐ 1,112 |
| socid-extractor | Python | Username | Converts profile URLs into structured identity records across many platforms. | 2019-11-17 | 2026-07-14 | ⭐ 1,037 |
| Universal Reddit Scraper | Python | Username | Scrapes and archives Reddit submissions, comments, and user activity. | 2019-03-20 | 2026-07-11 | ⭐ 1,008 |
| Linkook | Python | Username | Discovers linked social accounts and email clues from a username. | 2025-01-30 | 2026-02-28 | ⭐ 993 |
| X Tweet Fetcher | Python | Username | Retrieves public X posts, replies, timelines, and articles without login. | 2026-02-14 | 2026-07-05 | ⭐ 901 |
| Tosint | Python | Username | Extracts Telegram bot, chat, and user information from tokens and identifiers. | 2021-07-26 | 2026-03-25 | ⭐ 837 |
| Osintgraph | Python | Username; Image | Maps Instagram followers and relationships in Neo4j for network analysis. | 2025-04-30 | 2026-05-10 | ⭐ 803 |
| LinkedInDumper | Python | Name; Organization Name | Extracts company employee records through LinkedIn endpoints. | 2022-10-17 | 2026-07-15 | ⭐ 602 |
| Discord History Tracker |
C# | Username | Saves accessible Discord chat history for offline preservation and review. | 2016-10-22 | 2026-01-29 | ⭐ 579 |
| TeleTracker | Python | Username | Collects Telegram channel information and supports repeatable investigation tasks. | 2024-01-15 | 2024-04-29 | ⭐ 535 |
| Maltego Telegram | Python | Username | Adds Maltego transforms for Telegram channels, groups, users, and messages. | 2024-11-04 | 2026-01-27 | ⭐ 515 |
| tubeup | Python | Username; Video | Archives online video and metadata to the Internet Archive through yt-dlp. | 2016-02-05 | 2026-05-08 | ⭐ 509 |
| SoIG | Python | Username; Image | Retrieves selected public information associated with an Instagram account. | 2020-06-08 | 2026-06-28 | ⭐ 382 |
| telegram-tracker | Python | Username | Exports channel details and posts from selected Telegram channels. | 2022-04-06 | 2026-04-20 | ⭐ 381 |
| SnapIntel | Python | Username | Retrieves public account details associated with Snapchat usernames. | 2021-03-02 | 2026-03-24 | ⭐ 325 |
| Marple | Python | Username | Finds profile links through search engines and extensible analysis plugins. | 2021-11-16 | 2026-07-14 | ⭐ 313 |
| WhatsOSINT | Python | Username; Phone Number | Retrieves public WhatsApp account details associated with a number. | 2024-11-19 | 2026-07-10 | ⭐ 310 |
| TeleGraphite | Python | Username | Collects Telegram channel posts and exports them as JSON. | 2025-04-12 | 2025-04-15 | ⭐ 274 |
| MCP Maigret | MCP server | Username | Exposes Maigret username searches and public account discovery through MCP. | 2024-12-13 | 2026-01-27 | ⭐ 250 |
| Reddit Research MCP | MCP server | Username; URL | Supports structured Reddit discovery, thread collection, and community research. | 2025-08-12 | 2026-07-02 | ⭐ 219 |
| xint | CLI + skill + MCP | Username | Searches, monitors, and exports public X data for agent-assisted investigations. | 2026-02-14 | 2026-07-16 | ⭐ 216 |
| Telegram Similar Channels | Python | Username | Finds related Telegram channels through CLI and Maltego interfaces. | 2023-12-07 | 2024-04-10 | ⭐ 190 |
| Telegram Archive |
Python | Username | Creates incremental local archives of Telegram chats, media, and message history. | 2025-11-25 | 2026-07-15 | ⭐ 158 |
| TikSpyder |
Python | Username; Video | Collects TikTok search, user, tag, and media data through SerpAPI and Apify. | 2024-07-16 | 2026-02-27 | ⭐ 98 |
| Social OSINT |
Rust | Username; Email | Collects exposed email addresses from supported social platforms and checks related leak data. | 2021-07-02 | 2026-02-10 | ⭐ 93 |
| steam-osint | Python | Username | Finds mutual friends between public Steam profiles. | 2022-03-12 | 2026-07-01 | ⭐ 92 |
| OWASP Social OSINT Agent | Python | Username | Collects public social activity and uses configurable language models to produce analytical reports. | 2025-10-07 | 2026-04-25 | ⭐ 85 |
| Telegram OSINT Polo | Python | Username | Downloads Telegram feed posts for local review and assisted analysis. | 2025-03-04 | 2026-03-12 | ⭐ 55 |
| insto | Python | Username; Image | Collects Instagram profile, media, relationship, and timeline data through interchangeable backends. | 2026-04-26 | 2026-06-20 | ⭐ 54 |
| Steam Monitor | Python | Username | Tracks public Steam player activity, game sessions, and status changes. | 2024-04-25 | 2026-06-26 | ⭐ 50 |
| LinkedIn OSINT Toolkit | Python | Name; Organization Name | Discovers companies and employees, classifies roles, and builds organization views. | 2026-02-16 | 2026-02-16 | ⭐ 34 |
| x-scraper |
Python | Username | Collects X timelines and search results through Playwright with resume and proxy controls. | 2025-10-30 | 2026-06-22 | ⭐ 30 |
| SteamReveal | TypeScript | Username | Analyzes Steam profiles for close contacts and possible location clues. | 2024-02-20 | 2026-05-06 | ⭐ 25 |
| discord-urls-extractor |
Rust | Username; URL | Extracts URLs and media references from supported Discord archive formats. | 2021-11-21 | 2024-12-19 | ⭐ 21 |
| YouTube Research MCP |
MCP server | Username; Video | Exposes YouTube videos, channels, search results, comments, and transcripts through MCP. | 2025-03-31 | 2026-07-14 | ⭐ 15 |
| Discord Inspector |
Python | Username | Retrieves public user, server, and application metadata from Discord identifiers. | 2024-12-03 | 2024-12-05 | ⭐ 6 |
| OSINT Social | Skill | Username | Wraps broad username discovery with additional coverage for major Chinese platforms. | 2026-02-28 | 2026-02-28 | ⭐ 1 |
| LinkedIn Recon Skill | Skill | Name; Organization Name | Maps public hiring networks and organizational relationships from LinkedIn evidence. | 2026-05-08 | 2026-05-25 | ⭐ 0 |
| Sherlock Skill | Skill | Username | Wraps Sherlock username searches with a portable skill and structured dossier output. | 2026-04-22 | 2026-04-22 | ⭐ 0 |
| Chinese OSINT Skills | Skill pack | Username | Supplies Chinese-platform research methods and scripts for cross-platform identity pivots. | 2026-04-30 | 2026-04-30 | ⭐ 0 |
| X Archive RAG |
RAG system | Username | Indexes exported X data for local semantic search and retrieval-augmented analysis. | 2026-05-26 | 2026-06-18 | ⭐ 0 |
| Telegram MCP TDLib |
MCP server | Username | Exposes Telegram searches, chats, messages, and public content to MCP clients through TDLib. | 2026-07-04 | 2026-07-15 | ⭐ 0 |
Tools that investigate public source-code repositories, accounts, and repository metadata.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| Gitleaks |
Go | Username; Repository URL | Scans Git repositories and other inputs for hardcoded secrets and credentials. | 2018-01-27 | 2026-07-01 | ⭐ 28,170 |
| TruffleHog |
Go | Username; Repository URL | Finds, verifies, and analyzes exposed credentials across supported code and storage sources. | 2016-12-31 | 2026-07-16 | ⭐ 27,074 |
| github-dorks | Python | Username; Repository URL | Runs GitHub search queries intended to locate exposed sensitive data. | 2015-10-11 | 2025-10-05 | ⭐ 3,243 |
| gitGraber | Python | Username; Repository URL | Monitors public GitHub activity for exposed credentials and service tokens. | 2019-09-04 | 2024-07-19 | ⭐ 2,316 |
| Bellingcat Octosuite |
Python | Username; Repository URL | Collects and analyzes public GitHub repository, user, organization, and activity data. | 2022-02-24 | 2026-02-28 | ⭐ 1,891 |
| GitGot | Python | Username; Repository URL | Searches public GitHub data for exposed secrets using feedback-driven queries. | 2019-06-14 | 2024-03-07 | ⭐ 1,567 |
| Betterleaks |
Go | Username; Repository URL | Scans supported code and storage sources for secrets with configurable detection and validation. | 2026-02-03 | 2026-07-16 | ⭐ 1,473 |
| git-hound | Go | Username; Repository URL | Searches GitHub at scale for exposed secrets and dork matches. | 2019-07-16 | 2025-11-20 | ⭐ 1,441 |
| GitFive | Python | Name; Username; Repository URL | Correlates public GitHub account data for identity-focused investigations. | 2022-10-05 | 2025-10-04 | ⭐ 1,004 |
| GitSint | Python | Username; Repository URL | Collects public intelligence about GitHub users and repositories. | 2023-04-26 | 2026-06-28 | ⭐ 243 |
| Gitxray | Python | Username; Repository URL | Uses public GitHub APIs for account, repository, and contribution analysis. | 2024-08-06 | 2026-01-09 | ⭐ 182 |
| Shotstars | Python | Username; Repository URL | Analyzes repository star history and indicators of artificial activity. | 2024-05-25 | 2026-06-04 | ⭐ 111 |
| GitRecon | JavaScript | Username; Repository URL | Scans a GitHub user's repositories for exposed names and email addresses. | 2023-09-03 | 2025-12-29 | ⭐ 55 |
| GitHub Monitor | Python | Username; Repository URL | Tracks GitHub profile and repository activity with change notifications. | 2024-05-11 | 2026-05-26 | ⭐ 52 |
Tools for domains, IP addresses, networks, ASNs, and related internet infrastructure.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| SpiderFoot | Python | Email; Domain; IP Address | Automates multi-source OSINT collection and attack-surface mapping. | 2012-04-28 | 2023-11-05 | ⭐ 19,711 |
| theHarvester | Python | Domain | Collects names, email addresses, subdomains, and hosts from public sources. | 2011-01-01 | 2026-07-06 | ⭐ 16,810 |
| Amass | Go | Domain | Maps external assets and discovers domains from multiple data sources. | 2018-07-10 | 2026-04-07 | ⭐ 14,844 |
| Subfinder | Go | Domain | Enumerates subdomains using passive online sources. | 2018-03-31 | 2026-07-02 | ⭐ 14,021 |
| HexStrike AI | MCP server | Domain; IP Address; URL | Connects agents to a large collection of security and reconnaissance tools. | 2025-07-10 | 2026-04-27 | ⭐ 10,347 |
| BBOT | Python | Domain | Recursively discovers internet-facing assets through modular scan events. | 2022-03-12 | 2026-07-08 | ⭐ 10,159 |
| OneForAll | Python | Domain | Combines numerous sources and methods for subdomain discovery. | 2018-12-10 | 2026-05-11 | ⭐ 9,927 |
| reconFTW | Shell | Domain | Orchestrates domain reconnaissance, asset collection, and follow-up checks. | 2020-12-30 | 2026-06-29 | ⭐ 7,849 |
| Recon-ng | Python | Name; Organization Name; Domain | Organizes modular open-source intelligence collection in a command-line framework. | 2019-03-28 | 2024-11-01 | ⭐ 5,782 |
| dnstwist | Python | Domain | Generates and evaluates look-alike domains for phishing and impersonation research. | 2015-06-11 | 2025-04-15 | ⭐ 5,707 |
| Knockpy | Python | Domain | Enumerates subdomains and resolves related DNS information. | 2014-02-11 | 2026-02-19 | ⭐ 4,171 |
| IVRE | Python | IP Address | Builds searchable network intelligence from active and passive observations. | 2014-09-12 | 2026-07-05 | ⭐ 4,086 |
| Claude Bug Bounty | Skills + agents | Domain; URL | Organizes authorized bug-bounty reconnaissance, testing, validation, and reporting. | 2026-03-08 | 2026-07-09 | ⭐ 3,974 |
| Findomain | Rust | Domain | Discovers and monitors domains and subdomains from multiple sources. | 2019-04-14 | 2026-02-03 | ⭐ 3,770 |
| Uncover | Go | IP Address | Queries internet search engines for exposed hosts matching a search. | 2022-03-02 | 2026-05-19 | ⭐ 3,017 |
| Claude BugHunter | Skill pack | Domain; URL | Adds structured web reconnaissance and vulnerability-hunting methodology. | 2026-05-05 | 2026-07-01 | ⭐ 2,978 |
| FinalRecon | Python | Domain | Collects headers, DNS records, subdomains, and related web intelligence. | 2019-03-28 | 2026-06-01 | ⭐ 2,845 |
| dnsx | Go | Domain | Runs high-volume DNS queries and filters resolved records. | 2020-11-12 | 2026-07-16 | ⭐ 2,808 |
| Claude Red | Skill pack | Domain; IP Address; URL | Provides red-team and security research playbooks for Claude-based workflows. | 2026-03-04 | 2026-05-08 | ⭐ 2,706 |
| X-osint | Python | Name; Email; Phone Number; Domain | Runs phone, email, domain, VIN, and identity-oriented lookup modules. | 2023-03-11 | 2026-07-12 | ⭐ 2,490 |
| VulnClaw | Agent + skills + MCP | Domain; IP Address; URL | Orchestrates information gathering, vulnerability analysis, exploitation, and reporting. | 2026-04-18 | 2026-07-10 | ⭐ 2,101 |
| Pentest AI Agents | Agent pack | Domain; IP Address; URL | Supplies specialized subagents for recon analysis, exploit research, detection, and reporting. | 2026-03-28 | 2026-06-19 | ⭐ 2,004 |
| Claude OSINT | Skill pack | Domain; URL | Adds structured external reconnaissance methods, dorks, validators, and reporting guidance. | 2026-04-26 | 2026-06-08 | ⭐ 1,947 |
| SubDomainizer | Python | Domain | Finds subdomains and exposed data referenced in JavaScript files. | 2018-11-19 | 2026-07-14 | ⭐ 1,875 |
| Metabigor | Go | IP Address; ASN | Correlates IP, ASN, domain, and network data without mandatory API keys. | 2019-05-24 | 2026-02-15 | ⭐ 1,631 |
| ScopeSentry | Go | Domain; IP Address | Manages distributed asset discovery, monitoring, and exposure analysis. | 2024-02-27 | 2026-06-26 | ⭐ 1,532 |
| Hack Skills | Skill library | Domain; IP Address; URL | Covers reconnaissance, web and network security, forensics, reversing, and authorized research. | 2026-04-07 | 2026-06-16 | ⭐ 1,380 |
| Pentest AI | CLI + MCP | Domain; IP Address; URL | Exposes security tools, specialist agents, and deterministic probes through CLI and MCP. | 2026-04-04 | 2026-06-30 | ⭐ 1,297 |
| CyberStrike | Agent + MCP | Domain; IP Address; URL | Runs agent-assisted offensive security with recon, testing, and evidence workflows. | 2026-02-14 | 2026-07-16 | ⭐ 1,218 |
| domain-digger | TypeScript | Domain | Provides a web toolkit for DNS, certificate, hosting, and domain analysis. | 2021-07-29 | 2026-07-10 | ⭐ 1,181 |
| HostHunter | Python | IP Address | Discovers hostnames associated with supplied IP addresses. | 2018-05-17 | 2023-03-30 | ⭐ 1,168 |
| asnmap | Go | IP Address; CIDR; ASN | Maps organizations and ASNs to their advertised network ranges. | 2022-09-29 | 2026-05-19 | ⭐ 1,095 |
| dnsgen | Python | Domain | Generates likely DNS name permutations for further discovery. | 2019-09-24 | 2025-01-03 | ⭐ 1,074 |
| openSquat | Python | Domain | Detects newly registered look-alike domains associated with brands. | 2020-05-04 | 2026-04-27 | ⭐ 977 |
| subscraper | Python | Domain | Enumerates subdomains and related targets from public sources. | 2018-09-27 | 2024-06-19 | ⭐ 969 |
| Subdominator | Python | Domain | Performs low-impact subdomain discovery across multiple sources. | 2023-07-24 | 2026-06-21 | ⭐ 793 |
| Recon Skills | Skill pack | Domain; IP Address; URL | Provides field-oriented recon, dorking, secret discovery, asset mapping, and testing playbooks. | 2026-06-24 | 2026-07-08 | ⭐ 756 |
| Cyberbro | Python | Domain; IP Address; URL | Extracts observables from unstructured input and checks them across CTI services. | 2024-10-31 | 2026-07-02 | ⭐ 672 |
| CloudRip | Python | Domain; IP Address | Looks for origin IP addresses hidden behind Cloudflare. | 2024-10-12 | 2026-07-06 | ⭐ 590 |
| god-eye | Go | Domain | Combines subdomain enumeration with local language-model analysis. | 2025-11-19 | 2026-04-18 | ⭐ 515 |
| Transilience Community Tools | Skills + agents | Domain; IP Address; URL | Covers security reconnaissance, bug bounty, AI threat testing, validation, and reporting. | 2025-11-21 | 2026-07-13 | ⭐ 413 |
| Voyage | Rust | Domain | Maintains state across passive and active subdomain discovery runs. | 2025-03-30 | 2025-09-05 | ⭐ 257 |
| netscout | Go | Domain; URL | Crawls from a seed URL to find domains, paths, endpoints, and files. | 2024-03-28 | 2024-04-05 | ⭐ 182 |
| pygreynoise | Python | IP Address | Queries GreyNoise observations and classifications for internet-scanning IPs. | 2017-12-07 | 2026-07-09 | ⭐ 177 |
| ThreatSwarm | Plugin + agents | Domain; IP Address; URL | Coordinates scope-aware agents across recon, exploitation, DFIR, and final reporting. | 2026-04-29 | 2026-04-29 | ⭐ 59 |
| MCP dnstwist | MCP server | Domain | Exposes look-alike domain discovery for phishing and impersonation investigations. | 2024-12-19 | 2025-03-03 | ⭐ 51 |
| OSINT AI | Skill pack | Name; Organization Name; Domain | Provides guided people, domain, organization, breach, and evidence-analysis workflows. | 2026-02-27 | 2026-03-07 | ⭐ 44 |
| Ronin Recon | Ruby | Domain; URL | Provides a modular reconnaissance framework and command-line interface. | 2023-04-11 | 2026-01-15 | ⭐ 42 |
| OSINT MCP Server | MCP server | Domain; IP Address; URL | Correlates infrastructure and threat data from Shodan, Censys, DNS, BGP, archives, and more. | 2026-03-17 | 2026-03-17 | ⭐ 36 |
| Shodan MCP by Vorota | MCP server | Domain; IP Address | Adds passive asset discovery, DNS analysis, and vulnerability intelligence from Shodan. | 2026-02-12 | 2026-02-12 | ⭐ 21 |
| Claude Code Pentest | Skill pack | Domain; IP Address; URL | Automates the authorized pentest lifecycle from initial recon to exploit-chain reports. | 2026-03-11 | 2026-03-11 | ⭐ 19 |
| Recon | Skill | Organization Name; Domain; URL | Performs competitive intelligence across products, infrastructure, APIs, and communities. | 2026-02-25 | 2026-04-04 | ⭐ 5 |
| Outrider Recon | Skills + MCP | Domain; URL | Runs evidence-backed external reconnaissance with policy controls and optional MCP enrichment. | 2026-04-29 | 2026-07-15 | ⭐ 4 |
| Offensive Recon | Plugin + skills | Domain; IP Address; URL | Packages multi-phase reconnaissance skills and agents around common security tools. | 2026-03-01 | 2026-03-01 | ⭐ 4 |
| LeakIX MCP |
MCP server | Domain; IP Address; URL | Exposes LeakIX searches for internet services, leaks, domains, and IP addresses through MCP. | 2026-01-27 | 2026-07-14 | ⭐ 2 |
| Bounty Recon Pro | Skill | Domain; URL | Runs scoped passive OSINT and active bug-bounty recon with evidence-oriented reports. | 2026-07-11 | 2026-07-11 | ⭐ 0 |
Tools that collect, search, analyze, crawl, or preserve public web content.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| Firecrawl |
TypeScript | URL | Provides APIs for web search, scraping, crawling, and structured extraction. | 2024-04-15 | 2026-07-16 | ⭐ 151,931 |
| Browser Use |
Agent framework | URL | Lets AI agents navigate websites, interact with pages, and extract information. | 2024-10-31 | 2026-07-14 | ⭐ 105,083 |
| Crawl4AI |
Python | URL | Crawls websites and produces structured, LLM-ready content and metadata. | 2024-05-09 | 2026-07-15 | ⭐ 72,960 |
| Scrapling |
Python | URL | Provides adaptive web scraping, crawling, browser automation, and structured extraction. | 2024-10-13 | 2026-07-15 | ⭐ 69,773 |
| Scrapy |
Python | URL | Implements a mature Python framework for crawling and extracting structured web data. | 2010-02-22 | 2026-07-13 | ⭐ 63,186 |
| TrendRadar |
Monitoring platform + MCP | URL | Monitors news and RSS sources, tracks trends, stores history, and exposes MCP access. | 2025-04-28 | 2026-07-08 | ⭐ 60,612 |
| EasySpider |
JavaScript | URL | Creates and runs visual no-code web crawling and data extraction tasks. | 2020-07-18 | 2026-07-03 | ⭐ 44,244 |
| Vane |
Research agent | URL | Provides a self-hosted research interface that answers questions with linked sources. | 2024-04-09 | 2026-04-11 | ⭐ 35,682 |
| Web-Check | TypeScript | URL | Produces a broad technical and open-source intelligence report for a website. | 2023-06-25 | 2026-07-11 | ⭐ 34,168 |
| SearXNG |
Python | URL | Aggregates results from multiple search services in a self-hosted metasearch engine. | 2021-04-12 | 2026-07-16 | ⭐ 33,983 |
| changedetection.io | Python | URL | Monitors web pages and records content changes over time. | 2021-01-27 | 2026-07-16 | ⭐ 32,340 |
| ScrapeGraphAI |
Python | URL | Builds scraping pipelines that use language models to extract structured information. | 2024-01-27 | 2026-07-15 | ⭐ 28,409 |
| GPT Researcher |
Research agent | URL | Runs multi-agent web research and produces source-grounded reports with citations. | 2023-05-12 | 2026-07-14 | ⭐ 28,343 |
| ArchiveBox |
Python | URL | Creates self-hosted, durable archives of web pages and linked online material. | 2017-05-05 | 2026-07-15 | ⭐ 27,940 |
| Crawlee |
TypeScript | URL | Provides a scalable SDK for HTTP crawling and browser automation. | 2016-08-26 | 2026-07-16 | ⭐ 24,754 |
| Stagehand |
Agent SDK | URL | Provides an SDK for agent-driven browser automation and page extraction. | 2024-03-24 | 2026-07-16 | ⭐ 23,530 |
| SingleFile | JavaScript | URL | Saves a complete web page as one file for preservation and later analysis. | 2010-09-12 | 2026-02-24 | ⭐ 21,836 |
| deep-research |
Research agent | URL | Runs iterative web searches, evaluates findings, and builds source-grounded research answers. | 2025-02-04 | 2026-04-11 | ⭐ 19,367 |
| Linkwarden |
TypeScript | URL | Preserves bookmarked pages and stored copies for later reference and collaboration. | 2022-04-09 | 2026-07-11 | ⭐ 18,969 |
| Maxun |
TypeScript | URL | Builds reusable web robots and structured data APIs through a visual interface. | 2023-10-23 | 2026-07-15 | ⭐ 16,529 |
| Photon | Python | URL | Crawls a supplied URL to collect links and related open-source data. | 2018-03-30 | 2026-02-10 | ⭐ 13,040 |
| Open Deep Research |
Research agent | URL | Implements a configurable deep-research agent with pluggable search and model providers. | 2024-11-20 | 2026-07-15 | ⭐ 12,026 |
| httpx |
Go | URL | Probes web targets at scale and reports HTTP, TLS, technology, and response metadata. | 2020-05-28 | 2026-07-16 | ⭐ 10,174 |
| Steel Browser |
TypeScript | URL | Runs a self-hosted browser API and sandbox for automated web operations. | 2024-11-01 | 2026-07-06 | ⭐ 7,342 |
| Firecrawl MCP Server | MCP server | URL | Gives agents web search, crawling, scraping, extraction, and structured research tools. | 2024-12-06 | 2026-07-08 | ⭐ 6,969 |
| Trafilatura |
Python | URL | Extracts main text, metadata, links, and document structure from web pages. | 2019-04-08 | 2026-07-09 | ⭐ 6,301 |
| hakrawler | Go | URL | Crawls web applications to discover endpoints, assets, and linked resources. | 2019-12-15 | 2024-12-21 | ⭐ 5,091 |
| Exa MCP Server | MCP server | URL | Provides semantic web search, content retrieval, and research discovery through Exa. | 2024-11-27 | 2026-07-15 | ⭐ 4,729 |
| Deep Research | Research system + MCP | URL | Runs iterative web research and synthesis with configurable models and MCP access. | 2025-02-22 | 2026-06-18 | ⭐ 4,634 |
| Cariddi | Go | URL | Crawls domains and extracts endpoints, secrets, tokens, and file references. | 2021-04-27 | 2026-07-15 | ⭐ 3,456 |
| pagodo | Python | URL | Automates Google dork collection and searches against a target. | 2016-08-19 | 2025-08-30 | ⭐ 3,365 |
| waybackpack | Python | URL | Downloads archived versions of a URL from the Wayback Machine. | 2016-04-11 | 2025-04-21 | ⭐ 3,215 |
| ParamSpider | Python | URL | Mines web archives for URLs containing useful parameters. | 2020-04-12 | 2026-03-07 | ⭐ 3,135 |
| waymore | Python | URL | Collects archived URLs and responses from several public sources. | 2022-06-24 | 2026-06-11 | ⭐ 2,691 |
| Bright Data MCP | MCP server | URL | Connects agents to search, browsing, scraping, and public web datasets. | 2025-04-15 | 2026-06-14 | ⭐ 2,501 |
| Tavily MCP | MCP server | URL | Exposes search, extraction, crawling, mapping, and research functions from Tavily. | 2025-01-27 | 2026-07-10 | ⭐ 2,223 |
| Apify MCP Server | MCP server | URL | Makes Apify Actors and public web data collection available to compatible agents. | 2025-01-02 | 2026-07-16 | ⭐ 1,975 |
| Mitaka | TypeScript | URL | Adds browser searches for URLs, hashes, IP addresses, and other indicators. | 2018-02-09 | 2026-06-14 | ⭐ 1,822 |
| BlackWidow | Python | URL | Crawls a web application to collect intelligence and identify reachable paths. | 2018-01-06 | 2026-04-17 | ⭐ 1,812 |
| urlhunter | Go | URL | Finds URLs exposed through public URL-shortening services. | 2020-11-21 | 2025-01-23 | ⭐ 1,684 |
| pywb |
Python | URL | Indexes, serves, and replays WARC web archives. | 2013-12-09 | 2026-04-10 | ⭐ 1,680 |
| GooFuzz | Shell | URL | Uses search-engine results to enumerate web paths, files, and parameters. | 2022-06-17 | 2025-12-21 | ⭐ 1,577 |
| ArchiveWeb.page |
TypeScript | URL | Captures selected web pages and browsing sessions into portable web archives. | 2020-02-10 | 2026-04-30 | ⭐ 1,521 |
| Brave Search MCP Server | MCP server | URL | Adds Brave web, news, image, video, and local search to MCP clients. | 2025-06-12 | 2026-06-24 | ⭐ 1,304 |
| FavFreak | Python | URL | Creates favicon hashes for finding related websites through internet search engines. | 2020-07-03 | 2023-08-29 | ⭐ 1,294 |
| Bellingcat Auto Archiver |
Python | URL | Archives web pages, social posts, images, and videos from queued URLs. | 2021-01-15 | 2026-04-27 | ⭐ 1,095 |
| Browsertrix Crawler |
TypeScript | URL | Captures interactive websites as WARC and WACZ archives with replay quality checks. | 2020-11-02 | 2026-07-16 | ⭐ 1,081 |
| ReplayWeb.page |
TypeScript | URL | Replays WARC and WACZ web archives locally in a browser. | 2019-12-09 | 2026-07-06 | ⭐ 964 |
| urlfinder | Go | URL | Passively collects URLs associated with a target. | 2024-04-30 | 2026-06-23 | ⭐ 892 |
| xurlfind3r | Go | URL | Discovers URLs for a domain through passive public sources. | 2021-05-13 | 2025-11-17 | ⭐ 710 |
| waybackpy | Python | URL | Provides a command-line and library interface to Wayback Machine APIs. | 2020-05-02 | 2022-11-17 | ⭐ 596 |
| Browsertrix |
TypeScript | URL | Provides a collaborative platform for browser-based web archiving and replay. | 2021-06-28 | 2026-07-16 | ⭐ 438 |
| De-Anthropocentric Research Engine | Research skill system | URL | Organizes autonomous research into composable campaigns, strategies, tactics, and procedures. | 2026-02-10 | 2026-07-09 | ⭐ 386 |
| TheScrapper |
Python | URL | Crawls websites to extract email addresses, phone numbers, and social profile links. | 2021-05-07 | 2026-05-29 | ⭐ 363 |
| Kindly Web Search MCP | MCP server | URL | Aggregates web search, extraction, crawling, and browser automation for many clients. | 2026-01-02 | 2026-07-14 | ⭐ 358 |
| NotebookLM Skill | Skill + MCP | URL | Uses NotebookLM for source-grounded research, synthesis, and content preparation. | 2026-03-13 | 2026-03-24 | ⭐ 355 |
| MCP Omnisearch | MCP server | URL | Combines multiple search, AI search, and content-processing providers behind MCP. | 2025-03-08 | 2026-07-02 | ⭐ 333 |
| Google Research MCP | MCP server | URL | Uses Google Search and browser automation for multi-step cited research. | 2024-12-19 | 2026-06-27 | ⭐ 249 |
| urx | Rust | URL | Extracts URLs from public web archives for later analysis. | 2025-03-28 | 2026-07-16 | ⭐ 189 |
| Octagon MCP Server | MCP server | URL | Provides public company, market, investor, private-market, and crypto research data. | 2025-03-12 | 2026-07-09 | ⭐ 143 |
| RivalSearch MCP | MCP server | URL | Unifies web, social, news, academic, and entity-search sources behind MCP. | 2025-08-03 | 2026-05-31 | ⭐ 114 |
| Deep Research MCP | MCP server | URL | Connects several deep-research agents and model providers through one MCP interface. | 2025-08-07 | 2026-06-10 | ⭐ 93 |
| Deep Web Research MCP | MCP server | URL | Coordinates recursive web search and page analysis for deeper topic coverage. | 2025-01-13 | 2025-03-05 | ⭐ 86 |
| Agent Search | MCP server | URL | Provides privacy-oriented search and browser retrieval for AI agents. | 2026-02-18 | 2026-07-07 | ⭐ 58 |
| OpenRouter Deep Research MCP | MCP server | URL | Orchestrates parallel research agents and consensus-backed synthesis through OpenRouter. | 2025-03-28 | 2026-03-04 | ⭐ 54 |
| Web Researcher MCP | MCP server | URL | Searches the web, extracts sources, and produces citation-aware research results. | 2026-05-18 | 2026-07-16 | ⭐ 42 |
| AtDork | Python | URL | Automates multi-engine search queries with rate and failure controls. | 2026-06-07 | 2026-07-13 | ⭐ 25 |
| Wayback Archive | Python | URL | Downloads complete archived websites with their referenced assets. | 2025-12-11 | 2026-07-01 | ⭐ 21 |
| Helium MCP | MCP server | URL | Provides news discovery, bias scoring, market data, and multi-source synthesis. | 2026-04-10 | 2026-07-06 | ⭐ 11 |
| GiaSip Skills | Skills + plugin | URL | Provides quick recon, fact-checking, research orchestration, and multi-model dispatch. | 2026-05-30 | 2026-07-15 | ⭐ 11 |
| Web Multi Search | Skill + script | URL | Searches several web engines in parallel and exports deduplicated results. | 2026-02-08 | 2026-02-08 | ⭐ 7 |
| Memorious4 |
Python | URL | Runs maintained configurable crawlers for investigative documents and structured public data. | 2025-01-21 | 2026-06-09 | ⭐ 3 |
| Digital Research Skills | Research skill system | URL | Plans evidence-driven research waves for OSINT, due diligence, trends, and long-form analysis. | 2026-05-29 | 2026-05-16 | ⭐ 2 |
| Wayback Diff | Python | URL | Compares current and archived web pages for content and visual changes. | 2025-12-13 | 2026-07-13 | ⭐ 1 |
| Agent Toolkit | Skill pack | URL | Includes an OSINT dorking workflow with search tooling and evaluation assets. | 2026-04-11 | 2026-06-08 | ⭐ 1 |
| Internet Archive MCP |
MCP server | URL | Provides agent access to Internet Archive search, metadata, files, and preserved resources. | 2026-06-05 | 2026-07-03 | ⭐ 1 |
Tools for discovering, collecting, and analyzing onion services and dark-web content.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| Robin | Python | Onion Service | Refines queries, filters dark-web search results, and saves assisted investigation summaries. | 2025-04-08 | 2026-07-15 | ⭐ 5,945 |
| TorBot | Python | URL; Onion Service | Crawls a known onion service and exports its link tree for structure mapping. | 2017-05-17 | 2025-10-29 | ⭐ 4,350 |
| darkdump | Python | Onion Service | Runs first-pass keyword discovery across dark-web search engines and saves result sets for later review. | 2021-02-11 | 2026-04-08 | ⭐ 1,642 |
| AIL Framework |
Python | Onion Service | Collects, crawls, processes, correlates, and analyzes unstructured information from Tor and other sources. | 2020-04-20 | 2026-07-15 | ⭐ 980 |
| Ahmia |
Python | Onion Service | Provides an open-source search application and interface for indexed onion services. | 2016-05-23 | 2026-07-09 | ⭐ 747 |
| Darkus |
Python | Onion Service | Queries multiple onion search engines for keyword-matched hidden services. | 2023-10-27 | 2026-02-21 | ⭐ 683 |
| VoidAccess | Python | Onion Service | Runs a self-hosted pipeline for dark-web collection, extraction, correlation, and graph analysis. | 2026-04-29 | 2026-07-08 | ⭐ 289 |
| darc |
Python | Onion Service | Crawls dark-web services, stores link and host data, and supports distributed collection workflows. | 2019-09-28 | 2026-07-11 | ⭐ 225 |
| Darknet MCP Server | MCP server | Onion Service | Unifies dark-web search, breach, ransomware, malware, and blockchain intelligence tools for MCP clients. | 2026-06-23 | 2026-06-24 | ⭐ 221 |
| onion-lookup |
Python | Onion Service | Checks onion-service availability and retrieves associated metadata from an AIL instance. | 2024-10-03 | 2026-01-05 | ⭐ 64 |
| OnionClaw | Skill + CLI | Onion Service | Adds Tor search, hidden-service retrieval, crawling, and export workflows to OpenClaw. | 2026-03-14 | 2026-05-28 | ⭐ 61 |
| DarkSpider |
Python | Onion Service | Crawls onion services through Tor and visualizes extracted link relationships. | 2022-07-31 | 2024-07-27 | ⭐ 45 |
| Sicry |
Python + MCP | Onion Service | Checks Tor health, rotates identity, searches onion engines, fetches known services, and exposes optional agent-assisted analysis. | 2026-03-14 | 2026-05-28 | ⭐ 16 |
| PyAhmia |
Python | Onion Service | Provides programmatic search access to Ahmia-indexed Tor hidden services. | 2025-09-26 | 2026-06-01 | ⭐ 16 |
| LeakRecon |
Python | Onion Service | Runs Tor-routed leak reconnaissance with local history, change tracking, and report export. | 2026-05-18 | 2026-06-04 | ⭐ 10 |
Tools for threat data, indicators, file hashes, vulnerabilities, and malware analysis.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| Crucix | JavaScript | Domain; IP Address; URL; File Hash | Watches multiple public intelligence sources and reports relevant changes. | 2026-03-14 | 2026-05-20 | ⭐ 10,488 |
| OpenCTI | TypeScript | Domain; IP Address; URL; File Hash | Organizes cyber threat intelligence in a graph-based analysis platform. | 2018-12-17 | 2026-07-16 | ⭐ 9,690 |
| MISP |
PHP | Domain; IP Address; URL; File Hash | Stores, correlates, analyzes, and shares structured threat intelligence and indicators. | 2013-02-07 | 2026-07-13 | ⭐ 6,418 |
| gau | Go | URL | Collects known URLs from public archives and threat intelligence sources. | 2020-02-25 | 2026-03-20 | ⭐ 5,036 |
| IntelOwl | Python | Domain; IP Address; URL; File Hash | Orchestrates threat intelligence analyzers and connectors at scale. | 2019-12-31 | 2026-07-02 | ⭐ 4,624 |
| Watcher | JavaScript | Domain; IP Address; URL; File Hash | Collects, enriches, and searches cyber threat intelligence with assisted analysis. | 2020-09-01 | 2026-07-08 | ⭐ 1,337 |
| Harpoon | Python | IP Address | Provides command-line queries for open-source and threat intelligence indicators. | 2017-09-25 | 2026-05-18 | ⭐ 1,288 |
| Taranis AI | Python | Domain; IP Address; URL; File Hash | Collects and analyzes open-source information for situational awareness. | 2023-10-05 | 2026-07-15 | ⭐ 1,179 |
| CVE MCP Server | MCP server | CVE ID | Correlates CVE, EPSS, KEV, Shodan, VirusTotal, and related security intelligence. | 2026-04-14 | 2026-06-22 | ⭐ 1,085 |
| Mihari | Ruby | Domain; IP Address; URL; File Hash | Aggregates search queries across threat intelligence services. | 2019-04-15 | 2026-07-04 | ⭐ 939 |
| ThreatIngestor | Python | Domain; IP Address; URL; File Hash | Extracts and routes threat indicators from public information feeds. | 2017-08-31 | 2026-05-26 | ⭐ 922 |
| MCP Security Hub | MCP collection | Domain; IP Address; URL; File; File Hash | Exposes containerized security tools for recon, threat intelligence, code, and binary analysis. | 2026-01-06 | 2026-04-08 | ⭐ 732 |
| CTI Expert | Skill | Domain; IP Address; URL; File Hash | Guides structured cyber threat intelligence and OSINT collection with confidence scoring. | 2026-04-06 | 2026-06-30 | ⭐ 251 |
| Reversecore MCP | MCP server | File; File Hash | Connects agents to reverse engineering, malware, forensics, and vulnerability research tools. | 2025-11-10 | 2026-07-16 | ⭐ 182 |
| Shodan MCP | MCP server | Domain; IP Address | Provides device search, IP reconnaissance, DNS, CPE, and CVE intelligence. | 2024-12-12 | 2026-03-31 | ⭐ 144 |
| VirusTotal MCP | MCP server | Domain; IP Address; URL; File; File Hash | Queries files, URLs, domains, IPs, and related security-analysis records. | 2024-12-13 | 2026-05-24 | ⭐ 138 |
| MalwareDB |
Rust | File; File Hash | Stores, indexes, and analyzes malware samples and associated metadata. | 2023-02-19 | 2026-07-15 | ⭐ 59 |
| ZettelForge | CTI system + MCP | Domain; IP Address; URL; File Hash | Extracts IOCs and threat entities into a local STIX knowledge graph with agent access. | 2026-04-06 | 2026-07-10 | ⭐ 55 |
| Malware Sandbox MCP | MCP server | File; File Hash | Normalizes malware sandbox verdicts, IOCs, artifacts, and ATT&CK mappings. | 2026-06-11 | 2026-06-11 | ⭐ 14 |
| MISP MCP | MCP server | Domain; IP Address; URL; File Hash | Provides read-only access to MISP threat intelligence events and attributes. | 2026-04-01 | 2026-04-05 | ⭐ 8 |
| StratIntel |
Python | Domain; IP Address; URL; File Hash | Monitors RSS sources, scores items, learns from feedback, and produces strategic reports. | 2025-12-18 | 2026-07-14 | ⭐ 3 |
| OSINT MCP Gateway | MCP server | Domain; IP Address; URL | Routes agent queries across VirusTotal, Shodan, DNS, WHOIS, RIPEstat, and OTX. | 2025-11-23 | 2026-06-10 | ⭐ 0 |
Tools for documents, files, datasets, public records, extraction, and structured review.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| MarkItDown |
Python | Document | Converts common document and media formats into Markdown for analysis. | 2024-11-13 | 2026-05-26 | ⭐ 166,632 |
| Docling |
Python | Document | Parses PDFs, office files, HTML, images, and audio into structured document representations. | 2024-07-09 | 2026-07-14 | ⭐ 63,295 |
| Marker |
Python | Document | Converts PDFs and other documents into Markdown, JSON, tables, and structured text. | 2023-10-30 | 2026-06-29 | ⭐ 37,565 |
| OCRmyPDF |
Python | Document | Adds searchable OCR text layers to scanned PDF documents. | 2013-12-20 | 2026-07-16 | ⭐ 34,201 |
| Scientific Agent Skills | Skill library | Document; Dataset | Provides reusable scientific research workflows and access patterns for public databases. | 2025-10-19 | 2026-07-15 | ⭐ 31,020 |
| OpenDataLoader PDF |
Java | Document | Extracts text, tables, layout, and structured content from PDF documents. | 2025-05-13 | 2026-07-14 | ⭐ 27,372 |
| notebooklm-py | Library + skill + MCP | Document | Gives agents programmatic, source-grounded access to NotebookLM research workflows. | 2026-01-07 | 2026-07-16 | ⭐ 17,852 |
| Unstructured |
Python | Document | Normalizes documents and extracts elements for search, analytics, and RAG pipelines. | 2022-09-26 | 2026-07-15 | ⭐ 15,145 |
| ARIS | Research skill system | Document | Orchestrates long-running research, cross-model review, experiments, and evidence capture. | 2026-03-10 | 2026-07-14 | ⭐ 13,487 |
| OpenRefine |
Java | Dataset | Cleans, transforms, reconciles, and links inconsistent structured data. | 2012-10-15 | 2026-07-16 | ⭐ 11,909 |
| NotebookLM CLI and MCP | CLI + skill + MCP | Document | Connects AI agents to NotebookLM for cited source ingestion, querying, and synthesis. | 2025-12-23 | 2026-07-16 | ⭐ 5,479 |
| Apache Tika |
Java | Document | Detects file types and extracts text and metadata from many document formats. | 2009-05-21 | 2026-07-16 | ⭐ 3,870 |
| GLiNER |
Python | Text | Recognizes user-defined entity types in unstructured text without task-specific retraining. | 2023-11-14 | 2026-07-06 | ⭐ 3,395 |
| Aleph | JavaScript | Organization Name | Lets investigators search documents and structured data for people and companies. | 2014-08-27 | 2025-12-19 | ⭐ 2,398 |
| Splink |
Python | Name; Organization Name; Dataset | Performs probabilistic entity resolution and deduplication across imperfect records. | 2019-11-22 | 2026-07-07 | ⭐ 2,264 |
| cloud_enum | Python | Organization Name | Enumerates public cloud resources associated with organization keywords. | 2019-05-31 | 2026-07-09 | ⭐ 2,115 |
| Agentset |
Research system + MCP | Document | Provides document ingestion, agentic search, ranking, citations, RAG, and MCP access. | 2025-03-10 | 2026-07-04 | ⭐ 2,031 |
| Open Semantic Search | Shell | Document | Searches, extracts, and links entities across large document collections. | 2016-03-30 | 2025-04-19 | ⭐ 1,189 |
| PDF Reader MCP |
MCP server + CLI | Document | Analyzes PDFs through MCP while retaining page references, visual crops, and OCR provenance. | 2025-04-04 | 2026-07-16 | ⭐ 827 |
| emploleaks | Python | Organization Name | Identifies company employees appearing in credential leak data. | 2023-04-21 | 2026-05-19 | ⭐ 786 |
| OpenSanctions | Python | Organization Name | Builds searchable data on sanctions, entities, and persons of interest. | 2015-12-05 | 2026-07-16 | ⭐ 768 |
| ICIJ Datashare |
Java | Document | Indexes investigative documents, runs OCR, and extracts people, organizations, and locations. | 2016-04-20 | 2026-07-16 | ⭐ 744 |
| Docling MCP |
MCP server | Document | Exposes document conversion and structured extraction from files and URLs through MCP. | 2025-03-14 | 2026-07-16 | ⭐ 686 |
| ArkhamMirror | Python | Document | Provides local document intelligence, retrieval, and relationship analysis for investigations. | 2025-11-25 | 2026-01-25 | ⭐ 443 |
| Claude Skills for Journalism | Skills + plugins | URL; Document | Covers source verification, public records, FOIA work, scraping, and newsroom research. | 2025-12-25 | 2026-07-16 | ⭐ 326 |
| ICIJ Extract |
Python | Document | Extracts searchable text and metadata from investigative document collections. | 2015-05-07 | 2026-07-16 | ⭐ 256 |
| Simple PubMed MCP | MCP server | Document | Searches PubMed and retrieves biomedical article metadata and abstracts. | 2024-12-11 | 2026-03-19 | ⭐ 169 |
| mcp.science | MCP server | Document; Dataset | Connects agents to scientific literature search and research data services. | 2025-03-27 | 2025-09-02 | ⭐ 145 |
| Data Commons Agent Toolkit |
MCP toolkit | Dataset | Connects agents and MCP clients to the public Data Commons knowledge graph. | 2025-06-26 | 2026-07-15 | ⭐ 137 |
| Academia MCP | MCP server | Document | Searches academic sources and retrieves papers for agent-assisted literature research. | 2025-01-24 | 2026-01-24 | ⭐ 90 |
| Bellingcat Sugartrail |
Python | Organization Name | Builds relationship graphs from UK companies, officers, and registered addresses. | 2022-09-04 | 2026-02-20 | ⭐ 78 |
| ZotPilot | Skill + MCP | Document | Connects Zotero collections to source-grounded research and agent workflows. | 2026-03-16 | 2026-06-16 | ⭐ 67 |
| DocumentCloud |
Python | Document | Provides the backend for uploading, processing, searching, and publishing source documents. | 2019-09-09 | 2026-07-13 | ⭐ 49 |
| OpenAlex Research MCP | MCP server | Document | Queries OpenAlex works, authors, institutions, concepts, and citation relationships. | 2025-10-05 | 2026-06-22 | ⭐ 36 |
| European Parliament MCP |
MCP server | Name; Document | Provides agent access to European Parliament members, committees, votes, documents, and questions. | 2026-02-16 | 2026-07-16 | ⭐ 20 |
| Semantic Scholar Skills | Skills + MCP | Document | Supports literature discovery, citation expansion, and structured Semantic Scholar research. | 2026-03-10 | 2026-03-16 | ⭐ 19 |
| Newsroom Extension | Skill pack | Organization Name; Document | Supports investigative journalism, FOIA work, corporate research, verification, and editorial review. | 2026-04-06 | 2026-06-22 | ⭐ 6 |
| Hermes OSINT Skill | Skill | Name; Organization Name | Structures company due diligence, background checks, vendor risk, and privacy review. | 2026-05-22 | 2026-05-22 | ⭐ 6 |
| Infringement Information Collector | Skill | Organization Name; URL | Collects public leads about counterfeits, private servers, and piracy into auditable reports. | 2026-05-31 | 2026-06-01 | ⭐ 2 |
| OpenProbe | Skill | Name; Organization Name | Investigates companies, competitors, supply chains, capital links, and key people. | 2026-04-12 | 2026-05-08 | ⭐ 2 |
| Company Recon Skill | Skill | Organization Name; URL | Identifies websites using a company's technology and classifies the resulting evidence. | 2026-03-04 | 2026-03-04 | ⭐ 2 |
| Scout | Skill pack | Name; Organization Name | Structures lawful people and company research with provenance, source tiers, and refresh workflows. | 2026-03-10 | 2026-07-16 | ⭐ 1 |
| openParlData.ch Web Archive |
Web archive pipeline | URL | Archives Swiss parliamentary websites with Browsertrix and serves them through pywb. | 2026-04-02 | 2026-05-04 | ⭐ 0 |
| ConsentTheater Playbill |
TypeScript | Organization Name; URL | Maintains a queryable knowledge base of trackers, cookies, domains, and responsible companies. | 2026-05-31 | 2026-07-15 | ⭐ 0 |
Tools for image, video, audio, metadata, verification, and media forensics.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| Whisper |
Python | Audio | Runs multilingual speech recognition, translation, and language identification locally. | 2022-09-16 | 2026-04-15 | ⭐ 105,066 |
| PaddleOCR |
Python | Image; Document | Performs multilingual OCR, document layout analysis, and structured text extraction. | 2020-05-08 | 2026-06-26 | ⭐ 85,633 |
| Tesseract |
C++ | Image; Document | Provides a multilingual optical character recognition engine. | 2014-08-12 | 2026-07-16 | ⭐ 75,383 |
| face_recognition |
Python | Name; Image | Recognizes and compares faces through a Python API and command-line interface. | 2017-03-03 | 2026-06-25 | ⭐ 56,586 |
| whisper.cpp |
C++ | Audio | Provides an efficient C and C++ implementation for local Whisper transcription. | 2022-09-25 | 2026-07-11 | ⭐ 51,792 |
| Frigate |
TypeScript | Image; Video | Records and analyzes local IP-camera streams with real-time object detection, tracking, and search. | 2019-01-26 | 2026-07-16 | ⭐ 34,378 |
| InsightFace |
Python | Name; Image | Performs face detection, alignment, recognition, and embedding analysis across multiple runtimes. | 2017-09-01 | 2026-05-23 | ⭐ 29,263 |
| DeepFace |
Python | Name; Image | Performs face verification, recognition, search, and facial attribute analysis. | 2020-02-08 | 2026-06-29 | ⭐ 23,110 |
| WhisperX |
Python | Audio | Adds word-level timestamps and speaker diarization to speech transcription. | 2022-12-09 | 2026-07-13 | ⭐ 23,103 |
| CompreFace |
Java | Name; Image | Provides self-hosted face detection, recognition, verification, and similarity search through a REST API. | 2020-07-06 | 2023-11-14 | ⭐ 8,138 |
| docTR |
Python | Image; Document | Detects and recognizes text in document images using deep-learning models. | 2021-01-08 | 2026-07-15 | ⭐ 6,182 |
| ZoneMinder |
PHP | Image; Video | Monitors, records, and reviews IP, USB, and analog camera feeds. | 2013-04-12 | 2026-07-15 | ⭐ 5,882 |
| ExifTool | Perl | Image | Reads and writes metadata embedded in images and other file formats. | 2018-05-09 | 2026-05-27 | ⭐ 4,875 |
| Torchreid |
Python | Name; Video | Re-identifies people across images and camera views with pretrained models and training tools. | 2018-03-11 | 2026-01-09 | ⭐ 4,868 |
| motionEye |
Python | Image; Video | Provides web-based multi-camera monitoring, motion detection, recording, and review. | 2015-08-30 | 2026-06-20 | ⭐ 4,635 |
| ImageHash |
Python | Image | Calculates perceptual image hashes for similarity and duplicate-image comparison. | 2013-03-02 | 2025-04-17 | ⭐ 3,852 |
| Search by Image |
JavaScript | Image | Sends images to multiple reverse-image search engines from Chrome, Edge, and Safari. | 2017-06-17 | 2026-06-27 | ⭐ 3,597 |
| Viseron |
Python | Image; Video | Analyzes local camera feeds with motion, object, face, and license-plate detection. | 2020-08-30 | 2026-07-15 | ⭐ 3,284 |
| Human |
TypeScript | Name; Image | Performs face detection, recognition, matching, and broader human analysis in browsers and Node.js. | 2020-10-11 | 2025-12-13 | ⭐ 3,209 |
| Sherloq |
Python | Image | Combines metadata, error-level, noise, clone, splice, and resampling analysis for images. | 2017-06-24 | 2026-07-16 | ⭐ 3,167 |
| DeepCamera |
JavaScript | Image; Video | Analyzes camera feeds with local vision models, face recognition, re-identification, and configurable AI skills. | 2019-03-05 | 2026-04-21 | ⭐ 2,908 |
| RetinaFace |
Python | Image | Detects, aligns, and extracts faces from images for downstream comparison workflows. | 2021-04-25 | 2026-06-01 | ⭐ 2,012 |
| MediaInfo |
C++ | Video; Audio | Extracts technical metadata from audio, video, image, and container formats. | 2014-06-10 | 2026-06-15 | ⭐ 1,966 |
| Photonix |
Python | Image | Organizes and searches local photo collections using faces, objects, locations, and visual attributes. | 2017-03-07 | 2026-07-07 | ⭐ 1,953 |
| unblink |
Go | Image; Video | Uses vision-language models to monitor camera feeds and search recorded frames with natural language. | 2025-11-05 | 2026-03-09 | ⭐ 1,471 |
| OpenOCR |
Python | Image; Document | Provides an open toolkit for text detection and recognition in images and documents. | 2024-05-31 | 2026-05-20 | ⭐ 1,409 |
| HomeGallery |
JavaScript | Image | Indexes local photos and videos for reverse-image lookup, face search, and semantic discovery. | 2020-12-22 | 2026-06-22 | ⭐ 1,169 |
| Kerberos Agent |
Go | Image; Video | Runs local video monitoring, recording, motion analysis, and event capture for RTSP camera streams. | 2020-08-12 | 2026-07-16 | ⭐ 1,073 |
| camera.ui |
TypeScript | Image; Video | Records, monitors, and searches local camera feeds with on-device detection workflows. | 2021-10-27 | 2026-07-16 | ⭐ 1,063 |
| clearcam |
Python | Image; Video | Adds object detection, tracking, notifications, summaries, and search to security-camera feeds. | 2025-01-04 | 2026-07-15 | ⭐ 949 |
| Horus | Python | Image | Performs local image and digital evidence analysis. | 2024-01-21 | 2026-04-11 | ⭐ 516 |
| gallery-dl |
Python | Image | Downloads image galleries and media collections from supported websites. | 2026-03-24 | 2026-07-15 | ⭐ 380 |
| SentryShot |
Rust | Image; Video | Records camera streams and applies local object detection through a web video-management interface. | 2023-10-29 | 2026-04-27 | ⭐ 357 |
| VibeNVR |
JavaScript | Image; Video | Provides privacy-focused local camera recording and monitoring without a cloud dependency. | 2026-01-15 | 2026-07-16 | ⭐ 326 |
| eye_of_web | Python | Image | Provides an open-source workflow for face-based image search. | 2025-12-31 | 2026-01-18 | ⭐ 303 |
| GVision | Python | Image | Uses image analysis to detect landmarks and related web entities. | 2023-03-29 | 2024-12-08 | ⭐ 272 |
| ExifTool Web | Svelte | Image | Runs ExifTool metadata inspection in a browser through WebAssembly. | 2025-02-22 | 2026-01-10 | ⭐ 146 |
| goris |
Go | Image | Runs Google reverse-image searches from the command line. | 2017-04-26 | 2026-07-07 | ⭐ 124 |
| IntelHub | JavaScript | URL; Image | Adds local browser tools for metadata, archives, dorking, and OSINT lookups. | 2025-05-15 | 2026-07-09 | ⭐ 120 |
| Project Eyes On |
Python | Video | Finds publicly accessible IP-camera streams through public directories and web-search queries. | 2026-01-10 | 2026-01-12 | ⭐ 120 |
| EfficientIR |
Python | Image | Finds similar and duplicate images in local collections using visual embeddings. | 2020-03-30 | 2024-07-22 | ⭐ 112 |
| lingolens | HTML | Image | Runs multilingual Google Lens searches and exports the results. | 2023-03-10 | 2026-05-29 | ⭐ 85 |
| PhotOSINT | JavaScript | Image | Extracts image metadata and adds reverse-image search actions to the browser. | 2019-09-15 | 2021-07-13 | ⭐ 60 |
| OpenArchive Save |
Swift | File | Captures and preserves mobile media with secure storage and provenance-oriented workflows. | 2018-06-06 | 2026-05-10 | ⭐ 20 |
| ProofMode |
Kotlin | File | Adds hashes, signatures, sensor data, and C2PA provenance to captured mobile media. | 2022-01-10 | 2026-07-15 | ⭐ 18 |
| Amanu |
Python | Audio | Runs local speech transcription and assigns timestamped passages to detected speakers. | 2026-07-09 | 2026-07-16 | ⭐ 1 |
Tools for locations, coordinates, maps, wireless identifiers, aircraft, and satellite data.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| World Monitor | TypeScript | Location | Unifies geopolitical news, infrastructure, and event monitoring in one dashboard. | 2026-01-08 | 2026-07-16 | ⭐ 61,929 |
| QGIS |
C++ | Location | Provides a complete desktop environment for geospatial data analysis and mapping. | 2011-05-02 | 2026-07-16 | ⭐ 14,092 |
| Shadowbroker | Python | Location | Tracks aircraft, satellites, seismic events, and other global activity. | 2026-03-05 | 2026-07-11 | ⭐ 9,757 |
| OSMnx |
Python | Location | Downloads, models, and analyzes street networks and other OpenStreetMap features. | 2016-07-24 | 2026-07-16 | ⭐ 5,781 |
| Google Maps Scraper by gosom |
Go | Organization Name; Location | Collects structured place and business information from Google Maps. | 2023-04-22 | 2026-07-13 | ⭐ 4,987 |
| GeoAI |
Python | Location; Image | Applies machine-learning and computer-vision workflows to geospatial data. | 2023-08-11 | 2026-07-16 | ⭐ 3,186 |
| Google Maps Scraper by omkarcloud |
Python | Organization Name; Location | Provides an alternative workflow for extracting business and place data from Google Maps. | 2023-05-19 | 2026-07-04 | ⭐ 2,897 |
| IPinfo CLI | Go | IP Address; ASN | Queries IP geolocation, ASN, privacy, and network data from the command line. | 2020-10-23 | 2026-04-28 | ⭐ 2,033 |
| asn | Shell | IP Address; ASN | Reports ASN, BGP, geolocation, reputation, and routing information for IPs. | 2020-07-22 | 2026-06-22 | ⭐ 1,911 |
| GeoLibre |
Python | Location; Image | Provides open geospatial and remote-sensing analysis workflows. | 2026-05-27 | 2026-07-16 | ⭐ 1,745 |
| Global Threat Map | TypeScript | Location | Maps conflicts, military bases, and historical geopolitical data. | 2026-01-22 | 2026-07-02 | ⭐ 1,691 |
| GeoWiFi | Python | Location; BSSID / SSID | Queries public Wi-Fi geolocation sources using BSSIDs and SSIDs. | 2022-02-05 | 2024-12-21 | ⭐ 1,372 |
| Satpy |
Python | Location; Image | Loads, transforms, composites, and exports meteorological satellite observations. | 2016-02-09 | 2026-07-08 | ⭐ 1,200 |
| GeoIntel | HTML | Location; Image | Uses assisted image analysis to estimate where a photograph was taken. | 2024-01-22 | 2026-03-09 | ⭐ 1,107 |
| CoastSat |
Python | Location; Image | Extracts and analyzes shoreline change from public satellite imagery. | 2018-09-28 | 2026-05-29 | ⭐ 885 |
| ShadowFinder | Python | Location | Estimates possible locations from the geometry of shadows in an image. | 2024-05-01 | 2026-02-13 | ⭐ 593 |
| Sightline | TypeScript | Location | Searches OpenStreetMap data for real-world infrastructure patterns. | 2026-01-25 | 2026-05-10 | ⭐ 500 |
| ExifLooter | Go | Image | Finds geolocation metadata in local and remote images and maps the results. | 2022-07-30 | 2026-01-16 | ⭐ 494 |
| OSINT Mapping Tool | JavaScript | Location | Organizes investigation data and geographic findings on an interactive map. | 2026-05-18 | 2026-07-05 | ⭐ 490 |
| EODAG |
Python | Location; Image | Searches and downloads Earth observation products from multiple data providers. | 2019-08-22 | 2026-07-10 | ⭐ 424 |
| Bellingcat OSM Search |
TypeScript | Location | Finds combinations of OpenStreetMap features based on their geographic proximity. | 2022-10-05 | 2026-07-07 | ⭐ 207 |
| Refloow Geo Forensics | JavaScript | Location; Coordinates; Image | Extracts media metadata, maps coordinates, and reconstructs event timelines. | 2026-02-04 | 2026-07-07 | ⭐ 178 |
| Bellingcat ADS-B History |
TypeScript | Location; Aircraft ID | Stores historical ADS-B observations and supports spatial, temporal, and aircraft filtering. | 2025-08-22 | 2026-03-05 | ⭐ 87 |
| Copernicus Browser |
JavaScript | Location; Image | Searches, visualizes, and compares Earth observation data from Copernicus services. | 2023-08-08 | 2026-07-09 | ⭐ 81 |
| IntellyWeave | Python | URL; Location; Document | Combines archive discovery, entity extraction, maps, graphs, and document analysis. | 2025-12-12 | 2026-01-12 | ⭐ 69 |
| Bellingcat Geoclustering |
Python | Location | Groups and explores geographic observations to identify spatial patterns. | 2022-06-29 | 2026-07-07 | ⭐ 45 |
| Locus | Python | Location; Coordinates; Image | Estimates GPS coordinates from street-level photographs. | 2025-11-22 | 2025-12-01 | ⭐ 29 |
| Bellingcat CouncilSearcher |
Python | Location | Searches local-government documents and records across supported council websites. | 2025-05-07 | 2026-01-07 | ⭐ 16 |
| Vantage | Elixir | Location; Image | Reconstructs image and video viewpoints inside three-dimensional environments. | 2024-11-15 | 2026-05-13 | ⭐ 14 |
| NEXUS | Python | Domain; IP Address; URL; Location; File Hash | Combines live multi-INT feeds, knowledge graphs, maps, and assisted analysis in a desktop platform. | 2026-03-20 | 2026-03-30 | ⭐ 10 |
| Geo Trajectory Analysis | Skill | Location; Video | Applies a documented video-geolocation method to estimate missile launch origins. | 2026-03-23 | 2026-03-23 | ⭐ 3 |
| Bellingcat OSINT Toolkit Skills | Skill pack | - | Packages hundreds of investigation resources by geolocation, media, identity, transport, and conflict use case. | 2026-07-12 | 2026-07-12 | ⭐ 0 |
| Norteia Lead Recon | Skill | Name; Organization Name; Location | Researches Spanish companies and leads through official open registers and geodata. | 2026-04-29 | 2026-04-29 | ⭐ 0 |
| Geolocation Skill | Skill | Location; Image | Guides photo geolocation with visual clues, map queries, and source references. | 2026-03-30 | 2026-03-31 | ⭐ 0 |
Tools for cryptocurrency addresses, blockchain activity, and transaction analysis.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| Manuscript | Rust | Crypto Address | Streams on-chain and off-chain data into systems prepared for analysis. | 2024-09-24 | 2026-03-28 | ⭐ 690 |
| Bitcoin ETL | Python | Crypto Address | Exports Bitcoin-family blockchain data into analysis-friendly formats. | 2018-09-13 | 2025-05-02 | ⭐ 458 |
| all-in-one-bot | Go | Crypto Address | Tracks on-chain activity and market signals through a Telegram interface. | 2023-03-28 | 2026-06-12 | ⭐ 180 |
| GraphSense Dashboard | Elm | Crypto Address | Provides interactive exploration of cryptocurrency transactions and entities. | 2017-10-18 | 2026-07-14 | ⭐ 135 |
| GraphSense Library | Python | Crypto Address | Supplies CLI and backend utilities for cryptocurrency analytics workflows. | 2022-10-11 | 2026-07-14 | ⭐ 17 |
| PolyShadow | Python | Crypto Address | Monitors new Polymarket wallets for unusual high-value positions. | 2026-01-10 | 2026-02-23 | ⭐ 2 |
| Wash Trade Scanner | Python | Crypto Address | Audits blockchain activity for wash trading and artificial volume patterns. | 2026-04-16 | 2026-07-10 | ⭐ 2 |
| BitSleuth Analyzer | TypeScript | Crypto Address | Analyzes Bitcoin wallets, transaction patterns, and mempool activity. | 2025-08-05 | 2026-07-07 | ⭐ 1 |
Cross-cutting investigation, case-management, correlation, and research workspaces.
| Project | Type | Target Input | Description | Created | Last Update | Stars |
|---|---|---|---|---|---|---|
| Anthropic Cybersecurity Skills | Skill library | - | Packages extensive offensive, defensive, CTI, forensics, and reconnaissance procedures. | 2026-02-25 | 2026-06-26 | ⭐ 25,629 |
| Claude Skills | Skills + plugins | - | Includes research, security, market analysis, compliance, and evidence-oriented agent skills. | 2025-10-19 | 2026-07-14 | ⭐ 22,623 |
| Flowsint | TypeScript | Name; Organization Name | Explores investigation entities and enrichments in a local graph-based workspace. | 2025-01-31 | 2026-07-01 | ⭐ 7,313 |
| Mr.Holmes | Python | Name; Username; Phone Number; Domain | Combines multiple identity, domain, phone, and social investigation modules. | 2021-06-23 | 2026-02-21 | ⭐ 3,857 |
| Argus | Python | Keyword | Combines multiple information gathering modules in a command-line toolkit. | 2024-10-01 | 2025-12-10 | ⭐ 3,808 |
| Timesketch |
Python | Event Data | Supports collaborative search, annotation, and analysis across multiple event timelines. | 2014-06-19 | 2026-07-10 | ⭐ 3,376 |
| CTF Skills | Skill pack | - | Supplies agent workflows for CTF categories including OSINT, forensics, and web investigation. | 2026-02-01 | 2026-07-10 | ⭐ 2,726 |
| sn0int | Rust | - | Provides a semi-automatic OSINT framework with installable modules. | 2018-10-05 | 2025-01-31 | ⭐ 2,485 |
| OpenOSINT | Agent + CLI + MCP | - | Combines OSINT tools in an interactive agent, command-line interface, and MCP server. | 2026-05-06 | 2026-07-14 | ⭐ 1,016 |
| Hackingtool Plugin | Plugin + skill | - | Makes a large catalogue of pentest and OSINT tools discoverable and runnable by Claude. | 2026-04-23 | 2026-04-25 | ⭐ 852 |
| Seekr | Go | Keyword | Offers a multi-purpose OSINT toolkit through a web interface. | 2022-12-06 | 2026-06-16 | ⭐ 834 |
| LinkScope Client | Python | Name; Organization Name | Represents investigation entities and relationships in an extensible visual workspace. | 2021-09-15 | 2025-02-06 | ⭐ 474 |
| PANO | Python | Name; Organization Name; Event Data | Combines link graphs, timelines, notes, and assisted investigation features. | 2024-12-30 | 2026-02-13 | ⭐ 472 |
| FollowTheMoney |
Python | Name; Organization Name; Dataset | Defines an investigative data model for entities, assets, documents, and relationships. | 2017-10-20 | 2025-06-27 | ⭐ 278 |
| OGI | Python | Name; Organization Name | Provides link analysis and open-source intelligence investigation workflows. | 2026-02-28 | 2026-06-07 | ⭐ 239 |
| PRISM | Python | - | Combines multi-target OSINT modules, OPSEC scoring, entity graphs, and assisted reporting. | 2026-03-30 | 2026-07-16 | ⭐ 138 |
| Huntkit |
Skills + MCP | Name; Organization Name; Event Data | Organizes cases, targets, findings, timelines, evidence hashes, and chain-of-custody records. | 2026-04-15 | 2026-07-06 | ⭐ 46 |
| deep-recon | Skill | - | Coordinates multi-agent research and stores reconnaissance findings in Obsidian. | 2026-02-18 | 2026-02-21 | ⭐ 41 |
| Abster Intelligence | TypeScript | Name; Organization Name; Event Data | Provides a local-first workspace for evidence, relationship graphs, timelines, OSINT lookups, and reports. | 2026-04-10 | 2026-07-01 | ⭐ 13 |
| OSINT Agent Skills | Skills + MCP | - | Combines OSINT playbooks, agent instructions, report templates, and MCP tool definitions. | 2026-06-27 | 2026-07-01 | ⭐ 12 |
| OSINT-NEXUS |
Python | Name; Organization Name | Combines multi-target collection, entity correlation, graphs, and reporting in a desktop application. | 2025-12-30 | 2026-01-04 | ⭐ 7 |
| OSINT Investigation | Skill | Name; Username; Location; Image | Guides geolocation, source verification, entity profiling, and social-media investigation. | 2026-05-02 | 2026-05-03 | ⭐ 6 |
| OSINT Investigator | Skill | Name; Organization Name; Location; Coordinates | Coordinates multi-domain investigations, public-record research, geolocation, and intelligence reports. | 2026-03-18 | 2026-03-20 | ⭐ 2 |
| OSINT Investigator for OpenClaw | Skill | Name; Username; Email; Organization Name; Domain; IP Address | Correlates usernames, emails, domains, IPs, organizations, and public profile evidence. | 2026-03-16 | 2026-03-16 | ⭐ 1 |
| Claude OSINT Plugin | Plugin + skills + MCP | URL; Image | Adds an intelligence-cycle methodology and configured search, media, archive, and analysis MCP servers. | 2026-04-09 | 2026-05-10 | ⭐ 1 |
| OSINT Researcher | Skill | - | Provides scoped OSINT, CTI, due diligence, and evidence-reporting procedures. | 2026-07-01 | 2026-07-06 | ⭐ 0 |