OSINT is defined in the United States of America by Public Law 109-163 as cited by both the U.S. Director of National Intelligence and the U.S. Department of Defense (DoD), as intelligence "produced from publicly available information that is collected, exploited, and disseminated in a timely manner to an appropriate audience for the purpose of addressing a specific intelligence requirement." As defined by NATO, OSINT is intelligence "derived from publicly available information, as well as other unclassified information that has limited public distribution or access."
Information gathering framework for phone numbers
In-depth attack surface mapping and asset discovery
Fast passive subdomain enumeration tool.
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
Reconnaissance tool for GitHub organizations
A Tool for Domain Flyovers
A Workflow Engine for Offensive Security
An automated e-mail OSINT tool
Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
Quickly discover exposed hosts on the internet using multiple search engines.
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
a recon tool that allows searching on URLs that are exposed via shortener services
DetectDee: Hunt down social media accounts by username, email or phone across social networks.
OSINT tools and more but without API key
a file-sharing tool that allows you to find the responsible person in case of a leakage
Go CLI and Library for quickly mapping organization network ranges using ASN information.
crawls the website and finds broken social media links that can be hijacked
SatIntel is an OSINT tool for Satellites 🛰. Extract satellite telemetry, receive orbital predictions, and parse TLEs 🔭