OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
π΅οΈββοΈ Collect a dossier on a person by username from 6K websites
A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
AI-Powered Dark Web OSINT Tool
π΅οΈββοΈ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
Volatility 3.0 development
Digging Deeper....
IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Free hands-on digital forensics labs for students and faculty
A list of free and open forensics analysis tools and other resources
Semi-automatic OSINT framework and package manager
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
Indicators of Compromises (IOC) of our various investigations
LLM-compiled knowledge bases for any AI agent. Parallel multi-agent research, thesis-driven investigation, source ingestion, wiki compilation, querying, and artifact generation.
Kernel mode WinDbg extension and PoCs for token privilege investigation.
Comprehensive 2026 OSINT guide β 450+ tools, AI intelligence, methodologies & ethics across 35 sections for investigation & threat intel.
Simple Information Gathering Toolkit
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customerβs Azure Active Directory (AzureAD), Azure, and M365 environments.
GHOST - Global Human Operations & Surveillance Tracking: Open-source investigation management platform for tracking people, connections, and intelligence data. Because Excel spreadsheets are for accountants, not investigators. Non-commercial license.
Tosint is a Telegram OSINT tool that extracts actionable intelligence from bot tokens and chat IDs for security investigations.
An open database of international sanctions data, persons of interest and politically exposed persons
Tenzir is the data pipeline engine for security teams.
Cross-platform incident response and live forensic artifact collector with built-in detection, structured analysis, and report generation β designed for fast, actionable security investigations.
CTI Expert β Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.
Activity logging and an investigation dashboard for Laravel applications. Tested on Laravel 8 through 13. Add it as middleware or call it through a trait.
Automated Android forensic toolkit: extract device info, apps, contacts, call logs, SMS, system logs, and more via ADB for security audits and investigations.
Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
ARTEX νκ΅μ΄ν Β·AI κΈ°λ° μΉ¨ν΄μ¬κ³ λμ κΈ°λ₯ μΆκ° (upstream: Autumn-27/ARTEX, AGPL-3.0)
π Username, email & phone OSINT β 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and expert-reviewed updates.
Self-hosted case system for cybercrime investigators. A social network graph where every entity and tie traces to a graded assertion on a WORM-locked exhibit with chain of custody. FastAPI and Postgres, row-level security, TLP gating, two-person controls, one egress proxy.
Continuously updated catalogue of open-source OSINT tools, skills, plugins, MCP servers, and agentic integrations.
AI-powered code review platform that ranks #1 on AACR-Bench with 52.8% precision, 23.4% recall, and 32.4% F1. Plans PR investigations, runs parallel reviewers, and verifies every finding against code evidence.
Python-based cryptocurrency wallet forensics suite supporting 40+ wallet types on Windows, Linux, and macOS. Features encrypted vault analysis, wallet detection, seed recovery, multi-chain address derivation, threaded processing, and TXT/CSV/JSON export. Designed for security research, compliance, incident response, and blockchain investigations.
Mafia Old Country Ultimate Trainer Hub 2026 Guide for Windows
Phasmophobia Hack 2026 themed PC toolkit for ghost identification, evidence tracking, investigation planning, equipment management, map notes and contract analytics.
28 OSINT Agent Skills that turn Cursor, Claude & AI coding agents into a full open-source intelligence platform β reconnaissance, attribution, GEOINT, breach checks & due diligence. Ethical, sourced, passive-first.
β
Evidence-first game operations incident investigation agent with read-only MCP tools and reproducible evaluations.
A repo investigator for Claude Code and Codex. Offload codebase investigation and get up to 2.7Γ as much work from the same limits.
An opinionated workspace for AI assisted historical investigations.
XCheck IP Reputation Investigation System
Self-hostable incident-investigation agents for Sentry, Datadog, and Slack.
Open-source research prototype implementing an Agentic AI framework for real-time financial fraud detection, investigation, explainable risk assessment, and human-governed mitigation.
AI harness for long-running code audits, web pentests, and bug bounty hunting, built around how real investigations fail: anchored hypotheses, false negatives, and unreproducible reports.
Offline desktop workspace for organizing OSINT investigations.
Native macOS troubleshooting workbench for Apple, Workspace ONE, Intune and Jamf admins β evidence-first log investigation, local only
Evidence-driven forensic investigation: how a near-perfect A-share ML prediction signal collapsed under rigorous validation