> cat /dev/github | grep security-tools

~/hackyfeed $

A cybersecurity tools aggregator — discover the latest pentesting, red team, and offensive security tools from GitHub.

sort: ( this page )

Telegram-OSINT-Toolkit

The Telegram OSINT Toolkit is a sophisticated, locally operated tool designed for intelligence gathering on the Telegram platform, aimed at use cases in OSINT, cybersecurity research, and authorized law enforcement. Key features include advanced search capabilities, bulk monitoring, comprehensive data exports in multiple formats, member enumeration, and real-time monitoring, complemented by support for proxy and Tor integration, and persistent SQLite storage for efficient data handling.

Sovereign_Watch

Sovereign Watch is a self-hosted, edge-to-cloud intelligence platform designed for the fusion of multi-domain data, specifically high-velocity telemetry such as ADS-B, AIS, and OSINT. Its notable features include a "Pulse" architecture for real-time data processing and "Tiered AI" cognition, enabling comprehensive situational awareness while enforcing data sovereignty by operating on local hardware. The platform offers extensive monitoring capabilities through various pollers and an intuitive interface for data visualization and analysis.

social-id

Social Media ID Cheatsheet is a tool designed to help users identify unique profile IDs for various social media platforms using source code analysis and OSINT techniques. This tool is particularly valuable for digital forensics and monitoring, as it allows users to maintain access to accounts even after changes to usernames or display names, supporting both API integration and data analysis needs. Notable features include support for multiple platforms like Instagram, Threads, TikTok, and 𝕏, ensuring comprehensive coverage for user ID tracking.

sinarc

SINARC (Sistema Integrado de Análise de Redes Complexas) is an experimental open-source program designed for data analysis of public sources by generating graphs. Its primary use case is to empower citizens to exercise social control over public administration in line with constitutional rights and the Law on Access to Information. Notable features include integration with various databases, interactive tutorials, and a command alphabet, facilitating user engagement and comprehensive data analysis.

security-suite

Security Suite is an open-source toolkit designed for comprehensive OSINT reconnaissance, web security testing, API security assessments, and compliance checks, all enhanced with AI-powered analysis capabilities. It features 11 OSINT modules, six web scanners, and four API security tools, along with integration for SIEM systems, scheduled scans, and a REST API for programmatic access. The tool simplifies setup across multiple operating systems and allows for customization of AI models and tool options during installation.

SearchPhone

SearchPhone is a robust OSINT tool designed for retrieving linked phone number information by leveraging multiple APIs to aggregate data from various sources. Key features include phone number validation, simultaneous searches across Google and DuckDuckGo, GitHub code searches, social media mentions on Reddit, carrier information retrieval, and automated report generation in both JSON and PDF formats, all executed with efficient parallel processing for improved speed.

pyahmia

PyAhmia is a command-line tool that allows users to search for hidden services on the Tor network by querying the Ahmia.fi search engine without the explicit requirement of using Tor. Notable features include the ability to export search results to CSV, enable or disable routing through Tor, cache responses for faster searches, and filter results by time period and limit.

Public-Scripts

The Public-Scripts repository offers a collection of PowerShell scripts designed for enhancing identity security and automating tasks within Microsoft 365 and Windows infrastructure. Notable features include scripts for Entra ID credential enumeration, Exchange app access policy audits, and OSINT tools, all aimed at streamlining enterprise management and security auditing processes. This repository consolidates tools previously available on TechNet Gallery and provides links to companion blog posts for additional context and usage guidance.

psn_monitor

psn_monitor is a Python-based tool designed for real-time tracking of Sony PlayStation Network (PSN) player activities, allowing users to monitor online status, game play, and detailed player profiles. It features capabilities such as email notifications for various player events, CSV logging of user activities, and configuration flexibility through environment variables and command-line arguments. The tool is optimized for functionality with minimal object-oriented programming, ensuring ease of use for automation and monitoring purposes.

postleaks

Postleaks is a cybersecurity tool designed to identify sensitive data leaks in the public library of the Postman API platform. It allows users to search for specific keywords within public API assets, using customizable options such as strict matching and workspace extension, while utilizing the Whispers library for secret detection. Notable features include output formatting, keyword file input, and the ability to display results in JSON format, along with various filters for refinement.

People-Search-OSINT

People-Search-OSINT is a comprehensive resource tool that aggregates various free people search websites primarily focused on the UK and the US. It includes links to numerous data brokers and public record services that provide information such as contact details, background checks, and electoral rolls. Notable features include a diverse selection of services designed for different use cases, ranging from family history research to social media profile searches.

osintelligence

OSINT Intelligence is a comprehensive repository of Open Source Intelligence (OSINT) tools designed for cybersecurity professionals, researchers, and investigators. It categorizes various intelligence resources such as domain analysis, social media monitoring, and threat intelligence, facilitating streamlined access and contribution through a structured markdown format. Notable features include its organized tool listings by category and a collaborative framework encouraging community contributions.

OSINTai

OSINTai is an advanced AI-powered web crawler designed for Open Source Intelligence (OSINT) professionals, enabling efficient and accurate intelligence gathering from various web sources. It features high-performance asynchronous crawling, intelligent proxy management, and AI-driven content analysis, allowing for comprehensive extraction of indicators such as emails, domains, and social media handles, while ensuring operational security through stealth techniques and duplicate content detection. Notably, OSINTai includes a scoring system that prioritizes data based on risk assessment and indicator density, enhancing the relevance and utility of the gathered intelligence.

OSINT-Tools-Russia

OSINT-Tools-Russia is a curated collection of open-source intelligence tools specifically designed for conducting investigations related to the Russian Federation. The repository features a variety of categories including public data portals, legal entities, cadastral maps, vehicles, and social information, with most tools available primarily in Russian. Notably, some resources require specific browser configurations for optimal use, thereby suggesting a preference for tools that integrate built-in certificates like Yandex-browser.

Osint-ToolKit

The OSINT Toolkit is a web-based platform designed for conducting comprehensive open-source intelligence (OSINT) investigations using various tools and methodologies. Key features include GitHub profile analysis, DNS reconnaissance, WHOIS history tracking, and integrations with external resources to uncover emails, phone numbers, and compromised accounts. Built with FastAPI and TailwindCSS, it emphasizes user experience while providing extensive data retrieval and analysis capabilities.

osint-namecheckers-list

The "osint-namecheckers-list" repository provides a comprehensive catalog of curated tools for username searches, account discovery, and username availability checks across various social networks and websites. Notable features include a wide array of open-source tools with capabilities such as extensive site coverage, batch processing, custom reports in multiple formats, and advanced filtering options, enhancing operational efficiency in OSINT workflows. The repository focuses specifically on username-related tools, ensuring that users have access to effective and specialized resources for namechecking.

OSINT-Kit

OSINT Kit is a comprehensive repository of tools designed for Open Source Intelligence (OSINT) that aids researchers, security professionals, and enthusiasts in collecting publicly accessible information from the web. The tool categorizes resources into various domains, such as data breach searches, social media intelligence, and image analysis, facilitating streamlined access to a wide array of OSINT methodologies. It is built using Astro and Starlight, with contributions encouraged from the community.

OSINT-for-countries-V2.0

OSINT for Countries V2.0 is a comprehensive collection of open-source intelligence tools and resources, organized by country, aimed at supporting fact-checkers and digital profilers. The repository features a standardized format for categorizing resources, covering various domains such as legal information, public documents, personal identifiers, and more. Notably, it encourages community contributions to keep the content current and relevant, filling a gap left by outdated collections.

OSINT-CSE

OSINT Custom Search Engines (CSE) is a repository that consolidates various custom search engines tailored for open-source intelligence (OSINT) tasks across multiple platforms and data types. This tool primarily serves investigators seeking enhanced searching capabilities on social media, public records, and other digital repositories, offering specialized engines for users to effectively search for specific information like names, social media accounts, and sanctioned entities. Notable features include a wide assortment of manually tested CSEs, integration with popular OSINT methodologies, and community contributions for ongoing updates and improvements.

OSINT-BIBLE

OSINT Bible 2026 is a comprehensive repository designed for the ethical practice of Open-Source Intelligence (OSINT), providing a curated compilation of procedures, tools, and methodologies for effective information gathering and analysis. Its primary use case is to assist researchers and investigators in performing lawful and ethical OSINT activities, featuring a wide array of investigation techniques, frameworks for automation, and specialized insights into various areas like threat intelligence and deep web research. Notable features include a structured quick index for easy navigation, a focus on ethical guidelines, and complementary resources like Abster Intelligence for private workspace management.

Optrasight

OptraSight is an open-source cyber threat intelligence workstation designed for security analysts and threat intelligence teams. It facilitates OSINT triage, threat actor profiling, and AI-assisted analysis, enabling users to collect threat signals, review evidence, and draft defensive queries for SIEM and detection systems within a cohesive local environment. Notable features include an intuitive interface for evidence review, enriched actor context, and a clear traceability workflow from data intake to actionable insights.

ogi

OpenGraph Intel (OGI) is an open-source visual link analysis and OSINT framework designed for interactive exploration of connections between entities. Its primary use case lies in performing in-depth investigations through features such as a visual graph interface, over 20 built-in data transforms, real-time collaboration, and a plugin system for custom analytics. Notable functionalities include an AI Investigator for prompt-driven analysis, multi-format import/export capabilities, and seamless deployment via Docker.

Odinova

Odinova Digital Tiger is a discontinued application designed for Open-Source Intelligence (OSINT) that provides a comprehensive suite of tools for investigative workflows and data analysis. Notable features include a tabbed interface for document management and Markdown file viewing, HTML rendering for clear presentation, and dark theme support for enhanced usability. The tool aims to centralize OSINT operations, enabling efficient data management and promoting collaboration among users.

Nyx

Nyx is a reverse phone lookup tool designed to retrieve subscriber information associated with a phone number, such as usernames, photos, bios, and last activity data, primarily from instant messaging platforms like WhatsApp and Telegram. The tool emphasizes the vulnerabilities in these messaging applications, raising awareness of how their features can be exploited to harvest personal data. Users must operate within legal boundaries and obtain necessary permissions to use Nyx responsibly.

NotLoBi

NotLoBi's NotLoBi is an OSINT (Open Source Intelligence) framework designed to provide comprehensive cheat sheets and tools for various intelligence-gathering methodologies. It includes resources across multiple domains such as social media investigation, image analysis, geospatial intelligence, deep and dark web information, as well as financial and drug-related intelligence. Notable features include categorized tools for people's search, reconnaissance, cryptocurrency analysis, and anonymization techniques, making it a versatile resource for researchers and investigators.