~/hackyfeed $

The Atypical OSINT Guide serves as a comprehensive resource for professionals engaged in Open Source Intelligence (OSINT), offering unconventional insights and methodologies. It includes sections on immersive learning, practical training, and ethical considerations, making it suitable for users looking to enhance their investigative skills through gamification and diverse pathways. Notably, it encourages community contributions and emphasizes responsible practices in OSINT investigations.

The MISP Training repository provides a comprehensive set of training materials focused on MISP, threat intelligence, and OSINT. Key offerings include slide presentations on core concepts, MISP integration, administration, and best practices, along with the complete LaTeX source code for community contributions. This resource is designed to enhance knowledge sharing and collaboration in the field of cybersecurity and information sharing.

MISP modules are autonomous extensions designed to enhance the MISP threat intelligence platform by providing new functionalities such as data expansion, import/export capabilities, and workflow actions. These modules can operate independently through a web interface or command-line interface, utilizing a simple REST API for integration with other tools. Built in Python 3, they facilitate the customization of MISP's features without altering its core architecture, making it easier for users to extend functionality while maintaining system integrity.

Metawarc is a command-line tool designed for efficient extraction of metadata from files contained within WARC (Web ARChive) archives. Its primary use case involves the analysis and retrieval of metadata from various file formats such as PDFs, MS Office documents, and images, while offering features like built-in WARC support, a low memory footprint, and comprehensive command options for indexing, statistics, and metadata dumping. Notably, it generates a DuckDB database for organized metadata storage and provides easy CLI commands for various extraction tasks.

MetaDetective is a Python-based tool designed for metadata extraction and web scraping, specifically tailored for OSINT and pentesting applications. It enables users to extract a wide range of metadata—including authorship, software versions, GPS data, and hyperlinks—from various file types and conduct direct web scraping without reliance on search engines. Notable features include GPS reverse geocoding, customizable output formats, selective field extraction, and deduplication capabilities, making it a comprehensive solution for security researchers and penetration testers.

LinkedInDumper is a Python 3 script designed for extracting employee data from the LinkedIn API. It enables users to collect detailed information, including first names, last names, positions, and profile links with minimal API calls, while also allowing customization of email address formats through a command-line interface. The tool operates using an unofficial LinkedIn API and requires user authentication via a session cookie, facilitating the gathering of data even for accounts protected by two-factor authentication.

IntelHub is an advanced browser-based OSINT toolkit designed for researchers, analysts, and investigators, enabling comprehensive analysis with tools for Telegram analysis, digital forensics, and local AI integration. Notable features include a privacy-first local AI agent for offline operations, real-time web searches via DuckDuckGo, local file analysis with metadata extraction, and an enhanced user interface for streamlined investigations.

The guns.lol Username Checker is a command-line interface (CLI) tool designed to verify the availability of usernames on the guns.lol platform using Selenium with advanced detection logic. Key features include a stylish purple interface, automatic cleanup of Chrome processes, support for filtering premium aliases, and real-time notifications through Discord webhooks. This tool offers a streamlined user experience with options for custom username lists and logging results.

GoTor is a concurrent web crawler designed for robust web scraping through the Tor network, utilizing SOCKS5 support for anonymity. Its primary use case is to crawl websites while providing a JSON crawl report and a local HTTP API for job control, making it suitable for integration with applications like TorBot. Notable features include customizable crawl depth, worker count, and the ability to randomize headers, along with built-in diagnostics for Tor connectivity and health checks.

Ghost Map Pro is a free, open-source Chrome extension that allows users to scrape Google Maps search results and export them as structured CSV files containing business leads, including details such as business name, contact information, and ratings. Notable features include email discovery through automatic website scraping, exhaustive output fields tailored for CRM integration, and a completely self-contained operation within the user's browser, eliminating the need for API keys or external servers.

Crypto OSINT investigation toolkit

Farsight is a modular CLI-based reconnaissance and threat intelligence framework designed to convert open-source intelligence (OSINT) into actionable insights for security assessments. Its notable features include comprehensive organization discovery, asset recognition, threat intelligence capabilities, and support for news monitoring, alongside customizable outputs in Markdown and PDF formats. The tool can function effectively without API keys while allowing integration with various services for enriched data retrieval.

FalconEye is a comprehensive, self-hosted OSINT investigator's toolkit designed to streamline the investigation process through eighteen specialized modules. It facilitates a wide range of investigative tasks including cryptocurrency wallet tracing, phishing kit analysis, and domain intelligence, all integrated within a single interface that promotes one-click connectivity between related tools. Key features include LLM-powered scam detection for email headers, multi-source IP reputation assessments, and a fictional persona generator, making it a versatile platform for cybersecurity professionals.

dorks_hunter is a Python-based automation tool that serves as a wrapper for `xnldorker`, enabling users to systematically execute categorized Google dorks against a specified target domain. Its primary use case is to identify vulnerabilities or sensitive information exposure in web applications, with notable features including terminal output of results and an option to save the findings to a file for further analysis.

OWASP D4N155 is an information security auditing tool designed to generate intelligent wordlists based on the content of specified target pages. Its primary use case is to assist security professionals in identifying potential vulnerabilities by analyzing web content and extracting relevant terms for testing. Notably, it supports various input methods and custom parameters for tailored wordlist generation while being built primarily in Bash and requiring additional tools like Python and Go for full functionality.

cupidcr4wl is an open-source OSINT tool designed for searching usernames and phone numbers across various adult content platforms, particularly useful in missing persons investigations and human trafficking cases. Key features include support for multiple input formats, result exporting to HTML, and a regularly updated list of platforms for accurate searches. Users can also modify the tool to report inaccuracies and suggest new sites for inclusion.

The Common OSINT Model is a data model framework designed to simplify the integration and conversion of open-source intelligence (OSINT) data from various sources, primarily focusing on services like HTTP, TLS, and SSH. Notable features include its Pydantic-based structure for enhanced readability and data handling, automatic hash calculation for raw data, and implementation of converters for specific data sources such as Shodan and Censys. The tool is intended to support users by providing a consistent way to manage host and service information derived from external scanning services.

Cloud Data is a repository designed to collect and parse cloud-related data from multiple supported cloud providers, including AWS and GCP, to extract useful information about specified targets. Users can define their targets in a `targets.txt` file, and the tool automates data fetching every seven days using GitHub Actions, with outputs saved for easy access. Notable features include customizable scheduling through cron jobs and integration with multiple data sources for comprehensive analysis.

Claudii Exploratores is an OSINT suite that leverages AI to enhance reconnaissance by providing a skill set for the Claude AI model and a Model Context Protocol (MCP) server. It offers a robust catalog of 898 curated OSINT tools across 24 categories, an indicator classifier for various data types, and a curated URL builder that generates relevant search links based on analyzed indicators. Notable features include cross-platform search capability and an offline IBAN verifier, all while ensuring operational control remains with the user.

Checker-Scammer is a CLI-based investigative tool designed to ascertain the legitimacy of WhatsApp numbers before initiating transactions, thereby mitigating the risk of falling victim to scams. Notable features include comprehensive data retrieval that encompasses profile pictures, personal information analysis, and an extensive suite of OSINT capabilities for tracking, identifying, and analyzing individuals associated with phone numbers. The tool aims to provide users with a robust mechanism for online transaction security in an increasingly digital marketplace.

Certstream Server Go is a high-performance server written in Go that aggregates, parses, and streams real-time data from multiple certificate transparency logs to clients via WebSocket connections. It serves as a drop-in replacement for the original Certstream server, enabling users to analyze newly issued TLS certificates with more reliability and ease of use. Key features include support for custom configuration of monitored CT logs, straightforward setup via precompiled binaries or Docker images, and multiple endpoints for data connection.

Birdy-Edwards Lite is a local-first SOCMINT platform designed for gathering and analyzing publicly available Facebook profile data, including posts and interactions, without requiring AI models or cloud services. It features automated data collection, network visualization, interaction mapping, and various graphical outputs such as heatmaps and force-directed graphs, all optimized for modest hardware capabilities. This tool is specifically tailored for investigators seeking rapid, reproducible results while adhering to data access limitations.

BIRDY-EDWARDS is an AI-driven SOCMINT platform designed for local analysis of publicly available Facebook profile data, enabling authorized users to collect and analyze information without cloud dependencies. Key features include automated profile collection, interaction intelligence with sentiment analysis, country detection using LLM, interactive network graphs, and customizable PDF reporting. This tool is designed for legitimate intelligence, law enforcement, and academic research use, operating with a valid Facebook session and adhering to privacy regulations.

Ayesha OSINT Toolkit is an open-source tool designed for conducting various Open Source Intelligence tasks, including username availability checks, email validation, and IP address lookups. Built with Python, it leverages scripts that access publicly available data sources, enabling users to gather crucial information efficiently. Key features include individual script functionalities for username checking, email finding, and detailed IP information retrieval, all of which can be executed based on user requirements.

The Awesome OSINT Arsenal is a comprehensive open-source toolkit designed for open-source intelligence (OSINT) and cybersecurity, comprising over 753 tools organized into 50 categories. It facilitates quick installations on various Linux distributions and offers targeted scripts for specific tasks such as red teaming, blue teaming, and forensics, simplifying access to essential security resources. This toolkit supports multi-distro installers and includes a Termux subset for Android, enhancing its versatility for security researchers and practitioners.