Category
OSINT
Open-source intelligence tooling for discovering, collecting and correlating information that is already public: identifiers, domains, social profiles, metadata and relationships.
Subtopics
The branches this category is organised into. Counts reflect documented entries, not the number of tools that exist.
Username Investigation
1Check how an identifier appears across public platforms and services.
Open subtopicEmail & Domain
2Harvest and validate addresses, domains, DNS records and affiliated infrastructure.
Open subtopicSocial & Profiles
0Collect and organise public profile data from social platforms.
Unfilled — contributeRelationships & Link Analysis
1Model connections between people, hosts, accounts and artefacts.
Open subtopicMetadata & Documents
1Inspect embedded metadata in images, documents and media files.
Open subtopicGeolocation
0Work with coordinates, EXIF location data and reverse lookups.
Unfilled — contribute
OSINT tools
Sorted alphabetically; use the directory filters for platform or difficulty narrowing.
- Verified
ExifTool
Read, write and strip file metadata
OSINT·Metadata & Documents
- Linux
- macOS
- Windows
- Kali
- +5 more
8 commands·Beginner9 Jan 2026 - Verified
Sherlock
Search public platforms for a username
OSINT·Username Investigation
- Linux
- macOS
- Windows
- Kali
- +4 more
7 commands·Beginner14 Jan 2026 - Community
SpiderFoot
Automated OSINT collection with a reviewable module set
OSINT·Relationships & Link Analysis
- Linux
- macOS
- Windows
- Docker
- +1 more
3 commands·Intermediate21 Dec 2025 - Verified
Subfinder
Passive subdomain discovery through public sources
OSINT·Email & Domain
- Linux
- macOS
- Windows
- Kali
- +2 more
4 commands·Beginner30 Dec 2025 - Verified
theHarvester
Collect public contact and host data for a domain
OSINT·Email & Domain
- Linux
- macOS
- Windows
- Kali
- +3 more
4 commands·Beginner2 Jan 2026