OSINT Frameworks and Investigation Automation
Comprehensive OSINT frameworks and multipurpose tools covering multiple investigation disciplines in a single platform. Ideal for seasoned investigators looking to automate and centralize their workflows.
49 tools · Version française
- Analyst Research ToolsComprehensive web-based OSINT platform with 40+ integrated tools for people search, social media analysis, username enumeration, and archive searching.free
- BBOT (T)also written BBOTModular, recursive OSINT automation framework that chains 100+ modules for subdomain enumeration, email harvesting, port scanning and web crawling in a single scan.free
- CeWL (T)also written CeWL, Ce WLRuby-based web spider that generates custom wordlists by crawling target websites to specified depth and extracting unique words for password cracking.free
- ChangeDetection.ioalso written Change Detection.io, ChangeDetectionOpen-source website change monitoring tool. Track changes to any web page and receive notifications. Useful for monitoring targets, tracking updates and evidence collection.free
- Cupp (T)also written CuppPython utility that generates targeted password wordlists by profiling personal information to create customized password candidates for security testing.free
- DataSploit (T)also written DataSploit, Data SploitOSINT framework that performs reconnaissance on domains, emails, usernames, and phone numbers by aggregating data from multiple sources into consolidated intelligence reports.free
- DMitry (T)also written DMitry, D MitryDeepmagic Information Gathering Tool — CLI recon tool performing WHOIS, subdomain enumeration, email harvesting and TCP port scanning against a target.free
- Feed Filter MakerFilters an existing RSS feed on keywords, to keep only what matters out of a noisy source.free
- FetchRSSalso written Fetch RSSBuilds an RSS feed by pointing at the elements of a page to follow, with no code.freemium
- FinalRecon (T)also written FinalRecon, Final ReconAll-in-one Python OSINT tool: headers, whois, SSL, DNS, subdomains, links, wayback, Google dorking.free
- GephiOpen source network visualization and analysis platform for exploring complex graphs — supports import of relationship data to map social networks, bot clusters and entity connections.free
- HackerTargetalso written Hacker TargetOnline network intelligence tools suite. Includes DNS lookups, IP analysis, traceroute, port scanning, reverse IP, subdomain finder and website vulnerability scanning.freemium
- httpx (T)also written httpxFast and multi-purpose HTTP toolkit for bulk URL probing — checking live hosts, status codes, titles, technologies and redirects across large target lists.free
- IFTTTNo-code automation platform connecting 900+ apps and services with trigger-action applets for automating workflows and data collection.freemium
- Inquisitor (T)also written InquisitorOrganization-centric OSINT footprinting tool that automates asset discovery, ownership correlation, and relationship visualization.free
- IntelligenceXalso written Intelligence XWeb-based intelligence search platform aggregating pastes, leaks, darknet content, stealer logs, and public records across Tor, I2P, and surface web.freemium
- IntelOwl (T)also written IntelOwl, Intel OwlSelf-hosted threat intelligence platform that orchestrates 200+ analyzers for IP, domain, URL, file and hash enrichment from a single API or web interface.free
- IntRec-Pack (T)also written IntRec-Pack, Int Rec-Pack, IntRec PackBash script bundle for automated download, installation, and deployment of 14 OSINT and recon tools.free
- Kali Linux OS (T)also written Kali Linux OSOpen-source Debian-based distribution with 600+ pre-installed security tools for penetration testing, security research, and reverse engineering.free
- LampyreDesktop OSINT investigation platform with pre-built data connectors for domain, IP, email, social media and corporate registry queries, displayed as interactive graphs.freemium
- Low Hanging Fruit (T)also written Low Hanging FruitModular Python penetration testing reconnaissance tool automating Nmap, Arachni, load balancer detection, and domain scanning.free
- MIDINS TITANalso written MIDINSTITANUnable to verify; URL unresponsive. Possible connection refusal or offline status.unknown
- MitakaBrowser extension that adds right-click OSINT context menus for IPs, domains, hashes, email addresses and URLs — launching them instantly in 90+ investigation tools.free
- NewsBluralso written News BlurFeed reader that learns from what you hide or keep, and buries the rest on its own.freemium
- Omnibus (T)also written OmnibusInteractive CLI OSINT tool for investigating artifacts (IPs, domains, emails, usernames, hashes, Bitcoin addresses) with over 25 integrated OSINT modules.free
- OnWebChangealso written On Web ChangeMonitors a portion of a page rather than the whole of it, which avoids alerts caused by advertising or a date stamp.freemium
- OSINT-SPY (T)also written OSINT-SPY, OSINT SPYPython multi-target OSINT reconnaissance tool supporting email, domain, IP, organization, and blockchain analysis with SSL/TLS testing.free
- OSINTBuddyalso written OSINT BuddyOpen-source OSINT workflow tool: visual node-based graph to connect entities from multiple OSINT sources.free
- OverviewSelf-hosted document analysis and management platform for investigating large document collections through search, tagging, and plugin-based analysis with full data privacy.free
- OWASP D4N155 (T)also written OWASP D4N155, OWASP D4 N155, OWASPD4N155Intelligent OSINT-based wordlist generator that analyzes website content and metadata to create dynamic, context-aware wordlists for penetration testing.free
- ParrotSec OS (T)also written ParrotSec OS, Parrot Sec OSEfficient, lightweight security-focused Linux distribution with strong privacy and anonymity features for penetration testing and privacy-conscious computing.free
- Paterva / Maltego (T)also written Paterva / MaltegoEnterprise-grade OSINT and cyber investigations platform that visualizes relationships between data entities across multiple sources for threat intelligence and incident response.freemium
- PhoneInfoga (T)also written PhoneInfoga, Phone InfogaGo-based phone number reconnaissance framework validating numbers and aggregating metadata from phone directories, search engines, and reputation databases.free
- Photon (T)also written PhotonFast Python web crawler designed for OSINT that extracts URLs, emails, social media accounts, files, API keys, JavaScript endpoints, and DNS records from websites.free
- Power Automate (ex-Microsoft Flow)also written Power Automate (ex Microsoft Flow)Microsoft cloud workflow automation platform enabling complex multi-step processes with 1000+ pre-built connectors for integrating OSINT workflows.freemium
- ReconDog (T)also written ReconDog, Recon DogReconnaissance Swiss Army Knife that performs passive API-based reconnaissance on targets including DNS lookups, Censys queries, CMS detection, and subdomain enumeration.free
- ReconFTW (T)also written ReconFTW, Recon FTWAutomated recon tool: orchestrates 50+ OSINT and pentest tools for full-scope target reconnaissance.free
- RSS-Bridgealso written RSS BridgeGenerates an RSS feed from sites that no longer publish one, including several social platforms.free
- Scrummage (T)also written ScrummagePython/Flask OSINT aggregator centralizing search plugins for blockchain, domains, breaches, darkweb, threat intelligence, IP geolocation, and social media.free
- SlashAutomated OSINT tool for username enumeration across 187+ social media platforms, forums, and pastebin searches with phone/email extraction.free
- sn0int (T)also written sn0intSemi-automatic OSINT framework that queries 50+ data sources for domain, IP, email, social and breach data using a custom scripting language (Lua-based).free
- Subgraph OS (T)also written Subgraph OSAdversary-resistant alpha-stage operating system featuring hardened kernel, application sandboxing, built-in Tor integration, and memory-safe Golang applications.free
- Tails Live OS (T)also written Tails Live OSPortable Debian-based operating system designed for anonymous communication and privacy protection, running entirely from USB with no traces left after shutdown.free
- Vector (T)also written VectorPython-based OSINT tool that gathers social media accounts, finds locations, contact information, and performs leak database searches with graph-based data visualization.free
- VersionistaKeeps a dated history of a page's versions and shows exactly what was added or removed between two dates.freemium
- VirtualBox (T)also written VirtualBox, Virtual BoxOpen-source, general-purpose full virtualization software supporting x86_64 hardware across laptops, desktops, servers, and embedded systems.free
- W GeneratorFrontend-based wordlist generator for penetration testing that creates customized password dictionaries based on publicly available information using language-specific patterns.free
- WebSite-Watcheralso written Web Site-Watcher, WebSite WatcherDesktop monitoring software that handles pages behind a login, forums and RSS feeds, and keeps everything locally.paid
- Whonix (T)also written WhonixAnonymous operating system using two virtual machines (Gateway/Workstation) enforcing network isolation, making DNS leaks impossible.free
Frequently asked
- What is an OSINT framework?
- An OSINT framework like Maltego, SpiderFoot or Recon-ng automates data collection from many sources, visualizes connections and centralizes investigation results.
- What's the difference between Maltego and SpiderFoot?
- Maltego focuses on graphical relationship visualization (paid with community version). SpiderFoot is open-source and automates reconnaissance combining 200+ data sources.