Topics / #information-gathering

Information-gathering projects on GitHub

OSINT reconnaissance and data collection utilities

As of October 17, 2026, the most-starred Information-gathering projects on GitHub are sherlock (94.3K stars), maigret (39.2K stars) and awesome-osint (30.3K stars). GitHub.Locker tracks 20 Information-gathering repositories with 438K stars combined. The fastest-growing on October 16 was GhostTrack, with +122 stars in a day.

20Projects

438KStars in total

+408Stars in a day

Browse in the catalog →github.com/topics/information-gathering ↗

Hot right now

Most stars gained in a day · Oct 16

+122

GhostTrack

HunxByts/GhostTrack · ★ 19.1K

GhostTrack is a Python command-line OSINT tool used to track a target's approximate location or gather details about a phone number, essentially a piece of information-gathering tooling for recon work.

+93

sherlock

sherlock-project/sherlock · ★ 94.3K

Sherlock hunts down social media accounts by username: give it a name and it checks across social networks for accounts registered under it.

+41

maigret

soxoj/maigret · ★ 39.2K

Maigret is an OSINT command-line tool that builds a dossier on a person by checking for an account under a given username across thousands of websites and pulling together whatever profile info it finds, with no API keys required.

+22

phoneinfoga

sundowndev/phoneinfoga · ★ 18.2K

An open-source OSINT framework for scanning international phone numbers. It gathers basics like country, area, carrier and line type, then tries to find the VoIP provider or identify the owner.

The all-time top

20 projects · by stars

#1 · sherlock-project/sherlock
sherlock
Sherlock hunts down social media accounts by username: give it a name and it checks across social networks for accounts registered under it.
94.3K
#2 · soxoj/maigret
maigret
Maigret is an OSINT command-line tool that builds a dossier on a person by checking for an account under a given username across thousands of websites and pulling together whatever profile info it finds, with no API keys required.
39.2K
#3 · jivoi/awesome-osint
awesome-osint
This is a curated 'awesome list' of hundreds of free and paid OSINT (open source intelligence) tools and resources, organized into categories like general search, Google dorks, data breach lookup, social media, threat actors, and dark web.
30.3K

4
social-analyzer
24.3Kqeeqbox/social-analyzer · JavaScript
Social-Analyzer is an OSINT tool that searches and correlates a person's profile across roughly 1000 social media sites and websites, available as a CLI, an API, and a web app.
5
spiderfoot
23.5Ksmicallef/spiderfoot · Python
Open source OSINT automation — it collects intelligence on a target for threat intel and attack surface mapping, whether you are doing red team recon or checking what your organisation has exposed.
6
GHunt
19.7Kmxrch/GHunt · Python
GHunt is an offensive Google framework geared toward OSINT — collecting intelligence around Google — and its authors note that any Google-related use is possible.
7
GhostTrack
19.1KHunxByts/GhostTrack · Python
GhostTrack is a Python command-line OSINT tool used to track a target's approximate location or gather details about a phone number, essentially a piece of information-gathering tooling for recon work.
8
phoneinfoga
18.2Ksundowndev/phoneinfoga · Go
An open-source OSINT framework for scanning international phone numbers. It gathers basics like country, area, carrier and line type, then tries to find the VoIP provider or identify the owner.
9
Micro8
18KMicropoor/Micro8
A free, open-source series of penetration-testing lessons written by veteran Chinese pentester Micropoor and published as a GitBook. It covers code audit, web, intranet and domain penetration, tunneling, and log-based tracing.
10
theHarvester
18Klaramies/theHarvester · Python
An open-source OSINT tool that gathers emails, subdomains and names about a domain or organization from public sources: search engines, certificate transparency logs, DNS datasets, code repositories and threat-intel platforms, normalizing hostnames, emails, IPs, URLs, ASNs, people and breach names.
11
hacker-roadmap
15.7Ksundowndev/hacker-roadmap
This is a curated roadmap and toolkit index for learning and practicing ethical hacking: it explains what penetration testing is and groups hundreds of security tools, wordlists and references by category (recon, password attacks, wireless, exploitation, web hacking, post-exploitation, frameworks).
12
amass
15.4Kowasp-amass/amass · Go
Amass is an OWASP project that maps attack surfaces and discovers external assets (like subdomains, IPs, and infrastructure) using open source intelligence gathering and active reconnaissance.
13
holehe
15.2Kmegadose/holehe · Python
Holehe is an OSINT tool that checks whether an email address is registered on 120+ websites (Twitter, Instagram, Spotify, Imgur, etc) by abusing each site's 'forgot password' or registration flow, without alerting the target.
14
Osintgram
15.1KDatalux/Osintgram · Python
Osintgram is an OSINT tool for Instagram that lets you collect, analyze, and run reconnaissance on any public Instagram account via an interactive shell, just by giving its nickname.
15
awesome-web-security
13.9Kqazbnm456/awesome-web-security · Python
A curated list of web security materials and resources, organized by vulnerability class and attack type (XSS, SQL injection, CSRF, SSRF, XXE, deserialization, OAuth, JWT, and more), plus cheatsheets, tools, and write-ups for penetration testing.
16
Photon
13.3Ks0md3v/Photon · Python
Photon is a fast web crawler built for OSINT (open-source intelligence) gathering, extracting URLs, emails, social media accounts, secret keys, subdomains and more while it crawls a target site.
17
fsociety
12.3KManisso/fsociety · Python
fsociety is a penetration testing toolkit that bundles dozens of existing hacking tools (Nmap, sqlmap, WPScan, Reaver, etc.) behind one menu-driven script, inspired by the tools used in the 'Mr. Robot' TV series.
18
awesome-hacker-search-engines
11.3Kedoardottt/awesome-hacker-search-engines · Shell
A curated list of search engines useful for penetration testing, vulnerability assessment, red/blue team operations, bug bounty hunting, and general OSINT work.
19
Sublist3r
11.1Kaboul3la/Sublist3r · Python
Sublist3r is a Python tool that enumerates subdomains of a target website using OSINT, helping penetration testers and bug hunters gather subdomains for a domain they are targeting.
20
OneForAll
10.1Kshmilylty/OneForAll · Python
OneForAll is a powerful subdomain collection tool: point it at a target domain and it gathers subdomains from many sources — a core reconnaissance step in penetration testing, which is why the author built it.