Topics / #osint

Osint projects on GitHub

Open-source intelligence: gathering information about targets from public sources.

As of , the most-starred Osint projects on GitHub are the-book-of-secret-knowledge (250.7K stars), Awesome-Hacking (122.8K stars) and sherlock (94.3K stars). GitHub.Locker tracks 68 Osint repositories with 1.4M stars combined. The fastest-growing on October 16 was gods-eye-view, with +353 stars in a day.

68Projects
1.4MStars in total
+1.9KStars in a day
Browse in the catalog →github.com/topics/osint ↗

Hot right now

Most stars gained in a day · Oct 16

+353

gods-eye-view

bilawalsidhu/gods-eye-view · ★ 57.2K

God's Eye View is a browser-based spy-satellite style simulator that overlays real public data — live aircraft, ships, satellites, earthquakes, traffic, and public cameras — onto a photorealistic 3D globe, with hands-free voice control via a realtime AI agent.

+311

the-book-of-secret-knowledge

trimstray/the-book-of-secret-knowledge · ★ 250.7K

A massive curated collection of lists, manuals, cheatsheets, blogs, hacks, one-liners and CLI/GUI/web tools that the author gathers from everyday sysadmin, DevOps and security work.

+122

GhostTrack

HunxByts/GhostTrack · ★ 19.1K

GhostTrack is a Python command-line OSINT tool used to track a target's approximate location or gather details about a phone number, essentially a piece of information-gathering tooling for recon work.

+117

geo-sleuth

Oldcircle/geo-sleuth · ★ 3.1K

geo-sleuth is an Agent Skill that figures out where a photo was taken by combining OpenStreetMap geometry, elevation skylines, satellite imagery and street view, run inside AI coding agents like Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.

The all-time top

68 projects · by stars

  1. #1 · trimstray/the-book-of-secret-knowledge

    the-book-of-secret-knowledge

    A massive curated collection of lists, manuals, cheatsheets, blogs, hacks, one-liners and CLI/GUI/web tools that the author gathers from everyday sysadmin, DevOps and security work.

    250.7K
  2. #2 · Hack-with-Github/Awesome-Hacking

    Awesome-Hacking

    A massive index that links out to dozens of other awesome-lists covering nearly every security domain: android security, bug bounty, fuzzing, malware analysis, OSINT, reverse engineering, web hacking, and more.

    122.8K
  3. #3 · sherlock-project/sherlock

    sherlock

    Sherlock hunts down social media accounts by username: give it a name and it checks across social networks for accounts registered under it.

    94.3K
  1. 4

    worldmonitor

    88.6Kkoala73/worldmonitor · TypeScript

    World Monitor is a real-time global intelligence dashboard that aggregates and AI-synthesizes news, geopolitical signals, and infrastructure data into one situational-awareness interface.

  2. 5

    SecLists

    74.2Kdanielmiessler/SecLists · PHP

    SecLists is a huge collection of ready-made wordlists for security testing: usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells and more, all gathered in one repository.

  3. 6

    gods-eye-view

    57.2Kbilawalsidhu/gods-eye-view · JavaScript

    God's Eye View is a browser-based spy-satellite style simulator that overlays real public data — live aircraft, ships, satellites, earthquakes, traffic, and public cameras — onto a photorealistic 3D globe, with hands-free voice control via a realtime AI agent.

  4. 7

    maigret

    39.2Ksoxoj/maigret · Python

    Maigret is an OSINT command-line tool that builds a dossier on a person by checking for an account under a given username across thousands of websites and pulling together whatever profile info it finds, with no API keys required.

  5. 8

    web-check

    35.1Klissy93/web-check · TypeScript

    Web-Check is an open-source OSINT dashboard that lets you analyse any website: it pulls IP info, SSL chain, DNS records, cookies, headers, server location, and more into one report so you can understand its tech stack and security posture.

  6. 9

    Anthropic-Cybersecurity-Skills

    34.6Kmukul975/Anthropic-Cybersecurity-Skills · Python

    An open-source library of 818 production-grade cybersecurity skills for AI agents, covering 34 security domains and mapped to six frameworks including MITRE ATT&CK and NIST CSF 2.0.

  7. 10

    awesome-osint

    30.3Kjivoi/awesome-osint

    This is a curated 'awesome list' of hundreds of free and paid OSINT (open source intelligence) tools and resources, organized into categories like general search, Google dorks, data breach lookup, social media, threat actors, and dark web.

  8. 11

    social-analyzer

    24.3Kqeeqbox/social-analyzer · JavaScript

    Social-Analyzer is an OSINT tool that searches and correlates a person's profile across roughly 1000 social media sites and websites, available as a CLI, an API, and a web app.

  9. 12

    spiderfoot

    23.5Ksmicallef/spiderfoot · Python

    Open source OSINT automation — it collects intelligence on a target for threat intel and attack surface mapping, whether you are doing red team recon or checking what your organisation has exposed.

  10. 13

    SingleFile

    22.6Kgildas-lormeau/SingleFile · JavaScript

    SingleFile is a browser extension that saves a complete, faithful copy of any web page into a single HTML file you can keep and reopen later.

  11. 14

    GHunt

    19.7Kmxrch/GHunt · Python

    GHunt is an offensive Google framework geared toward OSINT — collecting intelligence around Google — and its authors note that any Google-related use is possible.

  12. 15

    GhostTrack

    19.1KHunxByts/GhostTrack · Python

    GhostTrack is a Python command-line OSINT tool used to track a target's approximate location or gather details about a phone number, essentially a piece of information-gathering tooling for recon work.

  13. 16

    openfang

    18.2KRightNow-AI/openfang · Rust

    OpenFang is an open-source Agent Operating System written in Rust. Instead of a chatbot that waits for your prompt, it runs autonomous agents 24/7 — on schedules, monitoring targets, building knowledge graphs and reporting results to a dashboard.

  14. 17

    phoneinfoga

    18.2Ksundowndev/phoneinfoga · Go

    An open-source OSINT framework for scanning international phone numbers. It gathers basics like country, area, carrier and line type, then tries to find the VoIP provider or identify the owner.

  15. 18

    theHarvester

    18Klaramies/theHarvester · Python

    An open-source OSINT tool that gathers emails, subdomains and names about a domain or organization from public sources: search engines, certificate transparency logs, DNS datasets, code repositories and threat-intel platforms, normalizing hostnames, emails, IPs, URLs, ASNs, people and breach names.

  16. 19

    Awesome-Hacking-Resources

    17.5Kvitalysim/Awesome-Hacking-Resources

    A curated collection of hacking, penetration testing and AI red-teaming resources — courses, YouTube channels, CTF platforms and guides, picked to make you better at offensive security.

  17. 20

    twint

    16.4Ktwintproject/twint · Python

    Twint is a Python tool for scraping Twitter data — tweets, followers, following, likes and more — without using Twitter's official API, so it isn't bound by API limits or sign-up requirements.

  18. 21

    hacker-roadmap

    15.7Ksundowndev/hacker-roadmap

    This is a curated roadmap and toolkit index for learning and practicing ethical hacking: it explains what penetration testing is and groups hundreds of security tools, wordlists and references by category (recon, password attacks, wireless, exploitation, web hacking, post-exploitation, frameworks).

  19. 22

    amass

    15.4Kowasp-amass/amass · Go

    Amass is an OWASP project that maps attack surfaces and discovers external assets (like subdomains, IPs, and infrastructure) using open source intelligence gathering and active reconnaissance.

  20. 23

    holehe

    15.2Kmegadose/holehe · Python

    Holehe is an OSINT tool that checks whether an email address is registered on 120+ websites (Twitter, Instagram, Spotify, Imgur, etc) by abusing each site's 'forgot password' or registration flow, without alerting the target.

  21. 24

    Osintgram

    15.1KDatalux/Osintgram · Python

    Osintgram is an OSINT tool for Instagram that lets you collect, analyze, and run reconnaissance on any public Instagram account via an interactive shell, just by giving its nickname.

  22. 25

    subfinder

    14.6Kprojectdiscovery/subfinder · Go

    Subfinder is a fast passive subdomain enumeration tool that returns valid subdomains for a website by querying passive online sources, built for penetration testers and bug bounty hunters.

  23. 26

    awesome-malware-analysis

    14.3Krshipp/awesome-malware-analysis

    A curated 'awesome list' of malware analysis tools and resources, covering sample collection, sandboxes, detection tools, threat intelligence feeds, reverse engineering, and forensics.

  24. 27

    zhao

    14.1Kprogramthink/zhao · Python

    A dataset documenting China's 'Princeling Party' (太子党) — the family and business networks of the country's political elite — compiled to expose corruption and nepotism among Chinese officials.

  25. 28

    PENTESTING-BIBLE

    14KblaCCkHatHacEEkr/PENTESTING-BIBLE

    A curated catalog of over 200 numbered links to pentesting articles, bug bounty write-ups, cheat sheets and other security lists — a reading collection, not software.

  26. 29

    awesome-web-security

    13.9Kqazbnm456/awesome-web-security · Python

    A curated list of web security materials and resources, organized by vulnerability class and attack type (XSS, SQL injection, CSRF, SSRF, XXE, deserialization, OAuth, JWT, and more), plus cheatsheets, tools, and write-ups for penetration testing.

  27. 30

    instaloader

    13.6Kinstaloader/instaloader · Python

    Instaloader downloads pictures and videos from Instagram profiles, hashtags, stories, feeds, and saved media, along with captions, comments, geotags, and other metadata.

  28. 31

    Photon

    13.3Ks0md3v/Photon · Python

    Photon is a fast web crawler built for OSINT (open-source intelligence) gathering, extracting URLs, emails, social media accounts, secret keys, subdomains and more while it crawls a target site.

  29. 32

    nuclei-templates

    13.1Kprojectdiscovery/nuclei-templates · JavaScript

    This is a community-curated collection of over 11,000 detection templates for the Nuclei vulnerability scanner, covering CVEs, misconfigurations, exposed panels, and other security issues.

  30. 33

    hexstrike-ai

    12.9K0x4m4/hexstrike-ai · Python

    HexStrike AI MCP Agents is an MCP server that lets AI agents like Claude, GPT, or Copilot autonomously run 150+ real cybersecurity tools for automated pentesting, bug bounty hunting, CTF challenges, and vulnerability discovery.

  31. 34

    hacktricks

    12.6KHackTricks-wiki/hacktricks · JavaScript

    A free, open wiki of hacking tricks and techniques — everything the author has learnt from CTFs, real-world apps and security research, organized into a browsable reference with 12.5k+ GitHub stars.

  32. 35

    OSINT-Framework

    12.3Klockfale/OSINT-Framework · JavaScript

    OSINT Framework is a curated, browsable index of free OSINT (open-source intelligence) tools and resources, organized into a clickable category tree so you can find the right tool for a given task.

  33. 36

    Crucix

    12.1Kcalesthio/Crucix · JavaScript

    Crucix is a self-hosted personal intelligence dashboard that aggregates 27 open-source intelligence feeds — satellite fire detection, flight tracking, radiation monitoring, conflict data, market prices, and OSINT social feeds — refreshing every 15 minutes, and it can alert you via Telegram or Discord when something meaningful changes.

  34. 37

    404StarLink

    11.4Kknownsec/404StarLink

    404StarLink is a curated list of security-focused open-source projects maintained by Knownsec 404 Lab, created to showcase, support, and track high-quality, actively-maintained security tools.

  35. 38

    Shadowbroker

    11.3KBigBodyCobain/Shadowbroker · Python

    ShadowBroker is a decentralized OSINT dashboard that aggregates 60+ live intelligence feeds (aircraft, ships, satellites, CCTV, earthquakes, GPS jamming, scanners, mesh radio, and more) into one real-time map interface.

  36. 39

    awesome-hacker-search-engines

    11.3Kedoardottt/awesome-hacker-search-engines · Shell

    A curated list of search engines useful for penetration testing, vulnerability assessment, red/blue team operations, bug bounty hunting, and general OSINT work.

  37. 40

    osiris

    11.1Ksimplifaisoul/osiris · TypeScript

    OSIRIS is an open-source, real-time global intelligence (OSINT) dashboard. It aggregates live flight tracking, 17,000+ CCTV cameras, earthquakes, conflict zones, crypto tracing and 24/7 news streams onto a single WebGL map.

  38. 41

    Sublist3r

    11.1Kaboul3la/Sublist3r · Python

    Sublist3r is a Python tool that enumerates subdomains of a target website using OSINT, helping penetration testers and bug hunters gather subdomains for a domain they are targeting.

  39. 42

    Red-Teaming-Toolkit

    10.8Kinfosecn1nja/Red-Teaming-Toolkit

    It is a curated list of cutting-edge open-source security tools for red teamers and threat hunters, covering the full attack lifecycle from reconnaissance to exfiltration.

  40. 43

    awesome-threat-intelligence

    10.7Khslatman/awesome-threat-intelligence

    A curated catalog of threat intelligence resources — feeds, tools, frameworks, standards and research for tracking online threats. It is a pointer list on GitHub, not software you install.

  41. 44

    bbot

    10.7Kblacklanternsecurity/bbot · Python

    BBOT is a recursive internet scanner for hackers — it automates recon, bug bounty work and attack surface management (ASM), inspired by Spiderfoot.

  42. 45

    awesome-honeypots

    10.6Kparalax/awesome-honeypots · Python

    A curated, categorized list of honeypot software and related tools used by security researchers to deceive attackers, log their behavior, and study exploitation attempts.

  43. 46

    httpx

    10.5Kprojectdiscovery/httpx · Go

    httpx is a fast, multi-purpose HTTP toolkit from ProjectDiscovery that runs many probes against lists of hosts and URLs, built on the retryablehttp library to stay reliable under high thread counts.

  44. 47

    OneForAll

    10.1Kshmilylty/OneForAll · Python

    OneForAll is a powerful subdomain collection tool: point it at a target domain and it gathers subdomains from many sources — a core reconnaissance step in penetration testing, which is why the author built it.

  45. 48

    flowsint

    9.8Kreconurge/flowsint · TypeScript

    Flowsint is an open-source, graph-based OSINT investigation tool that lets analysts explore relationships between people, domains, IPs, organizations and more through a visual graph interface with automated enrichers.

  46. 49

    Claude-Red

    7.6KSnailSploit/Claude-Red · Python

    claude-red is a curated library of offensive security skills for the Claude Skills system: structured SKILL.md files that prime Claude with expert-level methodology for one attack surface each, from SQLi to shellcode.

  47. 50

    leak-check

    5.9Kgarinasset/leak-check · Python

    Leak-check (厘查, by 嘉林数据/Jialin Data) is a Python tool for checking whether your personal information shows up in data that has been widely leaked and circulated on the internet. It's a self-hosted checker, not a public lookup website.

  48. 51

    user-scanner

    5.4Kkaifcodec/user-scanner · Python

    User Scanner is an OSINT (open-source intelligence) CLI tool that takes an email address or username and scans it across 2720+ platforms (210+ email vectors, 2510+ username vectors) to map digital footprints, scrape profile metadata, and surface linked accounts.

  49. 52

    Agentic-Bug-Hunter

    5.4Kawarexone/Agentic-Bug-Hunter · Python

    Agentic Bug Hunter is an AI-powered bug bounty toolkit that runs recon, tests for vulnerabilities, validates findings against a strict gate, and writes submission-ready reports for HackerOne, Bugcrowd, Intigriti, or Immunefi, right from your terminal.

  50. 53

    Claude-BugHunter

    5.1Kelementalsouls/Claude-BugHunter · Python

    A drop-in skill bundle for the Claude Code skills system that turns Claude into a bug-hunting researcher or red-team operator: it ships 83 skills, 15 slash commands, and knowledge curated from 681 disclosed HackerOne reports across 24 vulnerability classes, plus enterprise identity and infrastructure attack matrices.

  51. 54

    Fieldwatch

    3.9KOffGridPete/Fieldwatch · Kotlin

    Fieldwatch is a receive-only Android app that passively listens for nearby Wi-Fi access points and Bluetooth LE advertisements, so you can see what wireless devices are around you.

  52. 55

    redamon

    3.1Ksamugit83/redamon · Python

    RedAmon is an open-source, self-hosted AI framework that chains reconnaissance, exploitation and post-exploitation into one pipeline, maps the attack surface into a Neo4j graph, and then triages findings and opens GitHub pull requests that fix what it discovers.

  53. 56

    geo-sleuth

    3.1KOldcircle/geo-sleuth · Python

    geo-sleuth is an Agent Skill that figures out where a photo was taken by combining OpenStreetMap geometry, elevation skylines, satellite imagery and street view, run inside AI coding agents like Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.

  54. 57

    WireTapper

    2.5Kh9zdev/WireTapper · HTML

    WireTapper is a wireless OSINT tool that passively discovers, maps, and analyzes nearby radio-based devices — Wi-Fi, Bluetooth, CCTV cameras, vehicles, IoT gadgets, and cell towers — without actively intruding on anything.

  55. 58

    ai-security-tool

    775ZeroDayEvil/ai-security-tool · HTML

    AI Security Tool is an open-source, cross-platform terminal and vulnerability scanner that combines a multi-protocol connectivity client (SSH, RDP, VNC, etc.), CVE/SBOM supply-chain auditing, and 12+ autonomous AI agents (DeepSeek, OpenAI) to automate pentesting, Red Team, and CTF workflows.

  56. 59

    dsh-redteam-model

    719SeaOf0/dsh-redteam-model · Python

    A plugin pack for the dsh (DeepSeek Harness) AI agent that adds nine preset red-team security research modes and seventeen runtime plugins, covering pentesting, code audit, binary analysis, anti-detection, incident response, cloud security and CTF solving.

  57. 60

    Offensive-Security-AI-Models

    691JoasASantos/Offensive-Security-AI-Models

    A curated list of open-weight, uncensored language models fine-tuned for offensive-security tasks like penetration testing, red teaming, and security research. The README documents over 20 models sourced from HuggingFace model cards as of September 2026.

  58. 61

    getcontact-cli

    613xdreizein666/getcontact-cli · Python

    GetContact CLI is a Python command-line tool that talks directly to the GetContact phone-lookup API, letting you check a number's display name, tags and email without installing the Android app or using a browser.

  59. 62

    blocklist-abuseipdb

    600borestad/blocklist-abuseipdb · Shell

    A continuously updated set of IP blocklists aggregating AbuseIPDB's worst IPv4 and IPv6 offenders (~99% confidence), plus other free public threat sources, meant to be loaded straight into a firewall to block malicious traffic.

  60. 63

    biointelligence-agent

    508ray-r-ren/biointelligence-agent · TypeScript

    It is an AI agent harness that builds a live, evolving 'biosecurity world' around any target you define, continuously gathering evidence and recommending protective actions.

  61. 64

    elosys

    458YuriRDev/elosys · TypeScript

    Elosys builds a consolidated database of Brazilian political candidates (2014-2026) from official government sources, cross-referenced by CPF/CNPJ, to investigate relationships between politicians and surface indicia of suspicious patterns like circular donations, shell companies, and wealth incompatible with declared income.

  62. 65

    instagram-private-graph

    4400x6rss/instagram-private-graph · Python

    It's a local research tool for authorized Instagram OSINT investigations: using an authenticated session it collects data visible to that account, scores candidate relationships to a target, and produces a network graph, target summary, signal summary, and human-readable report.

  63. 66

    LEAKSFORUMS

    364FSECDEV/LEAKSFORUMS

    LEAKSFORUMS is a collection of leaked data from hacker forums — a README table listing breached communities like Breached Forums, Black Market Reloaded, and Russian boards, each with a download link.

  64. 67

    wavedigger

    271christianrowlands/wavedigger · TypeScript

    WaveDigger is a web tool that looks up the physical location of Wi-Fi access points by their BSSID (MAC address), and LTE/5G NR cell towers by their network parameters, using Apple's location services API.

  65. 68

    about-me

    120trucesmallweht/about-me

    This is the personal about-me README of Eşref (trucesmallweht), a backend developer. It introduces who he is, what he works on and where to find him — a profile card, not a software project.

Often tagged together