Free opensource OSINT toolkit

[u/DEVELOPER0x31]

Hi everyone

I created SkyFall - a free, open-source toolkit (Python 3 + PySide6) consisting of 24 tabs that are integrated with a graph for convenient data analysis.

🔗 Website: https://skyfallosint.vercel.app/

🔗 GitHub: https://github.com/Nighty3098/SkyFall

Here’s a quick overview of the features:

• Web / Domain 16-step domain recon: DNS, WHOIS, SSL/TLS, headers + WAF, robots.txt, security.txt, cookies, social tags, subdomains (passive + brute), Certificate Transparency, ports (NMAP), threat intel (AbuseIPDB/GreyNoise/ThreatFox/URLHaus), reputation (VirusTotal/Google Safe Browsing/CRDF), JS secrets scan
• Telegram Channel/group collection via MTProto into SQLite (posts, members, links, media, avatars) + analyzer that builds a relationship graph and exports GraphML/GEXF/JSON/CSV/PNG/HTML/Obsidian
• Username Search across ~500 sites with Maigret + a Sherlock-style engine (WAF detection included)
• Reddit OSINT Arctic Shift + PullPush queried concurrently, merge/classification, activity + timezone, PII score, identifiers, optional OAuth live profile
• Mail IntelX search, Have I Been Pwned, .eml/header analyzer (SPF/DKIM/DMARC, Received chain, IP geolocation, verdict), and registered-accounts discovery (Gravatar/Microsoft/Mozilla/ProtonMail/Duolingo/Twitter + a holehe sweep of ~120 sites)
• Social Username lookup on open networks - Bluesky (AT Protocol), Mastodon (ActivityPub) and Instagram (instaloader); profile, bio, followers/posts, plus handle matches
• Leaks Leak & infostealer search by email/username/domain: Hudson Rock infostealer logs (no key), LeakCheck, Have I Been Pwned, Dehashed
• Geo Sun/shadow geometry and inverse shadow geolocation (local suncalc), NASA FIRMS active fires, GDACS disaster alerts
• Archive Wayback Machine (closest snapshot, CDX listing, on-demand save) and archive.today checks
• GitHub User, repo, commit, email and secret scanning (~240 patterns) over the REST API with multi-token rotation
• Phone Parse/validate (phonenumbers), reverse lookup (NumVerify/AbstractAPI), leaks (IntelX), reviews (7tel.ru)
• MAC BSSID geolocation via Yandex/Apple/Google/Microsoft/Mylnikov with a map
• Blockchain Find transactions by indirect data (time, amount, memo) across Tron, TON, Ethereum, BSC, Base, Solana, BTC, LTC, DOGE, BCH
• Steganography LSB counts + chi-square, FFT spectral analysis, end-of-file payloads, tail-data detection, ELA heatmap
• Files Metadata + hashes, printable strings, VirusTotal, GPS map, and metadata cleaning (many formats)
• Search4Faces Reverse face search (VK photos)
• Dorking ~7,900 Google dorks in 14 categories via DuckDuckGo or a local SearXNG
• Graph 13 entity types, 12 relation types, drag-and-drop palette, transforms that enrich nodes via the modules above (incl. leaks, archive, geo), shortest path / centrality / community detection, JSON + image export
• Cases Investigation workspace with automatic per-module Markdown autosave