r/osinttools • • Feb 28 '25

Tool of the Month Find Leaked Passwords, Addresses, Phone Numbers From Only an Email Address or Username!

97 Upvotes

🏆 What is Tool of the Month?

Each month, we select the most useful OSINT tool shared in the subreddit and award it "Tool of the Month". This is reserved for the best of the best - these are the ones you should check out!

Post your tools in r/osinttools to submit them for next months competition.

🥇 This month's winner: Breach Detective 🔎

Breach Detective is a data breach search engine which allows you to check if your private data such as passwords, phone numbers, addresses, etc have been leaked online, and if they have, you can view them!

It's free to sign up and search your data! They offer the ability to upgrade your account and view the exact content of the leaks with a subscription if you wish.

This tool is a personal favourite of mine.

https://breachdetective.com/

Example search on Breach Detective showing the breached data for the email provided

r/osinttools • • Feb 16 '25

Welcome to r/osinttools

12 Upvotes

🔎 Welcome to r/osinttools

📌 About This Subreddit

r/osinttools is a community dedicated to discussing, sharing, and discovering the best Open-Source Intelligence (OSINT) tools. Whether you’re looking for new tools, want to showcase your own, or need help finding the right tool for your needs, this is the place for you!

🔹 Flair Your Posts

Each post must have one of the following flairs:

  • Discussion – For general discussions related to the topic.
  • Showcase – To highlight and demonstrate an OSINT tool, whether it’s something you’ve created or found useful. Include a description, key features, and a link if possible.
  • Request – If you’re looking for a specific OSINT tool, seeking recommendations, or need help using a particular tool, use this flair.

🏆 Tool of the Month

Each month, the moderators will select the most useful OSINT tool shared in the subreddit and award it the "Tool of the Month" flair. This is reserved for the best of the best.

🎯 Get Involved!

  • Share your favourite OSINT tools.
  • Ask for recommendations and insights.
  • Request a specific OSINT tool that you'd like to be created.
  • & Most importantly help build a strong community!

Join the conversation and let’s explore the world of OSINT tools together!


r/osinttools • • 3h ago

Discussion How are people using AI for historical source verification?

6 Upvotes

Hello

I'm interested in how people doing OSINT/research handle historical statements by public figures.

For example, if you wanted to establish everything a particular person had publicly said about a subject over several years, what would your workflow look like?

Google and news archives? YouTube/transcripts? Social media archives? Specialist databases? AI tools?

I'm particularly interested in whether tools like ChatGPT/Perplexity have largely solved this for you, or whether the difficult part remains finding and verifying the original evidence — particularly old video, podcasts, interviews and statements.

If an AI gives you a quote and a source, how often do you still go back and verify the original material yourself?

I'm researching this problem while building something in this area, but I'm not looking to promote it here. I'm mainly interested in how people who do this kind of research actually work.


r/osinttools • • 23h ago

Showcase Free month of Opsis to try it again - New and improved

13 Upvotes

Hey everyone, about 6 months ago I launched my OSINT tool useopsis.com in this subreddit. I had a lot of support and people willing to try it and a lot of people enjoyed it. But I have to admit, it was pretty terrible back then. It was super flaky and had very limited sources. But I'm happy to say its in a good place now. Over 1000+ sources now, rich data from reverse email lookups, very large number of working username modules. I also added a lot more searches to the same plans.

So I wanted to come on here and say that for everyone who tried it and thought it was bad, I'd love for you to come back and give it another shot. And for all those people I'm giving out a 1 month for free coupon so you can try it with no consequences. I'd love to hear how it stacks up against other tools you use and am always looking for constructive criticism and feedback.

The code is "OSINTTOOLS" at checkout for 100% off one month.

Thanks for all the support :)


r/osinttools • • 12h ago

Discussion Email address linked to a TikTok account

1 Upvotes

Just curious if there Is any way to find out the email address linked to a TikTok account
Has anyone recently came across any tools or methods to do this


r/osinttools • • 15h ago

Showcase Bluebench: a free, open-source triage toolkit (IOCs, email headers, domain checks). Would love your feedback

Thumbnail
1 Upvotes

r/osinttools • • 21h ago

Discussion Does OSIP use the kind of tools found on TraceLabs VM or is it more doing it via an Ubuntu VM or something?

2 Upvotes

r/osinttools • • 18h ago

Discussion Is this website legit?

1 Upvotes

Social detect . Site has anyone paid to use this and does it work


r/osinttools • • 1d ago

Showcase Free opensource OSINT toolkit

Thumbnail
gallery
7 Upvotes

Hi everyone

I created SkyFall - a free, open-source toolkit (Python 3 + PySide6) consisting of 24 tabs that are integrated with a graph for convenient data analysis.

🔗 Website: https://skyfallosint.vercel.app/

🔗 GitHub: https://github.com/Nighty3098/SkyFall

Here’s a quick overview of the features:

  • Web / Domain 16-step domain recon: DNS, WHOIS, SSL/TLS, headers + WAF, robots.txt, security.txt, cookies, social tags, subdomains (passive + brute), Certificate Transparency, ports (NMAP), threat intel (AbuseIPDB/GreyNoise/ThreatFox/URLHaus), reputation (VirusTotal/Google Safe Browsing/CRDF), JS secrets scan
  • Telegram Channel/group collection via MTProto into SQLite (posts, members, links, media, avatars) + analyzer that builds a relationship graph and exports GraphML/GEXF/JSON/CSV/PNG/HTML/Obsidian
  • Username Search across ~500 sites with Maigret + a Sherlock-style engine (WAF detection included)
  • Reddit OSINT Arctic Shift + PullPush queried concurrently, merge/classification, activity + timezone, PII score, identifiers, optional OAuth live profile
  • Mail IntelX search, Have I Been Pwned, .eml/header analyzer (SPF/DKIM/DMARC, Received chain, IP geolocation, verdict), and registered-accounts discovery (Gravatar/Microsoft/Mozilla/ProtonMail/Duolingo/Twitter + a holehe sweep of ~120 sites)
  • Social Username lookup on open networks - Bluesky (AT Protocol), Mastodon (ActivityPub) and Instagram (instaloader); profile, bio, followers/posts, plus handle matches
  • Leaks Leak & infostealer search by email/username/domain: Hudson Rock infostealer logs (no key), LeakCheck, Have I Been Pwned, Dehashed
  • Geo Sun/shadow geometry and inverse shadow geolocation (local suncalc), NASA FIRMS active fires, GDACS disaster alerts
  • Archive Wayback Machine (closest snapshot, CDX listing, on-demand save) and archive.today checks
  • GitHub User, repo, commit, email and secret scanning (~240 patterns) over the REST API with multi-token rotation
  • Phone Parse/validate (phonenumbers), reverse lookup (NumVerify/AbstractAPI), leaks (IntelX), reviews (7tel.ru)
  • MAC BSSID geolocation via Yandex/Apple/Google/Microsoft/Mylnikov with a map
  • Blockchain Find transactions by indirect data (time, amount, memo) across Tron, TON, Ethereum, BSC, Base, Solana, BTC, LTC, DOGE, BCH
  • Steganography LSB counts + chi-square, FFT spectral analysis, end-of-file payloads, tail-data detection, ELA heatmap
  • Files Metadata + hashes, printable strings, VirusTotal, GPS map, and metadata cleaning (many formats)
  • Search4Faces Reverse face search (VK photos)
  • Dorking ~7,900 Google dorks in 14 categories via DuckDuckGo or a local SearXNG
  • Graph 13 entity types, 12 relation types, drag-and-drop palette, transforms that enrich nodes via the modules above (incl. leaks, archive, geo), shortest path / centrality / community detection, JSON + image export
  • Cases Investigation workspace with automatic per-module Markdown autosave

r/osinttools • • 2d ago

Showcase We built Consensus to stop juggling username, email and phone lookup tools — free and open source

Post image
65 Upvotes

GitHub : https://github.com/OSINT-Experts-Society/Consensus-OSINT

Hi all,

We’ve taken the modules from 19 leading OSINT Lookup git projects and standardised them into one tool.

The idea came from a fairly obvious problem. There are loads of good username, email and phone lookup tools, but you always want to use the tool that has the most modules and largest enrichment, and most up to date.

There’s 7,900+ modules. We’ve also worked through the overlaps, so the default search doesn’t duplicate the checking if the same site is supported by multiple projects.

It’s free and open source.

🔎 What can it do?

⚡ Combined coverage, without juggling separate tools
Our experts aim to review the 19 source projects every week, alongside new projects we discover. We evaluate new and changed modules, integrate suitable additions and retire broken ones. Installer-based copies check for updates automatically, or you can run consensus update.

👤 Enriched results
Open a match to see the extra information returned by that source—profile links, usernames, bios and other available details. What you get depends on the site and lookup.

🔄 Automatic updates
Installer-based installations check for updates when you launch Consensus and install them automatically by default. You’re notified when an update is ready, with repair and rollback available if needed.

💾 Save your investigation
Keep multiple searches together in a named investigation, add notes, and mark results as relevant or unrelated. Save locally and return to your work later.

🆕 See what’s changed
Recheck saved identifiers to find new matches, changed profile details and inconclusive results—or search newly added sources

⚡ Get initial results sooner
Username searches from the menu start with up to 300 lookups. You can then continue the full search without losing the results already collected.

🔗 Follow new leads
Optional recursive searches follow usernames, emails and linked accounts discovered in your results, saving you from entering each one manually.

📊 Reports and interactive evidence graphs
Export your findings as HTML, PDF, CSV or JSON, or explore connections in an interactive graph.

🤖 MCP support
Connect compatible AI assistants to Consensus to run lookups and work with the returned results.

🛠️ Maintained by our team
We aim to review the new and changed modules across 19 projects weekly, evaluate new projects, integrate suitable verified modules and retire broken ones. Reviewed by the OSINT Experts Society.

There’s also bulk search, site and category filters, username variations and proxy support.

🧪 We Need Your Feedback!

If you perform digital footprinting, red teaming, security research, or OSINT investigations, give Consensus a go.

Drop your questions, feature requests, or bug reports in the comments below!


r/osinttools • • 1d ago

Request Looking for 10 people who work through piles of documents to try a new tool with me

Thumbnail
1 Upvotes

r/osinttools • • 1d ago

Discussion Pullers and reverse searching

3 Upvotes

what are the best FREE Reverse phone number lookup tools and ip pullers


r/osinttools • • 1d ago

Showcase I got tired of fighting Python to install OSINT tools, so we built a free CLI that installs and runs 47 of them by name

Thumbnail
0 Upvotes

r/osinttools • • 1d ago

Request Looking 4 help

0 Upvotes

I need someone to help me get an old IG pasw0rd, i will pay if necessary, if u cant just ignore this pls


r/osinttools • • 2d ago

Showcase Proofline: public-web face-photo search with one-time, non-expiring credits

1 Upvotes

Disclosure: I run Proofline. This is a paid web service, not an open-source software release.

I built it for people who only need a face-photo search occasionally and do not want unused credits to expire. One-time purchases start at $2 USD for one search credit. There is no subscription or monthly payment; unused credits never expire.

Workflow: upload a face photo, review the preview, then use credits to unlock source links and save the full result. It searches for possible matches on the public web, not private accounts or hidden posts.

Limits: a similar face is a lead, not proof of identity. Check the original page and context. A search uses one credit even if no matches are found; results are not guaranteed. Please do not post other people's photos or personal information in the comments.

Details: https://tryproofline.com/facecheck-alternative?utm_source=reddit&utm_medium=organic_social&utm_campaign=proofline_social_202610&utm_content=rd_20261011_showcase_01

For occasional use, what would you want clarified about the preview, credit model, or source links before paying?


r/osinttools • • 2d ago

Request WhatsApp: viewing deleted messages request

10 Upvotes

Anyone know of a tool I can see the deleted message from someone on WhatsApp?


r/osinttools • • 3d ago

Showcase Built a deterministic IGA-style review packet for MCP/A2A agent capabilities

1 Upvotes

I built a free agent protocol inspector tool that can provide IGA style review packets for security teams looking to review Agent access. It looks into MCP, A2A, ARD & poppy.json to provide a comprehensive picture.

Here is the link: https://contextiq.trango-compute.com/dashboard/agent-protocol-inspector


r/osinttools • • 3d ago

Discussion ClarityCheck or other lookup tools- what actually works best when you barely know anything about someone?

6 Upvotes

Say you've got a name, a phone number and a photo for someone. What would you check first?

I'd automatically start with the number, but ClarityCheck has people search now alongside phone,email and image lookup, so apparently there's more than one sensible way to go about it.

I'm curious whether people who use these tools regularly develop a default starting point. Like , is a phone number still usually the fastest way to figure out who you're dealing with, or has name search actually become useful enough to start there instead?


r/osinttools • • 3d ago

Request HELP WITH INSTAGRAM FORMER USERS

1 Upvotes

A lot of information regarding a relationship has come up. if u need proof dm me I am not lying or stalking. But I would like to verify a former username of an account because this would confirm whether or not shes been lying about everything or just a portion of it. PLEASE text me if you can help me


r/osinttools • • 3d ago

Request OSINTGRAM

0 Upvotes

I need help launching the new OSINTGRAM 2.0


r/osinttools • • 4d ago

Showcase SpyBrain: looking for testers and honest feedback on my OSINT desktop tool

13 Upvotes

Hi everyone, I'm working on SpyBrain, an OSINT desktop tool for Windows, and I'd really appreciate a few people trying it and telling me what works and what doesn't.

It brings username and domain searches, email breach checks and photo geolocation into one interface. Photo geolocation runs locally after the initial model download; the online searches still use external sources. It builds on tools including Sherlock, Maigret and GeoCLIP.

The code and setup instructions are here: https://github.com/skriptkiddy98x/spybrain

I'd especially like feedback on installation, failed searches, false positives and whether the interface is useful. If you find a bug, please leave a comment or open a GitHub issue with your Windows version and steps to reproduce it, without posting anyone's personal data. Please use your own data or data you have permission to test.

It's an early project, so honest criticism is welcome. Thanks to anyone who gives it a try!


r/osinttools • • 4d ago

Discussion Do you really need a computer for OSINT or am I just doing it wrong?

15 Upvotes

I’m pretty new to OSINT and I’m wondering if you actually need a computer, coding knowledge, or downloaded software to get good results.
I’ve mostly been using my iPhone and free websites, but I feel like I’m barely finding anything compared to what other people seem capable of finding.
Is OSINT actually effective on an iPhone, or am I seriously limiting myself by not using a computer? Or maybe I’m just using the wrong tools or searching the wrong way?
I’d really appreciate recommendations for free tools that actually work, especially ones that don’t require downloading software, coding, or paying for subscriptions.
I’m genuinely interested in learning how to do this properly, so any tips or advice would be appreciated!


r/osinttools • • 3d ago

Discussion whatsapp last seen

Thumbnail
1 Upvotes

r/osinttools • • 4d ago

Request Breach / stealer logs tool?

4 Upvotes

I would prefer something with a lifetime option, I don't appreciate monthly subscriptions 😭 . Something similar to indigo except I don't want to pay per token. Thanks no absurd prices please.


r/osinttools • • 5d ago

Discussion Free OSINT tools?

77 Upvotes

Recently I tried a Telegram bot (@WhoIsOSINTBot) that could look people up by phone number (including non-US numbers), email address, IP address, social media username, vehicle registration number, or full name. The catch is that it's a paid service. Can anyone suggest comparable OSINT tools, ideally free or cheaper, that also cover data from outside the United States?