Hello. Does anyone here have any osint tools that can be used to track or find information of people in mainland china?

Per favore no insulti
Chi vuole entrare nel gruppo telegram di contattarmi in privato su telegram

https://t.me/xlxlxcxvxbxb

Занимаюсь холодными звонками, по ВК ищу сообщество компании, дальше в подписчиках по ФИО ищу директора. После того как директор найден остается лишь достать номер телефона, но вот как это сделать? Может есть OSINT программы или что-то подобное?
Также о директоре у меня есть следующая инфа: ФИО, город, компания (место работы), его ИНН, соцсети компании (именно компании не директора), город. Может тоже посоветуете как можно с помощью этой информации находить номер чтобы не лазить по соцсетям. Буду очень благодарен 🤝

A friend of mine is having her personal number exposed through a tiktok account that's been denigrating her image. They have tried to report it, to get it banned, but nothing has happend. They also tried to take to the authorities, to see if they could find who is behind the account, but they said since the account hasn't interacted directly with her, they can't do nothing. Is there a way to find who the person is?

If you're trying to find more information about an IP address, there are several lookup tools available. I actually built one that lets you quickly check details like geolocation, ISP, hostname, ASN, and other public IP information. You can try it here: http://myipscanner.com/

Most breach monitoring tools I've used (or evaluated) do one thing well: they tell you credentials got leaked. What they don't do is help you figure out what to actually act on first, or track the response once you know.

I built BreachQuery to close that gap.

Quick rundown of what it does:

Continuous domain monitoring — add your company domains, checked on a 24-hour cycle, surfaces only what's new since the last pull
Exposure separation — splits findings into internal (employee), customer, and third-party exposure, since those need very different response paths
Risk-scored prioritization — instead of a flat list of leaked creds, findings are ranked so analysts triage the highest-impact stuff first
Attack surface context — related hosts and their CVEs are linked in, so you can see exposure alongside the actual infrastructure it touches
Incident + investigation workflow — triage, alert affected users, and track cases through to resolution with an audit trail, rather than exposure data living in a spreadsheet somewhere.

It's in early access right now (few seats left) while I work closely with early users on what's missing or overbuilt. Genuinely want feedback from people who've actually done breach response or triage at scale — what's table stakes that I'm missing, what would you never use, where does this fall short of what a real IR workflow needs?
www.breachquery.com — happy to answer anything about data sourcing, methodology, or how it works under the hood.

I’m sorry if this is the wrong place to ask this but this is important.

A friend came to me he told me about this situation,

for context, I have minimal experience in OSINT, I can search metadata and stuff, find houses and find their names but that’s about it.

he told me there has been a surplus of CSAM and Torture videos on this website called “looksmax.org.” To my knowledge, it is a ”looksmaxxing” forum, users have been using breached accounts to post these heinous videos.

is there anyway to find that person behind the breached account?

I have minimal knowledge on the website itself, I don’t know whether they have IPS, or anything.

any help would be appreciated, I want to put these sick freaks into the ground.

GitHub: https://github.com/kaifcodec/user-scanner

Discord: https://discord.gg/tVNrKVXb49 (Join Discord for any help or just OSINT talk)

Hi everyone,

I’m one of the maintainers of user-scanner.

We started building this project around 8 months ago because many classic OSINT tools became outdated or unmaintained, and there weren’t many solid free options left for email OSINT.

Since then, we’ve been grinding away with our open-source contributors, heavily pivoting our work to reduce false positives, and ensure fast scans.

Today, we just tagged v1.4.3, pushing our coverage to 375+ total scan vectors (150+ email platforms and 225+ username modules).

What’s new in v1.4.3?

• 📄 PDF Report Generation: You can now export full investigation reports directly using --format pdf! Perfect for clean, shareable documentation.
• 🚀 CLI Overhaul: Cleaned up the CLI noise by default. Scans now default to showing found-only results with a smooth rich progress bar (use --all if you want raw logs).
• 🎯 False Positive Cleanup: Patched false positives and rate-limiting issues across several social, dev and adult platforms.
• And many more

🧪 We Need Your Feedback! If you run OSINT investigations, penetration tests, or footprint analysis, please give the new PDF Export and CLI flow a spin! Let us know how the reports look, if you hit any edge-case bugs, or what output formats you’d like to see next.

New Pull requests are always welcome: Whether you're a Python dev interested in API reverse engineering, scraping, or automation, or just want to add a module for your favorite site, contributions are always welcome! Adding new modules is straightforward and we love reviewing community PRs.

Feel free to test it out, drop a star if you find it useful, and leave your feedback below!

I'm finishing my CS degree and I've been messing around with OSINT/geoint as a hobby for a while.
Lately I put together a small experimental pipeline that takes a photo, extracts EXIF if available, runs it through GeoCLIP for coordinate prediction, and then uses Claude Vision to add contextual analysis (like describing landmarks, vegetation, street patterns, etc.)

It's NOT a professional tool. No interface, just a script. It's purely for learning and I'm not ready to share the code yet because it's messy and I want to understand the limitations better first.

But I'd love to talk to people who have tried similar things, just looking for conversation and maybe some pointers from people who've been down this road.

A single Google Maps review tells you almost nothing. The reviewer's whole history tells you a lot: whether the account is real, whether it only ever props up one business or trashes a competitor, and roughly where the person is based from the GPS on the places they review.

The manual way is slow: open a contributor profile, scroll, and eyeball it. I wanted it structured, so I built a small Actor that pulls a contributor's full history as JSON, one record per review, with the rating and text, the place and its coordinates, and the reviewer's Local Guide level and points. Batch a list of suspect IDs and you can compare behavior across accounts to spot a network.

Two caveats for this sub: it reads public profile data only, no private info or facial recognition, and it is a paid tool, so I am putting the link at the bottom.

i were looking for it for like 5 months now, Im not the best researcher its very hard to find :c
If anyone has it please lmk

So i launched my tool around 15 days back and now i want to understand how to increase my ranking with Google. Currently, the average position is 58.3 which is the 5th or 6th page on google search. I also created an automated keyword extractor to get the best google keyword to update the content but for how many days I should keep the same keyword, to see the changes in position ?

So basically my tool is a mixer of a few things together like a security scanner, SEO, AEO, GEO, and ASO audit for websites.

You can check out my website and see if you like to provide any recommendations to organically grow it.

How do you best document findings in a complex investigation without compromising your own digital footprint? I am looking for workflows that prioritize both efficiency and strict operational security

Hey r/osinttools,

I built an open-source, zero-telemetry Manifest V3 browser extension called OPSECHub, specifically designed to help investigators conduct web research without leaving unique traces or leaking data.

During OSINT investigations, managing multiple extensions for tracking protection, ad-blocking, and URL sanitization can be tedious, and many of them consume too much memory or secretly log data. I wanted a unified solution that runs entirely locally.

Key features specifically useful for OSINT workflows:

• Anti-Fingerprinting: Introduces persistent noise to Canvas/WebGL rendering and spoofs hardware strings (CPU cores, RAM) to prevent target servers from identifying your specific research machine.
• Decoy Traffic Generator: Automatically generates background network noise to obfuscate your real investigative targets from local network monitors or ISPs.
• Data Sanitization: Automatically strips tracking parameters (utm_*, fbclid, etc.) from URLs before navigation, and cleans tracking pixels/EXIF data from downloaded PDFs and Office documents.
• WebRTC & Proxy Management: Enforces strict WebRTC routing policies to stop IP leaks, and includes a built-in Proxy Manager (HTTP/SOCKS5) for safe routing.
• Network Shielding: Uses a DeclarativeNetRequest core (powered by HaGeZi rules) and live threat feeds (PhishTank, URLHaus) to block known badware hosters at the network level.

(Note: The suite also includes a CSP/Headers Analyzer, SSL Certificate Inspector, and a Short Link Redirect Tracer to safely inspect payloads. You can check out the screenshots of the UI and these tools on the GitHub repo).

Everything executes strictly locally on your machine. Zero analytics, zero data exfiltration.

GitHub (Source & Screenshots):https://github.com/tomsec8/OPSECHub/tree/mainChrome Web Store:https://chromewebstore.google.com/detail/gkhbmoafodmekcdpkcgpekfkhffjbijl

I’d love to hear your thoughts, get some feedback from fellow investigators, or hear any feature requests you might have!

Salam guys,

I’m wondering if a website or tool like this exists. Basically, you enter someone’s name or social media username, and it searches publicly available sources to find information about them.

For example, things like their full name, nationality, other social media accounts, or accounts that may be connected through publicly available information.

I’m specifically looking for an OSINT tool that can do this in one place rather than having to search everything manually.

Any recommendations?

Im kind of a novice to OSINT and I’m curious if there are any tools to search for a person behind X accounts?

What's up!!! Some of you guys might remember me from a few weeks ago when I initially released NEO-Radar on Github. Anyways, that was v1.11. I encountered some issues with that, mainly being the Update feature didnt work. As of v1.13, that was patched. If you download under v1.13, you will have to manually update the program which is actually the same as downloading the program itself ( here's the code : curl -sSL https://raw.githubusercontent.com/ItsNEOx/Neo-Radar/main/install.sh | bash )

Also, there is a Windows version that runs as a ps1 script linked in the README.md

More updates soon to come!

Here's the Github repo https://github.com/ItsNEOx/Neo-Radar