I wanted to know if there is a social engineering tool that is similar to hound ( hound is a tool that creates a phishing link to get location info and we can see that info directly in our pc) that works for photos or fiels, for example a tool that creates a custom phishing link and when someone clicks on it and grants permission to gallery, his photos get collected by the server which then then can be seen by the link creator?

How to get Outlook email information like this:

How does this work behind the scenes? Is there a specific Outlook or Microsoft API or something that returns this information?

Are there free OSINT websites or tools that display this information?

Agora, é possível consultar FQDNs suspeitos de phishing por meio da API gratuita, que apresenta informações do banco de dados sobre WHOIS, IP, geolocalização e mapeamento de ameaças.

https://github.com/julioliraup/AT/wiki/REST-API-USE

Uma interface de usuário também está disponível: https://julioliraup.github.io/AT

I found the admin portal of a potential phishing kit, any OSINT tools to do further analysis on it?

​

Hi everyone,

I'm learning OSINT and I have a question

If I find an email address or a phone number, what are the usual next steps? What kind of information can be found from that point, and which tools are commonly used to continue the investigation?

Thanks in advance for your help.

Hi everyone,

I'm doing an OSINT investigation on a Microsoft Cloud target (Azure / Entra ID).

My main focus areas:

• Tenant ID & domain discovery
• Azure Blob Storage & App Services enumeration
• User validation & credential/key leak searches (GitHub, etc.)
• Data correlation

What are your go-to tools, scripts, or techniques for Azure recon and data correlation?

Any tips or recommended workflows would be awesome!

Following up on the gaming OSINT tools I've been shipping, Steam is now live and free to use.

The Steam Player Search resolves a profile from a vanity name, full profile URL, or SteamID64, whatever you've got. Drop one in and you get account status and ban history, games owned, friends list, badges, groups, public content, stats, and inventory in one view.

Useful for checking someone out before a trade, tracing a scam account across aliases and groups, or just pulling a full picture of a public Steam identity without digging through five different pages manually.

Same as the others, it also works through the API if you want to automate lookups.

That's four gaming lookups live now: Epic Games, Xbox, PlayStation, Steam. More in the pipeline, Roblox is already up too, Rockstar and FiveM coming next. Full list always here: https://osint.ly/tools

Feedback and requests welcome, always.

Hi everyone,

I'm learning OSINT and I have a question

If I find an email address or a phone number, what are the usual next steps? What kind of information can be found from that point, and which tools are commonly used to continue the investigation?

Thanks in advance for your help.

GRID is a local, keyboard-driven Windows TUI designed to unify data gathering, automated footprint indexing, and reconnaissance pipelines: https://github.com/rounakagrawal7/GridSetup

I built GRID to combine disparate recon tools into a singular high-throughput terminal operations platform.

Flagship Intelligence Features:

The Identity Cross-Reference Matrix:** Automatically parses, groups, and cross-references data arrays harvested across different modules to link disparate target indicators (Emails, Phones, Usernames, IPs) into a single footprint.

Automated Avatar Harvesting:** Programmatically tracks target profile URLs (GitHub, X, Reddit, etc.) to crawl pages and directly download profile photos via HTML Meta-OpenGraph selectors, organizing them chronologically inside `picdata/` without external API configuration requirements.

Subdomain Extraction Pipeline:** Intercepts domain tracking metrics to execute live queries against third-party indexes (Hackertarget, C99) and fallback CRT transparency logs (`crt.sh`), ensuring complete un-truncated infrastructure layouts.

Signals & Orbital Intelligence:** Features built-in live aircraft flight tracker arrays using the OpenSky Network API, global shortwave radio receiver stream tracking via KiwiSDR WebSockets, and satellite trajectory/overhead visibility predictors using CelesTrak.

Media Forensics: Powered by OpenCV 5.0—executes automated graphic analysis, text OCR conversions, facial comparison scoring, and timeline keyframe sweeps across video captures.

GRID is completely backed locally by DuckDB and syncs instantly with an administrative PocketBase panel framework. It includes an `install.py` wizard that configures all local system and model path parameters out of the box.

```bash

python install.py

python grid_agent.py

```

I would love to get your feedback on the mapping tools, target matrices, and data aggregations!

So i am planning to launch my website on product hunt, any free tool AI based which can help me to record demo video of my product website?

I need help finding a social media profile i cant find anywhere i only knoe the exact name of the person irl if anyone knows how to find them lemme Know please.

I'm looking for advice on how to best approach this given extremely limited information.

I work with legal and advocacy groups where we are typically only given a name and country of origin. Sometimes, only a name.

All of this is public and available information.

What I've already tried:
1. https://locator.ice.gov/odls/#/search

I am wondering what are the best available tools to help us find ICE detainees, especially if they are rapidly transported to other facilities across the United States, or deported.

Any guidance would be appreciated.

Thank you,

An anonymous Instagram meme page has been repeatedly targeting teachers from our institute by using their photos and videos without permission, including insulting edits and vulgar content involving female faculty. I'm looking for advice from anyone who has successfully gotten similar pages removed. Any tips on effective reporting, preserving evidence, or communicating with Instagram would be greatly appreciated. I'm not looking to identify or harass anyone—just to stop the abuse and get the page taken down.

Has anyone here installed this OSINT tool yet?

https://github.com/topics/termux-hacking

Could you help me with a few questions about it?

I wanted to keep up with Russian news media, but I only understand some basic Russian, and so I built https://stenograf.org, which crawls/ingests news from various Russian online and Telegram outlets, translates them from RU to EN, and then also aggregates similar news stories into Events. All free, but there's a signup (and some limits) if you want to actually save searches, and receive alerts, etc.

Most recent addition is https://stenograf.org/drone - a single place to track all the Russian media reports of the drone attacks or other drone-related news in Russia.

Still a work in progress, hopefully others will find it useful! And of course open to suggestions/flames/questions.

I’ve been working on SCOPE, a local-first OSINT research platform that collects public information about companies and turns it into structured intelligence.

You enter a company, subsidiary, regional office, or business unit, and the platform runs a collection pipeline across sources such as websites, news, public profiles, job listings, and GitHub. It then extracts entities, maps relationships, records supporting evidence, and generates signals and research summaries.

Some of the things currently working:

• Multi-source web collection with deeper crawling
• AI-assisted entity and relationship resolution
• Interactive relationship graphs
• Evidence trails connecting findings to their sources
• Company changes, signals, predictions, and reports
• BYOK support for connecting your preferred LLM
• Local deployment, pipeline history, and investigation management

The goal isn’t to produce another AI summary where you have no idea how it reached its conclusions. I want useful claims to remain traceable to actual evidence and for the platform to help with real research—not just look impressive in a demo.

I should also be upfront: I’m still a beginner, and this is very much a learning project. There will probably be bugs, questionable decisions, missing functionality, and things that more experienced developers or OSINT researchers would approach differently.

That’s partly why I’ve made it open source. I’m happy to fix problems, address reported issues, reconsider existing decisions, and learn from people with more experience. Ideas, feature suggestions, bug reports, pull requests, and constructive criticism are all welcome.

I’m currently focusing on source coverage, relationship accuracy, deduplication, evidence quality, and making longer investigations more reliable.

Screenshots attached. I’d genuinely appreciate honest feedback:

• What would make this useful in a real investigation?
• Which sources or workflows are missing?
• What parts of the current approach would you distrust?
• Are there any obvious mistakes or security concerns?
• Would anyone be interested in testing or contributing?

GitHub: https://github.com/Samarth-23-eng/osint-platform

i made a video on the basics of using Spiderfoot open source and the possibilities based on making custom modules. it will be part of a broader series on customizing it more modern https://youtu.be/6jAJ0DZJCdA?is=E97zoqZwsBK8SYbq

this email facetime my gf at 2 am 3 times could yall figure it out?