- Instaloader - Pull full metadata and posts from any public Instagram account.
- Toutatis - Extract phone numbers and emails from Instagram account data.
- Snscrape - Scrape public social media content without API keys.
- Arctic Shift - Access and search historical Reddit datasets.
- Mosint - Run automated OSINT checks on email addresses from the terminal.
- GAU - Fetch known URLs for a domain from multiple archives.
- Waybackurls - Pull URLs recorded by the Wayback Machine for a domain.
- Photon - Crawl websites and extract links and metadata quickly.
- Crosslinked - Extract employee names from LinkedIn-related sources.
- URLScan - Scan a URL and inspect all requests it makes.
- Datashare - Search leaked documents and large document collections.
- Zeek - Turn network traffic into structured logs for analysis.
- Gitleaks - Scan Git repositories for exposed secrets and API keys.
- OpenRefine - Reconcile and clean messy investigation datasets.
- Cytoscape - Map relationship networks as interactive graphs.
- Certspotter - Monitor domains for newly issued SSL certificates.
- Subfinder - Discover subdomains from passive sources.
- pl - Reveal hidden GPS coordinates and camera metadata in images.
- Profil3r - Find accounts tied to a username across platforms.
- Ignorant - Check which services a phone number may be registered on.
- SDR++ - Decode live radio signals from multiple sources.
- ODCrawler - Search publicly exposed files in open directories.
- Tgstat - Search and analyze public Telegram channels and posts.
- Discord History Tracker - Archive and search Discord server chat history.
- Osintgram - Run interactive analysis on public Instagram accounts.
- Maileat - Find email addresses linked to usernames online.
- Zen - Find possible email intelligence tied to GitHub accounts.
- Pastebin Search - Search public paste-style leaks and exposed data.
- Orbit - Trace transactions linked to cryptocurrency activity.
- Little Namap - Map flight routes and track aircraft data.
- QGIS - Overlay investigation data on real-world maps.
- IVRE - Build a private reconnaissance and device indexing database.
- Webtech - Fingerprint website technology stacks.
- Changedetection - Get alerts when target webpages update.
- Datasette - Turn CSVs or databases into searchable explorers.
- Gephi - Visualize complex entity relationships as interactive networks.
- Volatility - Extract forensic artifacts from memory dumps.
- CyberChef - Decode, decrypt, and analyze suspicious data.