OSINT Tools

The kit the operator reaches for in OSINT collection and analysis. Tooling rotates; the headings hold as the capabilities the operator needs covered.

Tool	Purpose
maltego	Link-analysis canvas; transforms for nearly every public source.
recon-ng	Modular reconnaissance framework with database backend.
spiderfoot	Automated OSINT collection across 200+ modules.
theharvester	Email, subdomain, host harvest from search engines.
maryam	OSINT framework with web-search modules.
metagoofil	Document metadata harvester.
amass / subfinder	Subdomain enumeration.
sherlock	Username search across hundreds of social platforms.
waybackurls	Pull historical URLs from the Wayback Machine.
photon	Web crawler that pulls OSINT-relevant artifacts.
shodan / censys CLIs	Internet-wide scanner front-ends (technically deep web).

References

• OSINT for the discipline overview.

• OSINT Sources for the data sources.

• OSINT Techniques for the tradecraft.