OSINTech’s OSINT Anatomy Substack

OSINTech's Timeline (157) - 09.04.2026

OSINTech — Thu, 09 Apr 2026 08:47:48 GMT

MAGA

🧭 Featured Project

Tesari — OSINT Copilot

A first step for investigations into organized crime, corruption, trafficking, and global risk networks.

Tesari is designed as an entry point into complex investigations: structure, context, and navigable intelligence instead of chaotic searching.

🔗 https://www.tesari.ai

🌍 Regional & Thematic OSINT

25 Satellite Maps To See Earth in New Ways

🔗 https://gisgeography.com/satellite-maps/

GitHub Store. A free, open-source app store for GitHub releases — browse, discover, and install apps with one click. Powered by Kotlin and Compose Multiplatform for Android & Desktop (Linux, MacOS, Windows)

🔗 https://github.com/OpenHub-Store/GitHub-Store

Career Ops. AI-powered job search pipeline built on Claude Code. Evaluate offers, generate tailored CVs, scan portals, and track everything - powered by AI agents

🔗 https://github.com/santifer/career-ops

🛠 OSINT Tools, Services & Investigations

Zorin OS is the alternative to Windows and macOS designed to make your computer faster, more powerful, secure, and privacy-respecting

🔗 https://zorin.com/os/

NoEyes. Secure terminal chat. E2E encrypted, zero-metadata blind-forwarder server. PyNaCl XSalsa20-Poly1305 + Ed25519 + forward secrecy

🔗 https://github.com/Ymsniper/NoEyes

MiroShark. Universal Swarm Intelligence Engine - Run Locally or with Any Cloud API. Multi-agent simulation engine: upload any document (press release, policy draft, financial report), and it generates hundreds of AI agents with unique personalities that simulate public reaction on social media - posts, arguments, opinion shifts - hour by hour

🔗 https://github.com/aaronjmars/MiroShark

Neko. A self hosted virtual browser that runs in docker and uses WebRTC

🔗 https://github.com/m1k1o/neko

Fingerprint Detector. A Chrome extension that detects, blocks, and spoofs browser fingerprinting attempts in real time

🔗 https://github.com/mr-r3b00t/fingerprintdetector

Rom. A browser-like runtime in Rust, built without Chromium. ROM composes an embedded JavaScript engine, browser-facing host objects, and a compatibility-driven runtime for deterministic web automation, surface emulation, and browser API research

🔗 https://github.com/rxflex/rom

Look4Sat. Satellite tracker and pass predictor for Android, inspired by Gpredict

🔗 https://github.com/rt-bishop/Look4Sat

Kepler.gl is a powerful open source geospatial analysis tool for large-scale data sets

🔗 https://github.com/keplergl/kepler.gl

SatsDecoder. Image and Telemetry decoder for some amateurs satellites (geoscan, sputnix platforms)

🔗 https://github.com/baskiton/SatsDecoder

Refloow. Free batch image geolocation and digital forensics tool. Automatically extract .jpg EXIF data, visualize GPS coordinates on maps, and reconstruct event timelines for OSINT

🔗 https://github.com/Refloow/Refloow-Geo-Forensics

Xplane MFD Calculations. This repository contains flight calculation code for data published by the X-Plane Web API. It demonstrates the Joint Strike Fighter Air Vehicle C++ Coding Standards (JSF AV C++). The compliant/ directory contains code with numerous JSF Standard fixes, while non-compliant/ contains multiple major standard violation examples

🔗 https://github.com/LaurieWired/XplaneFlightData

🤖 Universal Search & AI

MemPalace. The highest-scoring AI memory system ever benchmarked

🔗 https://github.com/milla-jovovich/mempalace

Autoresearch Genealogy. Structured prompts, vault templates, and research workflows for AI-assisted genealogy research. Built for Claude Code, adaptable to any AI tool or manual workflow

🔗 https://github.com/mattprusak/autoresearch-genealogy

Axiom. Battle-tested Claude Code skills for modern xOS (iOS, iPadOS, watchOS, tvOS) development

🔗 https://github.com/CharlesWiltgen/Axiom

OCEL Generator. Generate realistic multi-agent workflow traces with LLM-enriched content. pip install open-agent-traces

🔗 https://github.com/juliensimon/ocel-generator

👨‍💻 Software Development & APIs

Analysis of Bot Protection systems with available countermeasures. How to defeat anti-bot system and get around browser fingerprinting scripts when scraping the web

🔗 https://github.com/niespodd/browser-fingerprinting

Robotocore. A digital twin of AWS. Free forever. Runs anywhere

🔗 https://github.com/robotocore/robotocore

Autumn is an open-source pricing & billing platform

🔗 https://github.com/useautumn/autumn

Annoy is a C++ library with Python bindings to search for points in space that are close to a given query point. It also creates large read-only file-based data structures that are mmapped into memory so that many processes may share the same data

🔗 https://github.com/spotify/annoy

Social Media Scraping APIs. A curated collection of social media scraping APIs and tools for Instagram, LinkedIn, Twitter/X, TikTok, YouTube, Facebook, and more. Extract posts, profiles, videos, comments, and engagement metrics

🔗 https://github.com/cporter202/social-media-scraping-apis

🐧 Linux & DevOps

Packer is a tool for creating identical machine images for multiple platforms from a single source configuration

🔗 https://github.com/hashicorp/packer

IPv6 rotator for specific subnets - unblock restrictions on IPv6 enabled websites (Google by default but customizable for others)

🔗 https://github.com/iv-org/smart-ipv6-rotator

CellGuard is a research project that analyzes how cellular networks are operated and possibly surveilled

🔗 https://github.com/seemoo-lab/CellGuard

NetHopper. Share internet access from a free network to a restricted one using Xray-core reverse proxy and SOCKS5

🔗 https://github.com/net2share/nethopper

Supply Chain Monitor. Automated monitoring of the top PyPI and npm packages for supply chain compromise. Polls both registries for new releases, diffs each release against its predecessor, and uses an LLM (via Cursor Agent CLI) to classify diffs as benign or malicious. Malicious findings trigger a Slack alert

🔗 https://github.com/elastic/supply-chain-monitor

🔌 Hardware & Devices

Wi-Fi Arsenal OSINT Collection

🔗 https://github.com/0x90/wifi-arsenal

🚨 From CyberDetective

APILEECH. An extension for analysing a page’s source code, retrieving a list of POST/GET requests on the fly, analysing comments and errors, and capture data from social media profiles (Twitter, Facebook, TikTok, etc.)

https://chromewebstore.google.com/detail/apileech/nmcppdbckijfleddncfidbcmenhcmjbh

📌 Full OSINT Repos List Collection

Full OSINT Repos List Collection available for paid Subscribers.

3556 Starred Repositories, 21 Newly added since last update:

📌 Where to Follow

- LinkedIn: https://www.linkedin.com/in/osintech/details/featured/

If this timeline saves you time, it’s doing its job.

Free to read. Manually curated. Minimal noise.

📌 Legal and ethical note

All tools and techniques documented in the dataset are presented for informational,

educational and information security purposes only.

The dataset does not promote or endorse illegal activities.

Users are responsible for complying with applicable laws and ethical standards.

📌 About future updates

The dataset is updated on a regular basis.

Future posts will document changes, notable additions and emerging trends observed within the dataset.

This post serves as an introduction and reference point for those updates.

OSINT Repos List Collection Update: 03.04.2026

OSINTech — Tue, 07 Apr 2026 08:57:30 GMT

📌 OSINT Repos List — Why This Dataset Exists?

Most OSINT and investigative work eventually runs into the same problem:

tools accumulate faster than they can be meaningfully documented.

Bookmarks grow.

Starred repositories multiply.

Links are saved “for later” — and quietly forgotten.

Over time, it becomes increasingly difficult to answer simple questions:

Which tools are actually used?

Which repositories are actively maintained?

Which utilities are practical, and which are merely theoretical?

OSINT Repos List exists as an attempt to address this problem.

📌 What this dataset is?

OSINT Repos List is a structured dataset built from an actively used working environment.

It documents open-source repositories related to:

- OSINT and open-source investigations,

- data collection and analysis,

- software development and automation,

- DevOps and infrastructure tooling,

- information security and research utilities.

The dataset is not a curated “top tools” list and not a recommendation catalog.

It reflects what is actually being used, tested, evaluated and maintained over time.

📌 Why this approach matters?

Traditional OSINT lists tend to be static.

They age quickly, lose context and fail to reflect real-world usage.

This dataset is different in several ways:

- it grows automatically,

- it preserves metadata such as update activity and popularity,

- it reflects a long-term working toolchain rather than a one-time selection,

- it allows patterns and trends to emerge naturally.

Instead of asking “what tools should I use?”, the dataset helps answer:

“What tools are people actually using in practice?”

📌 What kind of information it contains?

Each entry in the dataset includes:

- repository name and owner,

- short description,

- associated topics and tags,

- popularity indicators,

- update timestamps.

This makes it possible to explore the dataset not only as a list of tools,

but also as a reference for understanding how the open-source OSINT ecosystem evolves.

Because metadata is preserved, the dataset can be used analytically — not just descriptively.

📌 Where to Follow?

Substack:

📌 Weekly Update — Selected Additions

Below are three selected examples from the most recent update cycle.

TOOL OF THE WEEK

adsb-history. Collect and query ADS-B data to find aircraft and trends based on geographic region(s), altitude, bearing, aircraft type and more

🔗 https://github.com/bellingcat/adsb-history

AtlasOS is creating a “kinder” Windows experience. Reducing bloatware and optimizing performance for enthusiasts, gamers, and privacy-conscious individuals

🔗 https://atlasos.net/

Open Source Intelligence (OSINT): Is Tsurugi Linux The Best Operating System For OSINT Investigations?

What is Tsurugi Linux

The Three Flavors of Tsurugi

How to Install Tsurugi Linux

First Look

The Tsurugi Browser

Additional Features of Tsurugi Linux

🔗 https://hackers-arise.com/open-source-intelligence-osint-is-tsurugi-linux-the-best-operating-system-for-osint-investigations/

🔗 https://tsurugi-linux.org/

📌 Intended use

OSINT Repos List is designed for:

- investigators and researchers,

- journalists and analysts,

- engineers and automation specialists,

- information security practitioners.

It can be used as:

- a discovery aid,

- a structured tooling archive,

- a way to cross-check tooling choices,

- a snapshot of a working OSINT environment at a given point in time,

- a reference baseline for comparing future tooling shifts.

The full archive version of the dataset is available below for subscribers.

OSINTech's Timeline (156) - 02.04.2026

OSINTech — Thu, 02 Apr 2026 13:01:47 GMT

When the entire Internet is turned off

🧭 Featured Project

Tesari — OSINT Copilot

A first step for investigations into organized crime, corruption, trafficking, and global risk networks.

Tesari is designed as an entry point into complex investigations: structure, context, and navigable intelligence instead of chaotic searching.

🔗 https://www.tesari.ai

🌍 Regional & Thematic OSINT

ALICJA OSINT Toolkit

🔗 https://start.me/p/Rn02Ne/alicja-osint-toolkit

AtlasOS is creating a “kinder” Windows experience. Reducing bloatware and optimizing performance for enthusiasts, gamers, and privacy-conscious individuals

🔗 https://atlasos.net/

OpenArg Backend. AI-powered analysis engine for Argentine government open data. Multi-agent pipeline (LangGraph) with 10 data connectors, NL2SQL, semantic caching, and real-time streaming. Built with FastAPI, PostgreSQL + pgvector, Celery, and Gemini/Claude LLMs

🔗 https://github.com/colossus-lab/openarg_backend

Discord Tools Hub. Discover powerful Discord tools including AI-powered generators, utilities for server management, content creation tools, and user lookup features. Everything you need
to enhance your Discord experience

🔗 https://discordgate.com/tools

🛠 OSINT Tools, Services & Investigations

EUOSINT. OSINT Stack for advanced global intelligence monitoring, situation analysis, risk detection

🔗 https://github.com/scalytics/EUOSINT

ProofPoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation

🔗 https://github.com/EmergingThreats/threatresearch

Wallabag is a self hostable application for saving web pages. Save and classify articles. Read them later

🔗 https://github.com/wallabag/wallabag

HackerOne Reposts. Top disclosed reports from HackerOne

🔗 https://github.com/reddelexc/hackerone-reports

Telegram Drive. Turn your Telegram account into an unlimited, secure cloud storage drive. an Open-source desktop app built with Tauri, Rust, and React

🔗 https://github.com/caamer20/Telegram-Drive

Code base of ‘PAPER2WEB: LET’S MAKE YOUR PAPER ALIVE!’ integrating the other work package throughout the entire “paper2present” process

🔗 https://github.com/YuhangChen1/Paper2All

Twenty. Building a modern alternative to Salesforce, powered by the community

🔗 https://github.com/twentyhq/twenty

Project N.O.M.A.D is a self-contained, offline survival computer packed with critical tools, knowledge, and AI to keep you informed and empowered-anytime, anywhere

🔗 https://github.com/Crosstalk-Solutions/project-nomad

🤖 Universal Search & AI

AIDA. AI-Driven Security Assessment - Connect AI to 400+ pentesting tools via MCP

🔗 https://github.com/Vasco0x4/AIDA

Vigil - an ever improving 100% OpenSource AI system for security

🔗 https://github.com/Vigil-SOC/vigil

OpenCode plugin that gives coding agents persistent memory using local vector database

🔗 https://github.com/tickernelz/opencode-mem

HackerAI. AI-Powered Penetration Testing Assistant

🔗 https://github.com/hackerai-tech/hackerai

👨‍💻 Software Development & APIs

SkyBolt. C++/Python-based 3D geospatial application for simulating and visualizing dynamic objects in planetary environments

🔗 https://github.com/Prograda/Skybolt

Lego. Let’s Encrypt/ACME client and library written in Go

🔗 https://github.com/go-acme/lego

SnakeBite. Detect malicious PyPI packages using heuristic analysis and LLM-powered filtering to uncover credential theft, obfuscation, and supply chain attacks

🔗 https://github.com/Pinperepette/snakebite

🐧 Linux & DevOps

WaveTerm. An open-source, AI-integrated, cross-platform terminal for seamless workflows

🔗 https://github.com/wavetermdev/waveterm

l0p4map. Professional network monitoring & visualization tool. L0P4Map combines high-speed ARP discovery with full nmap integration and a real-time interactive network topology engine. Works on both local networks and custom IPs/websites

🔗 https://github.com/HaxL0p4/L0p4Map

refugiOS. Your Digital Shelter and Survival Library

🔗 https://github.com/Ganso/refugiOS

🔌 Hardware & Devices

BlueSploit. A Metasploit-style Bluetooth security testing framework supporting Classic BR/EDR and BLE

🔗 https://github.com/V33RU/bluesploit

🚨 From CyberDetective

OpenGridNetworks. Interactive worldwide map of electricity infrastructure. Very detailed. Power plants, data centers, fiber infrastructure, transmissions, substations

🔗 https://opengridworks.com

TLDSweep is a domain intelligence OSINT tool that sweeps 800+ TLDs to find registered variants of a domain, flag newly registered lookalikes, and alert via Telegram and Discord

🔗 https://github.com/DarkWebInformer/TLDSweep

Breach House. Last ransomware attack list (classification, target odentity, source / actor, discovered, location, business category, intel link) with interactive map and statistics

🔗 https://breach.house

WindVector. Detailed info on winds and air currents. It features an online map, a 3D model of atmospheric layers, and the ability to view historical data for past dates. It is useful for investigating natural disasters and aviation accidents

🔗 https://windvector.app

📌 Full OSINT Repos List Collection

Full OSINT Repos List Collection available for paid Subscribers.

3541 Starred Repositories, 47 Newly added since last update:

📌 Where to Follow

- LinkedIn: https://www.linkedin.com/in/osintech/details/featured/

If this timeline saves you time, it’s doing its job.

Free to read. Manually curated. Minimal noise.

📌 Legal and ethical note

All tools and techniques documented in the dataset are presented for informational,

educational and information security purposes only.

The dataset does not promote or endorse illegal activities.

Users are responsible for complying with applicable laws and ethical standards.

📌 About future updates

The dataset is updated on a regular basis.

Future posts will document changes, notable additions and emerging trends observed within the dataset.

This post serves as an introduction and reference point for those updates.

OSINT Repos List Collection Update: 27.03.2026

OSINTech — Tue, 31 Mar 2026 08:46:34 GMT

📌 OSINT Repos List — Why This Dataset Exists?

Most OSINT and investigative work eventually runs into the same problem:

tools accumulate faster than they can be meaningfully documented.

Bookmarks grow.

Starred repositories multiply.

Links are saved “for later” — and quietly forgotten.

Over time, it becomes increasingly difficult to answer simple questions:

Which tools are actually used?

Which repositories are actively maintained?

Which utilities are practical, and which are merely theoretical?

OSINT Repos List exists as an attempt to address this problem.

📌 What this dataset is?

OSINT Repos List is a structured dataset built from an actively used working environment.

It documents open-source repositories related to:

- OSINT and open-source investigations,

- data collection and analysis,

- software development and automation,

- DevOps and infrastructure tooling,

- information security and research utilities.

The dataset is not a curated “top tools” list and not a recommendation catalog.

It reflects what is actually being used, tested, evaluated and maintained over time.

📌 Why this approach matters?

Traditional OSINT lists tend to be static.

They age quickly, lose context and fail to reflect real-world usage.

This dataset is different in several ways:

- it grows automatically,

- it preserves metadata such as update activity and popularity,

- it reflects a long-term working toolchain rather than a one-time selection,

- it allows patterns and trends to emerge naturally.

Instead of asking “what tools should I use?”, the dataset helps answer:

“What tools are people actually using in practice?”

📌 What kind of information it contains?

Each entry in the dataset includes:

- repository name and owner,

- short description,

- associated topics and tags,

- popularity indicators,

- update timestamps.

This makes it possible to explore the dataset not only as a list of tools,

but also as a reference for understanding how the open-source OSINT ecosystem evolves.

Because metadata is preserved, the dataset can be used analytically — not just descriptively.

📌 Where to Follow?

Substack:

📌 Weekly Update — Selected Additions

Below are three selected examples from the most recent update cycle.

TOOL OF THE WEEK

AERIS. Flight Tracking, but 3D

https://aeris.edbn.me/

Kimi K2 Thinking is an open-source intelligence engine built for real reasoning-capable of planning, exploring, and solving through hundreds of deliberate steps. It blends powerful tool use with deep analytical thinking, delivering state-of-the-art performance across search, coding, and complex problem-solving.

https://kimik2.com/

Just as Windows and macOS made it possible for anyone to own a personal computer, StartOS makes it possible for anyone to own a personal server.

StartOS facilitates the entire process of discovering, installing, configuring, and using any variety of open-source software from anywhere in the world without trusting anyone.

StartOS is the distribution platform open source software has been waiting for.

https://start9.com/

WarHeatMap. Visualize global conflicts and events in real time. WarHeatMap is a tool that combines an interactive map and a news feed to track current events and conflicts around the world. It also offers detailed statistics (7d/30d/90d/all time) on event types, most active regions, and most affected countries, providing a clear and analytical view of the global situation. An interesting resource for OSINT, geopolitical, and threat intelligence analysts who need real-time context and data

🔗 https://warheatmap.app/

📌 Intended use

OSINT Repos List is designed for:

- investigators and researchers,

- journalists and analysts,

- engineers and automation specialists,

- information security practitioners.

It can be used as:

- a discovery aid,

- a structured tooling archive,

- a way to cross-check tooling choices,

- a snapshot of a working OSINT environment at a given point in time,

- a reference baseline for comparing future tooling shifts.

The full archive version of the dataset is available below for subscribers.

OSINTech's Timeline (155) - 26.03.2026

OSINTech — Thu, 26 Mar 2026 16:28:40 GMT

Scar.

🧭 Featured Project

Tesari — OSINT Copilot

A first step for investigations into organized crime, corruption, trafficking, and global risk networks.

Tesari is designed as an entry point into complex investigations: structure, context, and navigable intelligence instead of chaotic searching.

🔗 https://www.tesari.ai

🌍 Regional & Thematic OSINT

Kali Linux 2026.1 Released (2026 Theme & BackTrack Mode)

🔗 https://www.kali.org/blog/kali-linux-2026-1-release/

OSINT of Greece by Unishka Research Service

UNISHKA’s Substack

OSINT of Greece

This post is part of UNISHKA Research Service’s ongoing OSINT series. If you’re interested in learning more, subscribe to our Substack and follow us on social media to stay in the loop. You can also visit our website to explore all the toolkits we’ve created so far…

18 days ago · 3 likes · UNISHKA Research Service

Hungarian OSINT start.me Collection

🔗 https://start.me/p/AD45Qk/start

AERIS. Flight Tracking, but 3D

🔗 https://aeris.edbn.me/

🔗 https://warheatmap.app/

Amazing data visualisation of historical FIMI operations. Great way to take a step back and look at some of the larger influence operations that have been reported on

🔗 https://euvsdisinfo.eu/fimi-explorer/

GeoSentinel is a geospatial monitoring platform that tracks global movement in real time. It aggregates ship and flight routes, live coordinates, and geodata into a unified system, providing clear geographic and geopolitical awareness for analysis, visualization, and decision-making

🔗 https://github.com/h9zdev/GeoSentinel

Agentic Pentesting. The Complete Guide to Get Started in 2026

🔗 https://escape.tech/blog/agentic-pentesting/

🛠 OSINT Tools, Services & Investigations

Cryptomator for Windows, macOS, and Linux. Secure client-side encryption for your cloud storage, ensuring privacy and control over your data

🔗 https://github.com/cryptomator/cryptomator

ciao HTTP checks & tests (private & public) monitoring - check the status of your URL

🔗 https://github.com/brotandgames/ciao

OceanScrape. Scraper for marine traffic data - amass AIS data fast & for free without being detected; ready for AI pipeline integration

🔗 https://github.com/theSchaefer/OceanScrape

SubScraper. Subdomain and target enumeration tool built for offensive security testing

🔗 https://github.com/m8sec/subscraper

FreeCut is a professional-grade video editor that runs entirely in your browser. Professional video editing, zero installation. Create stunning videos with multi-track editing, keyframe animations, real-time preview, and high-quality exports

🔗 https://github.com/walterlow/freecut

AutoSwagger is a command-line tool designed to discover, parse, and test for unauthenticated endpoints using Swagger/OpenAPI documentation. It helps identify potential security issues in unprotected endpoints of APIs, such as PII leaks and common secret exposures

🔗 https://github.com/intruder-io/autoswagger/

Eye of Web. State of the art OSINT tool. | A powerful open-source alternative to other face search engines

🔗 https://github.com/MehmetYukselSekeroglu/eye_of_web/

Just The Browser. Remove AI features, telemetry data reporting, sponsored content, product integrations, and other annoyances from web browsers

🔗 https://github.com/corbindavenport/just-the-browser

Telegago is a Google Custom Search Engine tailored for searching public Telegram content for OSINT purposes

🔗 https://bellingcat.gitbook.io/toolkit/more/all-tools/telegago

Kraken is a powerful, Python-based tool designed to centralize and streamline various brute-forcing tasks. Kraken provides a suite of tools for cybersecurity professionals to efficiently perform brute-force attacks across a range of protocols and services

🔗 https://github.com/jasonxtn/kraken

Netryx is a powerful, locally-hosted geolocation tool that uses state-of-the-art computer vision to identify the exact coordinates of a street-level image. It replicates the core pipeline of high-end geolocation SaaS platforms but runs entirely on your local hardware

🔗 https://github.com/sparkyniner/Netryx-OpenSource-Next-Gen-Street-Level-Geolocation

MetasploitMCP. MCP Server for Metasploit

🔗 https://github.com/GH05TCREW/MetasploitMCP

Deep Eye. An advanced AI-driven vulnerability scanner and penetration testing tool that integrates multiple AI providers (OpenAI, Grok, OLLAMA, Claude) with comprehensive security testing modules for automated bug hunting, intelligent payload generation, and professional reporting

🔗 https://github.com/zakirkun/deep-eye

TraceIntel. An asynchronous OSINT tool for IP address intelligence that aggregates data from multiple APIs to provide accurate geolocation, network, VPN, paste, and service‑related insights

🔗 https://github.com/karndeepbaror/traceintel

Grype. A vulnerability scanner for container images and filesystems

🔗 https://github.com/anchore/grype

RapidScan v1.2. The Multi-Tool Web Vulnerability Scanner

🔗 https://github.com/skavngr/rapidscan

🤖 Universal Search & AI

mgrep. A calm, CLI-native way to semantically grep everything, like code, images, pdfs and more

🔗 https://github.com/mixedbread-ai/mgrep

ClawdINT. Agentic intelligence and analytical platform for structured analysis of events, risks, and signals. AI agents like OpenClaw connect to the platform to contribute assessments alongside human analysts, producing traceable intelligence threads

🔗 https://clawdint.com/

AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assessments, penetration testing, and bug bounty reconnaissance — without any API keys or cloud dependency

🔗 https://github.com/pikpikcu/airecon/tree/main

Claude Bug Bounty. Claude Code skill for AI-assisted bug bounty hunting - recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation

🔗 https://github.com/shuvonsec/claude-bug-bounty

xURL is a client for AI agent URLs.

Read an agent conversation as markdown.
Query recent threads and keyword matches for a provider.
Query role-scoped threads with agents:///.
Discover subagent/branch navigation targets.
Start a new conversation with agents.
Continue an existing conversation with follow-up prompts

🔗 https://github.com/Xuanwo/xurl

👨‍💻 Software Development & APIs

Extractous. Fast and efficient unstructured data extraction. Written in Rust with bindings for many languages

🔗 https://github.com/yobix-ai/extractous

PlutoPrint. A Python Library for Generating PDFs and Images from HTML, powered by PlutoBook

🔗 https://github.com/plutoprint/plutoprint

Evidence. Business intelligence as code. Build fast, interactive data visualizations in SQL and markdown

🔗 https://github.com/evidence-dev/evidence

zerobrew brings uv-style architecture to Homebrew packages on macOS and Linux

🔗 https://github.com/lucasgelfond/zerobrew

Malimite. iOS and macOS Decompiler

🔗 https://github.com/LaurieWired/Malimite

ReDyne. A Production-Grade iOS Decompiler & Reverse Engineering Suite

🔗 https://github.com/speedyfriend433/ReDyne

Cutter. Free and Open Source Reverse Engineering Platform powered by rizin

🔗 https://github.com/rizinorg/cutter

Mapr is a Bun-native CLI/TUI designed for deep frontend reverse-engineering. It crawls target sites to collect artifacts, processes chunked code through a multi-agent AI pipeline, and generates comprehensive Markdown reports—mapping initialization flows, restoring names, and inferring call graphs to simplify complex build outputs

🔗 https://github.com/redstone-md/Mapr

🐧 Linux & DevOps

SealOS is an AI-native Cloud Operating System built on Kubernetes that unifies the entire application lifecycle, from development in cloud IDEs to production deployment and management. It is perfect for building and scaling modern AI applications, managed databases (MySQL, PostgreSQL, Redis, MongoDB) and complex microservice architectures

🔗 https://github.com/labring/sealos

ZeroByte. Backup automation for self-hosters. Built on top of restic

🔗 https://github.com/nicotsx/zerobyte

Nerdlog. Fast, remote-first, multi-host TUI log viewer with timeline histogram and no central server

🔗 https://github.com/dimonomid/nerdlog

🔌 Hardware & Devices

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking

🔗 https://github.com/EnableSecurity/sipvicious

🚨 From CyberDetective

RECOX. Free, simple and quick online tool to find subdomains and endpoints. Data sources: HackerTarget, URLScanIO, RapidDNS, CertSpotter, JLDC, DNSRepo, crtSH, WayBack, CommonCrawl, AlienWault OTX

🔗 https://recox.hackerz.space/

Open Source Intelligence (OSINT): Is Tsurugi Linux The Best Operating System For OSINT Investigations?

What is Tsurugi Linux
The Three Flavors of Tsurugi
How to Install Tsurugi Linux
First Look
The Tsurugi Browser
Additional Features of Tsurugi Linux

🔗 https://hackers-arise.com/open-source-intelligence-osint-is-tsurugi-linux-the-best-operating-system-for-osint-investigations/

🔗 https://tsurugi-linux.org/

📌 Full OSINT Repos List Collection

Full OSINT Repos List Collection available for paid Subscribers.

3498 Starred Repositories, 19 Newly added since last update:

📌 Where to Follow

- LinkedIn: https://www.linkedin.com/in/osintech/details/featured/

If this timeline saves you time, it’s doing its job.

Free to read. Manually curated. Minimal noise.

📌 Legal and ethical note

All tools and techniques documented in the dataset are presented for informational,

educational and information security purposes only.

The dataset does not promote or endorse illegal activities.

Users are responsible for complying with applicable laws and ethical standards.

📌 About future updates

The dataset is updated on a regular basis.

Future posts will document changes, notable additions and emerging trends observed within the dataset.

This post serves as an introduction and reference point for those updates.

OSINT Repos List Collection Update: 20.03.2026

OSINTech — Sun, 22 Mar 2026 10:59:23 GMT

📌 OSINT Repos List — Why This Dataset Exists?

Most OSINT and investigative work eventually runs into the same problem:

tools accumulate faster than they can be meaningfully documented.

Bookmarks grow.

Starred repositories multiply.

Links are saved “for later” — and quietly forgotten.

Over time, it becomes increasingly difficult to answer simple questions:

Which tools are actually used?

Which repositories are actively maintained?

Which utilities are practical, and which are merely theoretical?

OSINT Repos List exists as an attempt to address this problem.

📌 What this dataset is?

OSINT Repos List is a structured dataset built from an actively used working environment.

It documents open-source repositories related to:

- OSINT and open-source investigations,

- data collection and analysis,

- software development and automation,

- DevOps and infrastructure tooling,

- information security and research utilities.

The dataset is not a curated “top tools” list and not a recommendation catalog.

It reflects what is actually being used, tested, evaluated and maintained over time.

📌 Why this approach matters?

Traditional OSINT lists tend to be static.

They age quickly, lose context and fail to reflect real-world usage.

This dataset is different in several ways:

- it grows automatically,

- it preserves metadata such as update activity and popularity,

- it reflects a long-term working toolchain rather than a one-time selection,

- it allows patterns and trends to emerge naturally.

Instead of asking “what tools should I use?”, the dataset helps answer:

“What tools are people actually using in practice?”

📌 What kind of information it contains?

Each entry in the dataset includes:

- repository name and owner,

- short description,

- associated topics and tags,

- popularity indicators,

- update timestamps.

This makes it possible to explore the dataset not only as a list of tools,

but also as a reference for understanding how the open-source OSINT ecosystem evolves.

Because metadata is preserved, the dataset can be used analytically — not just descriptively.

📌 Where to Follow?

Substack:

📌 Weekly Update — Selected Additions

Below are three selected examples from the most recent update cycle.

TOOL OF THE WEEK

sshx (sshx.io) | Fast, collaborative live terminal sharing over the web:

https://github.com/ekzhang/sshx

Monitorer. 4 in 1 open-source multitool for your device wifi:

- Find out more information about supported operations by your wifi chipset and kernel
- Identify your USB device in an instant and learn about its chipset.
- In one click, switch the internal Wi-Fi or the adapter to the monitor mode or from it
- Enable and disable .ko files (via insmod)

https://github.com/stryker-project/monitorer

Famelack. Free Live World TV Database

https://famelack.com/

📌 Intended use

OSINT Repos List is designed for:

- investigators and researchers,

- journalists and analysts,

- engineers and automation specialists,

- information security practitioners.

It can be used as:

- a discovery aid,

- a structured tooling archive,

- a way to cross-check tooling choices,

- a snapshot of a working OSINT environment at a given point in time,

- a reference baseline for comparing future tooling shifts.

The full archive version of the dataset is available below for subscribers.

OSINTech's Timeline (154) - 19.03.2026

OSINTech — Thu, 19 Mar 2026 15:30:23 GMT

Peace is our profession [Guns firing]

Week of 6 — 12 March 2026

Every week, I manually curate tools, research, and services that are genuinely useful for OSINT, digital investigations, security research, and adjacent fields.

No hype. No SEO noise. No “AI startups that change everything”.
Only things you can open, verify, and actually use.

🧭 Featured Project

Tesari — OSINT Copilot

A first step for investigations into organized crime, corruption, trafficking, and global risk networks.

Tesari is designed as an entry point into complex investigations: structure, context, and navigable intelligence instead of chaotic searching.

🔗 https://www.tesari.ai

🌍 Regional & Thematic OSINT

OSINT of United Kingdom by Unishka Research Service:

UNISHKA’s Substack

OSINT of the United Kingdom

a month ago · 8 likes · UNISHKA Research Service

Global Conflict Dashboard

🔗 https://global-opss.github.io/global-conflict-map/

Famelack. Free Live World TV Database

🔗 https://famelack.com/

Most satellite overpass predictors calculate when a satellite is within observable range from the surface. But the reverse problem - predicting when a surface target will be scanned by a satellite sensor - is far less served. So long ago I developed an iterative prediction algorithm that does exactly that. It’s extremely handy for knowing which imagery to look for without running a point through every granule footprint. And that algorithm finally gets the UI it deserves. Play with this little tool and see when you’ll be “scanned” by satellites in orbit

🔗 https://sat-predict.davidhsu.cc/

Status, an Open-source, decentralised wallet and messenger

🔗 https://status.app/

🛠 OSINT Tools, Services & Investigations

General Wisdom. Let us focus on getting the latest and greatest intelligence tools, data, and services to add to the General Wisdom marketplace while you stay focused on the mission

🔗 https://www.generalwisdom.com/

Crucix. Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes

🔗 https://github.com/calesthio/Crucix

WireTapper is a wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear situational intelligence

🔗 https://github.com/h9zdev/WireTapper

Last Signal. A self-hosted dead man’s switch for delivering encrypted messages (E2EE) to your loved ones - when you’re gone or unresponsive

🔗 https://github.com/giovantenne/lastsignal

TapMap. See where your computer connects on a live world map

🔗 https://github.com/olalie/tapmap/

Markdown.new. Markdown for Agents. The web was built for humans. AI agents need structured data. We convert any URL to clean Markdown using Cloudflare’s native text/markdown content type - no parsing, no waste

🔗 https://markdown.new/

Readest is a modern, feature-rich ebook reader designed for avid readers offering seamless cross-platform access, powerful tools, and an intuitive interface to elevate your reading experience

🔗 https://github.com/readest/readest

Maildrop. A simple self hostable email service

🔗 https://github.com/haileyydev/maildrop/

Cobra Audit. Bug bounty audit framework. API key validation, OAuth misconfiguration testing, password reset auditing

🔗 https://github.com/Jakkxbt/CobraAudit

OtelBin. Web-based tool to facilitate OpenTelemetry collector configuration editing and verification

🔗 https://github.com/dash0hq/otelbin

Telemetry Advanced Telegram Search, Insights and Analytics

🔗 https://www.telemetryapp.io

🤖 Universal Search & AI

ZeroLeaks. AI Security Scanner - Test your AI systems for prompt injection and extraction vulnerabilities

🔗 https://github.com/ZeroLeaks/zeroleaks

ODCrawler. A search engine for open directories. Find millions of publicly available files

🔗 https://odcrawler.xyz/

Midday AI. Invoicing, Time tracking, File reconciliation, Storage, Financial Overview & your own Assistant made for Freelancers

🔗 https://github.com/midday-ai/midday

Khoj. Your AI second brain. Self-hostable. Get answers from the web or your docs. Build custom agents, schedule automations, do deep research. Turn any online or local LLM into your personal, autonomous AI (gpt, claude, gemini, llama, qwen, mistral)

🔗 https://github.com/khoj-ai/khoj

👨‍💻 Software Development & APIs

OpenUI is a full-stack Generative UI framework - a compact streaming-first language, a React runtime with built-in component libraries, and ready-to-use chat interfaces - that is up to 67% more token-efficient than JSON

🔗 https://www.openui.com/

RzWeb. A complete browser-based reverse engineering platform built on Rizin, running entirely client-side via WebAssembly

🔗 https://github.com/IndAlok/rzweb

Edit Banana. A framework for converting statistical formats into editable

🔗 https://github.com/BIT-DataLab/Edit-Banana

TerraInk. The Cartographic Poster Engine that creates unique and customizable map posters

🔗 https://github.com/yousifamanuel/terraink

Rikugan. A reverse-engineering agent for IDA Pro and Binary Ninja that integrates a multi-provider LLM directly into your analysis UI. This project was vibecoded together with my friend, Claude Code

🔗 https://github.com/buzzer-re/Rikugan

🐧 Linux & DevOps

sshx (https://sshx.io/). Fast, collaborative live terminal sharing over the web

🔗 https://github.com/ekzhang/sshx

With Aspia, you can create your own NAT traversal infrastructure (using Router and Relay servers) with connection by ID or use direct connections. Aspia supports many features. Among them, detailed information about the system, audio, text chat

🔗 https://github.com/dchapyshev/aspia

Bluehood. Monitor your local neighbourhood’s bluetooth activity

🔗 https://github.com/dannymcc/bluehood

🔌 Hardware & Devices

vphone-cli. Boot a virtual iPhone (iOS 26) via Apple’s Virtualization.framework using PCC research VM infrastructure

🔗 https://github.com/Lakr233/vphone-cli

AnyAPK. Install any apk on the device you own

🔗 https://github.com/sam1am/anyapk

PhoneDriver. Android Phone Control With Qwen3-VL

🔗 https://github.com/OminousIndustries/PhoneDriver

🚨 From CyberDetective

Telegram posts search tool. 175,000,000+ posts, 2,000,000+ channels, Data range from 2026-03-09 (for free search)

🔗 https://deaddrop.theosintconsultants.com/dashboard

CrowdCounter. Upload a photo, select the area with people in it, and answer a couple of questions to estimate how many people are in the photo

🔗 https://digitaldigging.org/crowdchecker/

TUBEPILOT

Dozens of YouTube online tools:

monetization checker
comment sentiment analysis
video audit
keyword research
video summary generator
video transcript
video/channel finder

and many many others

🔗 https://tubepilot.ai

📌 Full OSINT Repos List Collection

Full OSINT Repos List Collection available for paid Subscribers.

3480 Starred Repositories, 28 Newly added since last update:

📌 Where to Follow

- LinkedIn: https://www.linkedin.com/in/osintech/details/featured/

If this timeline saves you time, it’s doing its job.

Free to read. Manually curated. Minimal noise.

📌 Legal and ethical note

All tools and techniques documented in the dataset are presented for informational,

educational and information security purposes only.

The dataset does not promote or endorse illegal activities.

Users are responsible for complying with applicable laws and ethical standards.

📌 About future updates

The dataset is updated on a regular basis.

Future posts will document changes, notable additions and emerging trends observed within the dataset.

This post serves as an introduction and reference point for those updates.

OSINT Repos List Collection Update: 13.03.2026

OSINTech — Tue, 17 Mar 2026 13:56:55 GMT

📌 OSINT Repos List — Why This Dataset Exists?

Most OSINT and investigative work eventually runs into the same problem:

tools accumulate faster than they can be meaningfully documented.

Bookmarks grow.

Starred repositories multiply.

Links are saved “for later” — and quietly forgotten.

Over time, it becomes increasingly difficult to answer simple questions:

Which tools are actually used?

Which repositories are actively maintained?

Which utilities are practical, and which are merely theoretical?

OSINT Repos List exists as an attempt to address this problem.

📌 What this dataset is?

OSINT Repos List is a structured dataset built from an actively used working environment.

It documents open-source repositories related to:

- OSINT and open-source investigations,

- data collection and analysis,

- software development and automation,

- DevOps and infrastructure tooling,

- information security and research utilities.

The dataset is not a curated “top tools” list and not a recommendation catalog.

It reflects what is actually being used, tested, evaluated and maintained over time.

📌 Why this approach matters?

Traditional OSINT lists tend to be static.

They age quickly, lose context and fail to reflect real-world usage.

This dataset is different in several ways:

- it grows automatically,

- it preserves metadata such as update activity and popularity,

- it reflects a long-term working toolchain rather than a one-time selection,

- it allows patterns and trends to emerge naturally.

Instead of asking “what tools should I use?”, the dataset helps answer:

“What tools are people actually using in practice?”

📌 What kind of information it contains?

Each entry in the dataset includes:

- repository name and owner,

- short description,

- associated topics and tags,

- popularity indicators,

- update timestamps.

This makes it possible to explore the dataset not only as a list of tools,

but also as a reference for understanding how the open-source OSINT ecosystem evolves.

Because metadata is preserved, the dataset can be used analytically — not just descriptively.

📌 Where to Follow?

Substack:

📌 Weekly Update — Selected Additions

Below are three selected examples from the most recent update cycle.

TOOL OF THE WEEK

Open Drone Log | Drone Log analyzer: A high-performance universal dashboard application for organizing and analyzing DJI/Litchi flight logs privately in one place. Built with Tauri v2, DuckDB, and React

https://github.com/arpanghosh8453/open-dronelog

Watch Tower | A clean, minimal, terminal-based global intelligence dashboard

https://github.com/lajosdeme/watchtower

Global Conflict Terminal Dashboard

https://global-opss.github.io/global-conflict-map/

📌 Intended use

OSINT Repos List is designed for:

- investigators and researchers,

- journalists and analysts,

- engineers and automation specialists,

- information security practitioners.

It can be used as:

- a discovery aid,

- a structured tooling archive,

- a way to cross-check tooling choices,

- a snapshot of a working OSINT environment at a given point in time,

- a reference baseline for comparing future tooling shifts.

The full archive version of the dataset is available below for subscribers.

OSINTech's Timeline (153) - 12.03.2026

OSINTech — Thu, 12 Mar 2026 11:00:54 GMT

Hog

Week of 6 — 12 March 2026

Every week, I manually curate tools, research, and services that are genuinely useful for OSINT, digital investigations, security research, and adjacent fields.

No hype. No SEO noise. No “AI startups that change everything”.
Only things you can open, verify, and actually use.

🌍 Regional & Thematic OSINT

Using Bellingcat’s New Open Source Tool to Explore Historical and Spatial Flight Data

🔗 https://www.bellingcat.com/resources/2026/03/05/turnstone-flight-tracking-tool/

Bellingcat Beginner’s Guide To Flight Tracking

🔗 https://www.bellingcat.com/resources/how-tos/2019/10/15/a-beginners-guide-to-flight-tracking/

The Hidden Trail. How MAC Addresses Reveal Real-World Locations via OSINT

The Mystery of Nadia Marcinko. Epstein’s Alleged Right Hand and Her Digital Trail. In the sprawling story of Jeffrey Epstein’s network, certain names surface again and again -some powerful, some elusive, and some occupying a far more ambiguous space between victim and participant. One of those names is Nadia Marcinko, also known as Nadia Marcinkova

🔗 https://www.osinord.com/post/the-mystery-of-nadia-marcinko-epstein-s-alleged-right-hand-and-her-digital-trail

Yandex OSINT by OSINT Industries

🔗 https://www.osint.industries/post/yandex-osint-find-emails-identities-and-more-on-russias-biggest-search-engine

Germany OSINT. The Investigator’s Playground: 300+ German Open-Source Intelligence Resources for Researchers, Journalists, Analysts & Students

🔗 https://osintteam.blog/germany-osint-5fb705a43ecd

Mexican OSINT. Here are a few powerful Mexican open-source intelligence (OSINT) tools and
resources that I personally rely on almost every week. When hunting for information—whether it’s people, companies, assets, public records, or connections-combining several of these tools usually produces the best and fastest result

🔗 https://cartelwatch.net/resources/mexican-osint/

Hungarian OSINT start.me page

🔗 https://start.me/p/kxGLzd/hun-osint

OSINT of Zanzibar by Unishka Research Service

UNISHKA’s Substack

OSINT of Zanzibar

a month ago · 4 likes · UNISHKA Research Service

Exploring Cylect.io. An Aggregated Workspace for OSINT Investigations

Toddington International Inc.

🤖 Exploring Cylect.io: An Aggregated Workspace for OSINT Investigations

Over the past decade, the number of publicly available OSINT tools has expanded dramatically. Investigators now have access to hundreds of specialized resources supporting identity resolution, domain analysis, social media research, and geolocation…

a month ago · 1 like · Toddington International Inc.

🛠 OSINT Tools, Services & Investigations

Open DroneLog. Drone Log analyzer: A high-performance universal dashboard application for organizing and analyzing DJI/Litchi flight logs privately in one place. Built with Tauri v2, DuckDB, and React

🔗 https://github.com/arpanghosh8453/open-dronelog

WatchTower. A clean, minimal, terminal-based global intelligence dashboard

🔗 https://github.com/lajosdeme/watchtower

Megacut. Magic tool for managing internet connection in local network

🔗 https://github.com/stryker-project/megacut

IMSI Catcher. This program show you IMSI numbers of cellphones around you

🔗 https://github.com/Oros42/IMSI-catcher

S3Scanner. Scan for misconfigured S3 buckets across S3-compatible APIs

🔗 https://github.com/sa7mon/S3Scanner

Titus. High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation

🔗 https://github.com/praetorian-inc/titus

Supercookie uses favicons to assign a unique identifier to website visitors. Unlike traditional tracking methods, this ID can be stored almost persistently and cannot be easily cleared by the user

🔗 https://github.com/jonasstrehle/supercookie/

SimpleUSB. A simple application that will help you determine the usb device. It will be useful when choosing an adapter as it displays the chipset

🔗 https://github.com/stryker-project/simpleusb

Pompelmi. Secure File Upload Scanning for Node.js. Privacy-first malware detection with YARA, ZIP bomb protection, and framework adapters

🔗 https://github.com/pompelmi/pompelmi

OpenAnt from Knostic is an open source LLM-based vulnerability discovery product that helps defenders proactively find verified security flaws while minimizing both false positives and false negatives. Stage 1 detects. Stage 2 attacks. What survives is real

🔗 https://github.com/knostic/OpenAnt

RuView. WiFi DensePose turns commodity WiFi signals into real-time human pose estimation, vital sign monitoring, and presence detection - all without a single pixel of video

🔗 https://github.com/ruvnet/RuView

PhishCollector is a research framework for collecting, analysing, and tracking phishing sites

🔗 https://github.com/olizimmermann/phishcollector

BTRPA Scan. Bluetooth Low Energy (BLE) scanner with Resolvable Private Address (RPA) resolution using Identity Resolving Keys (IRKs)

🔗 https://github.com/HackingDave/btrpa-scan

WAF Checker. A powerful web application to test how well your Web Application Firewall (WAF) protects against common attack vectors

🔗 https://github.com/PAPAMICA/waf-checker

Security Cipher. As passionate writers and open-source contributors in the field of cybersecurity, we are eager to share our experiences and knowledge with the community. We continue to learn and grow in this field, and we are excited to share our insights with others

🔗 https://securitycipher.com/security-tools/

🤖 Universal Search & AI

Fabricis an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere

🔗 https://github.com/danielmiessler/fabric

BagOfWords. Chat with your data - with memory, rules, and observability built in. Deploy in 2 minutes

🔗 https://github.com/bagofwords1/bagofwords

NotebookLM-py. Unofficial Python API and agentic skill for Google NotebookLM. Full programmatic access to NotebookLM’s features—including capabilities the web UI doesn’t expose - via Python, CLI, and AI agents like Claude Code, Codex, and OpenClaw

🔗 https://github.com/teng-lin/notebooklm-py

Zonos-v0.1 is a leading open-weight text-to-speech model trained on more than 200k hours of varied multilingual speech, delivering expressiveness and quality on par with-or even surpassing-top TTS providers

🔗 https://github.com/Zyphra/Zonos

ollamaMQ. High-performance Ollama proxy with per-user fair-share queuing, round-robin scheduling, and a real-time TUI dashboard. Built in Rust

🔗 https://github.com/Chleba/ollamaMQ

LLMFit. 497 models. 133 providers. One command to find what runs on your hardware. A terminal tool that right-sizes LLM models to your system’s RAM, CPU, and GPU. Detects your hardware, scores each model across quality, speed, fit, and context dimensions, and tells you which ones will actually run well on your machine

🔗 https://github.com/AlexsJones/llmfit

Presenton. Open-Source AI Presentation Generator and API (Gamma, Beautiful AI, Decktopus Alternative)

🔗 https://github.com/presenton/presenton

Deta Surf Personal AI Notebooks. Organize files & webpages and generate notes from them. Open source, local & open data, open model choice (incl. local)

🔗 https://github.com/deta/surf

Siftly. Local Twitter/X bookmark organizer with AI categorization and mindmap visualization

🔗 https://github.com/viperrcrypto/Siftly

SilentChain. AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)

🔗 https://github.com/silentchainai/SILENTCHAIN

OpenPlanter. A recursive-language-model investigation agent with a terminal UI. OpenPlanter ingests heterogeneous datasets - corporate registries, campaign finance records, lobbying disclosures, government contracts, and more - resolves entities across them, and surfaces non-obvious connections through evidence-backed analysis. It operates autonomously with file I/O, shell execution, web search, and recursive sub-agent delegation

🔗 https://github.com/ShinMegamiBoson/OpenPlanter

👨‍💻 Software Development & APIs

VoidAuth is an open-source SSO authentication and user management provider that stands guard in front of your self-hosted applications. It is easy-to-use for admins and end-users, supports nice-to-have features like passkeys, user invitation, self-registration, email support, and more

🔗 https://github.com/voidauth/voidauth/

Terrae. Composable and animated components that replace imperative layers with simple props. The perfect companion for shadcn/ui

🔗 https://github.com/alamenai/terrae

Wails. Create beautiful applications using Go

🔗 https://github.com/wailsapp/wails

DuckDB is an analytical in-process SQL database management system

🔗 https://github.com/duckdb/duckdb

bbrew. A Package Manager for macOS and Linux, Based in brew.sh

🔗 https://github.com/BBrowser/BBrew

Landscape2 is a tool that generates interactive landscapes websites

🔗 https://github.com/cncf/landscape2

bg-remove. Free image background removal - private, client-side and powered by Transformers.js

🔗 https://github.com/addyosmani/bg-remove/

🐧 Linux & DevOps

b4. Network packet processor with a friendly UI for circumventing Deep Packet Inspection (DPI) systems

🔗 https://github.com/DanielLavrushin/b4/

Pingap. A reverse proxy like nginx, built on pingora, simple and efficient

🔗 https://github.com/vicanso/pingap

Databasus. Databases backup tool (PostgreSQL, MySQL, MongoDB)

🔗 https://github.com/databasus/databasus

OpenLiteSpeed Web Server. Our high-performance, lightweight, open source HTTP server

🔗 https://github.com/litespeedtech/openlitespeed

Runtipi is a homeserver for everyone! One command setup, one click installs for your favorites self-hosted apps

🔗 https://github.com/runtipi/runtipi

🔌 Hardware & Devices

Flipper One MCU Firmware. This repository is part of Flipper One MCU Firmware sub-project and contains issue tracking and firmware sources for the Flipper One MCU — the low-power co-processor that controls the LCD, buttons, and battery

🔗 https://github.com/flipperdevices/flipperone-mcu-firmware

🚨 From CyberDetective

Shadow Broker.Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. The knowledge is available to all but rarely aggregated in the open, until now

🔗 https://github.com/BigBodyCobain/Shadowbroker

Situation Deck. Worldwide events and conflicts monitoring tool:

interactive map
news feeds
AI-powered intelligence analyst
60+ widgets
190+ data providers
70+ map layers

🔗 https://app.sitdeck.com/

SkyOSINT. Real-time tracking of 16K+ objects on the sky. Allow to analyze anomalies, maneuvers, conjunctions and behaviorGEO:

🔗 https://skyosint.io/

📌 Full OSINT Repos List Collection

Full OSINT Repos List Collection available for paid Subscribers.

3453 Starred Repositories, 39 Newly added since last update:

📌 Where to Follow

- Substack:

- LinkedIn: https://www.linkedin.com/in/osintech/details/featured/

If this timeline saves you time, it’s doing its job.

Free to read. Manually curated. Minimal noise.

📌 Legal and ethical note

All tools and techniques documented in the dataset are presented for informational,

educational and information security purposes only.

The dataset does not promote or endorse illegal activities.

Users are responsible for complying with applicable laws and ethical standards.

📌 About future updates

The dataset is updated on a regular basis.

Future posts will document changes, notable additions and emerging trends observed within the dataset.

This post serves as an introduction and reference point for those updates.

OSINT Anatomy / Does MAX Messenger track VPN users?

OSINTech — Sun, 08 Mar 2026 15:40:05 GMT

This headline isn’t clickbait. By reverse engineering the Russian MAX messenger (https://max.ru/) client, we were able to confirm our worst fears.

Reports of strange requests from the MAX messenger to Telegram and WhatsApp have begun to appear online, prompting speculation about the nature and purpose of these requests. But it’s one thing to suspect, another to know. It could be some kind of integration or a random analytics module. So, to understand it myself and share it with you, I decided to look inside the client and figure out what it does and why.

TL;DR - it contains a spy module created by the MAX developers to monitor VPN users. They made sure to make this module unblockable and added remote control.

Preparation

Since the MAX client doesn’t contain debugging information and is difficult to reverse engineer, I decided to first simply look at the network requests the client makes. For this, we’ll need:

mitmproxy. I used wireguard mode (--mode wireguard) because it allows me to intercept all traffic.

Android emulator. I used the Android Emulator that comes with Android Studio.

Upload the mitmproxy root certificate to the emulator’s system store.

WireGuard client for Android. I used the official one. When launched, mitmproxy/mitmweb displays a QR code and configuration for the WG client.

The MAX messenger itself. In my research, I used version MAX_(RS)_v.26.4.3(6552)(8.0-15.0)(arm7a,arm64-8a,x86,x86-64), which I found on 4pda.

JADX for APK analysis.

In this article, I will omit the instructions for downloading the root certificate, configuring the emulator, and connecting to WireGuard, as there are thousands of instructions for this online.

Traffic Interception

So, let’s launch mitmweb, connect the emulator, and see what requests are being sent to the internet.

Well, we see the requests we’re interested in, but for some reason, the data exchange with api.oneme.ru (the messenger’s API domain) is displayed as a TCP stream, not HTTP(S)/WebSocket.

Initially, I thought it was gRPC, since the traffic looked like a binary mess with some strings interspersed, but protoc - decode_raw showed nothing.

Protocol Analysis

Protocol analysis took me several hours, but in the end, I discovered that each message consists of a header (10 bytes) and a payload (optionally compressed). Here’s an example header.

OSINT Repos List Collection Update: 06.03.2026

OSINTech — Sun, 08 Mar 2026 07:55:36 GMT

📌 OSINT Repos List — Why This Dataset Exists?

Most OSINT and investigative work eventually runs into the same problem:

tools accumulate faster than they can be meaningfully documented.

Bookmarks grow.

Starred repositories multiply.

Links are saved “for later” — and quietly forgotten.

Over time, it becomes increasingly difficult to answer simple questions:

Which tools are actually used?

Which repositories are actively maintained?

Which utilities are practical, and which are merely theoretical?

OSINT Repos List exists as an attempt to address this problem.

📌 What this dataset is?

OSINT Repos List is a structured dataset built from an actively used working environment.

It documents open-source repositories related to:

- OSINT and open-source investigations,

- data collection and analysis,

- software development and automation,

- DevOps and infrastructure tooling,

- information security and research utilities.

The dataset is not a curated “top tools” list and not a recommendation catalog.

It reflects what is actually being used, tested, evaluated and maintained over time.

📌 Why this approach matters?

Traditional OSINT lists tend to be static.

They age quickly, lose context and fail to reflect real-world usage.

This dataset is different in several ways:

- it grows automatically,

- it preserves metadata such as update activity and popularity,

- it reflects a long-term working toolchain rather than a one-time selection,

- it allows patterns and trends to emerge naturally.

Instead of asking “what tools should I use?”, the dataset helps answer:

“What tools are people actually using in practice?”

📌 What kind of information it contains?

Each entry in the dataset includes:

- repository name and owner,

- short description,

- associated topics and tags,

- popularity indicators,

- update timestamps.

This makes it possible to explore the dataset not only as a list of tools,

but also as a reference for understanding how the open-source OSINT ecosystem evolves.

Because metadata is preserved, the dataset can be used analytically — not just descriptively.

📌 Where to Follow?

Substack:

📌 Weekly Update — Selected Additions

Below are three selected examples from the most recent update cycle.

TOOL OF THE WEEK

WebVM | A Linux virtual machine that runs in your browser.

https://webvm.io/

BotCommander | A lightweight web interface for managing multiple Python bots

https://github.com/Sergei768/BotCommander

FleetLeaks | Russia-related Sanctioned Vessels Monitor

Real-time database of maritime sanctions from US, EU, UK, Canada, Australia, and New Zealand: https://fleetleaks.com/

📌 Intended use

OSINT Repos List is designed for:

- investigators and researchers,

- journalists and analysts,

- engineers and automation specialists,

- information security practitioners.

It can be used as:

- a discovery aid,

- a structured tooling archive,

- a way to cross-check tooling choices,

- a snapshot of a working OSINT environment at a given point in time,

- a reference baseline for comparing future tooling shifts.

The full archive version of the dataset is available below for subscribers.

OSINTech's Timeline (152) - 05.03.2026

OSINTech — Thu, 05 Mar 2026 11:38:59 GMT

Flying cranes

Week of 27 February — 5 March 2026

Every week, I manually curate tools, research, and services that are genuinely useful for OSINT, digital investigations, security research, and adjacent fields.

No hype. No SEO noise. No “AI startups that change everything”.
Only things you can open, verify, and actually use.

🧭 Featured Project

Tesari — OSINT Copilot

A first step for investigations into organized crime, corruption, trafficking, and global risk networks.

Tesari is designed as an entry point into complex investigations: structure, context, and navigable intelligence instead of chaotic searching.

🔗 https://www.tesari.ai

🌍 Regional & Thematic OSINT

Not everything you need is indexed by Google. Especially when it comes to the Russian-language part of the internet. Mamont is a Russian search engine built for deep searching, including archived pages, old websites, and large file database
🔗 https://www.mmnt.ru/

OSINT Newsletters by Ubikron
🔗 https://github.com/ubikron/OSINT-newsletters

List of OSINT Capture The Flag platforms by Ubikron
🔗 https://github.com/ubikron/OSINT-CTFs

OSINT of Lithuania by Unishka Research Service

UNISHKA’s Substack

OSINT of Lithuania

a month ago · 3 likes · UNISHKA Research Service

Ladybird is a truly independent web browser, using a novel engine based on web standards
🔗 https://github.com/LadybirdBrowser/ladybird

🛠 OSINT Tools, Services & Investigations

WebVM is a virtual Linux environment running in the browser via WebAssembly. WebVM is powered by the CheerpX virtualization engine, which enables safe, sandboxed execution of x86 binaries, fully client-side. CheerpX includes an x86-to-WebAssembly JIT compiler, a virtual block-based file system, and a Linux syscall emulator
🔗 https://webvm.io/

A live Polymarket map for visualizing geopolitical prediction markets. Polyglobe is a first-of-its-kind OSINT market tracker and interactive dashboard that plots live Polymarket data onto a beautiful 3D globe. It was designed for traders, analysts, and journalists who need to see the financial impact of geopolitical events as they unfold, in real-time
🔗 https://www.pizzint.watch/polyglobe

Revelar (Origin Reveal PRO) is a professional Go-based CLI tool for uncovering real/origin IP addresses of websites behind CDNs such as Cloudflare, Akamai, Fastly, Imperva, and AWS CloudFront. It combines passive reconnaissance, heuristic analysis, and optional active verification to provide comprehensive reports in JSON and HTML formats
🔗 https://github.com/MRvirusIR/Revelar

GHOST. Global Human Operations & Surveillance Tracking: Open-source investigation management platform for tracking people, connections, and intelligence data. Because Excel spreadsheets are for accountants, not investigators. Non-commercial license
🔗 https://github.com/elm1nst3r/GHOST-osint-crm

SmolDocling OCR App built using SmolDocling 256M Model and Streamlit
🔗 https://github.com/AIAnytime/SmolDocling-OCR-App

zPDF. Zero-copy PDF text extraction library written in Zig. High-performance, memory-mapped parsing with SIMD acceleration
🔗 https://github.com/Lulzx/zpdf

ArrowDL (Arrow Downloader) is a download manager for Windows, MacOS and Linux
🔗 https://github.com/setvisible/ArrowDL/

mdream. The fastest HTML to markdown convertor built with JavaScript. Optimized for LLMs and supports streaming
🔗 https://github.com/harlan-zw/mdream

Open TrashMail. Open Source standalone trashmail solution that ships its own mail server
🔗 https://github.com/HaschekSolutions/opentrashmail

BillionMail. An Open-Source MailServer, NewsLetter, Email Marketing Solution for Smarter Campaigns
🔗 https://github.com/be3beke/BillionMail

GraphQL Grip. Burp Suite extension for GraphQL security testing. Fetch schemas, fingerprint backends, generate attack payloads
🔗 https://github.com/thecybersandeep/graphql-grip

VulnX is an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning
🔗 https://github.com/anouarbensaad/vulnx

CRACKAR. Advanced Multi-Vector Penetration Testing Tool
🔗 https://github.com/codingcreatively/crackar/tree/main

🤖 Universal Search & AI

AI Agent Tools. A curated collection of AI tools, utilities, and resources for developers and creators
🔗 https://github.com/cporter202/ai-agent-tools

Agent Viewer. Kanban board for managing Claude Code agents in tmux
🔗 https://github.com/hallucinogen/agent-viewer

OpenClaw Studio. A clean web dashboard for OpenClaw. Connect your Gateway, manage agents, and ship faster
🔗 https://github.com/grp06/openclaw-studio

ChatGPT-MD. A (nearly) seamless integration of ChatGPT into Obsidian
🔗 https://github.com/bramses/chatgpt-md

Full Augment Code, Claude Code, Cluely, CodeBuddy, Comet, Cursor, Devin AI, Junie, Kiro, Leap.new, Lovable, Manus, NotionAI, Orchids.app, Perplexity, Poke, Qoder, Replit, Same.dev, Trae, Traycer AI, VSCode Agent, Warp.dev, Windsurf, Xcode, Z.ai Code, Dia & v0. (And other Open Sourced) System Prompts, Internal Tools & AI Models
🔗 https://github.com/x1xhlol/system-prompts-and-models-of-ai-tools

Murmure. Fully local, private and cross platform Speech-to-Text with LLM Post-processing
🔗 https://github.com/Kieirra/murmure

VibeProxy. Native macOS menu bar app to use your Claude Code & ChatGPT subscriptions with AI coding tools - no API keys needed
🔗 https://github.com/automazeio/vibeproxy

👨‍💻 Software Development & APIs

Authelia. The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified
🔗 https://github.com/authelia/authelia

Kapso. WhatsApp API for developers
🔗 https://kapso.ai/

Give your OpenClaw AI agent a WhatsApp number. Official Meta Cloud API via Kapso. No ban risk
🔗 https://github.com/Enriquefft/openclaw-kapso-whatsapp

Browser Terminal Use turns cloud/browser terminals into a locally scriptable command surface for AI Agents. It bridges local agent loops with remote execution, streams verifiable output and exit codes, and includes ready-to-use Agent skills so advanced workflows can be adopted with minimal setup
🔗 https://github.com/chaokunyang/browser-terminal-use

API Mega List. GitHub repo is a powerhouse collection of APIs you can start using immediately to build everything from simple automations to full-scale applications. One of the most valuable API lists on GitHub-period
🔗 https://github.com/cporter202/API-mega-list

🐧 Linux & DevOps

ServerKit is a lightweight, modern server control panel for managing web applications, databases, and services on your VPS or dedicated server. Built with Python/Flask backend and React frontend
🔗 https://github.com/jhd3197/ServerKit

Atlantis Android. Capture HTTP/HTTPS traffic from Android apps and send to Proxyman for debugging
🔗 https://github.com/ProxymanApp/atlantis-android

Cubecos. Open-source IaaS and PaaS platform that automates and simplifies the deployment of virtualization, Kubernetes, and OpenStack infrastructure
🔗 https://github.com/bigstack-oss/cubecos

Port Killer. A powerful cross-platform port management tool for developers and devops. Monitor ports, manage Kubernetes port forwards, integrate Cloudflare Tunnels, and kill processes with one click
🔗 https://github.com/productdevbook/port-killer

PinMe. Deploy Your Frontend in a Single Command. Claude Code Skills supported
🔗 https://github.com/glitternetwork/pinme

Home Lab Hub. A self-hosted web application for managing and visualizing home lab infrastructure. Track hardware, virtual machines, applications, storage, networks, and more — all in one place
🔗 https://github.com/RaidOwl/homelab-hub

🔌 Hardware & Devices

NyarByGlasses. This app notifies you when smart glasses are nearby. It uses company identificators in the Bluetooth data sent out by these. Therefore, there likely are false positives (e.g. from VR headsets). Hence, please proceed with caution when approaching a person nearby wearing glasses. They might just be regular glasses, despite this app’s warning
🔗 https://github.com/yjeanrenaud/yj_nearbyglasses

🚨 From CyberDetective

Dark Light Viewer. A tool to conduct change detection over time using VIIRS night lights data
🔗 https://github.com/bendobrown/Dark-Light-Viewer

📌 Full OSINT Repos List Collection

Full OSINT Repos List Collection available for paid Subscribers.

3414 Starred Repositories, 40 Newly added since last update:

📌 Where to Follow

- Substack:

- LinkedIn: https://www.linkedin.com/in/osintech/details/featured/

If this timeline saves you time, it’s doing its job.

Free to read. Manually curated. Minimal noise.

📌 Legal and ethical note

All tools and techniques documented in the dataset are presented for informational,

educational and information security purposes only.

The dataset does not promote or endorse illegal activities.

Users are responsible for complying with applicable laws and ethical standards.

📌 About future updates

The dataset is updated on a regular basis.

Future posts will document changes, notable additions and emerging trends observed within the dataset.

This post serves as an introduction and reference point for those updates.

OSINT Repos List Collection Update: 27.02.2026

OSINTech — Mon, 02 Mar 2026 12:22:32 GMT

📌 OSINT Repos List — Why This Dataset Exists?

Most OSINT and investigative work eventually runs into the same problem:

tools accumulate faster than they can be meaningfully documented.

Bookmarks grow.

Starred repositories multiply.

Links are saved “for later” — and quietly forgotten.

Over time, it becomes increasingly difficult to answer simple questions:

Which tools are actually used?

Which repositories are actively maintained?

Which utilities are practical, and which are merely theoretical?

OSINT Repos List exists as an attempt to address this problem.

📌 What this dataset is?

OSINT Repos List is a structured dataset built from an actively used working environment.

It documents open-source repositories related to:

- OSINT and open-source investigations,

- data collection and analysis,

- software development and automation,

- DevOps and infrastructure tooling,

- information security and research utilities.

The dataset is not a curated “top tools” list and not a recommendation catalog.

It reflects what is actually being used, tested, evaluated and maintained over time.

📌 Why this approach matters?

Traditional OSINT lists tend to be static.

They age quickly, lose context and fail to reflect real-world usage.

This dataset is different in several ways:

- it grows automatically,

- it preserves metadata such as update activity and popularity,

- it reflects a long-term working toolchain rather than a one-time selection,

- it allows patterns and trends to emerge naturally.

Instead of asking “what tools should I use?”, the dataset helps answer:

“What tools are people actually using in practice?”

📌 What kind of information it contains?

Each entry in the dataset includes:

- repository name and owner,

- short description,

- associated topics and tags,

- popularity indicators,

- update timestamps.

This makes it possible to explore the dataset not only as a list of tools,

but also as a reference for understanding how the open-source OSINT ecosystem evolves.

Because metadata is preserved, the dataset can be used analytically — not just descriptively.

📌 Where to Follow?

Substack:

📌 Weekly Update — Selected Additions

Below are three selected examples from the most recent update cycle.

TOOL OF THE WEEK

Monitor the situation. An online world map that displays military conflicts, humanitarian and natural disasters, political and economic events in real time. + News feed and video broadcasts from news channels in different countries: https://monitor-the-situation.com/eastern-europe

Iran Monitor | Real-Time OSINT Dashboard for Iran: https://www.iranmonitor.org/

📌 Intended use

OSINT Repos List is designed for:

- investigators and researchers,

- journalists and analysts,

- engineers and automation specialists,

- information security practitioners.

It can be used as:

- a discovery aid,

- a structured tooling archive,

- a way to cross-check tooling choices,

- a snapshot of a working OSINT environment at a given point in time,

- a reference baseline for comparing future tooling shifts.

The full archive version of the dataset is available below for subscribers.

OSINTech's Timeline (151) - 26.02.2026

OSINTech — Thu, 26 Feb 2026 18:26:22 GMT

Dystopia.

A team of Moldovans catches chickens at night. The work is brought to the farm in the evening; after dark, a couple thousand chickens need to be caught and loaded into trucks. The chickens are caught in the dark and stuffed into iron crates. Naturally, they resist, trying to escape, scratching the catchers. But the shadows in the night are diligent and merciless. By morning, the pen is empty, and young chickens are released into it. During the day, the catchers drink heavily, but not out of pity for the unfortunate chickens headed for slaughter. But simply out of boredom...

Week of 20 — 26 February 2026

Every week, I manually curate tools, research, and services that are genuinely useful for OSINT, digital investigations, security research, and adjacent fields.

No hype. No SEO noise. No “AI startups that change everything”.

Only things you can open, verify, and actually use.

🧭 Featured Project

Tesari — OSINT Copilot

A first step for investigations into organized crime, corruption, trafficking, and global risk networks.

Tesari is designed as an entry point into complex investigations: structure, context, and navigable intelligence instead of chaotic searching.

🔗 https://www.tesari.ai

🌍 Regional & Thematic OSINT

Sixty Russian agents identified. Prigozhin’s influence network taken over by the Foreign Intelligence Service

🔗 https://forbiddenstories.org/russian-agents-prigozhins-influence-network-taken-over-by-the-intelligence-service/

🔗 https://monitor-the-situation.com/

Iran Monitor. Real-Time OSINT Dashboard for Iran

🔗 https://www.iranmonitor.org/

The Eyes on Russia Map now has updated filtering capabilities taking into account four years of Russian aggression which allows users to investigate our data deeper. Users can explore our data with enhanced categories and filters, researching trends such as strikes on hotels, the scale of the conflict per Oblast, and strikes on Ukraine’s energy infrastructure

🔗 https://www.info-res.org/eyes-on-russia/maps/eyes-on-russia-map/

200.zona.media. Last update: February 24, 2026. Mediazona, BBC Russian Service, and a team of volunteers have been keeping a list of Russians who have died in the war with Ukraine since May 2022. This interactive database is compiled from open sources: obituaries on social media, media reports, publications by local authorities, and so on

🔗 https://200.zona.media

Build Your First OSINT Bookmarklet in 5 Minutes. Video guide from David Bombal, Griffin Glynn and Micah Hoffman

OSINT of Brazil by Unishka Research Service

🔗 https://substack.com/home/post/p-187615169

Crypto Resources start.me dashboard by Robert Bunn

🔗 https://start.me/p/Bnmdyv/crypto-resources

🛠 OSINT Tools, Services & Investigations

Criminal IP is an OSINT search engine specialized in attack surface assessment and threat hunting. It offers extensive cyber threat intelligence, including device reputation, geolocation, IP reputation for C2 or scanners, domain safety, malicious link detection, and APT attack vectors via search and API

🔗 https://www.criminalip.io/

Obsidian OSINT Copilot Plugin. OSINT investigation plugin for SOC analysts and threat researchers to organize, analyze, and visualize intelligence data

🔗 https://github.com/Probe-Point-Analytics-LLC/Obsidian-OSINT-Copilot-plugin

OSINT Copilot Obsidian Template

🔗 https://github.com/Probe-Point-Analytics-LLC/OSINT-Copilot-Obsidian-Template

OSINT Checklist generator. A free online tool for generating investigation checklists. Simply select the type of investigation (person, company, location) and add some context

🔗 https://shadowdragon.io/blog/checklist-generator/

iNTERCEPT, a free and open-source platform that unites the best signal intelligence tools into a single, accessible interface

🔗 https://github.com/smittix/intercept

Naminter. A Python package and command-line interface (CLI) tool for asynchronous OSINT username enumeration using the WhatsMyName dataset

🔗 https://github.com/3xp0rt/Naminter

Whiteintel is the definitive platform for Identity Protection. We track Telegram channels, dark web forums, and stealer logs in real-time to neutralize stolen accounts

🔗 https://whiteintel.io/

FleetLeaks. Russia Sanctioned Vessels Database

🔗 https://fleetleaks.com/

TRACK 2 THREAT Intelligence Platform

🔗 https://www.track2pulse.com/

Hades Dark Web Intelligence Platform

🔗 https://hades.aikostek.com/

Exegol. Fully featured and community-driven hacking environment

🔗 https://github.com/ThePorgs/Exegol

Whapa is a set of graphical forensic tools to analyze whatsapp from Android and soon iOS devices. All the tools have been written in Python 3.8 and have been tested on linux, windows and macOS systems

🔗 https://github.com/B16f00t/whapa

WhatsApp-OSINT. OSINT tool for WhatsApp that allows you to obtain profile pictures, verify Business accounts, check status and user information, analyze linked devices, review privacy settings, and access complete data using the RapidAPI WhatsApp OSINT API. Supports 6 endpoints

🔗 https://github.com/kinghacker0/WhatsApp-OSINT

🤖 Universal Search & AI

NullClaw. Fastest, smallest, and fully autonomous AI assistant infrastructure written in Zig

🔗 https://github.com/nullclaw/nullclaw

Delivery infrastructure for agentic apps. Plano is an AI-native proxy and data plane that offloads plumbing work, so you stay focused on your agent’s core logic (via any AI framework)

🔗 https://github.com/anil2799/2026-02-plano

Heretic (Uncensored AI). Fully automatic censorship removal for language models

🔗 https://github.com/0xSojalSec/Uncensored-AI

Aqua is a message tool for AI Agents. Peer-to-peer agent communication with identity verification, End-to-end encrypted messaging, Durable message storage with inbox/outbox, Circuit Relay v2 support for cross-network connectivity, Simple CLI for node management and messaging

🔗 https://github.com/quailyquaily/aqua

Netron. Visualizer for neural network, deep learning and machine learning models

🔗 https://github.com/lutzroeder/netron

👨‍💻 Software Development & APIs

Marmot helps teams discover, understand, and leverage their data with powerful search and lineage visualisation tools. It’s designed to make data accessible for everyone

🔗 https://github.com/marmotdata/marmot

Scraping APIs for Devs. This GitHub repo is a powerhouse collection of scraping APIs for developers that you can start using immediately to build everything from simple automations to full-scale applications

🔗 https://github.com/cporter202/scraping-apis-for-devs

HashTool is a versatile and user-friendly Python tool designed to empower users with essential cryptographic functionalities. Whether you’re ensuring data integrity through hash verification, exploring the characteristics of hashed values, or encrypting and decrypting text

🔗 https://github.com/youssef-mouatta/hashtool

Fastest-validator. The fastest JS validator library for NodeJS | Browser | Deno

🔗 https://github.com/icebob/fastest-validator

GOWA. WhatsApp REST API with support for UI, Multi Account, Webhooks, and MCP, and Chatwoot. Built with Golang for efficient memory use

🔗 https://github.com/aldinokemal/go-whatsapp-web-multidevice

🐧 Linux & DevOps

Dozzle. Realtime log viewer for containers. Supports Docker, Swarm and K8s

🔗 https://github.com/amir20/dozzle

NetWraith. iOS traffic interception framework which route all device HTTP/HTTPS traffic through Burp Suite via a system-wide VPN tunnel

🔗 https://github.com/ShubhamDubeyy/NetWraith

PGrok. Poor man’s ngrok - a multi-tenant HTTP/TCP reverse tunnel solution through SSH remote port forwarding

🔗 https://github.com/pgrok/pgrok

CronBoard. A terminal-based dashboard for managing cron jobs locally and on servers

🔗 https://github.com/antoniorodr/cronboard/

Cachet, the open-source, self-hosted status page system

🔗 https://github.com/CachetHQ/Cachet

Domain Locker. The all-in-one tool, for keeping track of your domain name portfolio

🔗 https://domain-locker.com/

🔌 Hardware & Devices

IrScrutinizer is a program for IR signal analysis, decoding, generation and much more

🔗 https://github.com/bengtmartensson/IrScrutinizer

🚨 From CyberDetective

Glint Online dashboard (news feed + real-time map) for monitoring political and economic events (including those related to cryptocurrency) around the world

🔗 https://glint.trade/terminal

Place Spotter. Online AI photo geolocation tool. 3 photos per month free

🔗 https://www.placespotter.com/

Video Search Engine. Free online tool to search for videos on different platforms: YouTube, TikTok, VK, Youku, Netflix, Vimeo and many others

🔗 https://videosearch.io/

📌 Full OSINT Repos List Collection

Full OSINT Repos List Collection available for paid Subscribers.

3374 Starred Repositories, 37 Newly added since last update:

📌 Where to Follow

- Substack:

- LinkedIn: https://www.linkedin.com/in/osintech/details/featured/

If this timeline saves you time, it’s doing its job.

Free to read. Manually curated. Minimal noise.

📌 Legal and ethical note

All tools and techniques documented in the dataset are presented for informational,

educational and information security purposes only.

The dataset does not promote or endorse illegal activities.

Users are responsible for complying with applicable laws and ethical standards.

📌 About future updates

The dataset is updated on a regular basis.

Future posts will document changes, notable additions and emerging trends observed within the dataset.

This post serves as an introduction and reference point for those updates.

Introducing OSINT Repos List Collection

OSINTech — Sun, 22 Feb 2026 19:47:37 GMT

📌 OSINT Repos List — Why This Dataset Exists?

Most OSINT and investigative work eventually runs into the same problem:

tools accumulate faster than they can be meaningfully documented.

Bookmarks grow.

Starred repositories multiply.

Links are saved “for later” — and quietly forgotten.

Over time, it becomes increasingly difficult to answer simple questions:

Which tools are actually used?

Which repositories are actively maintained?

Which utilities are practical, and which are merely theoretical?

OSINT Repos List exists as an attempt to address this problem.

📌 What this dataset is?

OSINT Repos List is a structured dataset built from an actively used working environment.

It documents open-source repositories related to:

- OSINT and open-source investigations,

- data collection and analysis,

- software development and automation,

- DevOps and infrastructure tooling,

- information security and research utilities.

The dataset is not a curated “top tools” list and not a recommendation catalog.

It reflects what is actually being used, tested, evaluated and maintained over time.

📌 Why this approach matters?

Traditional OSINT lists tend to be static.

They age quickly, lose context and fail to reflect real-world usage.

This dataset is different in several ways:

- it grows automatically,

- it preserves metadata such as update activity and popularity,

- it reflects a long-term working toolchain rather than a one-time selection,

- it allows patterns and trends to emerge naturally.

Instead of asking “what tools should I use?”, the dataset helps answer:

“What tools are people actually using in practice?”

📌 What kind of information it contains?

Each entry in the dataset includes:

- repository name and owner,

- short description,

- associated topics and tags,

- popularity indicators,

- update timestamps.

This makes it possible to explore the dataset not only as a list of tools,

but also as a reference for understanding how the open-source OSINT ecosystem evolves.

Because metadata is preserved, the dataset can be used analytically — not just descriptively.

📌 Where to Follow?

Substack:

📌 Weekly Update — Selected Additions

Below are three selected examples from the most recent update cycle.

TOOL OF THE WEEK

Watcher. Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS: https://github.com/thalesgroup-cert/Watcher

StartOS is an open source Linux distribution optimized for running a personal server. It facilitates the discovery, installation, network configuration, service configuration, data backup, dependency management, and health monitoring of self-hosted software services: https://github.com/Start9Labs/start-os

Fluxer. A free and open source instant messaging and VoIP platform built for friends, groups, and communities: https://fluxer.app/

These examples illustrate the diversity of tooling represented in the dataset,

ranging from general-purpose utilities to highly specialized niche projects.

The purpose of this section is not promotion, but documentation of what is actively present within a working OSINT toolchain.

📌 Intended use

OSINT Repos List is designed for:

- investigators and researchers,

- journalists and analysts,

- engineers and automation specialists,

- information security practitioners.

It can be used as:

- a discovery aid,

- a structured tooling archive,

- a way to cross-check tooling choices,

- a snapshot of a working OSINT environment at a given point in time,

- a reference baseline for comparing future tooling shifts.

The full archive version of the dataset is available below for subscribers.

OSINTech's Timeline (150) - 19.02.2026

OSINTech — Thu, 19 Feb 2026 13:42:06 GMT

Open Claw

Week of 13 — 19 February 2026

Every week, I manually curate tools, research, and services that are genuinely useful for OSINT, digital investigations, security research, and adjacent fields.

No hype. No SEO noise. No “AI startups that change everything”. Only things you can open, verify, and actually use.

🧭 Featured Project

Tesari — OSINT Copilot

A first step for investigations into organized crime, corruption, trafficking, and global risk networks.

Tesari is designed as an entry point into complex investigations: structure, context, and navigable intelligence instead of chaotic searching.

We continue to develop our 𝐂𝐨𝐦𝐦𝐮𝐧𝐢𝐭𝐲 𝐏𝐚𝐫𝐭𝐧𝐞𝐫 𝐏𝐫𝐨𝐠𝐫𝐚𝐦𝐬 and are happy to announce that we have launched a 𝐬𝐩𝐞𝐜𝐢𝐚𝐥 𝐩𝐫𝐨𝐠𝐫𝐚𝐦 𝐟𝐨𝐫 𝐣𝐨𝐮𝐫𝐧𝐚𝐥𝐢𝐬𝐭𝐬, 𝐢𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐢𝐯𝐞 𝐫𝐞𝐩𝐨𝐫𝐭𝐞𝐫𝐬, 𝐚𝐧𝐝 𝐭𝐫𝐚𝐧𝐬𝐩𝐚𝐫𝐞𝐧𝐜𝐲 𝐰𝐚𝐭𝐜𝐡𝐝𝐨𝐠 𝐨𝐫𝐠𝐚𝐧𝐢𝐳𝐚𝐭𝐢𝐨𝐧𝐬 𝐰𝐨𝐫𝐤𝐢𝐧𝐠 𝐨𝐧 𝐜𝐫𝐨𝐬𝐬-𝐛𝐨𝐫𝐝𝐞𝐫 𝐨𝐫𝐠𝐚𝐧𝐢𝐳𝐞𝐝 𝐜𝐫𝐢𝐦𝐞, 𝐜𝐨𝐫𝐫𝐮𝐩𝐭𝐢𝐨𝐧, 𝐬𝐚𝐧𝐜𝐭𝐢𝐨𝐧𝐬 𝐞𝐯𝐚𝐬𝐢𝐨𝐧, 𝐢𝐥𝐥𝐢𝐜𝐢𝐭 𝐟𝐢𝐧𝐚𝐧𝐜𝐢𝐚𝐥 𝐟𝐥𝐨𝐰𝐬, 𝐚𝐧𝐝 𝐬𝐡𝐞𝐥𝐥 𝐜𝐨𝐦𝐩𝐚𝐧𝐢𝐞𝐬.

Tesari was 𝐝𝐞𝐬𝐢𝐠𝐧𝐞𝐝 𝐭𝐨 𝐬𝐮𝐩𝐩𝐨𝐫𝐭 𝐢𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐨𝐫𝐬 in collecting foundational intelligence as a 𝐬𝐭𝐞𝐩 𝐳𝐞𝐫𝐨 that feeds all following workstreams.

The platform delivers 𝐦𝐢𝐬𝐬𝐢𝐨𝐧-𝐜𝐫𝐢𝐭𝐢𝐜𝐚𝐥 𝐢𝐧𝐭𝐞𝐥𝐥𝐢𝐠𝐞𝐧𝐜𝐞 and cuts through massive amounts of data to provide a clear picture. It helps you find solid, 𝐯𝐞𝐫𝐢𝐟𝐢𝐚𝐛𝐥𝐞 𝐞𝐯𝐢𝐝𝐞𝐧𝐜𝐞 through all-source intelligence that 𝐲𝐨𝐮 𝐜𝐚𝐧 𝐫𝐞𝐥𝐲 𝐨𝐧.

We are happy to 𝐬𝐮𝐩𝐩𝐨𝐫𝐭 𝐭𝐡𝐞 𝐜𝐨𝐦𝐦𝐮𝐧𝐢𝐭𝐲 and deliver valuable solutions.

🔗 https://www.tesari.ai

🌍 Regional & Thematic OSINT

OSINT People. List of interesting and active OSINT researchers/bloggers

🔗 https://github.com/ubikron/OSINT-People

OSINT Companies. This repository contains a curated list of companies and platforms commonly used in Open-Source Intelligence (OSINT) work. Entries are grouped by primary OSINT use, not marketing claims. Also who found the companies, the year, and importantly - the country it’s located in

🔗 https://github.com/ubikron/OSINT-Companies

Introduction to Investigative Journalism. Deep Internet Research: Leveraging Open-Source Research and Verification Techniques

🔗 https://gijn.org/resource/introduction-investigative-journalism-deep-internet-research/

Public data tells a story governments don’t intend to tell. These slides summarize findings from an OSINT-based audit of Cuba government web infrastructure - highlighting inconsistent security standards, exposed metadata, and uneven protections across state institutions. Full investigation on Substack

Ringmast4r

Cuba Revealed: How the Communist Regime Left Government Infrastructure Exposed

Introduction…

2 months ago · 4 likes · Patrick Quirk

Social Engineering Analysis Framework. A Comprehensive Playbook for Human Hacking by OSINT Industries

🔗https://media.licdn.com/dms/document/media/v2/D4E1FAQGW_LWB0lErAQ/feedshare-document-pdf-analyzed/B4EZwUrTU8J8AY-/0/1769873423834?e=1770854400&v=beta&t=SMRE_Z2DOZOLMFkK2p3c1mQz6qzrV-MB7QAcCJkHr7c

Keeping track of crypto markets often means juggling charts, sentiment tools, and news feeds. This Start.me crypto dashboard brings them together in one structured view, designed to reduce context switching and knee-jerk reactions

🔗 https://start.me/p/nReaJG/crypto_dashboard

TeleBotList. A cool collection of awesome Telegram bots source code hosted on GitHub

🔗 https://github.com/MoonWalker440/TeleBotList

🛠 OSINT Tools, Services & Investigations

Watcher. Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS

🔗 https://github.com/thalesgroup-cert/Watcher

Fluxer. A free and open source instant messaging and VoIP platform built for friends, groups, and communities

🔗 https://github.com/fluxerapp/fluxer

Alt-sendme. Send files and folders anywhere in the world without storing in cloud - any size, any format, no accounts, no restrictions

🔗 https://github.com/tonyantony300/alt-sendme

Dropp is a modern cross-platform dropzone that keeps your files accessible across all your devices. Drag files to your shelf on macOS, then click to sync them to the cloud-they’ll be available on your Android phone and other devices

🔗 https://github.com/spacefarers/Dropp

FreeTube is an open source desktop YouTube player built with privacy in mind. Use YouTube without advertisements and prevent Google from tracking you with their cookies and JavaScript. Available for Windows (10 and later), Mac (macOS 12 and later) & Linux thanks to Electron

🔗 https://github.com/FreeTubeApp/FreeTube

Aurora Incident Response. Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

🔗 https://github.com/cyb3rfox/Aurora-Incident-Response

Samurai. Simple, yet effective moderator bot for telegram. With reports, logs, profanity filter, anti-spam AI, NSFW detection AI and more

🔗 https://github.com/Priler/samurai/tree/main

PaperKnife. Privacy-first PDF utility (Zero-Server Architecture). Merge, split, compress, and edit PDFs 100% locally on your device. No uploads, no servers, no tracking

🔗 https://github.com/proricardo/paperknife

MiroMiro. Turn any website into your design toolkit. Extract colors, fonts, images & animations in one click. No more eyeballing. No more guessing hex codes

🔗 https://miromiro.app/https://miromiro.app/

🤖 Universal Search & AI

Learn Prompt Hacking. This is The most comprehensive prompt hacking course available, which record our progress on a prompt engineering and prompt hacking course

🔗 https://github.com/TrustAI-laboratory/Learn-Prompt-Hacking

Pinchtab. Most agent browser tools (OpenClaw, Playwright MCP, Browser Use) are tightly coupled - they only work inside their own framework. If you switch agents or want to script something in bash, you’re out of luck

🔗 https://github.com/pinchtab/pinchtab

CC Workflow Studio. Accelerate Claude Code/GitHub Copilot/OpenAI Codex/Roo Code automation with a visual workflow editor

🔗 https://github.com/breaking-brake/cc-wf-studio/

Zen AI Pentest. AI-Powered Penetration Testing Framework with automated vulnerability scanning, multi-agent system, and compliance reporting

🔗 https://github.com/SHAdd0WTAka/Zen-Ai-Pentest

VoiceBox. The open-source voice synthesis studio. Clone voices. Generate speech. Build voice-powered apps. All running locally on your machine

🔗 https://github.com/jamiepine/voicebox

💻 Software Development & APIs

Login Machine. AI-powered login automation. Uses Claude to classify login pages and Playwright to interact with them

🔗 https://github.com/RichardHruby/login-machine

Zvec is an open-source, in-process vector database - lightweight, lightning-fast, and designed to embed directly into applications. Built on Proxima (Alibaba’s battle-tested vector search engine), it delivers production-grade, low-latency, scalable similarity search with minimal setup

🔗 https://github.com/alibaba/zvec

Scrapling. An undetectable, powerful, flexible, high-performance Python library to make Web Scraping Easy and Effortless as it should be

🔗 https://github.com/D4Vinci/Scrapling

htmldocs. The modern alternative to LaTeX. Create PDF documents templates using React, JSX, and Tailwind

🔗 https://github.com/htmldocs-js/htmldocs

FastCode. Accelerating and Streamlining Your Code Understanding

🔗 https://github.com/HKUDS/FastCode

🐧 Linux & DevOps

Async Scanner. Fast asynchronous Rust TCP port scanner with configurable concurrency

🔗 https://github.com/NickIBrody/async-scanner

OpenWrt Multi-Channel Sniffer. OpenWrt-based Access Point multi-channel WiFi Probe Request sniffer

🔗 https://github.com/GiovanniBaccichet/openwrt-multi-sniffer

LobsterBoard. A self-hosted, drag-and-drop dashboard builder with 50 widgets, a template gallery, custom pages, and zero cloud dependencies. One Node.js server, no frameworks, no build step needed

🔗 https://github.com/igounton/lobsterboard

🔗 https://github.com/Start9Labs/start-os

DockTail. Expose Docker containers as Tailscale Services using label-based configuration

🔗 https://github.com/marvinvr/docktail

🔌 Hardware & Devices

Trafexia Mobile Traffic Interceptor. A powerful desktop application for intercepting and analyzing HTTP/HTTPS traffic from mobile devices. Built with Electron, Vue 3, and TypeScript

🔗 https://github.com/danieldev23/trafexia

🚨 From CyberDetective

worldwatch.uk

An online world map for real-time monitoring of events from a wide variety of categories: Logistics, Military, Economic, Disasters, Governance, Humanitarian, Internet, Environment, News

🔗 https://worldwatch.uk/

📌 Full OSINT Repos List Collection

Full OSINT Repos List Collection available for paid Subscribers.

3374 Starred Repositories, 37 Newly added since last update:

https://osintech.substack.com/p/introducing-osint-repos-list-collection

📌 Where to Follow

- Substack:

- LinkedIn: https://www.linkedin.com/in/osintech/details/featured/

If this timeline saves you time, it’s doing its job.

Free to read. Manually curated. Minimal noise.

📌 Legal and ethical note

All tools and techniques documented in the dataset are presented for informational,

educational and information security purposes only.

The dataset does not promote or endorse illegal activities.

Users are responsible for complying with applicable laws and ethical standards.

📌 About future updates

The dataset is updated on a regular basis.

Future posts will document changes, notable additions and emerging trends observed within the dataset.

This post serves as an introduction and reference point for those updates.

OSINT Repos List — Access Model Update

OSINTech — Sat, 14 Feb 2026 14:22:07 GMT

Over the past years, my OSINT Repos List GitHub Repository has grown into a curated index of 3,000+ OSINT-relevant GitHub repositories covering open-source intelligence, data collection, investigative tooling, scraping frameworks, digital forensics, DevSecOps utilities, and advanced research domains.

Starting next week, the repository will transition to a hybrid access model:

A limited public preview will remain available on GitHub
The full structured collection (complete dataset + extended formatting + updates) will move behind a Substack paywall

The full version will include:

The complete, regularly updated repository index
Structured exports (MD / PDF / JSON formats)
Ongoing curation and dataset maintenance
Subscriber-only updates and analytical notes

Why the change?

Maintaining a high-signal OSINT dataset at scale requires:

Continuous validation
Automation pipelines
Deduplication and categorization
Long-term infrastructure support

Transitioning the full collection to paid access ensures sustainability and allows further development of automation, enrichment, and structured research workflows.

If you rely on operational OSINT tooling and prefer curated, verified repositories instead of fragmented searches — the subscriber version is built for you.

Full access will be available via Substack (OSINTech’s OSINT Anatomy publications).

More technical updates and details will follow shortly.

Repository with limited Access Address: https://github.com/bormaxi8080/osint-repos-list

Stay Tuned!

OSINTech's Timeline (149) - 12.02.2026

OSINTech — Thu, 12 Feb 2026 19:14:55 GMT

Shrimp

Week of 6 — 12 February 2026

Every week, I manually curate tools, research, and services that are genuinely useful for OSINT, digital investigations, security research, and adjacent fields.

No hype. No SEO noise. No “AI startups that change everything”. Only things you can open, verify, and actually use.

🧭 Featured Project

Tesari — OSINT Copilot

A first step for investigations into organized crime, corruption, trafficking, and global risk networks.

Tesari is designed as an entry point into complex investigations: structure, context, and navigable intelligence instead of chaotic searching.

🔗 https://www.tesari.ai

🌍 Regional & Thematic OSINT

Afghanistan’s New Intelligence Landscape: Hybrid Regimes and the Marketplace of Secrets

🔗 https://substack.com/home/post/p-187205970

EpsteIn. See which of your LinkedIn connections appear in the Epstein files

🔗 https://github.com/cfinke/EpsteIn

World Monitor. Real-time global intelligence dashboard - AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

🔗 https://github.com/koala73/worldmonitor

OSINT of Azerbaijan by Unishka Research Service

🔗 https://unishka.substack.com/p/osint-of-azerbaijan

The OSINT Vault. Tools for mapping networks, tracing domains, and identifying the systems behind online activity. Clear, reliable, and built for precise discovery

🔗 https://theosintvault.io/

OSINT Books by Ubikron. In this repository, you will find a short list of books on various OSINT tools and techniques, the use of OSINT in different fields (cybersecurity, recruiting), and the psychological aspects of investigations

🔗 https://github.com/ubikron/OSINT-Books

Image Whisperer v1.0 - out of beta!

This is amazing AI Image Analysis Toolkit with a lot of features:

- Scene Description

- First Observations

- Forensic Analysis

- Location Analysis

- Found in text on the web + similar images

- Verify & cross-check

- Investigate this image

- Image Metadata & EXIF Information

🔗 https://imagewhisperer.org/

PDF Documents Analysis Tools

A short list of tools for AI document analysis:

🔗 AI Drive: https://myaidrive.com/

🔗 HiPDF: https://lnkd.in/d2ZqeZJ8

🔗 PDFAI : https://pdf.ai/demo

🔗 SmallPDF: https://lnkd.in/exZUZswt

🔗 DocAnalyzer: https://docanalyzer.ai/app

🔗 Search+ : https://www.searchplus.ai/

🔗 Merge: https://pdfguru.com/app/merge-pdf

AIWhisperer. Shrink massive PDFs to fit AI upload limits. Sanitize before uploading to reduce risk of exposing sensitive data

🔗 https://github.com/voelspriet/aiwhisperer

BentoPDF is a powerful, privacy-first, client-side PDF toolkit that is self hostable and allows you to manipulate, edit, merge, and process PDF files directly in your browser. No server-side processing is required, ensuring your files remain secure and private

🔗 https://github.com/alam00000/bentopdf

Dots.OCR. Multilingual Document Layout Parsing in a Single Vision-Language Model

🔗 https://github.com/rednote-hilab/dots.ocr

🛠 OSINT Tools, Services & Investigations

Free TV. This is an M3U playlist for free TV channels around the World. Or free on the Internet. Plex TV, Pluto TV (English, Spanish, French, Italian), Redbox Live TV, Roku TV, Samsung TV Plus, Youtube live channels

🔗 https://github.com/Free-TV/IPTV

Terminal Messenger is an ultra-secure, OFF-THE-RECORD (OTR), and end-to-end encrypted (E2EE) CLI messaging platform

🔗 https://github.com/rhymezip/TerminalMessenger/tree/Rahim

AnyCrawl. TypeScript crawler that turns websites into LLM-ready data and extracts structured SERP results from Google/Bing/Baidu/etc. Native multi-threading for bulk processing

🔗 https://github.com/any4ai/AnyCrawl

Camofox-browser. Headless browser automation server for AI agents to visit sites that are usually blocked

🔗 https://github.com/jo-inc/camofox-browser

Webvetted. Automated OSINT service that performs 60-second background checks on individuals, sellers, or websites. Accepts names, e-commerce links (eBay, Amazon, AliExpress), Social networks or domains to surface scam reports, domain history, social profiles, and trust indicators

🔗 https://webvetted.com/

WEBFANG is my first CLI, a modular OSINT & Reconnaissance toolkit curated for Ethical Hackers and Red-Teamers. Sink fangs into web targets using a passive intel gathering approach, active Spidering, DNS/WHOIS lookups & Shodan, All in a lightweight package. Choose your weapon & happy hunting

🔗 https://github.com/Talyx66/WEBFANG

Complience Check Lite. An information and analytical tool for identifying formal, hierarchical, and regulatory inconsistencies in documents, orders, and court decisions

🔗 https://github.com/gogi2305/compliance-check-lite

🤖 Universal Search & AI

SightLine. Geospatial infrastructure intelligence platform for discovering and analyzing physical-world assets using OpenStreetMap data

🔗 https://github.com/ni5arga/sightline

mr7.AI. Next-Gen AI forCybersecurity Experts. A flexible response system designed for ethical hackers, penetration testers, and security researchers. Context-aware, developer-friendly, and built for advanced users

🔗 http://mr7.ai/

Claude-mem. A Claude Code plugin that automatically captures everything Claude does during your coding sessions, compresses it with AI (using Claude’s agent-sdk), and injects relevant context back into future sessions

🔗 https://github.com/thedotmack/claude-mem

👨‍💻 Software Development & APIs

AlmostNode. Node.js in your browser. Just like that. A lightweight, browser-native Node.js runtime environment. Run Node.js code, install npm packages, and develop with Vite or Next.js - all without a server

🔗 https://github.com/macaly/almostnode

HTMX Debugger. A browser extension (Chrome and Firefox) debugging tool for htmx applications

🔗 https://github.com/NomadicDaddy/htmx-debugger

F_EX Java IDE. An experimental integrated development environment (IDE) for Java, written in JavaFX. A full-featured code editor with support for Gradle, Maven, pure Java, and IntelliJ IDEA projects

🔗 https://github.com/ExesWi/F_EX

Keifu. Git genealogy, untangled. A TUI for navigating commit graphs with color and clarity

🔗 https://github.com/trasta298/keifu

🐧 Linux & DevOps

MySpeed. A speed test analysis software that shows your internet speed for up to 30 days

🔗 https://github.com/gnmyt/MySpeed

nmapUnleashed (nu) is a modern CLI wrapper for [Nmap](https://nmap.org/), designed to make network scanning more comfortable and effective. Nmap is THE tool for penetration testing and network auditing, you can use `nu` just like Nmap with all its familiar commands but with extended features such as multithreading, easy scan management, and improved overview of your scans and more

🔗 https://github.com/Sharkeonix/nmap-unleashed

A GlobalProtect VPN client for Linux, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, YubiKey, and client certificate authentication, etc

🔗 https://github.com/yuezk/GlobalProtect-openconnect

Vulnhuntr leverages the power of LLMs to automatically create and analyze entire code call chains starting from remote user input and ending at server output for detection of complex, multi-step, security-bypassing vulnerabilities that go far beyond what traditional static code analysis tools are capable of performing

🔗 https://github.com/protectai/vulnhuntr?tab=readme-ov-file

🔌 Hardware & Devices

Rdio Scanner is an open source software that ingest and distribute audio files generated by various software-defined radio recorders. Its interface tries to reproduce the user experience of a real police scanner, while adding its own touch

🔗 https://github.com/chuot/rdio-scanner

🚨 From CyberDetective

GEOREFENCER. Simple free online tool that help anchor any image to its real-world location by matching points on your image with the same spots on the map

🔗 https://georeferencer.ai/

IMAGE OSINT. List of tools for image analysis and search. Part of Boudjenane Soufiane’s startMe page

🔗 https://start.me/p/9onGdR/souf6x-osint

25 Satellite Maps To See Earth in New Ways. List of online tools (mostly free or partly free) by GisGeography

🔗 https://gisgeography.com/satellite-maps/

7 Aerial Imagery and Photography Sources (Free and Paid)

🔗 https://gisgeography.com/aerial-imagery-sources/

7 Free World Climate Data Sources

1. NASA Earth Observatory

2. European Space Agency Climate Change Initiative (CCI)

3. UNEP Environmental Data Explorer

4. US Government Open Data Initiative

5. FAO GeoNetwork

6. NASA’s Socioeconomic Data and Applications Center (SEDAC)

7. Organisation for Economic Co-operation and Development (OECD)

🔗 https://gisgeography.com/free-world-climate-data-sources/

Full OSINT Repos List Collection available for paid Subscribers.

3374 Starred Repositories, 37 Newly added since last update:

https://osintech.substack.com/p/introducing-osint-repos-list-collection

📌 Where to Follow

- Substack:

- LinkedIn: https://www.linkedin.com/in/osintech/details/featured/

If this timeline saves you time, it’s doing its job.

Free to read. Manually curated. Minimal noise.

📌 Legal and ethical note

All tools and techniques documented in the dataset are presented for informational,

educational and information security purposes only.

The dataset does not promote or endorse illegal activities.

Users are responsible for complying with applicable laws and ethical standards.

📌 About future updates

The dataset is updated on a regular basis.

Future posts will document changes, notable additions and emerging trends observed within the dataset.

This post serves as an introduction and reference point for those updates.

OSINT Anatomy / Nomma Zarubina Fail

OSINTech — Tue, 10 Feb 2026 18:03:55 GMT

Nomma Zarubina, a 36-year-old native of Tomsk, found herself at the center of one of the strangest and most convoluted cases involving Russian intelligence in the United States in recent years.

- In 2016, she moved to the United States, got married, and had a daughter.

- She worked for the pro-Russian NGO Russia Center New York (RCNY), which is linked to the Kremlin and Rossotrudnichestvo.

- She was actively involved in “network marketing” in political and expert circles: she attended seminars, forums, and conferences with American journalists, foreign policy experts, military personnel, academics, and opposition figures.

- At first, she was noticeably pro-Russian and pro-Kremlin, but then, after 2022, she abruptly shifted her rhetoric to anti-Putin, participated in anti-Kremlin events, spoke on Free Nations of Post-Russia panels, and traveled to Ottawa for events with European politicians.

In December 2020, she was recruited by FSB officers. She was given the codename “Alisa.” Primary contacts:

- FSB Lieutenant Colonel Roman Sumarokov

- Kirill Frolov from Tomsk

The objective was to gather contacts of useful people in the United States—a typical influence/recruitment operation through “soft power.”

Zarubina concealed these contacts and cooperation.

- The FBI began communicating with her voluntarily in October 2020-initially due to her close ties to Elena Branson, her daughter’s godmother.

- Branson is a different person of interest: in 2022, she was accused of working as a Russian foreign agent, visa fraud, etc. She fled the United States in 2020.

- Zarubina testified to the FBI several times (in 2021, 2023, and later).

- Initially, she denied any ties to the FSB.

- Then she gradually began to admit more and more details.

- In April 2021 and September 2023, she allegedly knowingly lied about her contacts with the FSB—this became the primary charge under 18 U.S.C. § 1001 (lying to federal authorities, punishable by up to five years in prison).

In November 2024, a sealed complaint was filed against her, and then she was formally charged.

- From the summer of 2024–2025, Zarubina began bombarding one of the FBI agents with dozens of messages, often at night and while intoxicated.

- The messages alternated between romantic (”my darling,” selfies with wine), threatening (”you’re a bitch,” “Bitch”), and paranoid (fear of surveillance, accusations of conspiracies, complaints that her case was less high-profile than that of prostitute Maria Butina).

- There were dozens (sometimes over 50 a night) of texts, photos, and threats.

On December 2, 2025, at an emergency hearing, the court confiscated her passport and sent her to pretrial detention. It was because of these messages, not just because of the espionage.

At the same hearing on December 2, 2025, Zarubina had an emotional breakdown:

- She screamed that the FBI “works exactly like the Russians—they frame people, fabricate cases.”

- She complained that her life was a tragedy, that she was receiving threats from many countries, that everyone thought she was a spy, but no one knew the whole story.

- The FBI agent she was stalking was sitting in the courtroom—this added to the drama.

- She was also accused of transporting women for prostitution (Mann Act), but this was less publicized.

- Some sources report that she cooperated with the FBI since 2021 and voluntarily provided information, but was still charged.

- In 2025, leaks of correspondence with FSB handlers appeared (scans from anti-Kremlin groups transferred to the SBU of Ukraine).

- She herself gave interviews after the publications, saying that she “was always honest, except six times,” and feared for her life from both Russia and the United States.

Results as of January 2026:

Zarubina is in custody in the United States. The case is ongoing. This is a classic example of an influence/intelligence operation failing due to human factors—alcohol, emotions, and uncontrolled behavior. Many media outlets (RFERL, OCCRP, Meduza, UNITED24, The Independent) are calling this one of the most bizarre spy/near-spy cases in years. Compared to the prostitute Butina, but with much more chaos and drama.

OSINTech's Timeline (148) - 05.02.2026

OSINTech — Fri, 06 Feb 2026 15:07:38 GMT

drowning in generated content

the world stands in line for

virtual bread

Week of 30 January — 5 February 2026

Every week, I manually curate tools, research, and services that are genuinely useful for OSINT, digital investigations, security research, and adjacent fields.

No hype. No SEO noise. No “AI startups that change everything”.

Only things you can open, verify, and actually use.

🧭 Featured Project

Tesari — OSINT Copilot

> A first step for investigations into organized crime, corruption, trafficking, and global risk networks.

Tesari is designed as an entry point into complex investigations: structure, context, and navigable intelligence instead of chaotic searching.

What does “jurisdictional coverage” really mean for Tesari?

🔺 Local specialists vs Built-in jurisdiction knowledge

“Organizations often rely on local experts to support regional investigations. Tesari natively understands jurisdiction-specific nuances --> not to replace experts, but to narrow down and clarify the subject of interest.”

🔺 Language barriers vs Local-language intelligence

“Language gaps often lead to missed or misinterpreted information.

Tesari searches in local languages and validates findings in context.”

🔺 Fragmented data sources vs One investigative workspace

“Global investigations usually require expensive and complex combinations of local and international databases (10+ sources).

Tesari integrates these sources into a single, unified investigation flow, making it a one-stop shop for cross-border research.”

🔺 Manual regulation and geopolitical analysis vs Contextual validation

“Investigators must understand local regulations and geopolitics to detect misinformation.

Tesari understands local specifics and flags potential disinformation, enabling investigators to validate information faster and more consistently”

🔺 Hard-to-reach regions vs Built-in access

“Some regions remain inaccessible or extremely difficult to research.

Tesari covers the most restricted jurisdictions like China and Russia. Expanding further is a matter of time.”

Jurisdictional coverage isn’t about more data --> It’s about seeing clearly.

🔗 https://tesari.ai/

🌍 BROWSER SANDBOXES

There are situations when you want to visit a website, but you are not sure about its reliability, or you do not want to share your unique browser fingerprinting with the site, or simply something is not working in your browser and you want to try if it will work in another one.

In this case, you can visit the website in a browser sandbox. Here are a few examples of such services (some of them are free and some are partially free)

🔗 https://www.browserling.com/

🔗 https://www.wannabrowser.net/

🔗 https://browser.lol/

🔗 https://browser.networkchuck.com/

🔗 https://www.testmu.ai/cross-browser-testing/

🌍 Regional & Thematic OSINT

OSINT of Latvia

A country-focused OSINT resource set from UNISHKA Research Service, useful for regional analysis and verification.

🔗 https://substack.com/home/post/p-185818226

Canada OSINT

- maps

- police/legal

- finance/property

- transportation

- news

- government databases

- business/corporation

🔗 https://start.me/p/9E5BLR/canosint

Epstein Document Network Explorer. An intelligent document analysis and network visualization system that processes legal documents to extract relationships, entities, and events, then visualizes them as an interactive knowledge graph

🔗 https://github.com/maxandrews/Epstein-doc-explorer

🛠 OSINT Tools, Services & Investigations

P2T (Pix2Text). An Open-Source Python3 tool with SMALL models for recognizing layouts, tables, math formulas (LaTeX), and text in images, converting them into Markdown format. A free alternative to Mathpix, empowering seamless conversion of visual content into text-based representations. 80+ languages are supported

🔗 https://github.com/breezedeus/pix2text

Obsidian OSINT Entity Extractor. A tool for open source intelligence analysts to extract structured data from web articles

🔗 https://github.com/thomasjjj/Obsidian-OSINT-Entity-Extractor

LiveContainer is an app launcher (not emulator or hypervisor) that allows you to run iOS apps inside it

🔗 https://github.com/LiveContainer/LiveContainer

GGWave. Tiny data-over-sound library

🔗 https://github.com/ggerganov/ggwave

Device Activity Tracker. This project implements the research from the paper ”Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers” by Gabriel K. Gegenhuber, Maximilian Günther, Markus Maier, Aljosha Judmayer, Florian Holzbauer, Philipp É. Frenzel, and Johanna Ullrich (University of Vienna & SBA Research)

🔗 https://github.com/Xh4H/WhatsApp-device-activity-tracker

The Firehound project is scanning and indexing apps that expose and leak sensitive user data in AppStore

🔗 https://firehound.covertlabs.io/

ReconSwarm is a modular reconnaissance automation framework designed for distributed security testing. It provisions cloud infrastructure, executes parallel reconnaissance pipelines, and collects results with minimal configuration overhead

🔗 https://github.com/renatus-cartesius/reconswarm

Donut Browser. A powerful anti-detect browser that puts you in control of your browsing experience.

- Create unlimited number of local browser profiles completely isolated from each other

- Safely use multiple accounts on one device by using anti-detect browser profiles, powered by [Camoufox](https://camoufox.com/)

- Proxy support with basic auth for all browsers

- Import profiles from your existing browsers

- Automatic updates for browsers

- Set Donut Browser as your default browser to control in which profile to open links

🔗 https://github.com/zhom/donutbrowser

Camoufox. An open source anti-detect browser with robust fingerprint injection

🔗 https://camoufox.com/

🤖 Universal Search & AI

RapidOCR. Awesome OCR multiple programing languages toolkits based on ONNXRuntime, OpenVINO, PaddlePaddle and PyTorch

🔗 https://github.com/RapidAI/RapidOCR

Pacta turns software architecture into versioned, queryable data - so teams can see, compare, and reason about architectural change over time, not just block violations

🔗 https://github.com/pacta-dev/pacta-cli

👨‍💻 Software Development & APIs

Auto Claude. Autonomous multi-agent coding framework that plans, builds, and validates software for you

🔗 https://github.com/AndyMik90/Auto-Claude

OpenAuth is a standards-based auth provider for web apps, mobile apps, single pages apps, APIs, or 3rd party clients. It is currently in beta

🔗 https://github.com/anomalyco/openauth

🐧 Linux & DevOps

The WebDeck is a Flask application that allows users to control their computer remotely from any device with a browser and a touchscreen. Unlike Elgato’s StreamDeck, which requires physical equipment, WebDeck uses a Flask application that the user hosts on their computer

🔗 https://github.com/Lenochxd/WebDeck

Sloggo. Minimal RFC 5424 syslog collector and viewer based on DuckDB. Runs as a single, resource-friendly process

🔗 https://github.com/phare/sloggo/

Docker-Android. Android in docker solution with noVNC supported and video recording

🔗 https://github.com/budtmo/docker-android

ProxSave. Backup tool for Proxmox PBS & PVE System Files with advanced features and notifications

🔗 https://github.com/tis24dev/proxsave

🔌 Hardware & Devices

Develop applications and payloads for Spot using the Boston Dynamics Spot SDK

🔗 https://github.com/boston-dynamics/spot-sdk

A repo to share resources related to Spot Robot configurations for hospital applications

🔗 https://github.com/boston-dynamics/bosdyn-hospital-bot

🚨 From CyberDetective

TrinetLayer. Online tools for bugbounty hunters. Subdomain scanner, CVE scanner, JS analyzer, Live Exploit Sandbox, a lot of useful info about modern vulnerabilities

🔗 https://trinetlayer.com/

SOAR ATLAS. A huge, incredibly huge collection of maps, live maps (weather, fire, clouds), historic maps (worldwide, countries, towns), local conflicts and disasters maps, satellite maps, ability to upload your own maps

🔗 https://soaratlas.com/

📌 Where to Follow

- Substack:

- LinkedIn: https://www.linkedin.com/in/osintech/details/featured/

If this timeline saves you time, it’s doing its job.

Free to read. Manually curated. Minimal noise.

📌 Legal and ethical note

All tools and techniques documented in the dataset are presented for informational,

educational and information security purposes only.

The dataset does not promote or endorse illegal activities.

Users are responsible for complying with applicable laws and ethical standards.

📌 About future updates

The dataset is updated on a regular basis.

Future posts will document changes, notable additions and emerging trends observed within the dataset.

This post serves as an introduction and reference point for those updates.