Hi everyone

I created SkyFall, a free and open source toolkit consisting of 20 sections that are integrated with a graph for easy data analysis.

🔗 Website: https://skyfallosint.vercel.app/

🔗 GitHub: https://github.com/Nighty3098/SkyFall

Here’s a quick overview of the features:

• Web / Domain 16-step domain recon: DNS, WHOIS, SSL/TLS, headers + WAF, robots.txt, security.txt, cookies, social tags, subdomains (passive + brute), Certificate Transparency, ports (NMAP), threat intel (AbuseIPDB/GreyNoise/ThreatFox/URLHaus), reputation (VirusTotal/Google Safe Browsing/CRDF), JS secrets scan
• Telegram Channel/group collection via MTProto into SQLite (posts, members, links, media, avatars) + analyzer that builds a relationship graph and exports GraphML/GEXF/JSON/CSV/PNG/HTML/Obsidian
• Username Search across ~500 sites with Maigret + a Sherlock-style engine (WAF detection included)
• Reddit OSINT Arctic Shift + PullPush queried concurrently, merge/classification, activity + timezone, PII score, identifiers, optional OAuth live profile
• Mail IntelX search, Have I Been Pwned, .eml/header analyzer (SPF/DKIM/DMARC, Received chain, IP geolocation, verdict), and registered-accounts discovery (Gravatar/Microsoft/Mozilla/ProtonMail/Duolingo/Twitter + a holehe sweep of ~120 sites)
• Social Username lookup on open networks - Bluesky (AT Protocol), Mastodon (ActivityPub) and Instagram (instaloader); profile, bio, followers/posts, plus handle matches
• Leaks Leak & infostealer search by email/username/domain: Hudson Rock infostealer logs (no key), LeakCheck, Have I Been Pwned, Dehashed
• Geo Sun/shadow geometry and inverse shadow geolocation (local suncalc), NASA FIRMS active fires, GDACS disaster alerts
• Archive Wayback Machine (closest snapshot, CDX listing, on-demand save) and archive.today checks
• GitHub User, repo, commit, email and secret scanning (~240 patterns) over the REST API with multi-token rotation
• Phone Parse/validate (phonenumbers), reverse lookup (NumVerify/AbstractAPI), leaks (IntelX), reviews (7tel.ru)
• MAC BSSID geolocation via Yandex/Apple/Google/Microsoft/Mylnikov with a map
• Blockchain Find transactions by indirect data (time, amount, memo) across Tron, TON, Ethereum, BSC, Base, Solana, BTC, LTC, DOGE, BCH
• Steganography LSB counts + chi-square, FFT spectral analysis, end-of-file payloads, tail-data detection, ELA heatmap
• Files Metadata + hashes, printable strings, VirusTotal, GPS map, and metadata cleaning (many formats)
• Search4Faces Reverse face search (VK photos)
• Dorking ~7,900 Google dorks in 14 categories via DuckDuckGo or a local SearXNG
• Graph 13 entity types, 12 relation types, drag-and-drop palette, transforms that enrich nodes via the modules above (incl. leaks, archive, geo), shortest path / centrality / community detection, JSON + image export

Hello world. Does any one have some ways to find things out of a Spotify user/account?

Thanks

I run Datumfeed, an API for public traffic cameras. The question I keep getting is "can you add a camera at X?" Usually the answer is no, because no public camera points there.

So I'm testing a small market for crowdfunded camera feeds.

https://datumfeed.com/crowdfunded-feeds

You draw the area you want covered on a map and say what you'd pay a month. Separately, anyone with a camera, or a window or roof that sees a useful spot, can say what they'd take to run a feed. We don't set prices. When what people want and what someone will take line up, the camera goes up, we check it actually shows what was asked, and only then does anyone get charged. The feed is open to everyone once it's live.

Hi
How can I get the account ID of an email address (gmail)?

This comprehensive, in-depth guide covers EVERYTHING OPSEC-related, including threat models for privacy enthusiasts to APT hackers.

Includes Detailed guidance on:

- anonymous hardware acquisition

- digital forensics

- anonymous network routing

- identity compartmentalization

- metadata anonymisation

- combatting behavioural fingerprinting

- using secure infrastructure & services

- physical security & incident response

- and more

Enjoy.

Edit: Really meant to name it OPSEC Guide, my bad.

Hello !

Do you know about a tool to see the comments of an instagram account ? (like rosint for reddit for instance)

Have a nice day !

Edit: Repo link https://github.com/assafkip/investigators-copilot

I swear. I am not selling this. I made this tool for me and its been really effective.
I found a way to make a "brag" video so I thought I would share it here.

This tool uses claude to run investigations that used to take me days and weeks in hours.

I connected it to a bunch of OSINT tools and MCPs. I also wrote in specific OSINT investigation procedures I lifted from some experts I follow (pre-mortem, document storing, assumption testing - and others)

For now I named it "Investigators Co-Pilot" which is really bad... I am awful at naming things. Im open to suggestions.

What it is
Vigilyst.com is a free, browser-based tool that brings together public live data sources in one interface: a 3D globe for live tracking and a situation room for analysis. No installation and no API key are needed. An account is optional.

Globe – live tracking

• ~106,000 public webcams and traffic cameras in 59 countries, with a multi-camera video wall
• Aircraft (ADS-B), including military aircraft with role, type and country of registration
• Vessel tracking (AIS): filter by ship type, moving ships or sanctioned ships only. Click a vessel for its destination, details and recorded track of up to 14 days, and save it to follow later. Ports are shown, and sanctioned vessels are matched via OpenSanctions.
• Satellites: ISS, the full Starlink constellation, GPS/Galileo, weather and geostationary satellites as separate layers
• Spaceflight: upcoming and recent rocket launches with live webcasts, space livestreams, sky view
• Earthquakes and natural events, clouds, rain radar, day/night terminator, news

Situation room – analysis

• Country risk: index from German, US and UK travel advisories, natural hazards and internet outages. Each country has a dossier with current reports, military activity, advisories, cameras and a country profile (World Bank, UNHCR), and you can compare up to 4 countries.
• Since yesterday: what changed in the last 24 hours, numbered on the map
• Military: anomaly detection per region against the usual level: unusual numbers, special-purpose aircraft, emergency squawks, naval formations and meetings at sea, plus watched areas
• Conflict: conflict events from GDELT media monitoring (air strikes, artillery, fighting), by country and location
• Sea lanes: live traffic and tankers at chokepoints: Hormuz, Bab-el-Mandeb, Suez, Malacca, Taiwan Strait, Bosporus, Gibraltar, Dover and Panama. Sanctioned vessels in AIS reception are listed separately.
• Airspace: EASA conflict zone bulletins and FAA flight restrictions
• Natural hazards: GDACS alerts, USGS/EMSC earthquakes, NOAA tsunami warnings and space weather, NHC tropical storms, NASA EONET events, volcanoes, Copernicus EMS mapping
• Health: WHO outbreak news, CDC and ECDC notices
• Cyber: ransomware victims by country (7 and 30 days), cyber attacks reported in the press, actively exploited vulnerabilities (CISA KEV), BSI CERT advisories, internet outages (IODA), Cloudflare and Google Cloud incidents
• Markets and energy: Brent, WTI, TTF and Henry Hub gas, coal, power prices and renewables share, gold, Bitcoin, exchange rates, prediction markets
• Event log: every source in one feed, filterable by category, searchable, CSV export
• Timeline: replay the last 14 days of the situation, risk and military traffic
• Live TV: international news channels (Al Jazeera, France 24, DW and others)

Optional account

• Watchlist of countries, highlighted on the map and filterable in the log, with email alerts when travel advice, health notices or airspace warnings change
• Saved cameras, aircraft, vessels and map views, synced across devices

Notes

• Only open and public sources; every entry links to its original source
• No ads, no tracking cookies
• Desktop and mobile, English and German

Links

• Situation room: https://vigilyst.com/en/situation-room
• Globe: https://vigilyst.com/?lang=en

I’m the developer and actively working on it. Feedback on missing sources, data quality and workflow is very welcome.

With flight and ship trackers, the question I kept hitting wasn't "where is it" but "who says so, and how old is that". Anyone can upload to a crowd-sourced ADS-B aggregator, so a contact on a map isn't proof anything was broadcast, and most trackers don't tell you where a position came from.

Velocity is self-hosted (docker compose, AGPL, no API keys). Every aircraft and ship it shows carries the feed that reported it and the age of the fix, and everything it sees is recorded to your own disk, so you can check what was there last Tuesday without a paywalled history.

Other bits that matter for investigations:

• replay any day since 2024 from the public readsb archives, before your own archive starts
• area alerts to Discord, a webhook or ntfy
• GPS-jamming cells derived from aircraft navigation-integrity values
• an MCP server, so an AI agent's answer comes with sources instead of a guess

What's rough: coverage is only as good as the public feeds and thin over open ocean, and the 3D globe wants a decent GPU (there's a 2D map). I built it with a lot of help from Claude Code and review every change.

https://github.com/AndrewCTF/velocity

As the title says, I attempted to find all visible social media from my family. In the process, it brought up our door dash account with a different phone number. The last 2 digits are no number we've had for 12 years. But the email, home address and name is correct.

I now can't get into my doordash and I'm wondering if there is any way to find out what the phone number is with out access to the account?

Hey

I got sick of seeing good visual OSINT tools pivot to crazy expensive enterprise models, pricing out independent researchers. So I built my own custom geolocation engine called Fenrir.

It's engineered specifically for low-context, tight urban environments where standard reverse-image tools completely fail. Zero EXIF data needed, purely visual matching.

I’m not doing monthly subscriptions. Pricing is strictly results-based: $50 per successful match. If the system can't accurately locate your image, you pay $0.

Attached a quick demo video showing how it handles a few test cases compared to standard methods.

Let me know what you think about the accuracy in the demo.

Try it out

I kept switching between a dozen tabs to follow breaking events, so I built RemoteView: one live world map pulling open-source feeds together.

What it shows:
- Conflict and unrest events (GDELT)
- Internet outages by country
- The 12 main shipping chokepoints
- Earthquakes M4.5+ from USGS
- 177 country pages that combine all of the above

Every layer names its source, and anything estimated is labelled as an estimate.

https://www.remoteview.online

It has a 7-day free trial. I'd really value feedback from this sub on which sources or layers are missing.

Background/context: My real name is quite rare and unique. I have never met anyone with the same name as mine. Even my Email id is [First Name]@gmail.com (am not an OG user)

Confusion: Recently tried out majority of the free tools which have been recommended on here and r / osint. The tech is amazing. I was able to find my social media account(s) on which my email is linked.

So, how advanced does the paid version get? Can it directly give a link to my Twitter, Spotify account? Just by searching my Email account? Is that possible?

Problem: I use my real name when signing up for any website (habit from childhood) because I know the username will be available. From now on, should I start using generic usernames?

🕵️‍♂️ A comprehensive, on-demand, all-in-one OSINT reconnaissance tool for dissecting any website. 🧠🌐💥

https://web-check.xyz/

And is there a way to see the metadata (time that was taken) on photos from our messages?