osintverse-community/octosuite
Shows a GitHub account's public profile from the GitHub API, as JSON
Takes username → finds account, location, person, url
No key · Docker
No key · Docker
Verified publisher
GitHub OSINT tools
5 tools. 4 run with ot in a sandbox on Windows, macOS and Linux; 1 with otlite on Linux and macOS, no Docker. Compare them side by side ↓
GitHub is often where a developer's real name, email address and employer show up: in their profile, their SSH and GPG keys, and the author line of every commit they push. These tools read a user's public profile and keys, collect the addresses from their commits, list a repository's contributors with their identities, and check a repository for exposed keys, fake stars and altered history.
With ot, in a sandbox
All social media tools →Windows, macOS and Linux, with Docker or Podman. Each tool runs in a read-only container that can reach only the sites it declares, and every result comes back in the same JSON shape.
osintverse-community/osgint
Looks up a GitHub user's public profile, SSH and GPG keys, and email addresses from their commits
Takes username → finds account, email, person, url
No key · Docker
No key · Docker
Verified publisher
osintverse-community/gitcolombo
Clones a git repository and lists its contributors' names, emails and linked identities from the commit history
Takes url → finds email, person, username
No key · Docker
No key · Docker
Verified publisher
osintverse-community/gitxray
Inspects a GitHub repository and its contributors for exposed keys, shared accounts, fake stars and altered history
→ finds account, email, other, username
No key · Python wheel
No key · Python wheel
Verified publisher
ot install osintverse-community/octosuite osintverse-community/osgint osintverse-community/gitcolombo osintverse-community/gitxrayInstalls the first 4 in one go. No ot yet? Install it in one line.
Without Docker, with otlite
All otlite tools →Linux and macOS. otlite installs each one with pip or git into its own virtualenv, pinned to a version it has tested: otlite install zen.
The 4 registry tools side by side
| osintverse-community/ | email, person, username | None | Online, passive | Yes | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | account, email, other, username | None | Online, passive | Yes | Python | No reports yet | fewer than 10 |
| osintverse-community/ | account, location, person, url | None | Online, passive | Yes | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | account, email, person, url | None | Online, passive | Yes | Docker | No reports yet | fewer than 10 |
Facts from each tool's manifest and what people report about whether it works. "Reaches" says whether a run stays offline, reads public sources, sends requests about the target, or may notify them.
Where to start with GitHub
Before you run one
Is this data public?
Yes: everything here comes from GitHub's public API and public repositories. Commit addresses are public unless the author used GitHub's no-reply address.
Do I need a GitHub token?
Not for a few lookups. GitHub allows 60 unauthenticated API requests an hour, so gitxray takes an optional read-only token (GH_ACCESS_TOKEN) for large repositories, which need many more.
Do these tools send my search anywhere?
No. ot runs each tool on your own machine in a read-only container that can only reach the sites the tool declares, and results stay in your results folder. The registry only counts installs.