47 tools, one command each

• Aliens Eye

  MIT

  Hunt down 840+ social media accounts using AI.

  Takes Username· typed inputs u:

  otlite run aliens-eye -- u:johndoeCopy

• Auto Archiver

  MIT

  Automatically archive web content from various sources. Requires Python <3.13 (no wheels for 3.13+; dependency pdqhash needs C++ compiler).

  Takes URL· typed inputs url:· API keys optional: GOOGLE_API_KEY, GOOGLE_CREDENTIALS, AWS_ACCESS_KEY_ID…· dual-use: accept the responsible use notice first

  otlite run auto-archiver -- url:https://example.comCopy

• Bbot

  AGPL-3.0

  The recursive internet scanner for hackers.

  Takes Domain, IP address· typed inputs d:ip:

  otlite run bbot -- d:example.comCopy

• Blackbird

  NOASSERTION

  OSINT tool to search for accounts by username and email across social networks.

  Takes Username, Email· typed inputs e:u:

  otlite run blackbird -- u:johndoeCopy

• Crosslinked

  GPL-3.0

  LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping.

  Takes Username, Email, Name

  otlite run crosslinked -- --helpCopy

• Ctfr

  GPL-3.0

  Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

  Takes Domain· typed inputs d:

  otlite run ctfr -- d:example.comCopy

• Dnsgen

  MIT

  DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers.

  Takes Domain

  otlite run dnsgen -- --helpCopy

• Dnstwist

  Apache-2.0

  Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation.

  Takes Domain, IP address· typed inputs d:

  otlite run dnstwist -- d:example.comCopy

• EDGAR Tool

  MIT

  Command line interface to search and retrieve corporate and financial data from the SEC EDGAR database.

  Takes Name· typed inputs q:

  otlite run edgar-tool -- q:exampleCopy

• Fierce

  GPL-3.0

  A DNS reconnaissance tool for locating non-contiguous IP space.

  Takes Domain, IP address· typed inputs d:

  otlite run fierce -- d:example.comCopy

• Finalrecon

  MIT

  All In One Web Recon.

  Takes Domain, IP address, URL· typed inputs url:

  otlite run finalrecon -- url:https://example.comCopy

• Fsociety

  MIT

  A Modular Penetration Testing Framework.

  Takes Domain, Username, Email· asks questions while it runs· dual-use: accept the responsible use notice first

  otlite run fsociety -- --helpCopy

• Ghunt

  NOASSERTION

  Offensive Google framework.

  Takes Email· typed inputs e:· asks questions while it runs

  otlite run ghunt -- e:ada@example.comCopy

• H8Mail

  NOASSERTION

  Email OSINT & Password breach hunting tool, locally or using premium services.

  Takes Email· typed inputs e:· dual-use: accept the responsible use notice first

  otlite run h8mail -- e:ada@example.comCopy

• Holehe

  GPL-3.0

  holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

  Takes Email· typed inputs e:

  otlite run holehe -- e:ada@example.comCopy

• Ignorant

  GPL-3.0

  ignorant allows you to check if a phone number is used on different sites like snapchat, instagram.

  Takes Phone· dual-use: accept the responsible use notice first

  otlite run ignorant -- --helpCopy

• Instagram Location Search

  MIT

  Find Instagram location IDs near specified coordinates.

  Takes URL· typed inputs lat:lng:· API keys optional: INSTAGRAM_SESSION_ID

  otlite run instagram-location-search -- lat:51.5074 lng:-0.1278Copy

• Instagram Monitor

  GPL-3.0

  Track Instagram users' activities, profile changes and capture content with beautiful dashboards and instant notifications.

  Takes Username· typed inputs u:· asks questions while it runs· dual-use: accept the responsible use notice first

  otlite run instagram-monitor -- u:johndoeCopy

• Instaloader

  MIT

  Download pictures (or videos) along with their captions and other metadata from Instagram.

  Takes Username, URL· typed inputs u:

  otlite run instaloader -- u:johndoeCopy

• Ivre

  GPL-3.0

  Network recon framework.

  Takes Domain, IP address

  otlite run ivre -- --helpCopy

• Linkook

  MIT

  An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.

  Takes Username, Email· typed inputs u:

  otlite run linkook -- u:johndoeCopy

• Maigret

  MIT

  Collect a dossier on a person by username from 6K websites.

  Takes Username· typed inputs u:

  otlite run maigret -- u:johndoeCopy

• Mailaccess

  MIT

  Investigates an email address across 5,300+ platforms and breach sources, and harvests the email addresses of a domain

  Takes Email, Domain· typed inputs d:e:· dual-use: accept the responsible use notice first

  otlite run mailaccess -- e:ada@example.comCopy

• NeutrOSINT

  MIT

  Check if an email address or username exists on ProtonMail.

  Takes Email, Username· typed inputs e:

  otlite run neutrosint -- e:ada@example.comCopy

• Nexfil

  MIT

  OSINT tool for finding profiles by username.

  Takes Username· typed inputs u:

  otlite run nexfil -- u:johndoeCopy

• Onionsearch

  GPL-3.0

  OnionSearch is a script that scrapes urls on different.

  Takes URL· typed inputs q:

  otlite run onionsearch -- q:exampleCopy

• Openosint

  MIT

  AI-powered OSINT agent with interactive REPL, MCP server, and direct CLI modes. Direct email/username scans work without ANTHROPIC_API_KEY. AI-REPL and MCP modes require ANTHROPIC_API_KEY (or --api-key). Other features need additional keys: SHODAN_API_KEY (shodan), VIRUSTOTAL_API_KEY (virustotal), CENSYS_API_ID + CENSYS_SECRET (censys), ABUSEIPDB_API_KEY (abuseipdb), IP2LOCATION_API_KEY (ip2location), BRIGHTDATA_API_KEY + BRIGHTDATA_SERP_ZONE/BRIGHTDATA_UNLOCKER_ZONE (Bright Data tools), OPENAI_API_KEY (OpenAI provider), OPENOSINT_PROXY_URL (proxy).

  Takes Username, Email, Domain· API keys optional: ANTHROPIC_API_KEY, SHODAN_API_KEY, VIRUSTOTAL_API_KEY…

  otlite run openosint -- --helpCopy

• Osint Brazuca Regex

  MIT

  Repositrio criado com intuito de reunir expresses regulares dentro do contexto Brasil.

  Takes Domain, Name

  otlite run osint-brazuca-regex -- --helpCopy

• Paramspider

  MIT

  Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing.

  Takes Domain, URL· typed inputs d:

  otlite run paramspider -- d:example.comCopy

• Pywerview

  GPL-3.0

  A (partial) Python rewriting of PowerSploit's PowerView.

  Takes Domain, Username

  otlite run pywerview -- --helpCopy

• Secator

  NOASSERTION

  secator - the pentester's swiss knife.

  Takes Domain, IP address, Username, Email· dual-use: accept the responsible use notice first

  otlite run secator -- --helpCopy

• Sherlock

  MIT

  Hunt down social media accounts by username across social networks.

  Takes Username· typed inputs u:

  otlite run sherlock -- u:johndoeCopy

• Sitedorks

  GPL-3.0

  Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

  Takes Domain, URL· typed inputs q:· asks questions while it runs

  otlite run sitedorks -- q:exampleCopy

• Socialscan

  MPL-2.0

  Python library for accurately querying username and email usage on online platforms.

  Takes Username, Email· typed inputs q:

  otlite run socialscan -- q:exampleCopy

• Socid Extractor

  MIT

  The extraction engine behind Maigret: turn any profile URL into a structured OSINT record across 150+ sites.

  Takes URL, Username· typed inputs url:

  otlite run socid-extractor -- url:https://example.comCopy

• Spiderfoot

  MIT

  SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

  Takes Domain, IP address, Username, Email· typed inputs d:ip:

  otlite run spiderfoot -- d:example.comCopy

• Sublist3r

  GPL-2.0

  Fast subdomain enumeration tool using multiple search engines and certificate transparency logs.

  Takes Domain· typed inputs d:

  otlite run sublist3r -- d:example.comCopy

• Telegram Phone Number Checker

  MIT

  Check if phone numbers are connected to Telegram accounts.

  Takes Phone, Username· typed inputs p:u:· API keys optional: API_ID, API_HASH, PHONE_NUMBER· asks questions while it runs· dual-use: accept the responsible use notice first

  otlite run telegram-phone-number-checker -- u:johndoeCopy

• Telepathy

  MIT

  OSINT toolkit for investigating Telegram chats and accounts. Requires Python <3.13 (dependency googletrans/httpx uses removed cgi module).

  Takes Username· typed inputs tg:· asks questions while it runs· dual-use: accept the responsible use notice first

  otlite run telepathy -- tg:durovCopy

• The Big Brother

  MIT

  Find usernames across social networks.

  Takes Username· typed inputs u:

  otlite run thebigbrother -- u:johndoeCopy

• theHarvester

  GPL-2.0

  Find emails, subdomains and names for a domain

  Takes Domain· typed inputs d:· API keys optional: SHODAN_API_KEY, HUNTER_API_KEY

  otlite run theharvester -- d:example.comCopy

• Torbot

  NOASSERTION

  Dark Web OSINT Tool.

  Takes URL, Domain· typed inputs url:

  otlite run torbot -- url:https://example.comCopy

• Toutatis

  GPL-3.0

  Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more.

  Takes Phone, Username· typed inputs u:· dual-use: accept the responsible use notice first

  otlite run toutatis -- u:johndoeCopy

• User Scanner

  MIT

  (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username.

  Takes Username, Email· typed inputs e:u:· dual-use: accept the responsible use notice first

  otlite run user-scanner -- u:johndoeCopy

• Whatsapp Osint

  MIT

  WhatsApp spy - logs online/offline events from ANYONE in the world.

  Takes Phone, Name· asks questions while it runs· dual-use: accept the responsible use notice first

  otlite run whatsapp-osint -- --helpCopy

• Yark

  MIT

  OSINT for YouTube made simple.

  Takes URL, Username, Name

  otlite run yark -- --helpCopy

• Zen

  Apache-2.0

  Find email addresses of GitHub users, repositories and organizations.

  Takes Username, URL· typed inputs u:url:

  otlite run zen -- u:johndoeCopy

Missing a tool? Tools are listed when they install cleanly and pass a smoke test, and attack or harassment tools are left out by policy. Suggest one on GitHub →