Open-source OSINT automation tool that gathers data on a target and maps its attack surface, with a web UI and CLI.
lockfale/OSINT-Framework
A categorized web directory of free OSINT tools and resources for gathering information from public sources, organized as an interactive tree.
- Stars
- 12,300
- Forks
- 2,029
- Open issues
- 126
- Last commit
- yesterday
What is it?
OSINT Framework is a curated collection of open-source intelligence resources, presented as an interactive tree on osintframework.com. Each branch groups sites and tools by the kind of information they can surface, such as usernames, domains, IP addresses, images, social media, and public records.
The project focuses on free resources. Some listed sites require registration or charge for fuller data, but most entries offer at least part of their information at no cost. Entries are marked to indicate local-install tools, Google dorks, registration requirements, and sites where the search term must be edited into the URL manually.
The data lives in a JSON file organized by category, and contributors add entries through pull requests. Entries can carry structured metadata such as status, pricing, input and output types, and operational security notes.
Key features
- 01Interactive tree navigation grouped by information type
- 02Marks tools that require local installation, registration, or Google dorks
- 03Entries include pricing, input/output, and opsec notes
- 04Structured JSON data that contributors extend through pull requests
Use cases
- Starting an open-source investigation and finding free tools for a given data type
- Looking up usernames or domains across public sources during security reconnaissance
- Building a reference list of OSINT resources for training or teaching
Topics
FAQ
- What is OSINT-Framework?
- A categorized web directory of free OSINT tools and resources for gathering information from public sources, organized as an interactive tree. OSINT Framework is a curated collection of open-source intelligence resources, presented as an interactive tree on osintframework.com. Each branch groups sites and tools by the kind of information they can surface, such as usernames, domains, IP addresses, images, social media, and public records.
- Is OSINT-Framework free to use? What license does it have?
- OSINT-Framework is open source under the MIT license. Check the license terms before using it in commercial products.
- Is OSINT-Framework still maintained?
- Actively maintained. The last commit to OSINT-Framework was on Oct 17, 2026.
- What can I use OSINT-Framework for?
- Starting an open-source investigation and finding free tools for a given data type Looking up usernames or domains across public sources during security reconnaissance Building a reference list of OSINT resources for training or teaching
- Where can I get OSINT-Framework?
- The source code and installation instructions are on GitHub: https://github.com/lockfale/OSINT-Framework
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Open-source graph-based OSINT investigation platform that links entities like domains, IPs, emails and wallets through automated enrichers.
A Go CLI that queries multiple internet search engines (Shodan, Censys, FOFA, ZoomEye and more) to find exposed hosts for recon and automation.
All-in-one OSINT web app that runs on-demand checks on any website, covering DNS, SSL, headers, server info, and security configuration.
AI-powered dark web OSINT tool that uses LLMs to refine queries, filter Tor search results, and summarize investigations.