DEV Community

Cover image for Open source OSINT toolkit
Nighty3098
Nighty3098

Posted on

Open source OSINT toolkit

#osint #ai #opensource #qt

I created SkyFall, a free and open source toolkit consisting of 20 sections that are integrated with a graph for easy data analysis.

🔗 Website: https://skyfallosint.vercel.app/
🔗 GitHub: https://github.com/Nighty3098/SkyFall

  • Here’s a quick overview of the features:

  • Open Wifi map

  • Public cameras map

  • Web / Domain 16-step domain recon: DNS, WHOIS, SSL/TLS, headers + WAF, robots.txt, security.txt, cookies, social tags, subdomains (passive + brute), Certificate Transparency, ports (NMAP), threat intel (AbuseIPDB/GreyNoise/ThreatFox/URLHaus), reputation (VirusTotal/Google Safe Browsing/CRDF), JS secrets scan

  • Telegram Channel/group collection via MTProto into SQLite (posts, members, links, media, avatars) + analyzer that builds a relationship graph and exports GraphML/GEXF/JSON/CSV/PNG/HTML/Obsidian
  • Username Search across ~500 sites with Maigret + a Sherlock-style engine (WAF detection included)

  • Reddit OSINT Arctic Shift + PullPush queried concurrently, merge/classification, activity + timezone, PII score, identifiers, optional OAuth live profile

  • Mail IntelX search, Have I Been Pwned, .eml/header analyzer (SPF/DKIM/DMARC, Received chain, IP geolocation, verdict), and registered-accounts discovery (Gravatar/Microsoft/Mozilla/ProtonMail/Duolingo/Twitter + a holehe sweep of ~120 sites)
  • Social Username lookup on open networks - Bluesky (AT Protocol), Mastodon (ActivityPub) and Instagram (instaloader); profile, bio, followers/posts, plus handle matches
  • Leaks Leak & infostealer search by email/username/domain: Hudson Rock infostealer logs (no key), LeakCheck, Have I Been Pwned, Dehashed
  • Geo Sun/shadow geometry and inverse shadow geolocation (local suncalc), NASA FIRMS active fires, GDACS disaster alerts
  • Archive Wayback Machine (closest snapshot, CDX listing, on-demand save) and archive.today checks

  • GitHub User, repo, commit, email and secret scanning (~240 patterns) over the REST API with multi-token rotation
  • Phone Parse/validate (phonenumbers), reverse lookup (NumVerify/AbstractAPI), leaks (IntelX), reviews (7tel.ru)

  • MAC BSSID geolocation via Yandex/Apple/Google/Microsoft/Mylnikov with a map
  • Blockchain Find transactions by indirect data (time, amount, memo) across Tron, TON, Ethereum, BSC, Base, Solana, BTC, LTC, DOGE, BCH

  • Steganography LSB counts + chi-square, FFT spectral analysis, end-of-file payloads, tail-data detection, ELA heatmap

  • Files Metadata + hashes, printable strings, VirusTotal, GPS map, and metadata cleaning (many formats)

  • Search4Faces Reverse face search (VK photos)

  • Dorking ~7,900 Google dorks in 14 categories via DuckDuckGo or a local SearXNG

  • Graph 13 entity types, 12 relation types, drag-and-drop palette, transforms that enrich nodes via the modules above (incl. leaks, archive, geo), shortest path / centrality / community detection, JSON + image export

Top comments (0)