The Pika's OSINT ToolBox ⚡️

GitHub repo
Last Update
GitHub stars

About ℹ️

Open Source Intelligence (OSINT) is the collection and analysis of data gathered from open sources to produce actionable intelligence. This carefully edited OSINT list won't be an endless list of links, but priority will be given to highly effective content (quality over quantity) and only services that can be used for free.

⚠️ WARNING
While OSINT itself is not illegal, it is crucial to understand that the legality of specific OSINT activities heavily depends on how the information is obtained and used. You assume full and sole responsibility for all consequences of your actions. This includes, but is not limited to, any direct, indirect, incidental, or consequential damages.

Symbols

Username 🏷️

inurl:"<USERNAME>" (site:facebook.com | site:instagram.com | site:x.com | site:tiktok.com | site:linkedin.com | site:pinterest.com | site:reddit.com | site:tumblr.com | site:youtube.com | site:twitch.tv | site:stackoverflow.com | site:soundcloud.com) -inurl:videos -inurl:video -inurl:watch -inurl:status -inurl:post -inurl:posts -inurl:photo -inurl:/p/ -inurl:photos -inurl:reply -inurl:reel -inurl:reels -inurl:comment -inurl:comments -inurl:search -inurl:tag -inurl:?__d= -inurl:related_profiles -inurl:popular -inurl:hashtag -inurl:/?v=
sherlock 'username' --timeout 2
python whatsmyname.py -u 'username'

Email ✉️

"<NAME>" "<SURNAME>" (intext:"@gmail.com" | intext:"@yahoo.com" | intext:"@hotmail.com" | intext:"@outlook.com"| intext:"@icloud.com")
holehe 'email@provider.com'
blackbird -e 'email@provider.com'

Phone 📞

ignorant '<NUMBER>' --only-used

Image 🖼️

Social 👥

"<NAME>" "<SURNAME>" (site:facebook.com | site:x.com | site:instagram.com | site:tiktok.com) -inurl:videos -inurl:video -inurl:watch -inurl:status -inurl:post -inurl:posts -inurl:photo -inurl:/p/ -inurl:photos -inurl:reply -inurl:reel -inurl:reels -inurl:comment -inurl:comments -inurl:search -inurl:tag -inurl:?__d= -inurl:related_profiles -inurl:popular -inurl:hashtag -inurl:/?v= -inurl:public
instagram-location-search --cookies "<ig-cookie>" --lat "<lat>" --lng "<lng>" --json locs.json --map map.html
"<NAME>" "<SURNAME>" ("lives in <PLACE>" | "from <PLACE>") site:facebook.com
"<NAME>" "<SURNAME>" ("studied at <SCHOOL>" | "went to <SCHOOL>") site:facebook.com
"<NAME>" "<SURNAME>" ("worked at <COMPANY>" | "works at <COMPANY>") site:facebook.com
https://www.facebook.com/profile.php?id=<PROFILEID>

Chat 💬

python telegram_phone_number_checker/main.py --phone-numbers '<NUMBER>' --download-profile-photos
telepathy -t '<NIKNAME>' -c

Gaming 🎮️

Location 🗺️

https://www.google.com/maps/contrib/<GAIA-ID>
python main.py --time "2025-05-22 14:00" --condition "Mostly cloudy" --temp 18 --tolerance 1.0

General 📂

https://www.google.com/search?q=<ANY>+<DORK>+<OR>+<CUSTOM>+<SEARCH>&cr=country<ALPHA-2-COUNTRY-CODE>
"<NAME>" "<SURNAME>" "<CITY>" (filetype:pdf | filetype:doc | filetype:docx | filetype:odt | filetype:ods | filetype:odp | filetype:xls | filetype:xlsx | filetype:csv | filetype:txt | filetype:rtf | filetype:xml | filetype:ppt | filetype:pptx | filetype:key | filetype:zip | filetype:rar | filetype:7z | filetype:gz | filetype:log | filetype:json | filetype:audit | filetype:trace | filetype:debug | filetype:out | filetype:err)
https://api.github.com/users/<NIKNAME>
git log --pretty=format:"[ AUTHOR-EMAIL:%ae | AUTHOR-NIK:%an ][ COMMITTER-EMAIL:%ce | COMMITTER-NIK:%cn ][ DATE:%aD ]"
trufflehog git "https://github.com/<USER>/<REPO>"

Corporate 💼

site:linkedin.com inurl:in “<COMPANY>”

Hosting 🕸️

python waybacklister.py -d <SITE> -t 50
robofinder -u <SITE> -t 50 -c
subcat -d hackerone.com --sc --title --tech --up
https://api.hackertarget.com/hostsearch/?q=<WEBSITE>
https://www.virustotal.com/gui/domain/<WEBSITE>/relations
https://web.archive.org/cdx/search/cdx?url=<WEBSITE>/path/page.php?<PARAMETER>=* [&to=<YYYYMMDD>&from=<YYYYMMDD>]
https://web.archive.org/cdx/search/cdx?url=*.<WEBSITE>&collapse=urlkey [&to=<YYYYMMDD>&from=<YYYYMMDD>]
https://web.archive.org/cdx/search/cdx?url=<WEBSITE>&filter=mimetype:text/javascript&collapse=urlkey [&to=<YYYYMMDD>&from=<YYYYMMDD>]
https://en.gravatar.com/<MD5_HASH_OF_EMAIL>.json

Knocking 🚪

Breaches 🏴‍☠️

https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-email?email=<EXAMPLE@GMAIL.COM>
https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-username?username=<USERNAME>
https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-ip?ip=<127.0.0.1>

FlowCharts 💡

NameName
UsernameUsername
EmailEmail
PhonePhone
DomainDomain
LocationLocation

Resources 📚️

image

Contact 📨

For contributions and reports: pikaosint@proton.me

Donation 💛

If you want to support my research you can donate Monero (XMR).
All donations will be used to buy new OSINT learning materials and tools to improve this project.
Thank you!

image

XMR:

87QKLLGi9nNc9G8K4Rg4aAVipmmixNywN4MgR3UzF3Z5YrgZn74UNFVRZpss4G63eHJbhD9N8tVKoZCKcKCGZyh8M6AUkSb