The Pika's OSINT ToolBox ⚡️

Curated OSINT tools and resources — quality over quantity, free tools only.

GitHub repository Last update GitHub stars

About

Open Source Intelligence (OSINT) is the collection and analysis of data gathered from open sources to produce actionable intelligence. This carefully edited OSINT list won't be an endless list of links, but priority will be given to highly effective content (quality over quantity) and only services that can be used for free.

WARNING
While OSINT itself is not illegal, it is crucial to understand that the legality of specific OSINT activities heavily depends on how the information is obtained and used. You assume full and sole responsibility for all consequences of your actions. This includes, but is not limited to, any direct, indirect, incidental, or consequential damages.

Symbols

Abbreviations

IG Instagram · FB Facebook · X X/Twitter · YT YouTube · TG Telegram · OF OnlyFans · PSN PlayStation Network · XBL Xbox Live · GMaps Google Maps

Username

inurl:"<USERNAME>" (site:facebook.com | site:instagram.com | site:x.com | site:tiktok.com | site:linkedin.com | site:pinterest.com | site:reddit.com | site:tumblr.com | site:youtube.com | site:twitch.tv | site:stackoverflow.com | site:soundcloud.com) -inurl:videos -inurl:video -inurl:watch -inurl:status -inurl:post -inurl:posts -inurl:photo -inurl:/p/ -inurl:photos -inurl:reply -inurl:reel -inurl:reels -inurl:comment -inurl:comments -inurl:search -inurl:tag -inurl:?__d= -inurl:related_profiles -inurl:popular -inurl:hashtag -inurl:/?v=
user-scanner -e user@email.com
user-scanner -u user
sherlock 'username' --timeout 2
python whatsmyname.py -u 'username'

Email

"<NAME>" "<SURNAME>" (intext:"@gmail.com" | intext:"@yahoo.com" | intext:"@hotmail.com" | intext:"@outlook.com"| intext:"@icloud.com")
holehe 'email@provider.com'
blackbird -e 'email@provider.com'

Phone

ignorant '<NUMBER>' --only-used

Image

Social

"<NAME>" "<SURNAME>" (site:facebook.com | site:x.com | site:instagram.com | site:tiktok.com) -inurl:videos -inurl:video -inurl:watch -inurl:status -inurl:post -inurl:posts -inurl:photo -inurl:/p/ -inurl:photos -inurl:reply -inurl:reel -inurl:reels -inurl:comment -inurl:comments -inurl:search -inurl:tag -inurl:?__d= -inurl:related_profiles -inurl:popular -inurl:hashtag -inurl:/?v= -inurl:public
instagram-location-search --cookies "<ig-cookie>" --lat "<lat>" --lng "<lng>" --json locs.json --map map.html
"<NAME>" "<SURNAME>" ("lives in <PLACE>" | "from <PLACE>") site:facebook.com
"<NAME>" "<SURNAME>" ("studied at <SCHOOL>" | "went to <SCHOOL>") site:facebook.com
"<NAME>" "<SURNAME>" ("worked at <COMPANY>" | "works at <COMPANY>") site:facebook.com
https://www.facebook.com/profile.php?id=<PROFILEID>

Chat

"<QUERY>" site:telegra.ph OR site:telegram.com OR site:nicegram.app OR site:telegram.im OR site:tgstat.* OR site:telemetr.me OR site:telega.in OR site:telega.io OR site:tlgrm.* OR site:tgramsearch.com OR site:telegramchannels.me OR site:tgchannels.org OR site:tglib.net
python telegram_phone_number_checker/main.py --phone-numbers '<NUMBER>' --download-profile-photos
telepathy -t '<NICKNAME>' -c

Gaming

Location

https://www.google.com/maps/contrib/<GAIA-ID>
python main.py --time "2025-05-22 14:00" --condition "Mostly cloudy" --temp 18 --tolerance 1.0

General

https://www.google.com/search?q=<ANY>+<DORK>+<OR>+<CUSTOM>+<SEARCH>&cr=<ALPHA-2-COUNTRY-CODE>
"<NAME>" "<SURNAME>" "<CITY>" (filetype:pdf | filetype:doc | filetype:docx | filetype:odt | filetype:ods | filetype:odp | filetype:xls | filetype:xlsx | filetype:csv | filetype:txt | filetype:rtf | filetype:xml | filetype:ppt | filetype:pptx | filetype:key | filetype:zip | filetype:rar | filetype:7z | filetype:gz | filetype:log | filetype:json | filetype:audit | filetype:trace | filetype:debug | filetype:out | filetype:err)
https://api.github.com/users/<NICKNAME>
git log --pretty=format:"[ AUTHOR-EMAIL:%ae | AUTHOR-NICK:%an ][ COMMITTER-EMAIL:%ce | COMMITTER-NICK:%cn ][ DATE:%aD ]"
trufflehog git "https://github.com/<USER>/<REPO>"

Corporate

site:linkedin.com inurl:in “<COMPANY>”

Hosting

python cloudrip.py <SITE> -t 50
python waybacklister.py -d <SITE> -t 50
robofinder -u <SITE> -t 50 -c
subcat -d <SITE> --sc --title --tech --up
https://api.hackertarget.com/hostsearch/?q=<WEBSITE>
https://www.virustotal.com/gui/domain/<WEBSITE>/relations
https://web.archive.org/cdx/search/cdx?url=<WEBSITE>/path/page.php?<PARAMETER>=* [&to=<YYYYMMDD>&from=<YYYYMMDD>]
https://web.archive.org/cdx/search/cdx?url=*.<WEBSITE>&collapse=urlkey [&to=<YYYYMMDD>&from=<YYYYMMDD>]
https://web.archive.org/cdx/search/cdx?url=<WEBSITE>&filter=mimetype:text/javascript&collapse=urlkey [&to=<YYYYMMDD>&from=<YYYYMMDD>]
https://en.gravatar.com/<MD5_HASH_OF_EMAIL>.json

Knocking

Breaches

https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-email?email=<EXAMPLE@GMAIL.COM>
https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-username?username=<USERNAME>
https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-ip?ip=<127.0.0.1>

FlowCharts

Resources

imageimage

Contact

For contributions and reports: pikaosint@proton.me

Donation

If you want to support my research you can donate Monero (XMR).
All donations will be used to buy new OSINT learning materials and tools to improve this project.
Thank you!

image

XMR:

87QKLLGi9nNc9G8K4Rg4aAVipmmixNywN4MgR3UzF3Z5YrgZn74UNFVRZpss4G63eHJbhD9N8tVKoZCKcKCGZyh8M6AUkSb