Spear - OSINT

OSINT/SOCMINT related resources

Tue, 07 Apr 2026 18:54:23 +0200

Seen some people in this section do a couple of (effort 100% still there) sub-par WriteUps

so i thought id go ahead and post something myself

Database search engine(s):
- https://haveibeenpwned.com (Check if someone is breached without viewing records)
- https://bf.based.re (BF db search)
- https://snusbase.com
- https://breach.vip (Good gaming databases)
- https://oathnet.org (Pretty good stealer data & solid discord logs db)
- https://dehashed.com (Similar to snusbase)
- https://cavalier.hudsonrock.com/api/json...ail?email=[email_here] (HudsonRock email search)
- https://cavalier.hudsonrock.com/api/json...?username=[username_here] (HudsonRock username search)

Live intelligence:
- https://www.osint.industries (100% the best option for live-int, pretty expensive and dosent accept crypto)
- https://osint.sx (The next best thing to OI)
- https://spoofwave.com/scanner (Pretty good no reg needed to use email module)

Username intelligence:
- https://github.com/TheYahya/enola (Faster tweaked/better version of sherlockOSINT)
- https://github.com/p1ngul1n0/blackbird (About the same as enola, pretty good though)
- https://t.me/osint_maigret_bot (Telegram based version of Maigret)
- https://whatsmyname.app (Web based, very good)
- https://idcrawl.com

General phone intelligence:
- https://www.freecarrierlookup.com (Domain explains it)
- https://www.usphonebook.com (USA people lookup)
- https://www.imei.info/?imei (IMEI Lookup)
~ Note: Most of the live intelligence sites listed also let you look-up phone numbers

Internet Protocol intelligence:
- https://iknowwhatyoudownload.com/en/peer (Reference an IP addresses logged torrent downloads)
- https://ipinfo.io (Regular IP look-up, can use via curl: curl ipinfo.io/[IP here])
- https://ip.teoh.io/vpn-detection (VPN & Proxy detection)

Public Records:
- https://www.judyrecords.com
- https://www.inforuptcy.com/bankruptcy-sales
- https://osintearth.com/index.html

Email intelligence (nothing live):
- https://www.guesser.email
- https://tools.emailhippo.com
- https://dnschecker.org/email-header-analyzer.php
- https://anymailfinder.com/

SOCMINT:

Instagram:
- https://commentpicker.com/instagram-user-id.php (ID finder)
- https://github.com/0x0be/yesitsme (OSINT script to find Instagram profiles by name and email/phone)
- https://github.com/megadose/toutatis
- https://github.com/th3unkn0n/osi.ig
~ Note: DO NOT use OSINTgram its terrible.

Github:
- https://emailaddress.github.io (Github2Email)
- https://braingainsoft.com/gh/index.html
- https://github.com/mxrch/GitFive

MineCraft:
- https://laby.net/@[username_here]
- https://namemc.com
- https://crafty.gg
~ Already listed above, Breach.VIP is very good for minecraft datasets

Twitter / X:
- https://cache.digitaldigging.org
- https://tinfoleak.com
- https://www.tweetbinder.com
- https://memory.lol/app | https://github.com/travisbrown/memory.lol

Tiktok:
- https://omar-thing.site (Location, UID, Username change date logs)

Discord:
- https://SearchHub.icu (Discord message scrapes, Username logs, Display name logs, Guild tag logs, Avatars, Banners etc)
- https://discord.id
- https://evict.bot/ (Add to ur own server ";names ")
- https://discordtools.me/user-lookup

Steam:
- https://steamhistory.net
- https://steamid.uk
- https://steamdb.info

General:
- https://quiteaplaylist.com (Deleted youtube playlists/videos)
- https://www.vedbex.com/tools/skype_resolver (Will now be useless, pretty much)
- https://arhive.is | https://archive.ph
- https://search.arhive.org

Unsorted:
- https://inteltechniques.com/tools
- https://www.pdfyeah.com/view-pdf-metadata
- https://airtable.com/appDoj6MX1GxpMJ8e/s...FRKW4Uf3Ak (Spread-Sheet of telegram bots for OSINT/INT in general)

List Of Good Databreach Checkers

Sun, 01 Mar 2026 23:45:55 +0100

List of OSINT services I use

opensense.vip

breach.vip
i ntelbase.is
intelx.io

Mastering the Art of Open Source Intelligence in 2026

Mon, 23 Feb 2026 08:16:39 +0100

THE MODERN OSINT MANIFESTO

Mastering Digital Intelligence in 2026

---

Introduction
Open Source Intelligence (OSINT) is not just "Googling someone." It is the systematic collection, analysis, and synthesis of publicly available data into actionable intelligence. Whether you are a bug hunter, a researcher, or just someone looking to verify a digital footprint, a structured methodology is what separates a professional from an amateur.

The OSINT Cycle
Intelligence is a loop, not a linear path. Following these steps prevents you from drowning in useless data:

Requirements: Define exactly what you need (e.g., "Find the physical address linked to this Telegram handle").
Collection: Gathering the raw data (usernames, IPs, metadata).
Processing: Organizing the mess into spreadsheets or link-analysis maps.
Analysis: Connecting the dots (e.g., identifying software stacks through specific UI quirks).
Dissemination: Writing the final report.

---

? The Core Pillars of OSINT

1. SOCMINT (Social Media Intelligence)
The goal is to pivot from a username to a real-world identity.

Username Checkers: Tools like Sherlock or Maigret to find where else a handle is registered.
Platform Pivoting: Looking for linked accounts (Spotify on Discord, Steam on YouTube).
ID Hunting: Extracting internal IDs (like Discord UIDs) which remain even if a user changes their name.

2. GEOINT (Geospatial Intelligence)
Finding a location from a single photo.

Landmark Analysis: Identifying unique architecture, street signs, or foliage.
Shadow Analysis: Using the sun's position and the time of day to determine coordinates.
Satellite Verification: Using Google Earth Pro or Sentinel Hub to match ground-level photos with overhead imagery.

3. Technical / Infrastructure OSINT
Targeting domains, IPs, and servers.

Whois & DNS: Digging through historical records to see original domain owners.
Shodan/Censys: Scanning for open ports, certificates, and software banners.
Metadata Extraction: Using Exiftool to pull GPS and device serial numbers from images.

---

? Critical OpSec Reminder

Don't become the target.
If you are investigating a hardened target without a "sock puppet" (research account) and a clean VPN/Tor setup, you are leaving footprints in their logs.

Use dedicated VMs for all research.
Never visit a target's personal site without masking your IP.
Disable "Read Receipts" on all platforms before clicking profiles.

---

The 2026 Essential Toolbelt

? Visualization: Maltego / Obsidian Canvas
? Username Search: WhatsMyName.app / Maigret
? Infrastructure: SpiderFoot / Shodan
? Email Verification: EPIOS / Hunter.io

---

Conclusion
OSINT is a marathon, not a sprint. The best tool you have is your brain and your ability to spot patterns that others miss. Stay ethical, stay curious, and keep your own footprint small.

Post your favorite dorks or pivots below. Let's see what you've got.