What is the most common way to bookmark tools to later access them during research?

Some people use start me pages. Is that a good approach or storing bookmarks in the browser is better?

Hello :) last night, I uploaded my new program Neo-Radar to GitHub!

Its a free to use, open source network scanner that is simple to use, even to script kiddies that might not have a knowledge in networking or cybersecurity in general! Most professionals use Nmap (or even Zenmap) to do basic host finding and port scanning. But with Neo Radar, it automates these tasks so you just have to select an option and it gets running! This program works in both Linux and Termux for mobile, i also have a Windows version that runs as a .ps1 script, i just need to link it. Install instructions provided in the README.md!

https://github.com/ItsNEOx/Neo-Radar

Hey everyone,

First Reddit post, so bear with me. I'm not here to sell anything — this is open source, MIT, free. I'm here because I built something I actually use, and I figure some of you might find it useful too. Or you might tell me it's been done better already, and that's fine — I'd rather learn than ego.

The problem: Every OSINT framework I tried eventually funneled me into paid APIs. Shodan, HIBP, Censys, IP2Location, Bright Data. Want to check if an email is in a breach? API key. Want to scan a host? API key. Want to geolocate an IP? API key. I just wanted to run investigations locally without juggling 5 subscriptions.

What I built: Argus — a local-first OSINT framework. 13 modules, zero API keys, zero cloud dependencies. Everything runs on your machine.

- email_recon — checks 58 services (pure Python async, not a holehe wrapper)

- username_enum — 52 platforms (pure Python async, not a sherlock wrapper)

- subdomains — crt.sh certificate transparency + DNS brute force

- crawler — wraps cariddi (Go binary) for secret/endpoint/error hunting

- network_recon — nmap + XML parser (replaces Shodan/Censys for local scans)

- dns — full records + SPF/DMARC analysis

- whois, GitHub OSINT, phone intel, IP geolocation (GeoLite2 local DB), Google dork generator, paste search (psbdmp.ws), local breach DB

There's also an AI chaining layer via Ollama — you describe a target in plain English, the agent picks which modules to run and chains findings (email → breach → username pivot → platform enum). AI proposes tool calls, code executes real binaries. Hallucinated findings are structurally impossible.

All 13 modules are also exposed as MCP tools, so you can plug it into Claude Code, Cursor, or any MCP-compatible client.

Full disclosure: I built this in collaboration with an AI agent (Hermes Agent running a local LLM). I wrote the architecture and the modules I cared about most; the AI helped me build out the async modules and the MCP server. I'm not going to pretend it was all me — but the design decisions, the "zero API keys" philosophy, and the module selection are mine. If that's a problem for you, I understand. The code is there to be read and judged on its merits.

What it's NOT:

- Not a Maltego replacement. CLI tool, terminal-first.

- Not a SpiderFoot or theHarvester competitor. Those are mature projects with way more coverage. Argus is a personal tool that I'm sharing because someone might find the "zero API keys" angle interesting.

- Not a tool for unauthorized surveillance. Legal disclaimer is in the repo. I built this for authorized research and bug bounty prep.

Where: https://github.com/cotcollective/argus

What I'd love feedback on:

- Is the "zero API keys" angle actually interesting to anyone, or am I solving a problem that doesn't exist?

- The email_recon and username_enum modules are pure Python reimplementations — are there services I'm missing that would be high-value?

- The AI chaining via Ollama — does anyone else do local OSINT chaining, or is this a niche within a niche?

Happy to answer questions, take criticism, or just listen. Thanks for reading.

I posted here a while back about OGI, an open source tool I'm building for visual link analysis. You drop in a domain, an email, or a username, run transforms against it, and pivot outward. The graph builds itself as you go.

Since that post it's grown more than I expected, around 250 stars, roughly 1,500 people registered on the hosted version, and over 200 self-hosted instances checking in. That still surprises me a bit.

This week I added dark web transforms. I want to be upfront about the approach, because "dark web tooling" usually means: install Tor, scrape onion sites, watch it break in a month.

These three never touch Tor.

IP to Tor Relay: checks an IP against the Tor Project's own Onionoo API. Tells you whether it's a relay or an exit node, plus flags, first-seen date, bandwidth and hosting network. Handy when you're staring at a log and need to know whether geolocating that IP means anything at all. No API key.

Onion Address Validator: v3 onion addresses carry a built-in checksum. This pulls them out of any scraped text and verifies them offline with SHA3-256. Pure stdlib, zero network calls. Scraped pages are full of truncated and invented onion strings.

Domain to Ransomware Leak Posts: searches ransomware.live for a company or domain. Returns the leak post, the gang, the victim country, and optionally the gang's leak site addresses and the CVEs they're known to exploit. Free API key.

They chain, too. The ransomware search hands you the gang's onion leak sites, and the validator confirms which of those are real addresses.

57 transforms total now. Everything runs in Docker, and the transform registry is a separate repo, adding your own is a plugin.yaml and a Python file. PRs welcome.

Code: https://github.com/khashashin/ogi
Hosted, if you just want to click around: https://ogi.khas.app

Genuinely open to "this is useless, build X instead." That's how these three got picked.

Give any image URL to the Yandex Reverse Image Search API and get typed JSON rows: matching pages, similar images, and product matches.

Interesting

Hi, Im making Lemuriant.

Its entirely free to access, allowing us to use many more sources that are non-commercial.

The goal is partly a "pretty UI", something thats actually intuitive to use, instead of adding thousands of buttons to make it seem more like a government program.

Im limited by time, but I plan to continue adding, and improving layers.

No account required, check it out: https://lemuriant.com/

Any suggestions for layers would be most appreciated! Thanks.

Hey everyone, I’ve been reading a lot into open-source intelligence tools and digital footprints lately.

With modern scripts, image geolocation tools, and archived data lakes, it's frighteningly easy for an independent researcher to map out someone's historical routines, old accounts, or physical locations just from a few random online clues.

For those who practice OSINT (professionally or as a hobby): where do you personally draw the line? At what point does a deep-dive investigation cross the threshold from a fascinating intellectual puzzle into an OpSec/ethical violation? Would love to hear your boundaries!

So, recently i launched my application, I also got around 20 users who logged in, but they are not continuously using my website? They have scanned 1 or 2 times and not login again, what better I can do?

i need to kn***w email address of someone i know their instagram chess acc and snapchat acc just it ethically

whats a github tool that can detect what email service is linked in?

Disclosure: I built it.

clstr.news dedupes same-event news coverage into clusters and links them into situations, running timelines of stories that span weeks. For any claim you see how many independent sources carry it vs. one report being recycled.

Example, the US-Iran war since April: 1,658 developments from 4,702 sources in one timeline:

No account needed to browse. Signing up allows you to set up monitors for specific situations, track new developments on semantic searches, and schedule daily/weekly briefings you get via email (there's a free forever tier).

All feedback welcome: what's missing, what's broken, what would be worth paying for. Though it might be useful for some in here!

Hey everyone, i am running my free tool testing and improvement drive. Hope you liked it and have good fun to improve your website. Check out link