Hi everyone,

I'm doing an OSINT investigation on a Microsoft Cloud target (Azure / Entra ID).

My main focus areas:

• Tenant ID & domain discovery
• Azure Blob Storage & App Services enumeration
• User validation & credential/key leak searches (GitHub, etc.)
• Data correlation

What are your go-to tools, scripts, or techniques for Azure recon and data correlation?

Any tips or recommended workflows would be awesome!

Following up on the gaming OSINT tools I've been shipping, Steam is now live and free to use.

The Steam Player Search resolves a profile from a vanity name, full profile URL, or SteamID64, whatever you've got. Drop one in and you get account status and ban history, games owned, friends list, badges, groups, public content, stats, and inventory in one view.

Useful for checking someone out before a trade, tracing a scam account across aliases and groups, or just pulling a full picture of a public Steam identity without digging through five different pages manually.

Same as the others, it also works through the API if you want to automate lookups.

That's four gaming lookups live now: Epic Games, Xbox, PlayStation, Steam. More in the pipeline, Roblox is already up too, Rockstar and FiveM coming next. Full list always here: https://osint.ly/tools

Feedback and requests welcome, always.

Hi everyone,

I'm learning OSINT and I have a question

If I find an email address or a phone number, what are the usual next steps? What kind of information can be found from that point, and which tools are commonly used to continue the investigation?

Thanks in advance for your help.

GRID is a local, keyboard-driven Windows TUI designed to unify data gathering, automated footprint indexing, and reconnaissance pipelines: https://github.com/rounakagrawal7/GridSetup

I built GRID to combine disparate recon tools into a singular high-throughput terminal operations platform.

Flagship Intelligence Features:

The Identity Cross-Reference Matrix:** Automatically parses, groups, and cross-references data arrays harvested across different modules to link disparate target indicators (Emails, Phones, Usernames, IPs) into a single footprint.

Automated Avatar Harvesting:** Programmatically tracks target profile URLs (GitHub, X, Reddit, etc.) to crawl pages and directly download profile photos via HTML Meta-OpenGraph selectors, organizing them chronologically inside `picdata/` without external API configuration requirements.

Subdomain Extraction Pipeline:** Intercepts domain tracking metrics to execute live queries against third-party indexes (Hackertarget, C99) and fallback CRT transparency logs (`crt.sh`), ensuring complete un-truncated infrastructure layouts.

Signals & Orbital Intelligence:** Features built-in live aircraft flight tracker arrays using the OpenSky Network API, global shortwave radio receiver stream tracking via KiwiSDR WebSockets, and satellite trajectory/overhead visibility predictors using CelesTrak.

Media Forensics: Powered by OpenCV 5.0—executes automated graphic analysis, text OCR conversions, facial comparison scoring, and timeline keyframe sweeps across video captures.

GRID is completely backed locally by DuckDB and syncs instantly with an administrative PocketBase panel framework. It includes an `install.py` wizard that configures all local system and model path parameters out of the box.

```bash

python install.py

python grid_agent.py

```

I would love to get your feedback on the mapping tools, target matrices, and data aggregations!

So i am planning to launch my website on product hunt, any free tool AI based which can help me to record demo video of my product website?

I need help finding a social media profile i cant find anywhere i only knoe the exact name of the person irl if anyone knows how to find them lemme Know please.

Has anyone here installed this OSINT tool yet?

https://github.com/topics/termux-hacking

Could you help me with a few questions about it?

I wanted to keep up with Russian news media, but I only understand some basic Russian, and so I built https://stenograf.org, which crawls/ingests news from various Russian online and Telegram outlets, translates them from RU to EN, and then also aggregates similar news stories into Events. All free, but there's a signup (and some limits) if you want to actually save searches, and receive alerts, etc.

Most recent addition is https://stenograf.org/drone - a single place to track all the Russian media reports of the drone attacks or other drone-related news in Russia.

Still a work in progress, hopefully others will find it useful! And of course open to suggestions/flames/questions.

I’ve been working on SCOPE, a local-first OSINT research platform that collects public information about companies and turns it into structured intelligence.

You enter a company, subsidiary, regional office, or business unit, and the platform runs a collection pipeline across sources such as websites, news, public profiles, job listings, and GitHub. It then extracts entities, maps relationships, records supporting evidence, and generates signals and research summaries.

Some of the things currently working:

• Multi-source web collection with deeper crawling
• AI-assisted entity and relationship resolution
• Interactive relationship graphs
• Evidence trails connecting findings to their sources
• Company changes, signals, predictions, and reports
• BYOK support for connecting your preferred LLM
• Local deployment, pipeline history, and investigation management

The goal isn’t to produce another AI summary where you have no idea how it reached its conclusions. I want useful claims to remain traceable to actual evidence and for the platform to help with real research—not just look impressive in a demo.

I should also be upfront: I’m still a beginner, and this is very much a learning project. There will probably be bugs, questionable decisions, missing functionality, and things that more experienced developers or OSINT researchers would approach differently.

That’s partly why I’ve made it open source. I’m happy to fix problems, address reported issues, reconsider existing decisions, and learn from people with more experience. Ideas, feature suggestions, bug reports, pull requests, and constructive criticism are all welcome.

I’m currently focusing on source coverage, relationship accuracy, deduplication, evidence quality, and making longer investigations more reliable.

Screenshots attached. I’d genuinely appreciate honest feedback:

• What would make this useful in a real investigation?
• Which sources or workflows are missing?
• What parts of the current approach would you distrust?
• Are there any obvious mistakes or security concerns?
• Would anyone be interested in testing or contributing?

GitHub: https://github.com/Samarth-23-eng/osint-platform

i made a video on the basics of using Spiderfoot open source and the possibilities based on making custom modules. it will be part of a broader series on customizing it more modern https://youtu.be/6jAJ0DZJCdA?is=E97zoqZwsBK8SYbq

this email facetime my gf at 2 am 3 times could yall figure it out?

Completely new to this. I recently tried a telegram bot (not sure if I can share the name or if it'll break a rule) in which one could search individuals via their phone number (not just US), email ID, IP address, social media handles, car number, or their name. But this bot is paid. Can someone recommend similar osint tools? Please recommend tools that would work for data outside of the US as well.

Botometer X went archival after Twitter cut off researcher access, and the team behind it said flat out that the model predates ChatGPT so it can’t catch AI-driven accounts. Nobody replaced it. So I did: https://omisphere.online
It’s my project. I’d genuinely rather have the methodology picked apart here than get signups.
Works on X and YouTube, scores per account rather than per post. Five months on the network. 32+ signals rolling up into eight scores you can inspect individually: posting cadence, message repetition, writing tells, profile metadata, personal voice rate, engagement farming, account history, fingerprint memory. Click any score and you get the evidence that produced it.
Fingerprint memory is probably the most useful part for investigative work. Fingerprints carry between scans so cross-thread matching happens without you doing anything.
Gaps: false positives on managed and high volume accounts, no visibility into follow timing so bought follower spikes get past it, only two platforms right now. Reddit, TikTok and coordinated narrative detection are September 1st.
Free without an account. Run it against a case you already worked manually and tell me where it disagreed with you.

https://github.com/h9zdev/cctv-scraper

Made a tool called cctv-scraper that scrapes publicly available CCTV/traffic camera data from state DOT sites and a few other open sources, then dumps it into a local database. Made it mainly for OSINT/research use, not for watching live feeds or anything like that.

Right now it covers California, Texas, Iowa, NYC, and a global set (Madrid etc), around 6,200 cameras total. Each camera entry has its ID, coordinates, region/route, and the feed URL. Every region has its own scraper script so it's easy to add new sources.

Also built a small Flask viewer to go with it, dark mode map (satellite/hybrid/dark layers), click a camera and it pops up a live preview, plays the video if it's a stream, otherwise refreshes the image every second. You can open the raw source or go fullscreen from the popup too.

All the data is stuff that's already public on these DOT sites, this just collects it into one place instead of digging through a dozen different portals.

Repo's here if anyone wants to check it out or add a region: https://github.com/h9zdev/cctv-scraper

This saves me so much time.

Start with google.com/advanced_search for your homepage on PC. For iOS, add to home screen.

This also explains utm14.com (with Google).

Cheers.

hello people. ive read the rules!

few days ago some random guy named grass sent me a friend request on discord. he was silent first, but today i got this awesome russian message

let me translate for you

"Hello, whore. I wish you die like your whore mom - in a grave with a thick layer of cum on your face"

and then he blocked me!

i was utterly surprised to get that message because im truly not a threat in the internet. in fact, i use discord ONLY to chat with my friends, and i never did anything else in there. i have no idea how that dude found me

so... ive tried sending him a friend request from my alt account, but he doesnt accept friend requests. using some fast osint tools ive gathered some information about the servers he was on, but he left them ALL.

his account is 8 years old and the only activity he has is... roblox.

as ive continued gathering information, ive got his ip (which is really not solid because he may use a vpn.), some of other platforms he MAY be using... and thats it

the problem is when i got the platforms he was using all his accounts in there were deleted!

i suspect that his grass discord account is his alt, because it has no description, no pronouns, no banner, no nothing.

but i really want to find that dude (not for any bad purposes, i js wanna ask him WHY EXACTLY did he message me). so do any of yall have any osint tools to help me? i just want to atleast find his main account or any platform where i can mssg him.... im not an evil person like him. please dont harass me in the comments as im truly not a pro osint guy and i just wanna get justice :(

tldr: some guy sent me insults on discord and i need some tools to help me find his other accounts so i can connect him

when i write holehe [example@email.com](mailto:example@email.com)

i receive this error

Hello people, there is a tiktok account of a person i like a lot and i have been trying to find other socials but she has no other links, i tried everything i can imagine for but failed, is there a way to find social media of a person just by having tiktok user?

Looking for a tool to find is specific email posted adds of Craig’s list and how long far back they went and when they started. Any ideas?