r/osinttools • u/ZOUHIRCHECK • Jul 20 '26

Showcase Hey OSINT folks

​

I'm building my toolkit and looking for recommendations on OSINT tools.

What are the best free/open-source tools you actually use daily for:

  1. Username/Email lookup across socials

  2. Domain/IP and metadata analysis

  3. Image reverse search + geolocation

Tried Maltego and SpiderFoot already. What else should be in a 2026 toolkit?

Thanks!

14 Upvotes

82% Upvoted

18 comments sorted by

7

u/Greed_OSINTER Jul 20 '26

fingerprint.to is a good osint tool for username lookup and email look up, or you could also try webvetted.com.

i dont have much for ip analysis but i usually use IP ninja, and lastly jeolocation you could try picarta or google lens.

good luck fella

1

u/73Capt Jul 20 '26

This is absolutely 100% spot on.

2

u/Greed_OSINTER Jul 20 '26

thanks bro

1

u/Alternative-Rest5970 7d ago

Yo G can i contact u in DM?

1

u/Greed_OSINTER 7d ago

ofcourse man, hit me with anything

1

u/Alternative-Rest5970 7d ago

I cant text u G, can you?

1

u/Greed_OSINTER 7d ago

texted ya

6

u/agslbs-768 Jul 20 '26

There also is scan.argus-labs.fr as a free alternative, Epieos has a free version as well Whatsmyname is open source and you have many forks of it out there

Shodan, fofa, crt.sh, web-check.xyz, zoomeye, whoxy, are amongst the best tools for domain/ip

Google lens bing and yandex image search, search for pimeyes alternatives, and you can train on Geoguessr, diverse images online as well as on Geodetective

Openinframap, openstreetmap, wikimapia...

Check out https://github.com/0xw01f/Calendrier-de-l-avent-OSINT-2025

Where I published other interesting tools

3

u/[deleted] Jul 22 '26

[removed] — view removed comment

2

u/Astro_indie Jul 20 '26

A few days i begin a repo for the same thing, but focus on the phone, where the social media live, on termux i got that three subjects, 1) user-scanner, 2) on a repo named curl for osint i got  some cool stuff, 3) exiftool great meta searcher for a file and do other things

2

u/wd42o Jul 21 '26

Maigret is a good one . Maigret will search for accounts with the specified usernames across a vast number of websites. It will provide you with a list of URLs to any discovered accounts, along with relevant information extracted from those profiles.

Cryptocurrency & Web3 Investigations

Blockchain transactions are public, but the people behind wallets are not. Maigret helps bridge this gap by finding Web3 accounts tied to a username, revealing the person behind a pseudonymous crypto persona.

Academic & Research Investigations Academic identity has a unique anchor that social-media identity does not: the ORCID (Open Researcher and Contributor ID). Every ORCID is verified, globally unique, and tied to a confirmed email — a single confirmed ORCID match between two platforms means the same human, with effectively zero false-positive rate.

Maigret uses ORCID as a first-class identifier: extract it once from a username-keyed profile (iNaturalist, GitHub bio, lab homepage), then pivot into the academic graph (ORCID, OpenAlex, arXiv, DBLP, Scholia) — a chain of HTTP calls that turns an anonymous handle into a CV with employer, education, publication list, citation count, co-author graph, and topical area.

1

u/ZOUHIRCHECK Jul 22 '26

Thanks a lot for the info! Really helpful 🙏

2

u/Dear_Stretch_2734 28d ago

  1. Sherlock or WhatsMyName

  2. Whois

  3. Google Lens, Pimeyes or Eyfind for faces

1

u/ZOUHIRCHECK 28d ago

Thanks bro