A modern web interface for various OSINT tools and resources. Built with FastAPI, TailwindCSS, and a focus on user experience.
- GitHub Analysis: Deep dive into GitHub profiles using GitFive
- DNS Lookup: Find shared nameservers and domain relationships
- OSINT Industries Integration: Search for emails, phones, and usernames
- Cavalier API: Search for compromised accounts and data
- DoxBin Search: Search the breached DoxBin database
- WHOIS History: Research domain registration history
- External Resources: Curated list of useful OSINT tools and websites
- Clone the repository:
git clone https://github.com/ayxkaddd/Osint-ToolKit
cd Osint-ToolKit
- Create and activate a virtual environment:
python -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
- Install the project and its dependencies:
pip install .
- Create a
.env
file with your configuration:
JWT_SECRET=your_jwt_secret_key
ROOT_EMAIL=your_email@example.com
ROOT_PASSWORD=your_password_encrypted_with_bcrypt
- Follow the instructions below to setup the modules
- Clone the GitFive repository:
git clone https://github.com/mxrch/GitFive
cd GitFive
- Create and activate a virtual environment:
python -m venv venv
source venv/bin/activate
- Install the project and its dependencies:
pip install -r requirements.txt
- Login to your GitHub account (not recommended to use main account):
python main.py login
-
Follow the instuctions of GitFive
-
Add GitFive paths to your
.env
:
GITFIVE_VENV_PATH=/path/to/GitFive/venv/bin/python
GITFIVE_SCRIPT_PATH=/path/to/GitFive/main.py
- Navigate to /git in the web interface
- Enter a GitHub username
- View detailed analysis including:
- Repository statistics
- SSH keys
- Email addresses
- Username history
- Related accounts
- Get a HackerTarget API key from hackertarget.com
- Add the API key to your
.env
:
HACKER_TARGET_API_KEY=your_api_key
- Navigate to /ns in the web interface
- Enter two nameservers (e.g. kelly.ns.cloudflare.com and sean.ns.cloudflare.com)
- View domains sharing the same nameservers
- Click
Analyze WHOIS Records
button to find connections between domains
- Get your API key from osint.industries
- Add to .env:
OSINT_INDUSTRIES_API_KEY=your_api_key
- Navigate to /osint in the web interface
- Enter an email, phone number, or username
- View Pdf report of results from various OSINT sources
- Get API key from whoisxmlapi.com (up to 1,000 free API requests)
- Add to .env:
WHOIS_HISTORY_API_KEY=your_api_key
- Navigate to /whois in the web interface
- Enter domain name
- View historical WHOIS records and changes
- Start the FastAPI server:
uvicorn main:app --reload
-
Open your browser and navigate to
http://localhost:8000
-
Login with the credentials you set in the
.env
file -
You can change module settings in the web interface
-
Enjoy!
/assets
: Static files and cached results/models
: Pydantic models for data validation/routes
: API route handlers/services
: Business logic and external service integrations/templates
: HTML templates using TailwindCSS