SpiderFootgithub.com
OSINT automation framework with 200+ modules. Give it a domain, IP, email, name or username and it recursively correlates findings in a web UI.
domainip / asnemailreal nameusernamephonecryptodetails
tools / maltego
Maltego
Graph-based link-analysis platform. Run "transforms" against entities (people, domains, emails, companies) to pull data from dozens of integrated sources.
freemiumacct reqdesktop
field note
The free Community Edition limits results per transform. For quick investigations, use it to visualize findings you have already collected.
similar tools
recon-nggithub.com
Metasploit-style modular reconnaissance framework in Python, with a marketplace of modules and a built-in workspace database and reporting.
domaincompanyemailip / asndetails
DeHasheddehashed.com
Searchable breach database that queries by email, username, name, IP, phone, address, or password hash and returns raw leaked records.
emailusernamereal nameip / asnphonelocationdetails
Hunterhunter.io
Finds professional email addresses for a company domain, infers the address pattern (e.g. first.last@), and verifies deliverability.
emaildomainreal namecompanydetails
Intelligence Xintelx.io
Search engine and archive of leaks, pastes, dark-web pages, and historical data. Supports email, domain, IP, CIDR, URL, and crypto address selectors.
emaildomainip / asnurlcryptophonedetails
Leak-Lookupleak-lookup.com
Breach data search engine with a free check of which breaches contain a selector, and paid access to the full records.
emailusernameip / asnphonedomaindetails