Nobody's impressed by OSINT on the big social platforms anymore: plenty of tools do that.
The hard part is everything else. Maigret 0.6.6 now checks almost 6000 sites, including niche forums, discussion boards and wikis -- where the real leads live.
Try it: soxoj.com/maigret-r066-x
Did you know a Telegram bot keeps its full chat history on Telegram servers? With the bot token, you can get all of it.
My tool telegram-bot-dumper now renders the dump like Telegram Web: chat list, media, search.
Use cases: pentest, recon, malware analysis ๐
๐ github.com/soxoj/telegram-boโฆ
A friend of mine built Exploratores, an online collection of OSINT tools inspired by CyberChef and Michael Bazzell's books.
It brings a wide range of investigation ๐ต๏ธ tools in one interface:
โข Clear web and darknet search engines
โข People search
โข Social media research
โข IP address and domain analysis
โข GEOINT tools
โข Media analysis
โข Cryptocurrency lookups
โข Company name and IBAN searches
The best part: you only need a browser. You can also download it and run everything locally!
๐ Try it online: sosintops.github.io/Exploratโฆ
๐ป Download and run locally: github.com/SOsintOps/Exploraโฆ
๐ค Use it with Claude (MCP): github.com/SOsintOps/claudiiโฆ
๐ Read more about the project:
osintops.com/en/exploratoresโฆ
Maigret 0.6.3 is out! ๐ต๏ธ
115 site checks fixed, 15 new sites added, better Chinese-site support, improved Cloudflare bypass, and upgraded PDF templates.
Over the past few months, Iโve been receiving more and more fixes from the community. Maigret now gets over 100K installs per month, with more than 1M installs in total! ๐
๐ Try it yourself: github.com/soxoj/maigret#in-โฆ
At probably the hottest @_leHACK_ ever, I presented my new cybersecurity tool for penetration testers: ๐๐จ๐ฆ๐ฆ๐ข๐๐ข๐ฌ๐ญ๐ ๐ฅ
CommiPiste can ๐ข๐๐๐ง๐ญ๐ข๐๐ฒ ๐ญ๐ก๐ ๐๐ฑ๐๐๐ญ ๐ฏ๐๐ซ๐ฌ๐ข๐จ๐ง ๐จ๐ ๐จ๐ฉ๐๐ง-๐ฌ๐จ๐ฎ๐ซ๐๐ ๐ฐ๐๐ ๐ฌ๐จ๐๐ญ๐ฐ๐๐ซ๐ using only publicly accessible static files and then ๐๐ข๐ง๐ ๐ญ๐ก๐ ๐๐๐๐ฌ associated with that version.
It can be especially useful when version information is hidden, removed from headers, or unavailable through conventional fingerprinting methods ๐
It already supports 300 ๐๐ข๐๐๐๐ซ๐๐ง๐ญ ๐ฉ๐ฅ๐๐ญ๐๐จ๐ซ๐ฆ๐ฌ. For some of them, CommiPiste uses a complete index of commits, while others are identified through smart heuristics ๐ ๏ธ
๐ ๐๐ข๐ฏ๐ ๐ข๐ญ ๐ ๐ญ๐ซ๐ฒ: github.com/soxoj/CommiPiste
P.S. huge thank you to @navlys__ for organizing such a great event, and especially for the OSINT Village. As always, absolutely top-notch! ๐
P.P.S. big thanks to the person behind the idea and just an awesome guy, paranoid android ๐
๐ค Made with AI
Soxoj retweeted
Congratulations to the team in second place โ and winner of our silver badge โ OSINT MINDSET with 28 submissions and 1050 points!
Congratulations OSINT MINDSET!
#OSINT #OSINT4GOOD #CTF
Just a reminder: I maintain socid-extractor, an open-source Python tool that extracts account data from 130+ sites.
๐ Usernames, bios, avatars, follower counts, external links โ plus the stable internal identifiers that survive renames and let you re-identify accounts across leaks and archives.
No API keys, no headless browser, normalized field names and ontology, MIT license. โ
Powers Maigret ๐ต๏ธโโ๏ธ and a number of other OSINT tools.
Don't hesitate to give it a โญ!
๐ github.com/soxoj/socid-extraโฆ
Who is behind a shared post, article, or document?
Sharetrace can help find the answer across 17 platforms.๐งฉ
In the latest update, @HHieupc added support for LinkedIn, GitLab, and Hugging Face. ๐ฅ
A critical step toward faster attribution, footprint analysis, and OSINT investigations from just a shared link! ๐
Try online:
- Web UI by @henkvaness: share.whopostedwhat.com/
- Telegram bot: t.me/sharetrace_bot
OSINT tools should give you actionable leads, not just random URLs and raw data ๐ซก
My open source tool Maigret has always been able to search by username, but making sense of the results was up to the user.
I've now added AI analytics and identity resolution, so you can get fast conclusions about a target across 3000 sites.
Over the last few weeks, I also rewrote Maigret and cleaned up the checks database. Near-zero false positives. Open source. MIT licensed.
Want to know why such a powerful tool is open? Apply via the link below and add the comment: โshow me Crimewall QuickLink modeโ โ and see how insanely far the commercial tools I'm building go beyond this.
๐ Learn more about QuickLink: sociallinks.io/products/sl-cโฆ
Three new ways to reveal who's behind the URL:
1๏ธโฃ Public Google Docs/Drive โ owner's email + ID
2๏ธโฃ GitHub commit/profile โ committer email
3๏ธโฃ Notion public page โ editor names, emails, photos
๐ github.com/soxoj/sharetrace
Credits and acknowledgements to:
- @HHieupc - Google Docs and GitHub PR
- @mxrchreborn, @palenath - Google Docs technique (xeuledoc)
- cavo789 - GitHub .patch trick
- @SpongeBhav - Notion block-permission UUID leak
- @weezerosint - amplified the Notion discovery
FYI @cyb_detective @henkvaness
Soxoj retweeted
share.whopostedwhat.com Inspired by Dmitry Danilov
Three standout open-source #osint username search tools right now: Blackbird, Aliens_eye, and Naminter ๐
I finally updated my list of username search tools ๐, retested a bunch of them, and these 3 really stood out.
Huge thanks to their creators for building genuinely useful tools and pushing username-based OSINT forward ๐ฅ @p1ngul1n0 @3xp0rtblog arxhr007
Full list on GitHub: github.com/soxoj/osint-namecโฆ
๐ญ ShareTrace: reveal the identity behind any share link
Works for 12 platforms: TikTok, Instagram, Discord, Google Drive, Notion, Telegram, Pinterest, Substack, Suno, ChatGPT, Claude, Perplexity.
Original repo was deleted โ I rebuilt it with new platforms and fixes.
๐ github.com/soxoj/sharetrace
MCP + OSINT is a powerful combo ๐ฅ
Instead of figuring out how to run CLI tools, just ask your LLM โ and it runs Shodan queries, Maigret lookups, DNS fuzzing, and threat intel checks for you.
So, I've made a curated list of OSINT MCP servers. Take a look, try plugging something into your AI tool, or submit a new one!
๐ github.com/soxoj/awesome-osiโฆ
OSINT WORLD MAP
Together with @Sox0j, we created OSINT WORLD MAP โ a curated collection of links to OSINT tools, websites, and projects, organized by geographic location. It includes:
โข 193 UN member states
โข Dependent territories
โข Special administrative regions
โข Partially recognized states and disputed territories
โข Other regions
map.wddadk.com
Just select or search for the country you need โ and thatโs it. All relevant OSINT tools and resources are listed right in front of you. If you have new links make PR here github.com/wddadk/OSINT-for-โฆ
Tested it. Filters and transcript search are especially ๐ฅ๐ฅ๐ฅ
This quoted post is unavailable.
Soxoj retweeted
In Episode 10 of The OSINT Podcast, @jakecreps talks you through Telegram Spoiler Decoder.
Telegram for macOS can render spoiler text as pseudo braille.
Screenshots or screen shares can allow the hidden text to be recovered.
Try it here: spoiler.soxoj.com/
The OSINT Podcast Episode 10 is out today ๐ง
The episode covers how OSINT actually gets done in 2026, from investigating developer platforms and deobfuscating messages to building real world credibility without certifications.
Listen here: osintnewsletter.com/podcast





















