OSINT on Producthunt daily

theHarvester

Tue, 02 Sep 2025 15:29:14 +0800

laramies/theHarvester

About

theHarvester is a simple to use, yet powerful tool designed to be used during the reconnaissance stage of a red team assessment or penetration test. It performs open source intelligence (OSINT) gathering to help determine a domain’s external threat landscape. The tool gathers names, emails, IPs, subdomains, and URLs by using multiple public resources that include:

Install and dependencies

Python 3.12 or higher.
https://github.com/laramies/theHarvester/wiki/Installation

Install uv:

`1`	`curl -LsSf https://astral.sh/uv/install.sh \| sh`

Clone the repository:

1
2

git clone https://github.com/laramies/theHarvester
cd theHarvester

Install dependencies and create a virtual environment:

uv sync

Run theHarvester:

`1`	`uv run theHarvester`

Development

To install development dependencies:

`1`	`uv sync --extra dev`

To run tests:

`1`	`uv run pytest`

To run linting and formatting:

`1`	`uv run ruff check`

`1`	`uv run ruff format`

Passive modules

baidu: Baidu search engine (https://www.baidu.com)
bevigil: CloudSEK BeVigil scans mobile application for OSINT assets (https://bevigil.com/osint-api)
brave: Brave search engine - now uses official Brave Search API (https://api-dashboard.search.brave.com)
bufferoverun: Fast domain name lookups for TLS certificates in IPv4 space (https://tls.bufferover.run)
builtwith: Find out what websites are built with (https://builtwith.com)
censys: Uses certificates searches to enumerate subdomains and gather emails (https://censys.io)
certspotter: Cert Spotter monitors Certificate Transparency logs (https://sslmate.com/certspotter)
criminalip: Specialized Cyber Threat Intelligence (CTI) search engine (https://www.criminalip.io)
crtsh: Comodo Certificate search (https://crt.sh)
dehashed: Take your data security to the next level is (https://dehashed.com)
dnsdumpster: Domain research tool that can discover hosts related to a domain (https://dnsdumpster.com)
duckduckgo: DuckDuckGo search engine (https://duckduckgo.com)
fullhunt: Next-generation attack surface security platform (https://fullhunt.io)
github-code: GitHub code search engine (https://www.github.com)
hackertarget: Online vulnerability scanners and network intelligence to help organizations (https://hackertarget.com)
haveibeenpwned: Check if your email address is in a data breach (https://haveibeenpwned.com)
hunter: Hunter search engine (https://hunter.io)
hunterhow: Internet search engines for security researchers (https://hunter.how)
intelx: Intelx search engine (https://intelx.io)
leaklookup: Data breach search engine (https://leak-lookup.com)
netlas: A Shodan or Censys competitor (https://app.netlas.io)
onyphe: Cyber defense search engine (https://www.onyphe.io)
otx: AlienVault open threat exchange (https://otx.alienvault.com)
pentesttools: Cloud-based toolkit for offensive security testing, focused on web applications and network penetration testing (https://pentest-tools.com)
projecdiscovery: Actively collects and maintains internet-wide assets data, to enhance research and analyse changes around DNS for better insights (https://chaos.projectdiscovery.io)
rapiddns: DNS query tool which make querying subdomains or sites of a same IP easy (https://rapiddns.io)
rocketreach: Access real-time verified personal/professional emails, phone numbers, and social media links (https://rocketreach.co)
securityscorecard: helps TPRM and SOC teams detect, prioritize, and remediate vendor risk across their entire supplier ecosystem at scale (https://securityscorecard.com)
securityTrails: Security Trails search engine, the world’s largest repository of historical DNS data (https://securitytrails.com)
-s, –shodan: Shodan search engine will search for ports and banners from discovered hosts (https://shodan.io)
subdomaincenter: A subdomain finder tool used to find subdomains of a given domain (https://www.subdomain.center)
subdomainfinderc99: A subdomain finder is a tool used to find the subdomains of a given domain (https://subdomainfinder.c99.nl)
threatminer: Data mining for threat intelligence (https://www.threatminer.org)
tomba: Tomba search engine (https://tomba.io)
urlscan: A sandbox for the web that is a URL and website scanner (https://urlscan.io)
venacus: Venacus search engine (https://venacus.com)
virustotal: Domain search (https://www.virustotal.com)
whoisxml: Subdomain search (https://subdomains.whoisxmlapi.com/api/pricing)
yahoo: Yahoo search engine (https://www.yahoo.com)
zoomeye: China’s version of Shodan (https://www.zoomeye.org)

Active modules

DNS brute force: dictionary brute force enumeration
Screenshots: Take screenshots of subdomains that were found

Modules that require an API key

Documentation to setup API keys can be found at - https://github.com/laramies/theHarvester/wiki/Installation#api-keys

bevigil - 50 free queries/month, 1k queries/month $50
brave - Free plan available, Pro plans for higher limits
bufferoverun - 100 free queries/month, 10k/month $25
builtwith - 50 free queries ever, $2950/yr
censys - 500 credits $100
criminalip - 100 free queries/month, 700k/month $59
dehashed - 500 credts $15, 5k credits $150
dnsdumpster - 50 free querries/day, $49
fullhunt - 50 free queries, 200 queries $29/month, 500 queries $59/month
github-code
haveibeenpwned - 10 email searches/min $4.50, 50 email searches/min $22
hunter - 50 credits/month free, 12k credits/yr $34
hunterhow - 10k free API results per 30 days, 50k API results per 30 days $10
intelx
leaklookup - 20 credits $10, 50 credits $20, 140 credits $50, 300 credits $100
netlas - 50 free requests/day, 1k requests $49, 10k requests $249
onyphe - 10M results/month $587
pentesttools - 5 assets netsec $95/month, 5 assets webnetsec $140/month
projecdiscovery - requires work email. Free monthly discovery and vulnerability scans on sign-up email domain, enterprise $
rocketreach - 100 email lookups/month $48, 250 email lookups/month $108
securityscorecard
securityTrails - 50 free queries/month, 20k queries/month $500
shodan - Freelancer $69 month, Small Business $359 month
tomba - 25 searches/month free, 1k searches/month $39, 5k searches/month $89
venacus - 1 search/day free, 10 searches/day $12, 30 searches/day $36
whoisxml - 2k queries $50, 5k queries $105
zoomeye - 5 results/day free, 30/results/day $190/yr

Comments, bugs, and requests

Christian Martorella @laramies cmartorella@edge-security.com
Matthew Brown @NotoriousRebel1
Jay “L1ghtn1ng” Townsend @jay_townsend1

Main contributors

Matthew Brown @NotoriousRebel1
Jay “L1ghtn1ng” Townsend @jay_townsend1
Lee Baird @discoverscripts

Thanks

John Matherly - Shodan project
Ahmed Aboul Ela - subdomain names dictionaries (big and small)

GhostTrack

Tue, 26 Aug 2025 15:28:56 +0800

HunxByts/GhostTrack

GhostTrack

Useful tool to track location or mobile number, so this tool can be called osint or also information gathering

New update : Version 2.2

Instalation on Linux (deb)

1
2

sudo apt-get install git
sudo apt-get install python3

Instalation on Termux

1
2

pkg install git
pkg install python3

Usage Tool

git clone https://github.com/HunxByts/GhostTrack.git
cd GhostTrack
pip3 install -r requirements.txt
python3 GhostTR.py

Display on the menu IP Tracker

on the IP Track menu, you can combo with the seeker tool to get the target IP

:zap: Install Seeker :

- Get Seeker

Display on the menu Phone Tracker

on this menu you can search for information from the target phone number

Display on the menu Username Tracker

on this menu you can search for information from the target username on social media

:zap: Author :

- HunxByts

maigret

Sun, 20 Jul 2025 15:28:36 +0800

soxoj/maigret

Maigret

The Commissioner Jules Maigret is a fictional French police detective, created by Georges Simenon. His investigation method is based on understanding the personality of different people and their interactions.

👉👉👉 Online Telegram bot

About

Maigret collects a dossier on a person by username only, checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys are required. Maigret is an easy-to-use and powerful fork of Sherlock.

Currently supports more than 3000 sites (full list), search is launched against 500 popular sites in descending order of popularity by default. Also supported checking Tor sites, I2P sites, and domains (via DNS resolving).

Powered By Maigret

These are professional tools for social media content analysis and OSINT investigations that use Maigret (banners are clickable).

Main features

Profile page parsing, extraction of personal info, links to other profiles, etc.
Recursive search by new usernames and other IDs found
Search by tags (site categories, countries)
Censorship and captcha detection
Requests retries

See the full description of Maigret features in the documentation.

Installation

‼️ Maigret is available online via official Telegram bot. Consider using it if you don’t want to install anything.

Windows

Standalone EXE-binaries for Windows are located in Releases section of GitHub repository.

Video guide on how to run it: https://youtu.be/qIgwTZOmMmM.

Installation in Cloud Shells

You can launch Maigret using cloud shells and Jupyter notebooks. Press one of the buttons below and follow the instructions to launch it in your browser.

Local installation

Maigret can be installed using pip, Docker, or simply can be launched from the cloned repo.

NOTE: Python 3.10 or higher and pip is required, Python 3.11 is recommended.

# install from pypi
pip3 install maigret

# usage
maigret username

Cloning a repository

# or clone and install manually
git clone https://github.com/soxoj/maigret && cd maigret

# build and install
pip3 install .

# usage
maigret username

Docker

# official image
docker pull soxoj/maigret

# usage
docker run -v /mydir:/app/reports soxoj/maigret:latest username --html

# manual build
docker build -t maigret .

Usage examples

# make HTML, PDF, and Xmind8 reports
maigret user --html
maigret user --pdf
maigret user --xmind #Output not compatible with xmind 2022+

# search on sites marked with tags photo & dating
maigret user --tags photo,dating

# search on sites marked with tag us
maigret user --tags us

# search for three usernames on all available sites
maigret user1 user2 user3 -a

Use maigret --help to get full options description. Also options are documented.

Web interface

You can run Maigret with a web interface, where you can view the graph with results and download reports of all formats on a single page.

Web Interface Screenshots

Instructions:

Run Maigret with the --web flag and specify the port number.

`1`	`maigret --web 5000`

Open http://127.0.0.1:5000 in your browser and enter one or more usernames to make a search.
Wait a bit for the search to complete and view the graph with results, the table with all accounts found, and download reports of all formats.

Contributing

Maigret has open-source code, so you may contribute your own sites by adding them to data.json file, or bring changes to it’s code!

For more information about development and contribution, please read the development documentation.

Demo with page parsing and recursive username search

Video (asciinema)

Reports

PDF report, HTML report

Full console output

Disclaimer

This tool is intended for educational and lawful purposes only. The developers do not endorse or encourage any illegal activities or misuse of this tool. Regulations regarding the collection and use of personal data vary by country and region, including but not limited to GDPR in the EU, CCPA in the USA, and similar laws worldwide.

It is your sole responsibility to ensure that your use of this tool complies with all applicable laws and regulations in your jurisdiction. Any illegal use of this tool is strictly prohibited, and you are fully accountable for your actions.

The authors and developers of this tool bear no responsibility for any misuse or unlawful activities conducted by its users.

Feedback

If you have any questions, suggestions, or feedback, please feel free to open an issue, create a GitHub discussion, or contact the author directly via Telegram.

SOWEL classification

This tool uses the following OSINT techniques:

OSINT on Producthunt daily

theHarvester

laramies/theHarvester

About

Install and dependencies

Development

Passive modules

Active modules

Modules that require an API key

Comments, bugs, and requests

Main contributors

Thanks

GhostTrack

HunxByts/GhostTrack

GhostTrack

Instalation on Linux (deb)

Instalation on Termux

Usage Tool

maigret

soxoj/maigret

Maigret

About

Powered By Maigret

Main features

Installation

Windows

Installation in Cloud Shells

Local installation

Cloning a repository

Docker

Usage examples

Web interface

Contributing

Demo with page parsing and recursive username search

Video (asciinema)

Reports

Disclaimer

Feedback

SOWEL classification

License