The “Find Anyone & Anything” Toolkit — 50+ Free Resources That’ll Make You Feel Like a Spy
One-Line Flow: You don’t need to be a hacker to find shit online — you just need to know where to look.
What The Hell Is This?
Ever wondered how journalists expose corrupt politicians? How people track down scammers? How investigators find someone’s entire digital footprint from just a username?
This is that.
OSINT = Open Source Intelligence. Fancy words for: “finding information that’s already public, but nobody knows how to find it.”
These aren’t illegal hacking tools. These are free resources that let you:
- Find if someone’s email got leaked in a data breach
- Track ships and planes in real-time (yes, really)
- Reverse search a photo to find where it came from
- Find every social media account connected to a username
- Investigate crypto wallets and trace transactions
- And about 500 other things that’ll make you feel like you have superpowers
No coding required. No skills needed. Just curiosity.
The Holy Grail Collections (Start Here)
These are the “I want everything in one place” repos. Bookmark these first.
| What It Is | Why You Need It |
|---|---|
| Awesome-OSINT-For-Everything | The one that started this thread. Covers literally everything. |
| jivoi/awesome-osint | 18k+ stars. The original. The legend. |
| cipher387’s Tool Collection | 1000+ tools. Updated constantly. Has a pretty website version too. |
| Awesome Hacker Search Engines | Every search engine hackers use. Shodan, Censys, and 100+ more. |
🕵️ Find People By Username, Email, or Phone
Username Hunting
Want to find every account someone has? These tools check hundreds (or thousands) of sites at once:
| Tool | Sites Checked | Notes |
|---|---|---|
| Snoop | 4000+ | The absolute beast. Russian project but works globally. |
| Sherlock | 400+ | The famous one. Easier to use. |
| WhatsMyName | 500+ | No install needed — just a website. |
Email Investigation
| Tool | What It Does |
|---|---|
| Holehe | Checks if an email is registered on sites by abusing password reset pages. Sneaky as fuck. |
| Epieos | Reverse email lookup. Find Google account info, linked accounts. |
| Have I Been Pwned | Check if your email was in any data breach. Spoiler: it probably was. |
Phone Number Lookup
| Tool | What It Does |
|---|---|
| PhoneInfoga | Scans phone numbers for info — carrier, location, linked accounts. |
| Ignorant | Checks if a phone is registered on Snapchat and other apps. |
📱 Social Media Stalking (Legally)
The Big Collections
| Repo | Focus |
|---|---|
| Social Media OSINT Collection | Instagram, Reddit, Facebook, TikTok scrapers. Everything. |
| Skirnir | Finds social profiles by generating name variations. |
Platform-Specific Gold
Instagram:
- Osintgram — Interactive shell for IG analysis
- Instaloader — Download anything from profiles
Reddit:
- Reddit User Analyser — Full breakdown of any Reddit account
- Reveddit — See deleted Reddit comments
Telegram:
- TGStat — Search posts across Telegram
- TelegramDB — Search channels, groups, users
Discord:
- Discord ID Lookup — Get info from Discord user IDs
🖼️ Reverse Image Search & Photo Forensics
Found a photo and want to know where it came from? Who’s in it? Where it was taken?
Reverse Search Tools
| Tool | Specialty |
|---|---|
| FaceCheck.ID | Face recognition search. Find someone’s social media from their photo. |
| TinEye | Classic reverse image search. Finds where images appear online. |
| Yandex Images | Often finds stuff Google misses. Especially for faces. |
| PimEyes | Powerful face search. Paid but scary accurate. |
| GeoSpy | AI tries to guess where a photo was taken. |
Metadata & Forensics
| Tool | What It Does |
|---|---|
| FotoForensics | Detect if images were edited. Error level analysis. |
| Jeffrey’s Exif Viewer | Extract hidden data from photos — GPS, camera info, timestamps. |
| Photo Forensics | Clone detection, noise analysis, metadata extraction. |
✈️ Track Planes, Ships & Vehicles
Yes, you can track planes and ships in real-time. For free. This is the future.
Flight Tracking
| Tool | Notes |
|---|---|
| ADS-B Exchange | The unfiltered one. Shows military aircraft too. |
| Flightradar24 | The pretty one. Most popular. |
| FlightAware | Good historical data. |
| Dictator Alert | Tracks planes of authoritarian regimes. Not joking. |
Ship Tracking
| Tool | Notes |
|---|---|
| MarineTraffic | Real-time ship positions worldwide. |
| VesselFinder | Another solid ship tracker. |
| Global Fishing Watch | Track fishing vessels. Expose illegal fishing. |
Vehicle Stuff
| Resource | What It Does |
|---|---|
| COSINT – OSINT on Cars | Guide for vehicle investigations. |
🪙 Crypto & Blockchain Investigation
Someone scammed you with crypto? Want to trace where the money went?
The Collections
| Repo | Focus |
|---|---|
| On-Chain Investigations Tools | THE bible for crypto hack investigations. |
| Blockchain OSINT | Bitcoin, Ethereum, TON investigation tools. |
Quick Tools
| Tool | What It Does |
|---|---|
| Blockchain.com Explorer | Search Bitcoin, Ethereum transactions. |
| Etherscan | Ethereum blockchain explorer. |
| Breadcrumbs | Visualize wallet connections. Free tier available. |
| Wallet Explorer | Bitcoin wallet clustering. |
🌐 Domain, IP & Website Investigation
Search Engines for Hackers
These aren’t Google. These search the actual internet infrastructure.
| Engine | What It Finds |
|---|---|
| Shodan | Internet-connected devices. Cameras, servers, everything exposed. |
| Censys | Similar to Shodan. Great for certificates. |
| GreyNoise | See what’s scanning the internet. |
| FOFA | Chinese equivalent. Sometimes finds different stuff. |
Domain Research
| Tool | What It Does |
|---|---|
| DNSDumpster | DNS recon. Find subdomains. |
| SecurityTrails | Historical DNS data. See what a domain used to be. |
| BuiltWith | See what technology a website uses. |
| Wayback Machine | See how websites looked in the past. |
💀 Data Breaches & Leaks
Check if credentials got leaked. For research purposes, obviously.
| Tool | What It Does |
|---|---|
| Have I Been Pwned | The OG breach checker. |
| DeHashed | Search breached databases. Paid but powerful. |
| LeakCheck | Another breach lookup service. |
| Intelligence X | Searches dark web, pastes, leaks. Paid tiers. |
| LeakRadar | 2B+ infostealer credentials. |
| HudsonRock Free Tools | Check if domains/emails hit by infostealers. |
🎓 Learn This Stuff (Free Courses & Cheatsheets)
Free Courses
| Course | What You Learn |
|---|---|
| Python for OSINT - 21 Days | Automate your investigations. |
| Linux for OSINT - 21 Days | Command line for investigators. |
Cheat Sheets
| Resource | What’s In It |
|---|---|
| cipher387’s Cheatsheets | Email OSINT, username, Telegram, image, video — all in quick reference sheets. |
| OSINT Cheat Sheet | 1000+ tools with wiki. Has web version. |
| Bellingcat’s Toolkit | What journalists use. Updated regularly. |
Portals
| Site | What It Is |
|---|---|
| OSINT Framework | Interactive tool tree. Click through categories. |
| OSINT.SH | All-in-one gathering tools. |
| Cybdetective OSINT Map | 614 OSINT services mapped by country. |
The 1% Underground Shit
These are the repos most people never find:
| What | Why It’s Special |
|---|---|
| snoop | 4000+ sites. Makes Sherlock look amateur. |
| EyeDex | 1.3 PETABYTES of open directories searchable. |
| joe-shenouda/osint-tools | Includes OnlyFans lookup, extremist tracking, resident databases. |
| BrewedIntel/osint-resources | Clean list. No dead links. Made by actual investigators. |
| InfoStealers.info | Indexes darknet infostealer logs. |
Final Thoughts
You don’t need to be a hacker.
You don’t need to code.
You just need to know where to look.
These tools are legal. The information is public. You’re just learning how to find it — same as journalists, investigators, and security researchers do every day.
Start with the mega collections. Pick one thing that interests you. Go down the rabbit hole.
Welcome to the 1% who actually know how the internet works.
Where curiosity meets creation — and every idea finds its hack. ![]()
!