OSINTverse
Sign in

Free · Open source · Linux CLI

Every open-source OSINT tool. One command.

Install and run Sherlock, Maigret, Holehe, SpiderFoot, and dozens more by name. Each tool gets its own virtualenv, and every result is saved.

pipx install otinstaller
  • Free and Apache-2.0 licensed
  • Linux · Python 3.10–3.12
  • Never billed to a wallet
Get startedView on GitHub
Tools
40
Version
0.1.0
License
Apache-2.0
Last updated
Oct 16, 2026

Why otinstaller

Every tool installs and runs a little differently. Not anymore.

One interface to install, run, update, and remove open-source OSINT tools, with every result kept.

  • Install by name

    ot install sherlock creates an isolated virtualenv for the tool. Nothing touches your system Python.

    ot install sherlock

  • One input syntax for every tool

    u:, e:, d:, p: and friends are translated into each tool's own flags. Every original flag still works after --.

    ot run holehe -- e:jane@example.com

  • Run every matching tool

    --all runs each installed tool that accepts the input, in parallel. auto detects the input type for you.

    ot run --all --live u:janedoe

  • Keep every result

    Output lands in ./results/<tool>/<target>/ with a .meta.json sidecar: command, timing, exit code, SHA-256.

    ot extract janedoe

  • Update and remove cleanly

    One command for one tool or all of them. Interrupted installs and runs pick up again with resume.

    ot update --all

  • Built for scripts and AI agents

    Every command supports --json and never prompts with --yes. An llms.txt describes it for agents.

    ot list --installed --json

Typed inputs

Stop memorizing flags.

Tell otinstaller what the target is. It maps the input to each tool's own syntax, so one line runs Sherlock, Maigret, and every other username tool you have installed.

  • u:

    Username

  • e:

    Email

  • p:

    Phone

  • d:

    Domain

  • url:

    URL

  • q:

    Text query

  • geo:

    Coordinates

  • tg:

    Telegram

Example
$ ot run --all --live u:janedoe
  sherlock     done
  maigret      done
  socialscan   done
  blackbird    done
saved to results/<tool>/janedoe/ (+ .meta.json per run)

--all works with u:, e:, p:, d: and url:. Tools that need API keys are skipped unless you pass --include-credentialed.

Install

Installed in under a minute.

Pick your setup. ot doctor checks the machine and tells you exactly what to fix.

Full guide

1. Install otinstaller

pipx (recommended)

pipx install otinstaller
ot doctor
ot init

Puts otinstaller and ot on your PATH without managing a virtualenv.

2. Run your first tool

First run

ot install sherlock
ot run sherlock -- u:janedoe
# results/sherlock/janedoe/<timestamp>_sherlock_janedoe_<id>.txt

  • Linux

    Tested on Ubuntu 22.04 / 24.04, Debian 12, and Arch. Kali is checked by hand before each release.

  • Python 3.10–3.12, git, venv

    On Debian, Ubuntu, and Kali: sudo apt install python3-venv git. ot doctor flags anything missing.

Registry

40 tools, ready to install

Live from GitHub, refreshed about once an hour. Each tool has a docs page with its inputs, flags, keys, and example output.

All tool docs

40 / 40

  • Sherlock

    sherlock

    ★ 93kMIT

    Hunt down social media accounts by username across social networks.

    Install guideDocsSource

  • Maigret

    maigret

    ★ 38kMIT

    Collect a dossier on a person by username from 6K websites.

    Install guideDocsSource

  • Spiderfoot

    spiderfoot

    ★ 22kMIT

    SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

    Install guideDocsSource

  • Ghunt

    ghunt

    ★ 20kOther

    Offensive Google framework.

    Install guideDocsSource

  • Holehe

    holehe

    ★ 15kGPL-3.0

    holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

    Install guideDocsSource

  • Instaloader

    instaloader

    ★ 13kMIT

    Download pictures (or videos) along with their captions and other metadata from Instagram.

    Install guideDocsSource

  • Bbot

    bbot

    ★ 11kAGPL-3.0

    The recursive internet scanner for hackers.

    Install guideDocsSource

  • Dnstwist

    dnstwist

    ★ 5.7kApache-2.0

    Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation.

    Install guideDocsSource

  • Nettacker

    opendoor

    ★ 5.6kApache-2.0

    Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management.

    Install guideDocsSource

  • H8Mail

    h8mail

    ★ 5.3kOther

    Email OSINT & Password breach hunting tool, locally or using premium services.

    Install guideDocsSource

  • User Scanner

    user-scanner

    ★ 5kMIT

    (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username.

    Install guideDocsSource

  • Torbot

    torbot

    ★ 4.9kOther

    Dark Web OSINT Tool.

    Install guideDocsSource

  • Toutatis

    toutatis

    ★ 4.3kGPL-3.0

    Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more.

    Install guideDocsSource

  • Ivre

    ivre

    ★ 4.2kGPL-3.0

    Network recon framework.

    Install guideDocsSource

  • Aliens Eye

    aliens-eye

    ★ 4.1kMIT

    Hunt down 840+ social media accounts using AI.

    Install guideDocsSource

  • Paramspider

    paramspider

    ★ 3.2kMIT

    Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing.

    Install guideDocsSource

  • Finalrecon

    finalrecon

    ★ 3kMIT

    All In One Web Recon.

    Install guideDocsSource

  • Nexfil

    nexfil

    ★ 2.6kMIT

    OSINT tool for finding profiles by username.

    Install guideDocsSource

  • Yark

    yark

    ★ 2.2kMIT

    OSINT for YouTube made simple.

    Install guideDocsSource

  • Cloud Enum

    cloud-enum

    ★ 2.1kMIT

    Multi-cloud OSINT tool.

    Install guideDocsSource

  • Ctfr

    ctfr

    ★ 2.1kGPL-3.0

    Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

    Install guideDocsSource

  • Ignorant

    ignorant

    ★ 2.1kGPL-3.0

    ignorant allows you to check if a phone number is used on different sites like snapchat, instagram.

    Install guideDocsSource

  • Socialscan

    socialscan

    ★ 1.8kMPL-2.0

    Python library for accurately querying username and email usage on online platforms.

    Install guideDocsSource

  • Fsociety

    fsociety

    ★ 1.8kMIT

    A Modular Penetration Testing Framework.

    Install guideDocsSource

  • Blackwidow

    blackwidow

    ★ 1.8kOther

    A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

    Install guideDocsSource

  • Fierce

    fierce

    ★ 1.8kGPL-3.0

    A DNS reconnaissance tool for locating non-contiguous IP space.

    Install guideDocsSource

  • Onionsearch

    onionsearch

    ★ 1.8kGPL-3.0

    OnionSearch is a script that scrapes urls on different.

    Install guideDocsSource

  • Openosint

    openosint

    ★ 1.6kMIT

    AI-powered OSINT agent with interactive REPL, MCP server, and CLI.

    Install guideDocsSource

  • Crosslinked

    crosslinked

    ★ 1.6kGPL-3.0

    LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping.

    Install guideDocsSource

  • Whatsapp Osint

    whatsapp-osint

    ★ 1.5kMIT

    WhatsApp spy - logs online/offline events from ANYONE in the world.

    Install guideDocsSource

  • Instagram Monitor

    instagram-monitor

    ★ 1.5kGPL-3.0

    Track Instagram users' activities, profile changes and capture content with beautiful dashboards and instant notifications.

    Install guideDocsSource

  • Mailaccess

    mailaccess

    ★ 1.4kunknown

    Free email OSINT tool, 2500+ platforms, identity clustering, breach detection.

    Install guideDocsSource

  • Secator

    secator

    ★ 1.3kOther

    secator - the pentester's swiss knife.

    Install guideDocsSource

  • Pywerview

    pywerview

    ★ 1.1kGPL-3.0

    A (partial) Python rewriting of PowerSploit's PowerView.

    Install guideDocsSource

  • Socid Extractor

    socid-extractor

    ★ 1.1kMIT

    The extraction engine behind Maigret: turn any profile URL into a structured OSINT record across 150+ sites.

    Install guideDocsSource

  • Dnsgen

    dnsgen

    ★ 1.1kMIT

    DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers.

    Install guideDocsSource

  • Airecon

    airecon

    ★ 1.1kMIT

    AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI.

    Install guideDocsSource

  • Sitedorks

    sitedorks

    ★ 1.1kGPL-3.0

    Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

    Install guideDocsSource

  • Linkook

    linkook

    ★ 1kMIT

    An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.

    Install guideDocsSource

  • Osint Brazuca Regex

    osint-brazuca-regex

    ★ 1kMIT

    Repositrio criado com intuito de reunir expresses regulares dentro do contexto Brasil.

    Install guideDocsSource

Command reference

Everything else, one verb each.

ot is a short alias for otinstaller. Add --json to any command for scripts, and --yes to skip prompts.

Find

  • ot list

    Browse the registry (--installed for yours)

  • ot search <query>

    Search tools

  • ot info <tool>

    Inputs, flags, and keys

  • ot example <tool>

    Show example output

Run

  • ot run <tool> -- <args>

    Run one or more tools

  • ot run --all u:<name>

    Every matching tool

  • ot auto <target>

    Detect the type and run

  • ot playbook --list

    Saved multi-tool runs

Results

  • ot run --case <name>

    Group runs under a case

  • ot extract <target>

    Pull indicators from results

  • ot diff <tool> <target>

    Compare the last two runs

Maintain

  • ot update --all

    Update tools

  • ot remove <tool>

    Remove cleanly

  • ot keys check

    Check API keys

  • ot resume

    Handle interrupted jobs

  • ot doctor

    Check the machine

Responsible use

otinstaller installs and runs third-party tools; it does not create or verify them. Many are dual-use. Use them only on targets you are authorized to investigate, and follow the laws and service terms that apply to you. The first ot init asks you to accept this notice, and nothing installs until you do.

When open-source isn't enough

Breach records, people search, WHOIS history, and face matching come from commercial providers. SearchIn runs them from one search box, priced per lookup with no subscription.

See SearchIn

FAQ

otinstaller, answered

Is otinstaller free?

Yes. otinstaller is free and open source under the Apache-2.0 license. It is never billed to an OSINTverse wallet and does not need an OSINTverse account.

Which systems does it run on?

Linux. It is tested on Ubuntu 22.04 and 24.04, Debian 12, and Arch, and Kali is checked by hand before each release. It needs Python 3.10–3.12; on Python 3.13+ systems such as Ubuntu 26.04, install Python 3.12 with uv and run otinstaller inside that virtualenv.

Does it work on Windows or macOS?

Not natively. On Windows, install Ubuntu through WSL2 and run otinstaller inside it; everything works the same, and results land in the WSL filesystem. On macOS, run it in a Linux VM or container. Native macOS support is not planned until the managed tools behave the same there.

Does it change my system Python?

No. Every tool installs into its own virtualenv under ~/.otinstaller/, so tools never conflict with each other or with your system packages. Removing a tool removes its environment.

Where are results saved?

Under ./results/<tool>/<target>/ in the folder you run from, with a timestamped output file and a .meta.json sidecar holding the command, timing, exit code, and SHA-256. Set OTINSTALLER_RESULTS_DIR to keep them in one place. Results can contain personal data, so store and share them accordingly.

Do some tools need API keys?

A few do. All keys live in one file, ~/.otinstaller/.env with permissions 600, and each tool only receives the keys it declares. Run ot keys check to verify them. --all skips credentialed tools unless you pass --include-credentialed.

How is it different from SearchIn?

otinstaller runs free open-source tools on your own machine. SearchIn runs commercial OSINT data providers — breach, people, domain, and image sources — in the browser, priced per lookup. Many investigators use both.

Install your first tool in a minute.

pipx install otinstaller, then ot init. The getting started guide walks through typed inputs, API keys, and resume. Source and llms.txt are on GitHub.

Get startedView on GitHub

Quick install

pipx install otinstaller

Apache-2.0 licensed · contributions welcome