OSINTverse

otlite · Social media

Install Toutatis on Linux or macOS in one command

Toutatis pulls the public and semi-public fields of an Instagram account: user ID, bio, follower counts, and the obfuscated email or phone Instagram shows on password reset. It needs your own session ID.

Toutatis in three lines

pipx install otlite
otlite install toutatis
otlite run toutatis -- u:jane_doe

Runs megadose/toutatis (GPL-3.0, ★ 4.3k, otlite 1.2.1, catalog updated Oct 23, 2026). otlite installs and runs it at a tested version; it does not change or verify the tool itself.

What Toutatis is for

  • The numeric Instagram ID for a handle.
  • The masked recovery email or phone hint for a profile.

Typed inputs for Toutatis

otlite translates these prefixes into Toutatis's own flags. Anything else after -- is passed through unchanged, so every original flag still works.

u:
Username · otlite run toutatis -- u:jane_doe

Run every installed tool that takes the same input at once: otlite run --all u:jane_doe

otlite marks it dual-use, so it asks you to accept a responsible-use notice before it installs.

Where the results go

Every run lands under ./results/toutatis/<target>/ as a timestamped output file, a .meta.json sidecar (the exact command, start and end time, exit code, and the SHA-256 of the output), and a .envelope.json with the entities found, in the same shape for every tool. List runs with otlite results, group them with --case, compare the last two with otlite diff toutatis <target>, and pull indicators out with otlite extract toutatis.

Before you run it

  • Requires a sessionid cookie from a logged-in Instagram account, passed with the original -s flag. Use a dedicated account.

Update, remove, inspect

otlite info toutatis      # inputs, keys, an example command
otlite example toutatis   # sample output, where there is one
otlite update toutatis    # move to the next tested version
otlite remove toutatis    # delete its virtualenv

Full reference: the otlite docs, and the tool's own README on GitHub.

Pairs with

Instaloader downloads the public posts, stories, captions, and metadata of an Instagram profile into a folder.
Ignorant checks whether a phone number is registered on a handful of apps such as Snapchat and Instagram, using the same sign-up checks Holehe uses for email.
Instagram Monitor watches a public profile and records changes over time: new posts, follower count moves, bio edits, with optional notifications.

FAQ

Toutatis with otlite, answered

How do I install Toutatis on Kali, Ubuntu, or macOS?

Install otlite once with pipx install otlite (or the one-line installer on the otlite page), run otlite init, then otlite install toutatis. The tool lands in its own virtualenv under ~/.otlite/, pinned to a version that was tested, so nothing touches your system Python. otlite doctor prints the command that fixes a missing git or venv module.

Which inputs does Toutatis take through otlite?

u: (username). otlite maps each prefix to Toutatis's own flag. Everything after -- that is not a typed input is passed through unchanged, so the original flags still work.

Where does otlite save Toutatis results?

Under ./results/toutatis/<target>/ in the folder you run from, as a timestamped output file plus a .meta.json sidecar (the exact command, timing, exit code, and SHA-256) and a .envelope.json with the entities found. Add --case <name> to group runs, otlite results to list them, and otlite diff toutatis <target> to compare the last two.

Does Toutatis need an API key or a login?

Yes. Requires a sessionid cookie from a logged-in Instagram account, passed with the original -s flag. Use a dedicated account. Keys go in with otlite keys set NAME, which stores them in ~/.otlite/.env with permissions 600, and otlite keys check verifies them.

Can I run Toutatis together with other tools?

Yes. otlite run --all u:jane_doe runs every installed tool that takes username input, in parallel, including Toutatis. Save the combination as a playbook to repeat it.