theHarvester
Gather emails, names and subdomains from public sources
Python OSINT tool that collects emails, names, subdomains, IPs and URLs about a domain from search engines and public data sources.
- Stars
- 18k
- Forks
- 2.7k
- Last commit
- 1 day ago
OSINT automation for footprinting
OSINT automation tool with a web UI and more than 200 modules that gather data on IPs, domains, emails, names and more from public sources.

SpiderFoot takes a target (domain, IP address, email address, name and more) and runs modules that query public data sources and feed each other's results. It is used to map an organisation's attack surface and for threat intelligence investigations.
It ships with a web interface and a command-line mode and can export results as CSV, JSON or GEXF graphs. Check repository activity before relying on specific modules, as some data sources change often.
MIT · MIT License · Open source
Checked by ThreatWire against the repository's licence file on 2026-10-20. GitHub detects: MIT.
No published advisory found for SpiderFoot in GitHub repository advisories. That does not mean the tool has no vulnerabilities.
Sources: GitHub repository advisories · checked 2026-10-20.
Gather emails, names and subdomains from public sources
Python OSINT tool that collects emails, names, subdomains, IPs and URLs about a domain from search engines and public data sources.
Attack surface mapping and asset discovery
OWASP project for in-depth attack surface mapping: discovers domains, subdomains, IP ranges and related assets using DNS and many public data sources.
Fast passive subdomain enumeration
ProjectDiscovery's subdomain discovery tool that queries passive online sources, built for speed and easy chaining with other tools.
Asynchronous TCP port scanner for large ranges
Internet-scale port scanner that sends SYN packets asynchronously with its own TCP/IP stack, designed to scan very large address ranges quickly.
Fast web fuzzer for content and parameter discovery
Fast web fuzzer written in Go, used to discover hidden files, directories, virtual hosts and parameters by replacing a FUZZ keyword with wordlist entries.
Cyber threat intelligence knowledge platform
Platform by Filigran to structure, store and visualise threat intelligence as a STIX 2.1 knowledge graph, with many connectors.