If you are reading this i'm pretty sure you already know what OSINT is so i'll get straight to the point.
In this guide i'll present some of the best tools and i'll explain why they're the best for each specific scenario.
I'll also list the prices for each and every single tool and i'll give you my personal review of it as of 2025.
This guide/list will be updated every single month, you can get all the latest updates on it on my channel https://t.me/xrosint
--------------------------------------------------------------------------------------------------------------------------------
EMAIL OSINT Tools :
https://intelx.io/tools - wide variety of tools including some good ones for Email, very easy to use
https://github.com/mishakorzik/MailFinder - simple script for finding emails using first and last name
https://usersearch.org/index.php - great for emails, usernames and first and last names
www.martinvigo.com
https://epieos.com/ - great tool that searches breached databases, which with tools below u can utilize further
https://github.com/p1ngul1n0/blackbird - great script that's a crossover of email/username checking
Useful Google Dorks for Email OSINT :
filetype:txt @gmail.com OR @yahoo.com OR @hotmail.com OR @aol.com
filetype:xls inurl:"email.xls"
--------------------------------------------------------------------------------------------------------------------------------
Phone Num OSINT Tools :
https://epieos.com/ - as i pointed out earlier, this is a great tool that searches emails and phone numbers in databases
https://github.com/cipher387/API-s-for-OSINT - excellent collection of API's that you can use to automate phone number OSINT etc
https://anywho.com/ - Search for people in USA. Enter first and last name to get age, address, and part of phone number (free).
Google Dorks for phone number OSINT is pretty simple, the best method would be to just do - "+152353252362" (including brackets)
--------------------------------------------------------------------------------------------------------------------------------
Username checkers :
https://github.com/snooppr/snoop - a russian tool that does a surprisingly good job at username checking, one of the best ones
https://github.com/soxoj/maigret/releases - a classic fork of sherlock project that does a decent job
https://github.com/p1ngul1n0/blackbird - as i said earlier this is a great crossover tool for both email's and usernames
https://github.com/sherlock-project/sherlock - a classic tool everyone should know by now
I'd highly recommend using breached data checkers for a more unique usernames with tools i'm gonna list below
Google Dorks for usernames is basically the same as for phone numbers, you can also add filetype:pdf or use https://searx.space/
--------------------------------------------------------------------------------------------------------------------------------
Telegram Bots:
https://t.me/FunstatusfanBot - excellent telegram OSINT bot that's paid but also includes a free option, it can check:
- groups user is in - past usernames - public messages - account creation date - sticker packs
https://t.me/DataScanner_bot - currently the single best breached data checker that includes a lot of options and is really cheap
Some MISC but usefull telegram bots :
t.me
t.me
--------------------------------------------------------------------------------------------------------------------------------
Breached Data checkers :
https://t.me/DataScanner_bot - i would recommend this one above all as it has the most databases and is the cheapest
https://intelx.io/ - i'd recommend this one if you need to specifically export logs
dehashed.com
--------------------------------------------------------------------------------------------------------------------------------
Closing notes :
I'd like to thank everyone who's reading my guides and finds any of this helpful, i try my best.
In this guide i'll present some of the best tools and i'll explain why they're the best for each specific scenario.
I'll also list the prices for each and every single tool and i'll give you my personal review of it as of 2025.
This guide/list will be updated every single month, you can get all the latest updates on it on my channel https://t.me/xrosint
--------------------------------------------------------------------------------------------------------------------------------
EMAIL OSINT Tools :
https://intelx.io/tools - wide variety of tools including some good ones for Email, very easy to use
https://github.com/mishakorzik/MailFinder - simple script for finding emails using first and last name
https://usersearch.org/index.php - great for emails, usernames and first and last names
From email to phone number, a new OSINT approach - Martin Vigo
How to find out someone's phone number if you just know their email address and how it can be automated using a new OSINT tool: email2phonenumber
www.martinvigo.com
https://github.com/p1ngul1n0/blackbird - great script that's a crossover of email/username checking
Useful Google Dorks for Email OSINT :
filetype:txt @gmail.com OR @yahoo.com OR @hotmail.com OR @aol.com
filetype:xls inurl:"email.xls"
--------------------------------------------------------------------------------------------------------------------------------
Phone Num OSINT Tools :
https://epieos.com/ - as i pointed out earlier, this is a great tool that searches emails and phone numbers in databases
https://github.com/cipher387/API-s-for-OSINT - excellent collection of API's that you can use to automate phone number OSINT etc
https://anywho.com/ - Search for people in USA. Enter first and last name to get age, address, and part of phone number (free).
Google Dorks for phone number OSINT is pretty simple, the best method would be to just do - "+152353252362" (including brackets)
--------------------------------------------------------------------------------------------------------------------------------
Username checkers :
https://github.com/snooppr/snoop - a russian tool that does a surprisingly good job at username checking, one of the best ones
https://github.com/soxoj/maigret/releases - a classic fork of sherlock project that does a decent job
https://github.com/p1ngul1n0/blackbird - as i said earlier this is a great crossover tool for both email's and usernames
https://github.com/sherlock-project/sherlock - a classic tool everyone should know by now
I'd highly recommend using breached data checkers for a more unique usernames with tools i'm gonna list below
Google Dorks for usernames is basically the same as for phone numbers, you can also add filetype:pdf or use https://searx.space/
--------------------------------------------------------------------------------------------------------------------------------
Telegram Bots:
https://t.me/FunstatusfanBot - excellent telegram OSINT bot that's paid but also includes a free option, it can check:
- groups user is in - past usernames - public messages - account creation date - sticker packs
https://t.me/DataScanner_bot - currently the single best breached data checker that includes a lot of options and is really cheap
Some MISC but usefull telegram bots :
userinfobot
This bot displays user info when you forward a message to it. https://github.com/nadam/userinfobot
t.me
MotherSearch - поиск (search)
Первый поисковик в Telegram! The first Telegram search engine! @BotValley - разработка (dev) @lvadislav - реклама (ad)
t.me
Breached Data checkers :
https://t.me/DataScanner_bot - i would recommend this one above all as it has the most databases and is the cheapest
https://intelx.io/ - i'd recommend this one if you need to specifically export logs
DeHashed — #FreeThePassword
Have you been compromised? DeHashed provides free deep-web scans and protection against credential leaks. A modern personal asset search engine created for security analysts, journalists, security companies, and everyday people to help secure accounts and provide insight on compromised...
Closing notes :
I'd like to thank everyone who's reading my guides and finds any of this helpful, i try my best.
