OSINT-Framework
效率与办公工具安全与隐私工具自动化与工作流
footprintingintelligence-gatheringosintosint-frameworkosint-resourcesreconnaissance
12,435
Stars
2,088
Forks
548
Watchers
173
Open Issues
MIT
许可证
JavaScript
语言
2015-12-19
创建时间
2026-10-31
最近更新
项目能做什么
开源情报(OSINT)资源聚合与导航框架。
来源:AI 基于仓库事实生成
· 内容以仓库实际 README 为准
使用说明 查看原始 README 原仓库文档
中文使用说明暂未生成。下面保留原仓库 README 摘录,命令与配置均以原文为准。
原始 README 摘录(英文原文,节选前 3000 字符)
# OSINT Framework
http://osintframework.com
## Notes
OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get at least a portion of the available information for no cost.
I originally created this framework with an information security point of view. Since then, the response from other fields and disciplines has been incredible. I would love to be able to include any other OSINT resources, especially from fields outside of infosec. Please let me know about anything that might be missing!
Please visit the framework at the link below and good hunting!
https://osintframework.com
### Legend
#### Name Markers
(T) - Indicates a link to a tool that must be installed and run locally
(D) - Google Dork, for more information: <a href="https://en.wikipedia.org/wiki/Google_hacking">Google Hacking</a>
(R) - Requires registration
(M) - Indicates a URL that contains the search term and the URL itself must be edited manually
#### Tool Metadata Fields
Each tool entry in `arf.json` can include structured metadata beyond the name and URL:
| Field | Type | Description |
|-------|------|-------------|
| `description` | string | What the tool does |
| `status` | string | `live`, `degraded`, `down`, or `deprecated` |
| `pricing` | string | `free`, `freemium`, or `paid` |
| `bestFor` | string | Primary use case in one line |
| `input` | string | What the tool takes as input |
| `output` | string | What the tool returns |
| `opsec` | string | `passive` or `active` |
| `opsecNote` | string | Operational security considerations |
| `localInstall` | boolean | Corresponds to `(T)` marker |
| `googleDork` | boolean | Corresponds to `(D)` marker |
| `registration` | boolean | Corresponds to `(R)` marker |
| `editUrl` | boolean | Corresponds to `(M)` marker |
| `api` | boolean | Whether the tool offers an API |
| `invitationOnly` | boolean | Whether access requires an invitation |
| `deprecated` | boolean | Whether the tool is deprecated |
### For Update Notifications
Follow me on Twitter: @jnordine - https://twitter.com/jnordine
Watch or star the project on Github: https://github.com/lockfale/osint-framework
### Suggestions, Comments, Feedback
Feedback or new tool suggestions are extremely welcome! Please feel free to submit a pull request or open an issue on github or reach out on Twitter.
### Contribute with a GitHub Pull Request
For new resources, please ensure that the site is available for public and free use.
1. Update `arf.json` with your new tool entry in the appropriate category folder. Use the enriched format below:
```json
{
"name": "Example Name (T)",
"type": "url",
"url": "https://example.com",
"description": "Brief description of what the tool does and its key capabilities.",
"status": "live",
"pricing": "free",
"bestFor": "Primary use case in
阅读完整原文
商业机会分析 AI 生成
可视化 OSINT 调查工作台 (SaaS)
| 产品构想 | 将静态目录升级为可交互的节点式调查工作流平台,用户可拖拽节点连接输入项(如邮箱、域名、社媒ID),一键触发后台聚合API或自动化脚本并生成调查关系图谱。 |
| 核心功能 | 思维导图节点可执行化、内置合规开源API代调用、调查链路图谱导出、协作共享画布 |
| 目标用户 | 渗透测试人员、民间调查员、安全事件响应团队 |
| 难度/周期 | 中等 · 2-3 个月 · 成本:轻量云服务器、多方开源/商业OSINT API额度成本 |
| 收费模式 | 免费版限制每日查询次数与导出格式;专业版按月订阅收费;企业版按席位与私有化配置收费 |
| 竞争风险 | 外部被调用服务API封禁或反爬机制限制;数据隐私与爬虫法律合规风险(AI推测) |
| 依据 | 数据支持的判断 |
OSINT 工具监控雷达与情报周刊 (OSINT Radar)
| 产品构想 | 建立自动化爬虫监控 OSINT-Framework 及全网数千个开源情报工具的活跃度、死链状态、替代品推荐,并提供结构化 API 与行业周报。 |
| 核心功能 | 全网OSINT工具存活健康度仪表盘、新开源情报工具动态监控、按调查分类提供精选工具集API |
| 目标用户 | 安全研究员、红队专家、情报分析团队负责人 |
| 难度/周期 | 低 · 3-4 周 · 成本:定时任务执行节点、邮件发送服务 |
| 收费模式 | 付费订阅 Newsletter/高级社群、企业级动态情报源数据接口订阅费 |
| 竞争风险 | 订阅内容变现天花板较低,需极高粘性和独家优质情报(AI推测) |
| 依据 | 已验证事实 |
轻量级数字足迹暴露面排查工具 (Digital Footprint Recon)
| 产品构想 | 抽取框架中核心且合规的调查逻辑(邮箱泄露、域名解析、社交账号撞库、公网资产暴露),打包为面向中小团队的开箱即用自动化足迹体检工具。 |
| 核心功能 | 一键资产暴露面扫描、暗网凭证泄露预警、自动化生成PDF脱敏报告与修复建议 |
| 目标用户 | 初创企业安全负责人、高净值个人、企业风控团队 |
| 难度/周期 | 中等 · 1.5-2 个月 · 成本:扫描节点服务器、公开漏洞与泄露数据库索引 |
| 收费模式 | 按次生成深度报告计费、包月资产持续监测订阅 |
| 竞争风险 | 可能被恶意攻击者用于未授权侦察,需引入严格的身份实名与资产归属验证机制(AI推测) |
| 依据 | 尚需验证的假设 |
AI 基于仓库公开数据分析生成,含推测成分,不构成收益承诺。
报告会保存到 个人中心
竞品与相似项目 GitHub Search 真实检索
| 项目 | 中文简介 | Stars | 语言 |
|---|---|---|---|
| smicallef/spiderfoot | 中文介绍暂未生成 SpiderFoot automates OSINT for threat intelligence and mappi |
24,478 | Python |
| angular-ui/bootstrap | 中文介绍暂未生成 PLEASE READ THE PROJECT STATUS BELOW. Native AngularJS (Ang |
14,123 | JavaScript |
| cloud-hypervisor/cloud-hypervisor | 中文介绍暂未生成 A Virtual Machine Monitor for modern Cloud workloads. Featur |
6,504 | Rust |
| svaarala/duktape | 中文介绍暂未生成 Duktape - embeddable Javascript engine with a focus on porta |
6,215 | JavaScript |
| kaifcodec/user-scanner | 中文介绍暂未生成 🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native |
5,599 | Python |
| sensepost/gowitness | 中文介绍暂未生成 🔍 gowitness - a golang, web screenshot utility using Chrome |
4,560 | Go |
以上为通过 GitHub 官方 Search API 检索的相似项目,功能差异与优劣势需进一步人工确认,配置 AI 后可生成对比分析。
项目优势与风险
| 技术成熟度 | 创建于 2015-12-19,近 30 天仍在推送 |
| 社区活跃 | Star 12,435 / Fork 2,088 / Issue 173(数据支持,可自行核实) |
| 许可证 | MIT |
| 主要风险 | 上游项目方向可能变化;同赛道竞争者较多(见竞品表);热度与需求不完全等价 |
安装与使用
快速开始(以仓库 README 为准)
git clone https://github.com/lockfale/OSINT-Framework.git cd OSINT-Framework # 请阅读仓库 README 获取确切安装步骤(依赖、配置、启动命令)
术语说明:Docker=应用容器(把程序和依赖打包运行);API Key=调用外部服务的密钥;Git Clone=把仓库代码下载到本地。常见错误:API Key 未配置 / 端口占用 / 数据库连接失败,多数项目在 README 的 Troubleshooting 章节有说明。