OSINT Tools
OSINT Hub integrates six powerful intelligence gathering tools:Email Search
Verify email presence across 120+ platforms using Holehe integration
EXIF Metadata
Extract metadata from images, videos, and PDFs with GPS coordinate mapping
Hash Tool
Generate and verify cryptographic hashes for file integrity verification
IP Lookup
Geolocate IP addresses and retrieve network information
Username Search
Search usernames across 300+ websites and platforms using Sherlock
Phone Search
Look up international phone numbers across multiple platforms
Email Search
Endpoint:/email/Integration: Holehe The Email Search tool verifies whether an email address is registered on over 120 online platforms and services. This is useful for:
- Account Discovery: Find all platforms where a target email is registered
- Digital Footprint Analysis: Map online presence of email addresses
- Breach Correlation: Identify potential data breach exposure
- Email format validation with regex pattern matching
- 60-second timeout protection
- Session-based result storage
- Platform-by-platform result breakdown
EXIF Metadata Extractor
Endpoint:/exiftool/Integration: ExifTool Extract comprehensive metadata from images, videos, and PDF documents. The tool automatically processes GPS coordinates and provides direct map links. Supported File Types:
- Images: JPEG, PNG, GIF, TIFF
- Videos: MP4, MOV, AVI
- Documents: PDF
- GPS coordinate extraction (latitude/longitude from DMS format)
- Drone telemetry support (DJI Enterprise drones with LRF targets)
- Altitude data extraction
- OpenStreetMap integration for coordinate visualization
- Metadata cleanup for privacy protection
- 50MB maximum file size
- 30-second processing timeout
Hash Tool
Endpoint:/hash/Implementation: Python hashlib Generate and verify cryptographic hashes for both text strings and files. Essential for file integrity verification and forensic analysis. Supported Algorithms:
- MD5 (128-bit) - Legacy support only
- SHA-1 (160-bit) - Legacy support only
- SHA-224 (224-bit)
- SHA-256 (256-bit) - Recommended
- SHA-384 (384-bit)
- SHA-512 (512-bit) - Highest security
- Generate Mode: Create hashes from text input or uploaded files
- Verify Mode: Compare generated hash against expected value
- Chunk-based file processing for memory efficiency
- Hash normalization (case-insensitive, whitespace-trimmed)
- Security warnings for deprecated algorithms (MD5, SHA-1)
- Support for large file hashing
IP Lookup
Endpoint:/ip/Integration: ip.guide API Retrieve geolocation, network information, and autonomous system details for IPv4 and IPv6 addresses. Retrieved Information:
- Location Data: City, country, timezone, latitude/longitude
- Network Information: CIDR block, total hosts in subnet
- ASN Details: Autonomous System Number, organization, RIR, country
- IPv4 and IPv6 support
- Django IP address validation
- Configurable API backend (supports multiple providers)
- 15-second timeout protection
- Session-based result caching
- Threat intelligence and attack source identification
- Network reconnaissance
- Access control and geofencing
- Fraud detection
Username Search
Endpoint:/user/Integration: Sherlock Project Search for a username across 300+ websites, social networks, and online platforms simultaneously. Key Features:
- 300+ platform coverage
- Username validation (2-64 characters, alphanumeric +
.,_,-) - Result export to CSV format
- Dual storage (JSON + TXT) with timestamps
- Directory traversal prevention (sanitized filenames)
- Auto-cleanup every 3 searches
- 15-second per-site timeout, 300-second total timeout
- Platform name
- Profile URL (if found)
- Existence status
- Error information (if applicable)
Phone Search
Endpoint:/phone/Integration: Ignorant Look up phone number registration across multiple online platforms. Supports international phone numbers with country code validation. Input Format:
1 5551234567 (USA), 33 612345678 (France), 44 7700900123 (UK)
Key Features:
- Async processing with httpx (10 concurrent connections)
- Celery task support for background processing
- Country code validation and formatting
- 30-second per-platform timeout
- Dynamic platform module loading
Platform Features
Beyond the individual tools, OSINT Hub provides a robust platform with:Modular Architecture
Each OSINT tool is implemented as a separate Django app, making it easy to:- Add new tools without affecting existing ones
- Maintain and update tools independently
- Enable/disable specific tools as needed
Security Features
Content Security Policy
Strict CSP headers prevent XSS and injection attacks
HSTS Enforcement
HTTP Strict Transport Security for production deployments
CSRF Protection
Token-based CSRF protection on all forms
Input Sanitization
Comprehensive validation and sanitization of all user inputs
Async Task Processing
Celery integration allows long-running searches to execute in the background:- Phone Search: Runs asynchronously to avoid blocking
- Username Search: Handles 300+ site checks efficiently
- Configurable Timeouts: 30-minute task limit, 1-hour result expiration
Responsive Interface
Bootstrap 5 provides:- Mobile-responsive design
- Dark/light mode support
- Accessible components (ARIA labels, semantic HTML)
- Modern card-based layouts
Data Export
Results can be exported in multiple formats:- CSV Export: Username search results
- Session Storage: All search results persist across page loads
- File Downloads: Hash verification and metadata reports
Performance Characteristics
| Tool | Timeout | Concurrent Operations | Result Storage |
|---|---|---|---|
| Email Search | 60s | Sequential | Session |
| EXIF Metadata | 30s | Single file | Temporary + Session |
| Hash Tool | None | Chunk-based | Session |
| IP Lookup | 15s | Single request | Session |
| Username Search | 300s total, 15s/site | Parallel | Session + Disk (JSON/TXT) |
| Phone Search | 30s/platform | 10 concurrent | Session + Celery |
Next Steps
Get Started
Install OSINT Hub and run your first search
Tool Documentation
Detailed documentation for each OSINT tool
Deployment
Deploy OSINT Hub to production
Security Guide
Learn about security features and best practices