Soxoj insides

🕵️ Nobody is impressed by OSINT on the main social media platforms anymore. They're covered by plenty of tools.

At the same time, the smaller sites are getting harder to reach. Google keeps dropping them from search results, and LLM tools give you a summary off a few links instead of checking the thousands of related small sites.

Maigret 0.6.6 now covers thousands of niche forums, discussion boards and wikis — where the real investigation leads live: interests, background, the people around them.

The most interesting highlights:
⚡️ 5,900 sites in the database: nearly twice as many as in the last release
⚡️ Run stable release on Windows easily: double-click, no Python
⚡️ Bulk check improvements: search a long list of usernames in one run
⚡️ French translation of the README and docs ;)

Try it: 👉 soxoj.com/maigret-r066-tg

Username in, a full dossier out. Open source, MIT, runs locally, no API keys, no signup.

And what do you use to find accounts on niche platforms?

🎤 KazHackStan 2026 спикері - Дмитрий Данилов (Soxoj)

Дмитрий - цифрлық зерттеулер мен киберқауіпсіздік шешімдеріне маманданған CPO 🔐

Ол «Сіз қауіпсіздік шешімдерін сатып алдыңыз. Хакерлер сіздің қызметкерлеріңізді пайдаланды» тақырыбында сөз сөйлейді.

Дмитрий әлеуметтік инженерияға арналған деректерді қалай жинайтынын және тәуекелдерді, ақпараттың таралуын және identity spoofing-ті қалай бақылауға болатынын түсіндіреді 👀

📅 29–30 қыркүйек
📍 Астана, Тәуелсіздік сарайы
🔗 kazhackstan.com

🎤 Спикер KazHackStan 2026 - Дмитрий Данилов (Soxoj)

Дмитрий - CPO, специализирующийся на цифровых расследованиях и решениях в области кибербезопасности 🔐

Он выступит с докладом «Вы купили решения для безопасности. Хакеры использовали ваших сотрудников».

Дмитрий расскажет, как злоумышленники собирают данные для атак с использованием социальной инженерии и как снижать связанные с этим риски 👀

📅 29–30 сентября
📍 Астана, Дворец Независимости
🔗 kazhackstan.com

🎤 KazHackStan 2026 Speaker - Dmitrii Danilov (Soxoj)

Dmitrii is a CPO specializing in digital investigations and cybersecurity solutions 🔐

He will present “You Bought Security Solutions. Hackers Exploited Your Employees”.

Dmitrii will explain how attackers collect employee data for social engineering and how organizations can reduce these risks 👀

📅 September 29–30
📍 Astana, Palace of Independence
🔗 kazhackstan.com

Did you know a Telegram bot keeps its full chat history on Telegram's servers? 😳

With the bot token you can pull every message it exchanged with its users.

My telegram-bot-dumper does exactly that, and now renders the dump like Telegram Web: chat list, text, media, files, plus search across everything.

Where it's useful in legit security work:
- Pentest - pull everyone who ever talked to the bot and read what they sent
- Recon - grab the data moving through it: docs, infrastructure, services, credentials
- Malware analysis - a stealer built on a bot exposes every infected host and everything it stole.

👉 Try it: github.com/soxoj/telegram-bot-dumper

If you do pentest, OSINT or threat intel, this belongs in your kit!

❤️ Soxoj insides

Digital Asset Inventory by @pandora_intelligence

Local-first scanner for discovering accounts and digital assets from data you already have:
- bookmarks
- password-manager exports
- browser history
- local email archives
- saved Google/Apple connected-app pages.

https://github.com/Panda-Lewandowski/digital_asset_inventory

Bookmarked a cool command-line OSINT tool from GitHub but never found time to try it?

I built OSINT Tool Deploy Skill for Claude Code which turns a GitHub link into a working tool 💪 with deployment and verification that it actually works. Windows is supported!

Installation time decreases from hours to minutes 📉 with templates and a knowledge base of common issues and fixes.

Investigate crimes, not Python dependency errors 🥸

👉 Try it: https://github.com/soxoj/claude-osint-deploy

A friend of mine built Exploratores, a collection of online OSINT tools inspired by CyberChef and Michael Bazzell's books.

It brings a wide range of investigation tools in one interface:
• Clear web and darknet search engines
• People search
• Social media research
• IP address and domain analysis
• GEOINT tools
• Media analysis
• Cryptocurrency lookups
• Company name and IBAN searches

The best part: you only need a browser. You can also download it and run everything locally!

🔎 Try it online
💻 Download and run locally
🤖 Use it with Claude
📖 Read more about the project

Maigret 0.6.3 is out! 🕵️

115 site checks fixed, 15 new sites added, better Chinese-site support, improved Cloudflare bypass, and upgraded PDF templates.

Over the past few months, I’ve been receiving more and more fixes from the community. Maigret now gets over 100K installs per month, with more than 1M installs in total! 🚀

👉 Try it yourself: https://github.com/soxoj/maigret#in-one-minute

At probably the hottest leHACK ever, I presented my new cybersecurity tool for penetration testers: 𝐂𝐨𝐦𝐦𝐢𝐏𝐢𝐬𝐭𝐞 🔥

CommiPiste can 𝐢𝐝𝐞𝐧𝐭𝐢𝐟𝐲 𝐭𝐡𝐞 𝐞𝐱𝐚𝐜𝐭 𝐯𝐞𝐫𝐬𝐢𝐨𝐧 𝐨𝐟 𝐨𝐩𝐞𝐧-𝐬𝐨𝐮𝐫𝐜𝐞 𝐰𝐞𝐛 𝐬𝐨𝐟𝐭𝐰𝐚𝐫𝐞 using only publicly accessible static files and then 𝐟𝐢𝐧𝐝 𝐭𝐡𝐞 𝐂𝐕𝐄𝐬 associated with that version.

It can be especially useful when version information is hidden, removed from headers, or unavailable through conventional fingerprinting methods 🔎

It already supports 300 𝐝𝐢𝐟𝐟𝐞𝐫𝐞𝐧𝐭 𝐩𝐥𝐚𝐭𝐟𝐨𝐫𝐦𝐬. For some of them, CommiPiste uses a complete index of commits, while others are identified through smart heuristics 🛠️

👉 𝐆𝐢𝐯𝐞 𝐢𝐭 𝐚 𝐭𝐫𝐲: https://github.com/soxoj/CommiPiste

A huge thank you to the person behind the idea and just an awesome guy, paranoid android 😉

My train from Amsterdam to Paris was cancelled due to the heat 🥵, but I'm still coming to leHACK!

See you at OSINT Village — feel free to reach out! ✌️

OSINT mindset team came in 2nd place at Trace Labs Search Party! 🥈

This past weekend, the Trace Labs Global OSINT Search Party took place — an international CTF focused on finding missing persons. This time, 130+ teams from around the world competed for the top spots 🌍

Our team, consisting of @Soxoj, adk, @vali, and Pr1tchard, delivered an excellent result:
— 2nd place among 130+ teams 🥈
— 28 accepted submissions
— 1,050 points

We will continue participating in events like these and helping people 🧡

🌐Site | 💬 Forum | 🔍 Family |▶YT

Kronikier (web app version)

Get historical contacts (emails, phones) for a website from Internet Archive snapshots.

Web version of https://github.com/soxoj/kronikier

https://kronikier.soxoj.com/

Creator @soxoj_insides

#osint #python #webarchive

KRONIKIER

If you haven’t been able to find the contact details on a particular website today, that doesn’t mean they’ve never been there

The Internet Archive API and Kronikier may find contact details that have been removed very quickly

https://github.com/soxoj/kronikier

Creator @soxoj_insides

Do you remember my tool gitcolombo to extract emails from code repositories? I've updated it in my spare time:

🟢 hacker-style CLI
⚡ additional powerful checks
🌐 web version: gitcolombo.soxoj.com

P.S. If gitcolombo won't help you, try GitFive — the best tool to find Github user's email

Just a reminder: I maintain socid-extractor, an open-source Python tool that extracts account data from 130+ sites.

👉 Usernames, bios, avatars, follower counts, external links — plus the stable internal identifiers that survive renames and let you re-identify accounts across leaks and archives.

No API keys, no headless browser, normalized field names and ontology, MIT license. ✅

Powers Maigret 🥸 and a number of other OSINT tools.

Don't hesitate to give it a ⭐!

🔗 https://github.com/soxoj/socid-extractor

here we go again

OSINT tools should give you actionable leads, not just random URLs and raw data 🫡

My open source tool Maigret has always been able to search by username, but results analysis was up to the user 🤔

I've now added AI analytics and identity resolution to it, so you can get fast conclusions about a target across 3K sites 🚀

Over the last few weeks, I also rewrote Maigret and cleaned up the checks database: it has near-zero false positives now 🔥

Want to know why such a powerful tool is open? Apply via the link and add the comment: “show me Crimewall QuickLink mode” — and see how insanely far the commercial tools I'm building go beyond this 😉

Three standout open-source OSINT username search tools right now: Blackbird, Aliens_eye, and Naminter 🚀

I finally updated my list of username search tools 👇, retested a bunch of them, and these 3 really stood out.

Huge thanks to their creators (p1ngul1n0, 3xp0rtblog, arxhr007) for building genuinely useful tools and pushing username-based OSINT forward! 🔥

Full list on GitHub: https://github.com/soxoj/osint-namecheckers-list

🎭 ShareTrace: reveal the identity behind any share link

Works for 12 platforms: TikTok, Instagram, Discord, Google Drive, Notion, Telegram, Pinterest, Substack, Suno, ChatGPT, Claude, Perplexity.

Original repo was deleted — I rebuilt it with new platforms and fixes.

👉 https://github.com/soxoj/sharetrace

MCP + OSINT is a powerful combo 🔥

Instead of figuring out how to run CLI tools, just ask your LLM — and it runs Shodan queries, Maigret lookups, DNS fuzzing, and threat intel checks for you.

So, I've made a curated list of OSINT MCP servers. Take a look, try plugging something into your AI tool, or submit a new one!

👉 https://github.com/soxoj/awesome-osint-mcp-servers