Skip to content

Open-source OSINT toolkit for comprehensive digital footprint analysis. Search 436+ platforms, analyse emails/phones/domains, batch processing, and data visualisation. Built for security researchers and investigators.

Notifications You must be signed in to change notification settings

Kailen-Howard/orion-osint

Repository files navigation

Orion OSINT Tool

Orion Banner License Python

Orion is an open-source OSINT (Open Source Intelligence) toolkit designed for comprehensive digital footprint analysis. Built for security researchers, investigators, and OSINT enthusiasts.

image

✨ Key Features

Digital Identity Intelligence

  • Username Reconnaissance: Search across 436+ social networks and online platforms
  • Email Intelligence: Validate and analyse email addresses with 11 service checks, breach detection, and 539 disposable email providers
  • Phone Analysis: Extract carrier information, validate formats, with clear limitations guidance
  • Name & Address Lookup: Find information related to people and physical locations

Network Intelligence

  • Domain Analysis: Gather WHOIS data, DNS records, and technology stack information
  • SSL Certificate Inspection: Analyse SSL/TLS implementations and identify misconfigurations
  • Security Headers Audit: Check for missing security headers and best practices
  • Website Technology Detection: Identify web servers, frameworks, and analytics tools
  • IP Address Analysis: Geolocation, reputation checks, and network information

Batch Processing

  • Process Multiple Targets: Bulk operations from CSV/TXT files
  • Parallel Execution: 10-50x faster than manual processing
  • Automatic Reporting: CSV summaries and individual JSON reports
  • Modules Supported: Username, Email, Phone, Domain lookups in batch mode

Reporting & Visualisation

  • Multiple Export Formats: CSV, JSON, HTML, Markdown
  • Data Visualisations: 8 built-in chart types for report analysis
  • Enhanced Report Viewer: Interactive CLI report browser
  • Export Engine: Professional report generation

User Experience

  • Interactive Menu: Intuitive, colourful command-line interface
  • Concurrent Processing: Multi-threaded operations for faster results
  • Pause/Resume Controls: Cancel or pause operations anytime

Quick Start

# Clone the repository
git clone https://github.com/Kailen-Howard/orion-osint.git
cd orion-osint

cd orion

# Install dependencies
pip install -r requirements.txt

cd..

# Run Orion
python -m orion start

Additionally.

cd orion

orion.bat start

That's it! The interactive menu will guide you through all features.

📦 Installation

Prerequisites

  • Python 3.8 or higher
  • Git (for cloning the repository)

Standard Installation

# Clone the repository
git clone https://github.com/Kailen-Howard/orion-osint.git
cd orion-osint

# Install with pip
pip install -e .

Optional: API Keys Setup

Some features require API keys (all optional, tool works without them):

  1. Have I Been Pwned (HIBP) - Required for breach checking (~£2.50/month)
  2. AbuseIPDB - Enhanced IP reputation (free tier available)

📖 Usage

Interactive Menu (Recommended)

# Windows
orion.bat

# Linux/Mac
python -m orion

Command Line

# Username search across 436+ sites
python -m orion username johndoe

# Email analysis with 11 service checks
python -m orion email [email protected]

# Domain analysis
python -m orion domain example.com

# Batch processing
python -m orion batch username --input usernames.txt

Examples

Single Username Lookup:

python -m orion username security_researcher
# Searches 436+ platforms in parallel

Batch Email Analysis:

# Create emails.txt with one email per line
python -m orion batch email --input emails.txt --workers 5
# Processes multiple emails with rate limiting

Domain Investigation:

python -m orion domain example.com
# WHOIS, DNS, SSL, technology detection

📁 Project Structure

orion-osint/
├── orion/                    # Main package
│   ├── cli/                  # Command-line interface & menu system
│   ├── core/                 # Core utilities & batch processor
│   ├── modules/              # OSINT modules
│   │   ├── identity/         # Username, email, phone, address
│   │   ├── network/          # Domain and IP analysis
│   │   └── breach/           # Data breach detection
│   ├── data/                 # Data files (436 sites, 539 disposable domains)
│   ├── report/               # Reporting & visualisation engine
│   ├── config/               # Configuration management & API keys
│   └── exports/              # Batch processing exports (gitignored)
├── USAGE.md                  # Comprehensive usage guide
├── requirements.txt          # Python dependencies
└── .env.example              # Environment variables template

📚 Documentation

For detailed usage instructions, see USAGE.md which covers:

  • All module features and capabilities
  • Batch processing workflows
  • API configuration
  • Export formats
  • Troubleshooting

⚖️ Legal & Ethical Use

Orion is designed for defensive security research and educational purposes only:

Allowed:

  • Security research and testing
  • OSINT training and education
  • Investigating your own accounts
  • Authorised penetration testing
  • Academic research

Not Allowed:

  • Harassment or stalking
  • Unauthorised access attempts
  • Malicious reconnaissance
  • Privacy violations
  • Any illegal activity

Use responsibly. Respect privacy laws (GDPR, CCPA, etc.) and terms of service.

📊 Statistics

  • 436 username search sites (expanded from 398)
  • 11 email service checks (expanded from 5)
  • 539 disposable email providers (expanded from 23)
  • 8 data visualisation types
  • 4 batch processing modules
  • Multiple export formats (CSV, JSON, HTML, Markdown)

🤝 Contributing

Contributions are welcome! Here's how you can help:

Ways to Contribute

  • Bug Reports: Open an issue with detailed steps to reproduce
  • Feature Requests: Suggest new OSINT modules or improvements
  • Code Contributions: Submit pull requests (see guidelines below)
  • Documentation: Improve guides, add examples, fix typos
  • Site Database: Add new username search sites to data.json

Contribution Guidelines

  1. Fork the repository
  2. Create a feature branch (git checkout -b feature/new-module)
  3. Make your changes following the existing code style
  4. Test thoroughly
  5. Commit with clear messages
  6. Push to your fork and submit a pull request to development branch

Code Standards

  • Use UK English spelling in code and documentation
  • Follow PEP 8 style guidelines
  • Add docstrings to functions and classes
  • Include error handling for external API calls
  • Update USAGE.md if adding new features

Adding New Sites

To add username search sites, edit orion/data/data.json:

{
  "SiteName": {
    "url": "https://example.com/{}",
    "errorType": "status_code",
    "errorMsg": "404"
  }
}

For questions or discussion, open an issue first.

📜 Licence

This project is licenced under the MIT Licence.

🙏 Acknowledgements

Orion was originally derived from the Sherlock Project, which is also MIT licenced. While Orion has evolved significantly with its own codebase and new features, we acknowledge and appreciate the foundational work of the original Sherlock contributors.

⭐ Star History

If you find Orion useful, please consider giving it a star! It helps others discover the project.


Made with ❤️ by the OSINT community

About

Open-source OSINT toolkit for comprehensive digital footprint analysis. Search 436+ platforms, analyse emails/phones/domains, batch processing, and data visualisation. Built for security researchers and investigators.

Topics

Resources

Stars

Watchers

Forks

Contributors 2

  •  
  •  

Languages