Orion is an open-source OSINT (Open Source Intelligence) toolkit designed for comprehensive digital footprint analysis. Built for security researchers, investigators, and OSINT enthusiasts.
- Username Reconnaissance: Search across 436+ social networks and online platforms
- Email Intelligence: Validate and analyse email addresses with 11 service checks, breach detection, and 539 disposable email providers
- Phone Analysis: Extract carrier information, validate formats, with clear limitations guidance
- Name & Address Lookup: Find information related to people and physical locations
- Domain Analysis: Gather WHOIS data, DNS records, and technology stack information
- SSL Certificate Inspection: Analyse SSL/TLS implementations and identify misconfigurations
- Security Headers Audit: Check for missing security headers and best practices
- Website Technology Detection: Identify web servers, frameworks, and analytics tools
- IP Address Analysis: Geolocation, reputation checks, and network information
- Process Multiple Targets: Bulk operations from CSV/TXT files
- Parallel Execution: 10-50x faster than manual processing
- Automatic Reporting: CSV summaries and individual JSON reports
- Modules Supported: Username, Email, Phone, Domain lookups in batch mode
- Multiple Export Formats: CSV, JSON, HTML, Markdown
- Data Visualisations: 8 built-in chart types for report analysis
- Enhanced Report Viewer: Interactive CLI report browser
- Export Engine: Professional report generation
- Interactive Menu: Intuitive, colourful command-line interface
- Concurrent Processing: Multi-threaded operations for faster results
- Pause/Resume Controls: Cancel or pause operations anytime
# Clone the repository
git clone https://github.com/Kailen-Howard/orion-osint.git
cd orion-osint
cd orion
# Install dependencies
pip install -r requirements.txt
cd..
# Run Orion
python -m orion start
Additionally.
cd orion
orion.bat startThat's it! The interactive menu will guide you through all features.
- Python 3.8 or higher
- Git (for cloning the repository)
# Clone the repository
git clone https://github.com/Kailen-Howard/orion-osint.git
cd orion-osint
# Install with pip
pip install -e .Some features require API keys (all optional, tool works without them):
- Have I Been Pwned (HIBP) - Required for breach checking (~£2.50/month)
- AbuseIPDB - Enhanced IP reputation (free tier available)
# Windows
orion.bat
# Linux/Mac
python -m orion# Username search across 436+ sites
python -m orion username johndoe
# Email analysis with 11 service checks
python -m orion email [email protected]
# Domain analysis
python -m orion domain example.com
# Batch processing
python -m orion batch username --input usernames.txtSingle Username Lookup:
python -m orion username security_researcher
# Searches 436+ platforms in parallelBatch Email Analysis:
# Create emails.txt with one email per line
python -m orion batch email --input emails.txt --workers 5
# Processes multiple emails with rate limitingDomain Investigation:
python -m orion domain example.com
# WHOIS, DNS, SSL, technology detectionorion-osint/
├── orion/ # Main package
│ ├── cli/ # Command-line interface & menu system
│ ├── core/ # Core utilities & batch processor
│ ├── modules/ # OSINT modules
│ │ ├── identity/ # Username, email, phone, address
│ │ ├── network/ # Domain and IP analysis
│ │ └── breach/ # Data breach detection
│ ├── data/ # Data files (436 sites, 539 disposable domains)
│ ├── report/ # Reporting & visualisation engine
│ ├── config/ # Configuration management & API keys
│ └── exports/ # Batch processing exports (gitignored)
├── USAGE.md # Comprehensive usage guide
├── requirements.txt # Python dependencies
└── .env.example # Environment variables template
For detailed usage instructions, see USAGE.md which covers:
- All module features and capabilities
- Batch processing workflows
- API configuration
- Export formats
- Troubleshooting
Orion is designed for defensive security research and educational purposes only:
✅ Allowed:
- Security research and testing
- OSINT training and education
- Investigating your own accounts
- Authorised penetration testing
- Academic research
❌ Not Allowed:
- Harassment or stalking
- Unauthorised access attempts
- Malicious reconnaissance
- Privacy violations
- Any illegal activity
Use responsibly. Respect privacy laws (GDPR, CCPA, etc.) and terms of service.
- 436 username search sites (expanded from 398)
- 11 email service checks (expanded from 5)
- 539 disposable email providers (expanded from 23)
- 8 data visualisation types
- 4 batch processing modules
- Multiple export formats (CSV, JSON, HTML, Markdown)
Contributions are welcome! Here's how you can help:
- Bug Reports: Open an issue with detailed steps to reproduce
- Feature Requests: Suggest new OSINT modules or improvements
- Code Contributions: Submit pull requests (see guidelines below)
- Documentation: Improve guides, add examples, fix typos
- Site Database: Add new username search sites to data.json
- Fork the repository
- Create a feature branch (
git checkout -b feature/new-module) - Make your changes following the existing code style
- Test thoroughly
- Commit with clear messages
- Push to your fork and submit a pull request to
developmentbranch
- Use UK English spelling in code and documentation
- Follow PEP 8 style guidelines
- Add docstrings to functions and classes
- Include error handling for external API calls
- Update USAGE.md if adding new features
To add username search sites, edit orion/data/data.json:
{
"SiteName": {
"url": "https://example.com/{}",
"errorType": "status_code",
"errorMsg": "404"
}
}For questions or discussion, open an issue first.
This project is licenced under the MIT Licence.
Orion was originally derived from the Sherlock Project, which is also MIT licenced. While Orion has evolved significantly with its own codebase and new features, we acknowledge and appreciate the foundational work of the original Sherlock contributors.
If you find Orion useful, please consider giving it a star! It helps others discover the project.
Made with ❤️ by the OSINT community