OSINT Dashboard

An ethical, publicly-sourced OSINT tool for email and username reconnaissance. Phase 1 of a larger planned platform (domain/IP/metadata coming later).

⚠️ Ethical use

For authorized security research, OSINT training, and reviewing your own digital footprint only. Do not use this tool against individuals without authorization. This project only queries data sources that are public or that you are authorized to access via your own API credentials.

Features (Phase 1) — 100% free sources, no paid API keys required

• Email Intelligence: Gravatar lookup, MX/domain validation, disposable-domain detection, breach check via the free open-source XposedOrNot API (no key needed)
• Username OSINT: GitHub lookup (works instantly, no signup) + Reddit lookup (needs your own free Reddit app credentials — $0, ~2 min setup)
• Local scan history (SQLite)

Roadmap

Domain (WHOIS/DNS/SSL), IP intelligence, image metadata (EXIF), AI summary, risk scoring, PDF export.

Setup

1. cp server/.env.example server/.env and fill in any optional keys you have
2. npm install
3. npm run dev

Tech

React, TypeScript, Tailwind, Framer Motion, Node.js, Express, SQLite