smicallef/spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
About the project
Python OSINT automation tool that gathers data about a target from 200+ modules (DNS, breaches, social media, threat intel) via web UI or CLI. Used for reconnaissance in pentests and for assessing your own attack surface.
Useful for
- Run reconnaissance on a domain and subdomains before a pentest
- Find breaches and mentions of an email or username in open sources
- Assess which of an organization's assets are exposed to the internet
README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.
Why it’s trending
- 8 stars so far today, about 20 expected by the end of the day.
- GitHub Trending Python today: #18, +33 stars.
- About 10 forks a day — people are taking the code.
Stars per day
Bars are daily stars, the line is the usual pace. Red marks spike days.
Numbers
- Total stars
- 22,687
- Today
- 8 · ≈ 20 by evening
- Forks
- 3,675
- Issues and pull requests
- 2,064
- Watchers
- 516
- Language
- Python
- License
- MIT
- Latest release
- v4.0 · April 7, 2022
- Created
- April 28, 2012
- Last push
- April 13, 2026
Star trust
Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.
These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.
Spotted in
- September 30, 2026GitHub Trending Python today: #18, +33 stars
Share
README badge
Paste it into your README — the badge shows the current magnitude and links to this page.
[](https://gitnova.dev/en/r/smicallef/spiderfoot)Similar by description
-
7.0
HunxByts/GhostTrack
Python OSINT tool for information gathering: tracking IP addresses, phone numbers and usernames on social media.
-
2.9
samugit83/redamon
An autonomous AI red-team framework that chains reconnaissance, exploitation and post-exploitation into one pipeline, then triages findings, patches code and opens a pull request on your repository.
-
0.0
glaz-boga-poisk-bot/glaz-boga
Telegram bot for OSINT lookups: given a phone number, email, username, name or Telegram ID it returns matches from open, archived and leaked records. Matches depend on what is in the database.
-
2.5
0x4m4/hexstrike-ai
An MCP server that connects AI agents (Claude, GPT, Copilot) to 150+ cybersecurity tools for autonomous pentesting, vulnerability discovery, and bug bounty. Aimed at pentesters and security researchers.
-
2.3
sherlock-project/sherlock
Python CLI tool that hunts down accounts by one or more usernames across 400+ social networks. Used in OSINT and reconnaissance to check a user's online presence.