# smicallef/spiderfoot

> Python OSINT automation tool that gathers data about a target from 200+ modules (DNS, breaches, social media, threat intel) via web UI or CLI. Used for reconnaissance in pentests and for assessing your own attack surface.

- Magnitude: 2.5 out of 10 — Steady
- Stars: 22,686 total · +9 stars today, ≈ 20 by evening
- Star trust: star growth looks organic
- Category: Security · Language: Python · License: MIT · Created: 2012-04-28 · Last push: 2026-04-13
- GitHub: https://github.com/smicallef/spiderfoot · Homepage: http://www.spiderfoot.net · Page: https://gitnova.dev/en/r/smicallef/spiderfoot

## Useful for

- Run reconnaissance on a domain and subdomains before a pentest
- Find breaches and mentions of an email or username in open sources
- Assess which of an organization's assets are exposed to the internet

## Why it’s here

- 9 stars so far today, about 20 expected by the end of the day.
- GitHub Trending Python today: #18, +33 stars.
- About 9 forks a day — people are taking the code.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 3,676
- Issues and pull requests: 2,064
- Watchers: 516
- Average over the last week: 34 per day
- Usual pace: 38 per day
- Stars in the last hour (measured): -1
- Latest release: v4.0 (2022-04-07)

## Stars per day, last 30 days (oldest → newest, today is partial)

2026-09-01 … 2026-09-30: 30, 16, 11, 20, 17, 33, 74, 118, 34, 36, 23, 28, 15, 25, 58, 89, 73, 44, 44, 26, 15, 10, 21, 23, 27, 19, 20, 82, 47, 9

## Spotted in now

- GitHub Trending Python today: #18, +33 stars

## Similar by description

1. **HunxByts/GhostTrack** — 7.1 · Breakout · Security · Python · +201 stars today, ≈ 351 by evening
   Python OSINT tool for information gathering: tracking IP addresses, phone numbers and usernames on social media.
   Full card: https://gitnova.dev/en/r/HunxByts/GhostTrack.md
2. **samugit83/redamon** — 2.8 · Peaking · Security · Python · +15 stars today, ≈ 29 by evening
   An autonomous AI red-team framework that chains reconnaissance, exploitation and post-exploitation into one pipeline, then triages findings, patches code and opens a pull request on your repository.
   Full card: https://gitnova.dev/en/r/samugit83/redamon.md
3. **glaz-boga-poisk-bot/glaz-boga** — 0.0 · Cooling · Security · +0 stars today, ≈ 0 by evening · unusual star pattern (heuristic)
   Telegram bot for OSINT lookups: given a phone number, email, username, name or Telegram ID it returns matches from open, archived and leaked records. Matches depend on what is in the database.
   Full card: https://gitnova.dev/en/r/glaz-boga-poisk-bot/glaz-boga.md
4. **0x4m4/hexstrike-ai** — 2.4 · Steady · Security · Python · +11 stars today, ≈ 20 by evening
   An MCP server that connects AI agents (Claude, GPT, Copilot) to 150+ cybersecurity tools for autonomous pentesting, vulnerability discovery, and bug bounty. Aimed at pentesters and security researchers.
   Full card: https://gitnova.dev/en/r/0x4m4/hexstrike-ai.md
5. **sherlock-project/sherlock** — 2.3 · Cooling · Security · Python · +17 stars today, ≈ 32 by evening
   Python CLI tool that hunts down accounts by one or more usernames across 400+ social networks. Used in OSINT and reconnaissance to check a user's online presence.
   Full card: https://gitnova.dev/en/r/sherlock-project/sherlock.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-09-30 14:35 UTC, updated every 30 minutes.