asdatarius/osint-hub repository overview

⁠OSINT Hub

A self-hosted open-source-intelligence search dashboard. Type a name, email, phone, username, IP, domain, MAC, or IMEI — or drop in a photo — and OSINT Hub detects the input type, runs the applicable built-in lookups server-side, and links out to ~40 curated external tools for the rest.

Multi-arch: linux/amd64 + linux/arm64. Source: asdatarius/osint-hub⁠

⁠What's inside

• Input detection — classifies the query (email / IP / domain / phone / username / MAC / IMEI / name / image) and shows only the relevant tools.
• Built-in server-side integrations (run in parallel on search; no-key ones always run, keyed ones run when their key is set):
  • IP: Shodan InternetDB, ipwho.is GeoIP, RDAP, DNS/PTR (no key) + Shodan host, AbuseIPDB, GreyNoise, VirusTotal, AlienVault OTX, IPinfo (with key)
  • Domain: RDAP/WHOIS, DNS, crt.sh subdomains, urlscan.io, Wayback (no key)
    • Shodan subdomains, VirusTotal, OTX, Hunter.io, IntelX (with key)
  • Email: XposedOrNot + Hudson Rock (breach/infostealer), Gravatar, LeakCheck (no key) + Hunter.io, EmailRep, IntelX (with key)
  • Username: GitHub, LeakCheck — Phone: numverify
  • Live catalog + health status at GET /api/integrations; CapSolver-gated sources require explicit per-call approval.
• Curated tool catalog — face/image search, username enumeration, email & people search, phone, device/IoT, domain/IP, breach/leak, and more, each with a direct deep-link for the current query.
• Image/video upload for reverse-image and face-search tools.
• Optional CLI tools baked into the image where available: sherlock, maigret, holehe (run on demand from the UI).

⁠Quick start

⁠docker run

docker run -d --name osint-hub -p 127.0.0.1:5001:5001 \
  -e SHODAN_API_KEY=your_key \
  asdatarius/osint-hub:latest

Open http://127.0.0.1:5001⁠.

⁠docker compose

services:
  osint-hub:
    image: asdatarius/osint-hub:latest
    container_name: osint-hub
    ports:
      - "127.0.0.1:5001:5001"      # bind to localhost — see security note
    environment:
      - SHODAN_API_KEY=${SHODAN_API_KEY:-}
      - HUNTER_API_KEY=${HUNTER_API_KEY:-}
      - CENSYS_API_ID=${CENSYS_API_ID:-}
      - CENSYS_API_SECRET=${CENSYS_API_SECRET:-}
    restart: unless-stopped

⁠Configuration

All keys are optional — the dashboard works without them; keys just unlock the corresponding built-in lookups. Set them via env vars or in the in-app API Keys panel (which persists them inside the container).

AI (optional, pluggable): with an Anthropic or Gemini key set, OSINT Hub can OCR uploaded images (extract text → search it) and suggest next pivots from your results. Choose a model per feature as provider:model-id (e.g. anthropic:claude-haiku-4-5 or gemini:gemini-3.1-pro-preview) in Settings.

No-key sources (Shodan InternetDB, ipwho.is, RDAP, crt.sh, Wayback, XposedOrNot, Hudson Rock, Gravatar, GitHub, LeakCheck) work with zero configuration.

⁠⚠️ Security note

OSINT Hub has no authentication — it's built for a single user on a trusted machine. The example above binds to 127.0.0.1 on purpose. Do not expose port 5001 directly to the internet or an untrusted LAN. If you need remote access, put it behind a reverse proxy that enforces auth (and TLS), or a VPN. Anyone who can reach the port can run lookups, read masked API-key fragments, and overwrite the stored keys.

⁠Tags

• latest — newest build from main
• sha-<short> — pinned to a specific commit
• YYYYMMDD — weekly scheduled base-image refresh

⁠License / use

For lawful, authorized research and educational use only. You are responsible for complying with the terms of service of every linked third-party tool and with applicable privacy law.