What is X-osint?
X-osint brings information-gathering functions into an interactive terminal menu. Its documented features cover IP addresses, email addresses, phone numbers, DNS records, subdomains, file metadata and vehicle identifiers. It also includes host and port discovery, vulnerability information lookup and SMTP analysis.
The toolkit is installed locally from its source repository and requires Python, pip, an internet connection and additional packages. The documentation describes use on Linux, macOS and Android through Termux, with a virtual environment offered as an alternative when package installation fails. Some functions require third-party API keys.
Results have feature-specific limits. Phone-number geocoding returns coordinates associated with the country inferred from the calling code, not the phone's physical location. License-plate lookup is restricted to the US jurisdictions listed in the documentation, while vehicle identification number lookup is documented as available through both a command-line and a graphical interface.
Key capabilities
- Identifier lookup Gather information associated with IP addresses, email addresses and phone numbers, and perform ProtonMail-related checks.
- Network reconnaissance Look up DNS records, enumerate subdomains and discover hosts and ports.
- Security investigation Look up CVE and exploit information and run SMTP analysis for potential server vulnerabilities.
- Metadata extraction Extract metadata from files, including location metadata from images when available.
- Vehicle research Retrieve vehicle identification information and perform license-plate lookups within documented US coverage.
- Interactive operation Select functions from a terminal menu and follow prompts, with external API credentials required for some features.
Where X-osint fits
X-osint fits local OSINT research and authorized security investigations where an analyst needs several lookup and inspection functions in one terminal workflow. It can support initial research into identifiers, exposed infrastructure, vehicle records or metadata in collected files.
Before deployment, teams should check Python package compatibility, external API requirements, credential availability and the coverage of each selected function. Investigators should verify results independently and avoid treating phone-number geocoding as device tracking. The documentation acknowledges possible installation issues and provides a virtual-environment alternative.
Reviews of X-osint
Be the first to share your experience with X-osint.
Write a review
Loading review form…
Alternatives to X-osint
God's Eye ViewGod's Eye View combines public aircraft, satellite, earthquake and camera feeds in a Cesium globe. Run it locally, inspect each data source, add optional voice control and connect agents through MCP.SSherlockSherlock searches social networks for accounts matching supplied usernames. It runs from the command line, supports local installation or Docker, and exports findings for further review.