The road to fascism is lined with people telling you to stop overreacting.
Week of 24 — 30 April 2026
Every week, I manually curate tools, research, and services that are genuinely useful for OSINT, digital investigations, security research, and adjacent fields.
No hype. No SEO noise. No "AI startups that change everything".
Only things you can open, verify, and actually use.
A first step for investigations into organized crime, corruption, trafficking, and global risk networks.
Tesari is designed as an entry point into complex investigations: structure, context, and navigable intelligence instead of chaotic searching.
Internet archive sites. As well as the Wayback Machine (http://archive.org/), there are many other web archives that can help you find older versions of web pages. Here is a short list of web archives, including national ones
🔗 https://appliedawareness.ca/internet-archive-websites/
Open Mythos. A theoretical reconstruction of the Claude Mythos architecture, built from first principles using the available research literature
🔗 https://github.com/kyegomez/OpenMythos
Monitory.me. OSINT-ready social media monitoring. Track profiles, detect changes, and get instant alerts when new posts appear or content updates
Live Military & Conflict Tracker
RuVPK.RIP. Interactive map of enterprises and employees of the Russian military-industrial complex
YaCy. Distributed Peer-to-Peer Web Search Engine and Intranet Search Appliance
🔗 GitHub: https://github.com/yacy/yacy_search_server
Olares. An Open-Source Personal Cloud to Reclaim Your Data
**OSINT Master Tool **is a unified intelligence gathering suite that provides a professional GUI for powerful open-source intelligence tools. It consolidates 15+ external tools and 8 built-in utilities into a single, real-time dashboard
🔗 https://github.com/aingram702/OSINT-Master-Tool
Crucix. Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes
Undetectable Fingerprint Browser. Free open-source Multilogin/Incogniton/Kameleo alternative for fingerprint spoofing (Canvas/WebGL/User-Agent). Perfect for Selenium/Playwright/Puppeteer automation, web scraping, social media bots, ads verification, and multi-accounting based on chromium. Avoid bans, bypass anti-bot systems, and prevent tracking with customizable stealth browsing
🔗 https://github.com/itbrowser-net/undetectable-fingerprint-browser
Browser Harness. The simplest, thinnest, self-healing harness that gives LLM complete freedom to complete any browser task. Built directly on CDP. The agent writes what's missing, mid-task. No framework, no recipes, no rails. One websocket to Chrome, nothing between
🔗 https://github.com/browser-use/browser-harness
Browser Dump. Offline browser credential extraction framework for authorized penetration testing. Downloads encrypted credential stores from Windows hosts via SMB, then decrypts passwords locally using DPAPI master keys (Chrome, Edge, Opera, Yandex) or Firefox NSS crypto
🔗 https://github.com/PurpleArsenal/BrowserDump
Open Drone Map (ODM). A command line toolkit to generate maps, point clouds, 3D models and DEMs from drone, balloon or kite images
🔗 https://github.com/OpenDroneMap/ODM
OSINT Agentic Framework for Open Code. This repository is not an OSINT tool, nor an autonomous investigative agent. It is an operational framework for the disciplined use of LLMs in intelligence contexts, where the model acts as an executor of specific steps under the operator's full control
🔗 https://github.com/V1n1v131r4/OSINT-Agentic-Framework
GmapsXploit audits Google Maps, Places, Roads, and other API keys to find leaks, data exposure, and potential billing abuse, helping bug bounty hunters escalate low severity findings to critical with ready-to-submit reports
🔗 https://github.com/DeathShotXD/GmapsXploit
Free Claude Code. Use claude-code for free in the terminal, VSCode extension or via discord like openclaw
🔗 https://github.com/Alishahryar1/free-claude-code
Octopoda OS. The open-source memory operating system for AI agents. Persistent memory, semantic search, loop detection, agent messaging, crash recovery, and real-time observability
🔗 https://github.com/RyjoxTechnologies/Octopoda-OS
design-md-chrome. Chrome extension to extract styles from any website and generate DESIGN.md files and design skills for AI based on TypeUI
🔗 https://github.com/bergside/design-md-chrome/
Phantom. An AI co-worker with its own computer. Self-evolving, persistent memory, MCP server, secure credential collection, email identity. Built on the Claude Agent SDK
🔗 https://github.com/ghostwright/phantom
Nox Project. High-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources
🔗 https://github.com/nox-project/nox-framework
Pentest Swarm AI. Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go, Claude API, and 7+ native security tools
🔗 https://github.com/Armur-Ai/Pentest-Swarm-AI
CC Switch. A cross-platform desktop All-in-One assistant tool for Claude Code, Codex, OpenCode, openclaw & Gemini CLI
🔗 https://github.com/farion1231/cc-switch
METATRON. AI-powered penetration testing assistant using local LLM on linux (Parrot OS)
🔗 https://github.com/sooryathejas/METATRON
Codex Ghidra reverse engineering skill with headless workflows, bug-hunting bundles, and a live bridge for Apple Mach-O analysis
🔗 https://github.com/OwenPawl/ghidra-re-skill
Decepticon. Autonomous Hacking Agent for Red Team Testing
🔗 https://github.com/PurpleAILAB/Decepticon
Investing Algorithm Framework. Framework for developing, backtesting, and deploying automated trading algorithms and trading bots
🔗 https://github.com/coding-kitties/investing-algorithm-framework
Meteroid. Open-source Pricing and Billing Infrastructure. Subscription management, Invoicing, Pricing, Usage-based billing, Cost limiting, Grandfathering, Experiments, Revenue analytics & Actionable insights
🔗 https://github.com/meteroid-oss/meteroid
GoScrapy. Harnessing Go's perfomance for blazingly fast web scraping, inspired by Python's Scrapy framework
🔗 https://github.com/tech-engine/goscrapy
Gopacket is a clean Go implementation of Impacket, a library intended for working with network protocols
🔗 https://github.com/mandiant/gopacket
HomeDockOS. An intuitive, versatile, and powerful home server operating system for self-hosting. Featuring a curated app store and seamless multi-platform support, it’s designed to empower your personal cloud on Raspberry Pi, x86 systems, or your preferred setup
🔗 https://github.com/BansheeTech/HomeDockOS
DockerWakeUp. An intelligent Docker container management system that automatically starts containers on-demand when accessed, stops idle containers to save resources, and generates NGINX configurations for seamless reverse proxy setup
🔗 https://github.com/jelliott2021/DockerWakeUp/
MasterDnsVPN. Advanced DNS tunneling VPN for censorship bypass, optimized beyond DNSTT and SlipStream with low-overhead ARQ, resolver load balancing, high packet-loss stability and speed
🔗 https://github.com/masterking32/MasterDnsVPN/
NASty is a NAS operating system built on NixOS and bcachefs. It turns commodity hardware into a storage appliance serving NFS, SMB, iSCSI, and NVMe-oF - managed from a single web UI, updated atomically, and rolled back when things go sideways
🔗 https://github.com/nasty-project/nasty
Numa. Portable DNS resolver in Rust - .numa local domains, ad blocking, developer overrides
🔗 https://github.com/razvandimescu/numa
iron-proxy is a MITM egress proxy with a built-in DNS server that sits between your untrusted workload and the internet
🔗 https://github.com/ironsh/iron-proxy
Netronome is a modern network speed testing and monitoring tool built with Go and React
🔗 https://github.com/autobrr/netronome
Technitium DNS Server is an open source authoritative as well as recursive DNS server that can be used for self hosting a DNS server for privacy & security. It works out-of-the-box with no or minimal configuration and provides a user friendly web console accessible using any modern web browser
🔗 https://github.com/TechnitiumSoftware/DnsServer
NostrVPN is a Rust workspace for a Tailscale-style mesh VPN control plane built on Nostr signaling and userspace WireGuard. It includes the nvpn CLI plus a Tauri/Svelte app codebase that targets desktop and mobile platforms
🔗 https://github.com/mmalmi/nostr-vpn
as-ip-blocks. Daily-updated datasets of autonomous systems (AS) with active BGP prefix announcements. Only includes AS that have announced at least one prefix within the last 90 days. No APIs, no databases - just simple file downloads
🔗 https://github.com/ipverse/as-ip-blocks/
DroneAware Node Releases repository
🔗 https://github.com/fduflyer/DroneAware-Node-Releases
SIgnal Bridge Remote. A remote MCP server that lets Claude control Bluetooth intimate hardware over the internet via Buttplug.io / Intiface Central
🔗 https://github.com/AletheiaVox/signal_bridge_remote
D4rk_Intel OSINT Investigative Toolkit. A curated toolkit for Open-Source Intelligence (OSINT) investigations. This repository contains a collection of scripts, resources, and methodologies to aid in gathering and analyzing publicly available information. Designed for security researchers, journalists, and forensic analysts for ethical and legal investigations
🔗 https://github.com/techenthusiast167/D4rk_Intel-OSINT-Investigative-Toolkit
- Substack: https://osintech.substack.com
- LinkedIn: https://www.linkedin.com/in/osintech/details/featured/
If this timeline saves you time, it’s doing its job.
Free to read. Manually curated. Minimal noise.
All tools and techniques documented in the dataset are presented for informational,
educational and information security purposes only.
The dataset does not promote or endorse illegal activities.
Users are responsible for complying with applicable laws and ethical standards.
The dataset is updated on a regular basis.
Future posts will document changes, notable additions and emerging trends observed within the dataset.
This post serves as an introduction and reference point for those updates.