OSI

OSINT Suite — Email & Username Intelligence

]Instagram

ur_.krishn._02

A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence.

With 2720+ total scan vectors—including 210+ email-integrated sites and 2510+ username platforms—you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames and verify account registrations in seconds.

👑 Owner

Hari Jadhav

aka nullkrishn

Related MCP server: OhSINT MCP Server

📸 Preview

The single osi command — colourful banner, credits and menu.

Self-contained HTML report — summary tiles, live filters and profile cards.

✨ Key Features

• 🔎 Deep Email & Username OSINT: Look up email registrations and perform advanced username profiling across 2710+ platforms.

• 👤 Rich Metadata Scraping: Scrapes avatars, bio descriptions, follower counts, UID numbers, seller statuses, and account attributes.

• 🔀 Cross-Scan & Pivot Engine: Mines handles, profile links, and exposed email addresses from initial scans, automatically pivoting across secondary target vectors.

• 🤖 Model Context Protocol (MCP) Server: Native AI agent integration for Claude Desktop, Cursor, Antigravity, and LLMs to run autonomous OSINT scans and recursive pivots.

• 🛡️ Hudson Rock Infostealer Breach Intel: Query infostealer malware breach logs using the --hudson flag for high-priority target correlation.

• ⚡ High-Throughput Parallel Engine: Powered by httpx and curl_cffi for maximum concurrency with automated TLS fingerprint impersonation.

• 🔀 Permutation & Alias Generator: Wildcard-based username variation generation to catch typosquatting or alternative aliases.

• 📂 Multi-Format Reports: Automated exports to PDF (with profile photos), JSON, CSV, and a self-contained interactive HTML investigation report for pipeline integration and sharing.

• 🌐 Advanced Proxy Pivoting: Built-in proxy rotation with protocol auto-detection (http, socks5) and pre-scan health validation (--validate-proxies).

• 🎨 Responsive Terminal UI: Dynamic progress tracking, self-adaptive category grids (-lu/-le), and clear status reporting.

🚀 Installation

⚡ One-Command Install (Termux · Linux · macOS · WSL)

Clone and run the installer — it sets everything up and drops a single osi command that shows a colourful banner and lets you scan usernames and emails:

git clone https://github.com/nullkrishn4/osi && cd osi
bash install.sh
osi

osi with no arguments opens an interactive menu; pass flags to go straight through:

osi -u johndoe                # username scan across every platform
osi -e johndoe@gmail.com      # email scan across every platform
osi -u johndoe --cross-scan   # deep cross-scan / pivot
osi -lu                       # list all username modules

💡 The installer installs Python and dependencies automatically on Termux (pkg install), falls back gracefully if the browser-impersonating curl_cffi transport cannot be built, and skips optional PDF extras with bash install.sh --no-extras.

🐍 Via PyPI (Recommended)

# Upgrade pip and install osi
python3 -m pip install --upgrade pip
pip install osi

# Optional: Install with MCP Server support for AI agents
pip install "osi[mcp]"

📦 Virtual Environment Setup

# Create and activate virtual environment
python3 -m venv .venv
source .venv/bin/activate  # On Windows: .venv\Scripts\Activate.ps1

# Install package
pip install osi

❄️ Via Nix (Linux & macOS)

# Run instantly without installing permanently
nix run github:nullkrishn4/osi/main -- --help

# Drop into a temporary shell with osi active
nix shell github:nullkrishn4/osi/main

💻 Usage Guide

1. Basic Username & Email Scanning

Scan a single username or email address across all available platform modules:

osi -u johndoe             # Single username scan
osi -e johndoe@gmail.com   # Single email scan
osi -u johndoe --email-domains global  # Try johndoe across provider domains

2. Cross-Scan & Pivot Intelligence

An email scan proves an account exists but rarely reveals a handle. --cross-scan mines exposed handles, profile links, and secondary email addresses from target profiles, pivoting into multi-pass reconnaissance across all matching platforms:

osi -u johndoe --cross-scan                                  # Pivot from username scan
osi -e johndoe@gmail.com --cross-scan                        # Pivot from email scan
osi -e johndoe@gmail.com --cross-scan --cross-links verified # Platform-verified links only
osi -u johndoe --cross-scan --cross-depth 2        # Follow links two hops deep

💡 *For confidence scoring, link classification rules, and cost models, see docs/CROSS_SCAN.md.*

3. Hudson Rock Malware Breach Intelligence

Check if a target username or email address has been exposed in infostealer malware infection logs:

osi -u johndoe --hudson             # Username malware log check
osi -e johndoe@gmail.com --hudson   # Email malware log check

🖼️ *To view output terminal screenshots and visual previews, see docs/EXAMPLES.md.*

4. Targeted Category & Module Scanning

Scan specific categories or individual modules, or list available modules in a responsive grid:

osi -u johndoe -c dev                # Developer platforms only
osi -e johndoe@gmail.com -m github   # Single module check
osi -u johndoe -m github,instagram   # Specific comma-separated modules

osi -lu                              # List user categories & modules grid
osi -le                              # List email categories & modules grid

5. Bulk File Scanning

Scan multiple targets from an input file (one target per line):

osi -uf usernames.txt   # Bulk username scan
osi -ef emails.txt      # Bulk email scan

6. Report Exports, Options & Proxies

# Export results to PDF, JSON, CSV, or an interactive HTML report
osi -u johndoe -f pdf -o report.pdf
osi -u johndoe -f json -o results.json
osi -u johndoe -f html -o report.html   # single self-contained file
osi -u johndoe -f html --no-html-media -o report.html   # skip inline photos

# Verbose URL reporting and show all results (including not found)
osi -u johndoe -v --all

# Rotate proxies with pre-scan validation check
osi -u johndoe -P proxies.txt --validate-proxies

7. AI & LLM Agent Integration (MCP Server)

Connect osi directly to AI coding assistants and LLM platforms via the Model Context Protocol (MCP). This enables AI agents (Claude Desktop, Cursor, Antigravity, Open-WebUI) to autonomously investigate handles and emails, pivot on exposed profiles, and analyze digital footprints.

Starting the Server

# Start the MCP server over standard I/O (stdio)
osi-mcp

# Optional: Enable verbose logging to stderr
osi-mcp -v

MCP Client Configuration

Add osi to your client configuration (e.g. claude_desktop_config.json or mcp_config.json):

{
  "mcpServers": {
    "osi": {
      "command": "osi-mcp"
    }
  }
}

Exposed AI Tools

📚 Documentation Hub

Explore detailed documentation guides in the docs/ directory:

• 📋 CLI Flags Reference — Complete breakdown of every CLI flag and option.

• 🔀 Cross-Scan & Pivoting Guide — In-depth guide to multi-pass cross-scan reconnaissance.

• 🔀 Pattern Syntax Guide — Wildcard and permutation patterns for username generation.

• 🐍 Library Mode Guide — Calling the Python engine programmatically from your own scripts.

• 🌐 Proxy & Network Guide — Proxy rotation formats, health checks, and regional VPN troubleshooting.

• 🖼️ Media & Output Gallery — Video demonstrations, terminal recordings, and screenshot previews.

🐍 Python Library Mode

Integrate the User Scanner engine directly into your Python scripts:

import asyncio
from user_scanner.core import engine
from user_scanner.email_scan.shopping import etsy

async def main():
    # Engine validates target against module and returns Result object
    result = await engine.check(etsy, "test@gmail.com")
    print(result.to_json())

asyncio.run(main())

💡 *For complete Python API documentation and batch category checking examples, see docs/USAGE.md.*

📜 Contributing

We welcome community contributions! Please read our Contributing Guidelines before opening a PR or submitting new scan modules.

⚠️ Disclaimer

This tool is provided strictly for educational purposes, authorized security research, and defensive OSINT investigations. The developers assume no liability and are not responsible for any misuse, unintended consequences, or legal actions resulting from the deployment of this software.