OSINT

👀 The board — what you see

One live list of your machine's connections, refreshed as they come and go. Each row is plain:

• STATE — what the connection is doing (connected, listening, closing…).
• LOCAL — your side: this machine's address and port.
• REMOTE — the other side: the outside address and port.
• TAG — your own label for an address, if you wrote one. A label never hides a warning.
• HOST — the other side's name, where it can be found. A plain “—” where it can't — never a guessed name.
• VERDICT — the plain answer below.

Click any row and the detail pane shows everything the checks found about that address — who runs the network, roughly where it is, what the lists say — so you can judge for yourself.

⚖️ The verdicts — honest, or nothing

• KNOWN SAFE — the address is positively identified as a known, legitimate service, and nothing bad was found in any check.
• NO BAD REPORTS — none of the public lists checked have anything bad to say about this address. That is not a promise it's safe — it means nobody has reported it.
• SUSPICIOUS — nobody has proven this address bad, but something about it doesn't look right. Worth a closer look — the pane shows what raised the flag.
• KNOWN BAD — this address is on a public list of known-bad addresses. Treat the connection as dangerous until you know exactly why it's here.
• CHECKING… / NOT CHECKED / LOOKUP FAILED / OFFLINE — CACHED ONLY — when a check can't answer, OSINT says so, in those words. It never guesses a “safe” it did not earn.

🔎 The checks — they run when YOU say

The check buttons run only on the connection you picked, and only when you click that check's own button. Nothing picked means no lookup goes out at all. Pick a row that has since closed and the pane tells you in plain words, instead of quietly checking some other connection.

• GreyNoise works out of the gate — no key, no account. Press the button and the community lookup answers for real. A key of your own, if you add one, just raises the daily limit.
• The known-bad lists come to you — the abuse.ch Feodo Tracker and SSLBL lists and the CISA Known Exploited Vulnerabilities catalog are downloaded whole and checked on your own machine.
• Optional keys, all yours — add your own VirusTotal, AbuseIPDB, or abuse.ch key in Settings to turn on the deeper checks. Off until you add them; the guide below walks you through every one.

↕️ Sort it, filter it

Click a column name — STATE, LOCAL, REMOTE, TAG, HOST, VERDICT — and the board re-orders by that column; click again to flip it. VERDICT sorts by danger, worst first, and addresses sort by their real numbers, not their spelling. The filter row cuts the board down to just the rows you care about — one verdict, or your own text — and the counter tells you the truth: showing X of Y. Filtering changes only what you see; every connection is still checked exactly as before, and nothing is sent anywhere.

🔒 Your machine, your business

Your keys live in one file on your computer only — osint_settings.json, sitting next to the program, locked to your account alone (permissions 0600). Your keys are never part of any download, never printed in any log, and never sent anywhere except to their own service when you run its check. Save Settings saves everything you set, for good.

Only the outside addresses already on your board are ever sent anywhere, and only to the public intel services named in the program. Addresses on your own network — and this machine itself — are never sent. No accounts, no telemetry, no update checks, no servers of ours — none.

⬇️ Downloads

✨ NEW — the Multi Lang Update, now in English · Español · Deutsch (2026-10-30)

The language edition of OSINT 1.0 — the confusion-fix edition below, now speaking three languages. Everything our own review found unclear, fixed. It sits beside the original 1.0 downloads below; both stay available. What changed, in plain words:

• Settings fits and scrolls — on 1024×600 and 800×600 screens alike, with Save always visible in a fixed bottom bar, a labeled “Close — back to the board” button, and a warning before unsaved edits are lost. (Before, Save could hide below the screen.)
• The board speaks plain words — the TAG column says “OUTSIDE — not tagged” instead of a code; lookups announce “check finished” beside their buttons; VirusTotal and URLhaus always print a line — found, nothing found, off, or failed — never silence.
• A Help menu with 10 plain-words topics, tooltips on every non-obvious control, and an opening line that says what OSINT is. The board scrolls with the mouse wheel, and nothing clips at small sizes.
• Both manuals ride inside the package now — How It Works joins Getting Your Keys — and the Help menu can open them.
• Nothing of yours is deleted: the only files OSINT ever removes are its own downloaded cache files, when you press Clear Intel Cache — and that button now warns, before the click, exactly what it deletes (keys and settings are never touched).
• Preserved and re-proven: the detail-pane scroll and selection behavior from the final hands-on testing round — the full regression battery (scroll · selection · sort/filter · settings · GreyNoise · board and buttons) re-ran green on this build.
• Spanish + German edition (2026-10-30): the whole app — board, details, verdicts, Settings, Help and both manuals — now speaks English, Español and Deutsch. Pick your language with the globe button on the main screen; your choice is saved on your own computer. Everything else is the Multi Lang Update build, unchanged: the TEST4 scroll/selection behavior is preserved and re-proven.

Download OSINT — Multi Lang Update for Linux

Unpack it — inside is the program OSINT, the full source osint.py, short READMEs in all three languages, and the PDF manuals in English, Spanish and German. Make the program runnable with chmod +x OSINT, then run ./OSINT. No install, no administrator rights.
SHA-256: ea45f288f331cd79d769a36a4f5cc1fac1d3c69caa6df77a03a1f12390ba966a (tarball, 14.2 MB)

Windows: the Multi Lang Update has landed — the Windows download below is now this same edition: the program in six languages (English, Español, Deutsch, 中文, 日本語 and isiZulu), with the connection board alive on Windows, reading live from Windows' own connection table. Steven compiled it in the house Windows guest from this same source and verified it personally.
SHA-256: 62d80d23f990b98556d245bcb54846bf30ce185a258aab4b96811405f3e109a0 (zip, 23.6 MB)

🐧 The program — Linux (1.0, 2026-10-29)

Download OSINT for Linux

Unpack it — inside is the program OSINT, the full source osint.py, a short README, and the Getting Your Keys guide. Make the program runnable with chmod +x OSINT, then run ./OSINT. No install, no administrator rights.
SHA-256: 2ff6787f2c854144eb679e6d223b7eb549398916fe165cae8f06efd076e684f4 (tarball, 13.9 MB)

This build carries the fix from the final round of hands-on testing: when you scroll down to read a connection's details, the board's refreshes now hold your place — the reading stays put while the board keeps updating around it.

Built Linux first, like every 777 Software program.

🪟 The program — Windows (1.0 · Multi Lang Update, 2026-10-30)

Download OSINT for Windows

Inside the zip is the program OSINT.exe, its console twin OSINT-Console.exe, READMEs and run guides in English, Spanish and German, and the two manuals in all three languages. Double-click OSINT.exe and the board fills with your live connections. No install, no administrator rights.
SHA-256: 62d80d23f990b98556d245bcb54846bf30ce185a258aab4b96811405f3e109a0 (zip, 23.6 MB)

The same proven program, built for Windows from the same source — the Windows board reads live from Windows' own connection table.

FREE. Download it, run it, keep it. Free forever — we do not charge people for protecting themselves with our tools.

📖 The manuals (PDF)

Both manuals are ready to read whether or not the program is on your machine yet — the full picture of what OSINT does, and the step-by-step key guide.

OSINT — How It Works (PDF)
The program manual — the board, the verdicts, the checks, sort + filter, and the honest limits. 10 pages · SHA-256: ad485674cf55f735cad3c94931ce64d7da45ab52f91c910eccabe5aeb7c541f2

OSINT — Getting Your Keys (PDF)
Where to get each key and how to put it in, step by step — including the honest word on GreyNoise, which needs no key at all. 7 pages · SHA-256: b6fd89f65ab18d6530dca3e32919e602e35f051078006fc557ef292e35ab84a0

Both manuals are also published in every other language OSINT speaks:

Español (Spanish)
OSINT — How It Works (PDF) · 10 pages · SHA-256: d9f19af8c59e8f0d2e388920977a4ccb80fe678a5ebc179c44408365b130334c
OSINT — Getting Your Keys (PDF) · 7 pages · SHA-256: 02610d4f8f4792b7a306ae702967b66a698b0a29db4c9fa76e8265757365d482

Deutsch (German)
OSINT — How It Works (PDF) · 9 pages · SHA-256: 8778967ce529f655e6d6ce66b7374958fe8c7241cc65f84bdffdd6fe351a344d
OSINT — Getting Your Keys (PDF) · 7 pages · SHA-256: 965d0e2e3903e2d01a218283cffba38ec5467b9650caaa87e4532cf10d75d511

中文 (Chinese)
OSINT — How It Works (PDF) · 8 pages · SHA-256: 60093c5eefb2a6570c6769080d7a30ac184509da75f2695b728f3a1393434c17
OSINT — Getting Your Keys (PDF) · 6 pages · SHA-256: 5753b332354f89175306fff73667bcfc15f7736eca3e5af285cccde6aa63ca16

日本語 (Japanese)
OSINT — How It Works (PDF) · 9 pages · SHA-256: f9b0ad6fc7e6634581396c6b22c8700fdab03df5534d210bc8eb7783776d8fda
OSINT — Getting Your Keys (PDF) · 7 pages · SHA-256: 6a9c58fe8ec5cebf96a528b99c38ce9e124552121da2007c20227be1fa24f9b0

isiZulu (Zulu)
OSINT — How It Works (PDF) · 10 pages · SHA-256: fcc1d330eb3e0ac798aa67c4b550efa2df706ae0087533dd098d7fe7d0cd5119
OSINT — Getting Your Keys (PDF) · 7 pages · SHA-256: c629472d80cc394f355b09e114f39f94e657ce708e2eedfe528b29cc4c047110