← Discover
Discover · GitHub · Spiderfoot↑ +294 today

Open source intelligence gathering tool

SpiderFoot is a Python tool that automates open source intelligence (OSINT) collection for threat intelligence and attack surface mapping processes. It enables detecting security vulnerabilities on digital assets by integrating various data sources.

Updates

  • September 16, 2026: Stars 21,076 → 22,178, latest release v4.0 (April 7, 2022).
  • August 15, 2026: Stars 20,026 → 21,076, latest release v4.0 (April 7, 2022).
  • August 2, 2026: Stars 18,921 → 20,026, latest release v4.0 (April 7, 2022).

What you get

  • Automatic data collection with more than 200 modules
  • Web-based interface or command line support
  • Comprehensive attack surface mapping for digital assets

Installation

Stable version installation
wget https://github.com/smicallef/spiderfoot/archive/v4.0.tar.gz
 tar zxvf v4.0.tar.gz
 cd spiderfoot-4.0
 pip3 install -r requirements.txt
 python3 ./sf.py -l 127.0.0.1:5001
Development version installation
git clone https://github.com/smicallef/spiderfoot.git
 cd spiderfoot
 pip3 install -r requirements.txt
 python3 ./sf.py -l 127.0.0.1:5001

Running it

Starting the interface
python3 ./sf.py -l 127.0.0.1:5001

If you don't write code

🤖 Paste this into your AI agent (Claude Code · Codex · Antigravity)

I want to initiate an OSINT scan on a target using the SpiderFoot tool. My target is a domain/IP address. What steps should I follow to use this tool to analyze how visible my digital assets are on the internet and what vulnerabilities they may have? Please explain how the 200+ modules work and how I should interpret the results.

Related dictionary terms

Who it is forIt is for cybersecurity professionals, penetration testers, and defense-oriented users who are curious about their organization's footprint on the Internet.
LicenseMIT

Links

TreScout did not build this tool · we found it in GitHub trends and wrote it up. This page describes the repository as of 2026-06-22: The star count and our text belong to that day, the repository may have changed since. Check the repository link for the current state. This page was machine-translated from the Turkish original · the Turkish version prevails.