👻 GhostIntel v2.5

The Ultimate API-Free OSINT Framework

Zero API Keys • 100% Public Data • Made in Indonesia

GhostIntel is a powerful, API-free OSINT framework that helps you investigate publicly available data about usernames, emails, phone numbers, domains, and IP addresses.

💡 How it works: Just type a target — username, email, phone, domain, or IP — and GhostIntel scans hundreds of public sources to find everything connected to it.

Developed by Ruyynn — Made in Indonesia, for the global cybersecurity community.

GhostIntel stands out because it's built for real investigations — not just another wrapper around paid APIs.

   ✓  ZERO API KEYS       →  No registration, no payments, just pure OSINT    
   ✓  ASYNC & FAST        →  10x faster than other free tools                 
   ✓  AUTO DETECT         →  Input anything, GhostIntel figures it out        
   ✓  WEB UI              →  Localhost dashboard with dark/light theme        
   ✓  8 COUNTRIES         →  Phone OSINT: ID/US/GB/MY/IN/AU/SG/PH             
   ✓  129+ PLATFORMS      →  Most comprehensive username checker              
   ✓  BREACH DETECTION    →  Email alerts with risk scoring                   
   ✓  BATCH PROCESSING    →  Scan hundreds of targets at once                 
   ✓  ROTATING USER-AGENT →  14+ UAs to avoid being blocked                                                                                               

This is a MAJOR upgrade from v2.0. Here's what's new:

v2.5 is the most complete version yet — with Web UI, breach detection, and 8 countries for phone OSINT!

# Clone the repository
git clone https://github.com/ruyynn/GhostIntel.git
cd GhostIntel

# Install dependencies
pip install -r requirements.txt

# Verify installation
python ghostintel.py -h

# 👤 Username investigation
python ghostintel.py -u ruyynn

# 📧 Email with breach detection
python ghostintel.py -e [email protected] --report

# 📱 Phone number (Indonesia)
python ghostintel.py -p 08123456789

# 🌐 Domain recon with tech detection
python ghostintel.py -d example.com --deep

# 🌍 IP geolocation + risk score
python ghostintel.py -i 8.8.8.8

# 🌐 Launch Web UI (NEW!)
python ghostintel.py -web

The biggest feature in v2.5! GhostIntel now has a beautiful web interface.

python ghostintel.py -web
# Open http://localhost:7331 in your browser

The only Indonesian OSINT tool with multi-country phone lookup!

What you get from phone scan:

• ✅ E.164, international, and national formats
• ✅ Carrier/provider detection
• ✅ Location & timezone information
• ✅ WhatsApp direct link (if mobile)
• ✅ Possible social media handles from the number

New in v2.5! GhostIntel now checks email domains against known data breaches.

python ghostintel.py -e [email protected] --report

What you get:

• 📊 Risk score (0-100) — higher = more dangerous
• 📋 Breach details — name, year, records exposed
• 🔓 Data types — what was leaked (emails, passwords, etc.)
• 🛡️ Security recommendations — what to do next

Known breaches in database:

• 🔴 Yahoo (3B records), Adobe (152M), LinkedIn (117M)
• 🔴 Facebook (533M), Twitter (5.4M), Canva (139M)
• 🔴 Tokopedia (91M), Bhinneka (1.2M), JD.ID (14M)

Check usernames across 129+ platforms simultaneously:

python ghostintel.py -d example.com --deep

DNS Records:

• A, AAAA, NS, MX, TXT, SOA, CNAME, PTR

HTTP Analysis:

• HTTP/HTTPS status codes
• Server headers, redirect chains
• Response time

Technology Detection (70+ patterns):

• CMS: WordPress, Joomla, Drupal, Shopify, Wix, Squarespace
• Frameworks: React, Vue, Angular, Next.js, Nuxt.js, Svelte
• Servers: nginx, Apache, IIS, Cloudflare, LiteSpeed, Caddy
• E-commerce: WooCommerce, Magento, BigCommerce, PrestaShop

Security Headers:

• HSTS, CSP, X-Frame-Options, X-Content-Type-Options

SSL/TLS Info:

• Certificate issuer, expiry date, days left
• DNSSEC status

python ghostintel.py -i 8.8.8.8

Geolocation:

• Country, region, city, coordinates
• Timezone, ISP, organization
• ASN with name

Threat Intelligence:

• 📊 Risk score (0-100) — based on proxy/VPN/hosting status
• 🚫 Proxy/VPN detection — identifies anonymizers
• 🏢 Hosting/datacenter detection
• 📱 Mobile network detection

RDAP Lookup:

• RIR assignment (ARIN, RIPE, APNIC, LACNIC, AFRINIC)
• Organization registration
• Abuse contact email

Generate professional reports in 4 formats:

# Generate HTML report
python ghostintel.py -u ruyynn --format html -o report.html

# Generate all formats at once
python ghostintel.py -d example.com --format all -o domain_report

# Compressed JSON (saves space)
python ghostintel.py -e [email protected] --format json --compress

Scan multiple targets from a single file:

# Create targets.txt
cat > targets.txt << EOF
ruyynn
[email protected]
08123456789
example.com
8.8.8.8
EOF

# Run batch scan
python ghostintel.py --batch targets.txt --deep --format all

Batch Options:

• --batch-delay 2 — Delay between scans (seconds, avoids rate limiting)
• --output-dir ./reports — Custom output directory
• --quiet — Suppress console output (only save reports)

Dark theme dashboard with scan history and live detection

67 platforms found for username "Ryan"

Breach alert with risk score and security recommendations

DNS records, technology stack, and SSL certificate info

Geolocation, risk score, proxy detection, and RDAP data

Interactive HTML report with collapsible modules

GhostIntel is designed for:

• ✅ Education and cybersecurity learning
• ✅ Legitimate security research
• ✅ Testing on systems you own or have permission to test
• ✅ Developing OSINT skills professionally

GhostIntel only uses public sources:

• Public DNS lookup, RDAP/WHOIS records
• Public websites and legal APIs
• Data already openly available

Prohibited use (STRICTLY FORBIDDEN):

• ❌ Doxing or exposing personal data without consent
• ❌ Stalking, harassment, or intimidation
• ❌ Illegal or criminal activities
• ❌ Accessing systems or data without authorization

By using GhostIntel, you take full responsibility for how you use this tool. The author is not responsible for any misuse.

Contributions are welcome!

1. 🍴 Fork the repository
2. 🌿 Create a branch: git checkout -b feature/amazing-feature
3. 💻 Commit changes: git commit -m 'Add amazing feature'
4. 📤 Push: git push origin feature/amazing-feature
5. 🔄 Open a Pull Request

See CONTRIBUTING.md for full guide.

• 🐛 Bug reports → GitHub Issues
• 💡 Feature ideas → GitHub Discussions
• ❓ Quick questions → DM on social media

MIT License — Feel free to use, modify, and distribute with credit to Ruyynn.