Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Individual OSINT

Note: The following individual-person OSINT fetchers are available via the CLI and TUI. Use the command snippets below to invoke each fetcher, or browse the Sources tab in the TUI for real-time availability.

HIBP — Have I Been Pwned

Breach exposure lookup via the HIBP API.

Credential: HIBP_API_KEY

redshank fetch hibp --query "user@example.com"

Alias source ID (same paid API flow):

redshank fetch haveibeenpwnd --query "user@example.com"

GitHub Profiles

Public profile, repositories, and contribution history via the GitHub API.

redshank fetch github_profile --username "octocat"

GitLab Profiles

Public GitLab profile search via the GitLab Users API.

redshank fetch gitlab_profile --query "jane investigator"

Stack Exchange Profiles

Public Stack Overflow/Stack Exchange profile lookup via the Stack Exchange API.

redshank fetch stackexchange_profile --query "Jane Investigator"

Wayback Machine

Historical snapshots of a domain or URL via the Wayback CDX API.

redshank fetch wayback --url "example.com"

WHOIS / RDAP

Domain registration and RDAP lookups.

redshank fetch whois_rdap --domain "example.com"

Voter Registration

Voter roll data from state portals. Currently supports North Carolina.

redshank fetch voter_reg --state NC --last-name "Smith" --first-name "John"

USPTO Patent & Trademark

Patent and trademark filings with inventor/applicant search via the USPTO API.

redshank fetch uspto --inventor-last "Smith" --inventor-first "John"

Username Enumeration

Check username availability across 37+ platforms. Platforms configured in redshank-fetchers/pipelines/username_enum/platforms.toml.

redshank fetch username_enum --username "jsmith"

Social Profiles

Social media profile enumeration across configured platforms. Pipelines in redshank-fetchers/pipelines/social_profiles/.

redshank fetch social_profiles --username "jsmith"

Reverse Phone (Basic)

Best-effort phone normalization and country-code metadata hints (no paid identity lookup).

redshank fetch reverse_phone_basic --query "+1 415 555 2671"

Reverse Phone (Twilio)

Carrier and line-type enrichment via the Twilio Lookup API.

Credentials: TWILIO_ACCOUNT_SID, TWILIO_AUTH_TOKEN

redshank fetch reverse_phone_twilio --query "+1 415 555 2671"

Reverse Phone (Truecaller)

Paid subscriber enrichment (name/address/carrier metadata) via the Truecaller API.

Credential: TRUECALLER_API_KEY

redshank fetch reverse_phone_truecaller --query "+1 415 555 2671"

Reverse Address (Public)

Public address normalization/geocoding via the U.S. Census geocoder.

redshank fetch reverse_address_public --query "1600 Pennsylvania Ave NW, Washington, DC"