Spiderfoot

Give it a domain, IP, email address or name and SpiderFoot fans the target out across more than 200 modules. Each module hits a different public data source, and what comes back is correlated into something you can actually walk through. Results export as CSV, JSON or GEXF, raw data lands in SQLite so you can query it directly, and correlation rules are written in YAML. TOR integration is there for sources that need it. An embedded web server serves the browser UI, the command line does the same job, and it runs on Python 3.7 or newer under an MIT license.