
OTInstaller
com.otinstaller由 otinstaller.com 發布v0.16.1更新於 Oct 25, 2026
Install and run open-source OSINT tools in a local sandbox, asking before runs that touch a target.
發布方自己的服務:OTInstaller Registry
概覽
讓助理在本地容器沙箱中安裝並執行開源 OSINT 工具,涉及目標的執行會先徵求確認。
- 可以做什麼
- 搜尋 OTInstaller 登錄庫,並安裝、更新或移除 OSINT 工具
- 以具型別的輸入(使用者名稱、電子郵件、網域、電話、IP、URL)執行工具,並以統一 JSON 儲存結果
- 檢視過去的執行紀錄,並取得根據本次發現建議下一步該執行什麼
- 將某次執行的結果產生 24 小時有效的分享連結
- 執行內建 playbook,或針對某個目標自動執行所有相符的已安裝工具
- 為需要 API 金鑰的工具設定金鑰,金鑰保存在作業系統鑰匙圈中
- 適用情境
- 適合需要助理以經過篩選的開源工具對電子郵件、使用者名稱、網域、電話、IP 或 URL 進行 OSINT 查詢,而使用者不想複製儲存庫或管理 Python 環境的情境。
- 執行需求
- 以本地程序在使用者桌面上執行,ot 執行檔需位於 PATH 中。需要 Docker Desktop 或 Podman 正在執行,cosign 為選用,用於驗證映像簽章。部分工具需要 API 金鑰,透過命令列設定並保存在作業系統鑰匙圈。需要網路存取登錄庫與容器映像。
安裝
在 SourceWeft 中
- 開啟 儀表板中的 OTInstaller,將其新增到工作區。
- 為需要使用其工具的對話啟用該服務。
Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。
其他 MCP 客戶端
參照 儲存庫 中的啟動說明。
README
ot
ot is the OSINT package manager. One command installs, runs, updates or removes any tool in the
OTInstaller registry, the largest registry built only for OSINT tools (over 130 of them).
No more cloning repositories, fixing Python versions and learning each tool's flags: every tool takes the same typed
inputs, runs in a container that can't read your files, and saves its result in the same JSON shape.
Get started
Put ot (or ot.exe) somewhere on your PATH. Tools run in containers, so Docker Desktop or Podman must be running;
with cosign installed, ot also verifies each image's signature. Then set it up:
ot start asks at a terminal; ot start --tools <ns/name> --yes does the same from a script, and
https://otinstaller.com/start builds the command for you.
Run tools
Typed inputs fill the matching input of any tool: u: username, e: email, d: domain, p: phone, ip: IP address
and url: URL. Or let ot pick: ot auto [email protected] runs every installed tool that takes an email address,
and on a fresh machine offers to install a bundled playbook's tools first. ot playbook --list shows the playbooks.
Tools that need an API key say so; ot keys setup walks you through them, and keys stay in your OS keychain.
Scripts, CI and AI agents
--json(orOT_OUTPUT=json) gives JSON output and one-line JSON errors on stderr, andotnever prompts without a terminal. See https://otinstaller.com/docs/automation.ot mcp install claude(orclaude-desktop,cursor,vscode,codex,gemini) adds ot's MCP server to your client. Agents ask you before any run that touches a target. See https://otinstaller.com/docs/agents.
Updates
ot outdated lists installed tools with newer versions and ot update --all installs them. ot self-update
installs a new release of ot after checking its signature.
Telemetry
ot counts installs and runs of registry packages, so the registry can show which tools are used and which versions
fail. A count carries the tool and its version, how a run ended and how long it took, the container engine, what
started it (a command, CI or an AI agent), and your OS, architecture and ot version. It never carries your inputs,
targets or results, file paths, run ids, case names, keys or tokens, and tools installed from a local manifest are
never counted. The registry keeps daily totals only.
Turning it off also stops the offer to report a failed run; DO_NOT_TRACK stops the daily update check too. Details:
https://otinstaller.com/policy/privacy
Links
Docs: https://otinstaller.com/docs/getting-started · CLI reference: https://otinstaller.com/docs/cli · Bugs and ideas: https://github.com/OTInstaller/feedback/issues · Source: https://github.com/OTInstaller/otinstaller
Licensed under the Apache License 2.0 (LICENSE).
來源:cli/README.md,提交 cd330f6
工具
0版本歷史
5- v0.16.1最新Oct 25, 2026
- v0.16.0Oct 24, 2026
- v0.15.0Oct 23, 2026
- v0.14.0Oct 23, 2026
- v0.13.1Oct 21, 2026
評分
已滿足適用檢查項的 50%
該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。
- 近 30 天內可連通25 分
請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。
- 已宣告認證方式10 分
請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。
- 已列出工具15 分
請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。
- 描述必需15 分
- 圖示10 分
- 文件15 分
- 授權條款10 分