ShadowPrint

What it does

Tired of juggling Sherlock, Holehe, and HIBP separately? ShadowPrint runs them all at once. Drop in a username, email, or phone → get back platform accounts (400+ sites), breach exposure, site registrations, and phone intel in one clean report. Built for security researchers, investigators, and pen testers. Free: 5 reports/month. Pro: $19/month.

• OT
  Osint tool that finds exposed files on domainsJul 2026 · search.cerast-intelligence.com · ▲58

  hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…

• SI
  Shadow IT Scan – Uncover SaaS Apps, Users and Risky OAuth Scopes2024 · accessowl.io · ▲69

  Hey HN, TL;DR: We’ve launched a free version of our Shadow IT scanner to identify which SaaS apps are used in your company, who uses them, and if they have high-risk OAuth scopes. Philip and I went through YC with AccessOwl in 2022. We started the company because, in our previous roles, we struggled to track all the SaaS apps, users, and granted OAuth scopes. The Shadow IT scanner started as a small feature within AccessOwl, which manages SaaS vendors and user accounts centrally. But a standalone scanner would have made our lives so much easier in our previous roles. So, we thought, why not…

• 
  Shadowtrace — Find Your Public FootprintMar 2026 · shadow-trace.com

  Scan your footprint. Find breaches before someone else does.

• DD
  DevicePrint – device fingerprinting without cookiesJan 2026 · ▲21

  Hi HN, I built DevicePrint after running into problems with duplicate accounts and unreliable cookies in my own projects. DevicePrint is a lightweight device fingerprinting tool designed for developers. It helps identify devices across sessions without relying on cookies. Use cases include fraud detection, preventing duplicate signups, and security-sensitive workflows. I'd really appreciate feedback — especially around privacy concerns or edge cases you’ve run into. Link: https://deviceprint.io

• MO
  My OSINT dashboard with 60+ feeds now has a pseudonymous P2P commsMay 2026 · github.com · ▲5

  Sup HN, So a couple of months ago I posted my OSINT app ShadowBroker here and got WAY more attention than I expected. Some of the feedback was brutal, but honestly, a lot of it was right, and it made the project a lot better. And sure, I had a blast tracking billionaire jets and yachts or discovering GPS jamming in Ukraine was a thrill, and so was watching CCTV feeds from London, along with ships, satellites, conflict zones, etc., but eventually it dawned on me…where does my OSINT dashboard actually go from there? What good is all of the telemetry if people cannot communicate with each other…

• NM
  No more writing shitty regexes to police usernamesDec 2025 · username.dev · ▲19

  Every product that allows usernames eventually ships the same broken solution. Someone adds a blacklist. Then a regex. Then another regex copied from StackOverflow. It works just long enough to ship, and then `admin`, `support`, city names, brand impersonation, and obvious slurs start leaking through anyway. Everyone knows it’s fragile, but it gets ignored because "it’s just usernames". I’ve had to rebuild this logic across multiple products, and I got tired of pretending it’s a solved problem. So I built *username.dev*, an API that answers a more useful question than "is this taken?" — it…

• 
  Dograh▲592

  The open source VAPI alternative

  Dev tools · 26d ago · dograh.com

• 
  Meridian▲530

  Don't let your work go unnoticed. Get promoted!

  Dev tools · 21d ago · meridiona.com

• 
  x1▲516

  Lovable for iPhone apps go from idea to App Store

  Dev tools · 12d ago · x1.new

• 
  Open-Source eInk Bike Computer▲408

  OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.

  Dev tools · 2d ago · opentrailpaper.com

• 
  The GTM Co-Founder▲402

  Open-source GTM skills for technical founders

  Dev tools · 30d ago · gtmcofounder.com

• 
  Nuphos▲380

  The AI-Native DevOps Workspace.

  Dev tools · 25d ago · nuphos.ai

• 
  Brew ▲905

  Like Claude design for email marketing

  AI · May 2026 · brew.new

• 
  Kilo Code for VS Code▲897

  Parallel agents, diff reviewer, and multi-model comparisons

  Dev tools · May 2026 · kilo.ai

• 
  StoreClaw▲805

  Grow your store profits with agents that know how to sell

  AI · May 2026 · storeclaw.ai

• 
  PollyReach▲796

  Give your agent a real number and voice to make calls.

  AI · May 2026 · pollyreach.ai

• NW
  Needle: We Distilled Gemini Tool Calling into a 26M Model▲776

  Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…

  Life & fun · May 2026 · github.com

• FM
  Files.md – Open-source alternative to Obsidian▲730

  Dev tools · May 2026 · github.com