Skip to content
Osint Daily
SponsoredOctoProbe house ad, 300 by 250 pixels, published 16 Oct 2026. Still frame of the square with the OctoProbe wordmark and the line One workspace for the investigation.
Osint Daily cover for Shadowbroker, under Threat intelligence, published 16 Oct 2026. The right side is a monogram because no capture is filed. A self-hosted map of public flight, satellite, and.

01 · Product name

Shadowbroker

A self-hosted map of public flight, satellite, and seismic feeds.

Published by BigBodyCobain.

FreeGUIThreat intelligence

In short

Shadowbroker is the situational dashboard in BigBodyCobain/Shadowbroker. On 19 Oct 2026 the SPDX field was AGPL-3.0. The latest GitHub release was v0.9.84, published 2026-08-05. The README starts the stack with Docker and opens http://localhost:3000. Docker was not available here, so the dashboard was not started. The README's data-source table names OpenSky, adsb.lol, CelesTrak, USGS, and GDELT, among others. A layer that plots a flight or a satellite is the feed's report. It is not a warrant, and this listing does not explain how to follow a named person.

GitHub

Product pricing strategy

02

Free

The SPDX field on 19 Oct 2026 was AGPL-3.0. The README did not print a dollar price for the dashboard. AGPL-3.0 is the repository license, and the README's copyleft note is the project's. Several feeds in the README's table require a key: OpenSky, aisstream.io, Shodan, and Global Fishing Watch are marked yes. A key those upstreams charge for is their price, not a Shadowbroker plan. This listing did not open those signups and does not invent a number. Feeds marked no key, including adsb.lol, CelesTrak, USGS, and GDELT, are still someone else's data with their own terms. No checkout was found on the GitHub repository. If a hosted copy of this map is sold later, cite that host's page.

Utility and features

03

The README describes a Docker stack whose web view is http://localhost:3000, and a desktop shell built with Tauri. This listing followed neither path, because Docker was not installed on the review machine and no desktop package was launched. The latest GitHub release on 19 Oct 2026 was v0.9.84, published 2026-08-05T19:22:06Z. The SPDX field is AGPL-3.0. The README also names a GitLab container mirror. The repository this listing cites is the GitHub one. There is no screenshot, because a README image of a map is not a session this machine opened.

  • Release v0.9.84. Published 2026-08-05. The SPDX field is AGPL-3.0. The README opens the web view at localhost:3000 after Docker starts.
  • The map was not started. Docker was not available on this machine. No dashboard session and no README map image is filed.
  • Feeds stay attributed. OpenSky, adsb.lol, CelesTrak, USGS, and GDELT are rows in the README's table, each with the key note that table prints.

The README's data-source table, not a live map, is the list quoted here. OpenSky is listed for commercial and private flights, about 60 seconds, API key yes. adsb.lol is listed for military aircraft, about 60 seconds, no key. aisstream.io is listed for AIS vessel positions, key yes. CelesTrak is listed for satellite positions from TLE and SGP4, about 60 seconds, no key. USGS Earthquake is listed for seismic events, about 60 seconds, no key. GDELT is listed for conflict events, about six hours, no key. The same table also names DeepState Map, Shodan, OpenSanctions, abuse.ch, CISA KEV, and other feeds, each with its own key note. Those intervals are the README's. They were not timed here. The project description on GitHub talks about private aircraft. This page does not add a method for following a person, a tail number, or a residence.

  1. 1

    Read the data-source table and separate the feeds that need a key from the ones that do not.

  2. 2

    Start the stack only where you can keep the AGPL-3.0 duties, and cite the feed next to any dot you brief.

  3. 3

    Do not turn a flight layer into a writeup of how to follow a named person.

Caveats

04

v0.9.84 is the latest GitHub release, published 2026-08-05. The README's install instructions were read on 19 Oct 2026 and do not print a newer tag. Do not treat a commit pushed after the release as v0.9.84. The dashboard was not started. There is no aircraft count, no satellite count, and no earthquake from this review to put in a sentence.

The source table is the README's. An update interval of about 60 seconds, or about six hours for GDELT, was not measured. OpenSky's key is the README's requirement for the commercial and private flight layer. A missing key, the README says, leaves gaps. A dot on a map is the feed's position report. It is not an identity, not a conclusion about a passenger, and not a reason to publish a method for tracking a private person. AGPL-3.0 still applies if you serve a modified copy.

Potential use cases

06

  • A briefing wants a self-hosted map of public feeds. Read the README's data-source table rather than a screenshot of a map this listing did not open. On 19 Oct 2026 that table listed OpenSky with a key, adsb.lol without one, CelesTrak without one, USGS without one, and GDELT at about six hours. The SPDX field was AGPL-3.0. The latest release was v0.9.84, published 2026-08-05.
  • Docker is assumed to be running. The README opens http://localhost:3000 after Docker starts. Docker was not available here, so there is no aircraft count, satellite count, or earthquake from this review. The intervals in the table were not timed. A GitLab mirror is the README's second registry. The repository cited here is the GitHub one.
  • The project description mentions private aircraft, and someone wants a method for following a named person. This listing does not add one. A dot is the feed's position report. It is not a passenger list and not a residence. Cite the feed. Leave tail-number surveillance out of the public note.

Hard cases

The case where the first result is easy to over-read.

A README map is treated as live

The dashboard was not started. Any aircraft, front line, or satellite in a README image is the project's illustration, not a session from 19 Oct 2026. Quote the source table and the release v0.9.84. If a key is marked yes, say the layer was not opened rather than describing the picture.

Practitioners using it

Posts on X from people describing a concrete use. The quote is the post. Likes and reposts are the counts saved with it, not a live total. A label marks a creator, a maintainer, a vendor, a partner, a data partner, or an investor.

Questions

Is Shadowbroker free?

The SPDX field on 19 Oct 2026 was AGPL-3.0, and the README printed no dashboard price. Feeds marked as requiring a key may have their own upstream cost.

Was the dashboard opened?

No. The README says Docker, then http://localhost:3000. Docker was not available, so there is no live map to describe.

Citations

07

Titled sources. These public pages are what the quotes on this listing come from.

When this listing changes, the letter says so.

Developments in OSINT. Confirm from your inbox before the first issue.

Only for this letter. Privacy

Related tools

Freemium

Flightradar24

A live map of aircraft built from receiver data.

Geolocation & imageryGUI
View listing
Freemium

OpenSanctions

Sanctions and PEP data. Free for non-commercial use.

Investigative data & public recordsAPI
View listing