Machine Viewer

GET

api

machine_viewer

stats

Machine Viewer

curl --request GET \
  --url https://www.osintcat.net/api/machine_viewer/stats \
  --header 'X-API-KEY: <x-api-key>'

const options = {method: 'GET', headers: {'X-API-KEY': '<x-api-key>'}};

fetch('https://www.osintcat.net/api/machine_viewer/stats', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://www.osintcat.net/api/machine_viewer/stats",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-KEY: <x-api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://www.osintcat.net/api/machine_viewer/stats"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-KEY", "<x-api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://www.osintcat.net/api/machine_viewer/stats")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-API-KEY"] = '<x-api-key>'

response = http.request(request)
puts response.read_body

Machine Viewer holds machines from stealer logs: the files that were taken from each one, and the passwords, tokens, cookies and payment cards found in them. Search for a machine, list its files, and read or download them.

Every Machine Viewer request counts as one lookup against your plan’s daily allowance (Max: unlimited). When the allowance is used up, requests can continue at a per-lookup price charged to your balance; a search that finds nothing is not charged. Machine IDs are UUIDs; file IDs are 20 characters.

Machine Viewer statistics

GET https://www.osintcat.net/api/machine_viewer/stats

How many machines, files, passwords, tokens, cookies and payment cards the Machine Viewer holds.

string

required

Your API key.

Response

{
  "total_machines": 100000,
  "total_files": 3000000,
  "total_passwords": 19000000,
  "total_unique_passwords": 13000000,
  "total_tokens": 150000,
  "total_cookies": 320000000,
  "total_credit_cards": 70000000,
  "total_size": 150000000000
}

cURL

curl "https://www.osintcat.net/api/machine_viewer/stats" \
     -H "X-API-KEY: YOUR_API_KEY"

SDK example The same request with the official SDKs. Each one reads your key from OSINTCAT_API_KEY.

import { OsintCatClient } from "osintcat";

const client = new OsintCatClient(); // reads OSINTCAT_API_KEY

const result = await client.machineViewer.stats();
console.log(result);

from osintcat import OsintCat

client = OsintCat()  # reads OSINTCAT_API_KEY

result = client.machine_viewer.stats()
print(result)

package main

import (
	"context"
	"fmt"

	osintcatclient "github.com/OsintCatHQ/osintcat-go/client"
)

func main() {
	client := osintcatclient.NewClient() // reads OSINTCAT_API_KEY
	result, err := client.MachineViewer.Stats(context.Background())
	if err != nil {
		panic(err)
	}
	fmt.Printf("%+v\n", result)
}

<?php
require __DIR__ . '/vendor/autoload.php';

use OsintCat\OsintCatClient;

$client = new OsintCatClient(); // reads OSINTCAT_API_KEY

$result = $client->machineViewer->stats();
echo json_encode($result, JSON_PRETTY_PRINT), PHP_EOL;

Search machines

GET https://www.osintcat.net/api/machine_viewer/search

Searches machines by name, username, hostname or machine ID.

string

required

What to search for: a name, username, hostname or machine ID.

string

required

Your API key.

Response

{
  "success": true,
  "query": "DESKTOP",
  "total": 1,
  "machines": [
    {
      "id": "742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5",
      "name": "DESKTOP-EXAMPLE",
      "imported_at": "2026-08-17T01:30:15",
      "country": "DE",
      "ip": "203.0.113.7",
      "file_count": 24,
      "total_size": 1003638,
      "has_passwords": true,
      "password_count": 108,
      "unique_password_count": 50,
      "has_tokens": true,
      "token_count": 6,
      "has_cookies": true,
      "cookie_count": 7139,
      "has_credit_cards": false,
      "credit_card_count": 0
    }
  ]
}

cURL

curl "https://www.osintcat.net/api/machine_viewer/search?query=DESKTOP" \
     -H "X-API-KEY: YOUR_API_KEY"

SDK example The same request with the official SDKs. Each one reads your key from OSINTCAT_API_KEY.

import { OsintCatClient } from "osintcat";

const client = new OsintCatClient(); // reads OSINTCAT_API_KEY

const result = await client.machineViewer.search({
    query: "DESKTOP"
});
console.log(result);

from osintcat import OsintCat

client = OsintCat()  # reads OSINTCAT_API_KEY

result = client.machine_viewer.search(
    query="DESKTOP",
)
print(result)

package main

import (
	"context"
	"fmt"

	osintcat "github.com/OsintCatHQ/osintcat-go"
	osintcatclient "github.com/OsintCatHQ/osintcat-go/client"
)

func main() {
	client := osintcatclient.NewClient() // reads OSINTCAT_API_KEY
	request := &osintcat.SearchMachineViewerRequest{
		Query: "DESKTOP",
	}
	result, err := client.MachineViewer.Search(context.Background(), request)
	if err != nil {
		panic(err)
	}
	fmt.Printf("%+v\n", result)
}

<?php
require __DIR__ . '/vendor/autoload.php';

use OsintCat\OsintCatClient;
use OsintCat\MachineViewer\Requests\SearchMachineViewerRequest;

$client = new OsintCatClient(); // reads OSINTCAT_API_KEY

$result = $client->machineViewer->search(
    new SearchMachineViewerRequest([
        'query' => 'DESKTOP',
    ]),
);
echo json_encode($result, JSON_PRETTY_PRINT), PHP_EOL;

Machine details

GET https://www.osintcat.net/api/machine_viewer/machines/{machine_id}/info

One machine, with the e-mail addresses and tokens found on it.

string

required

Machine ID (a UUID), from machineViewer.search.

string

required

Your API key.

Response

{
  "success": true,
  "machine": {
    "id": "742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5",
    "name": "DESKTOP-EXAMPLE",
    "imported_at": "2026-08-17T01:30:15",
    "country": "DE",
    "ip": "203.0.113.7",
    "file_count": 24,
    "total_size": 1003638,
    "has_passwords": true,
    "password_count": 108,
    "unique_password_count": 50,
    "has_tokens": true,
    "token_count": 6,
    "has_cookies": true,
    "cookie_count": 7139,
    "has_credit_cards": false,
    "credit_card_count": 0
  },
  "emails": [
    "user@example.com"
  ],
  "tokens": [
    "example-token"
  ]
}

cURL

curl "https://www.osintcat.net/api/machine_viewer/machines/742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5/info" \
     -H "X-API-KEY: YOUR_API_KEY"

SDK example The same request with the official SDKs. Each one reads your key from OSINTCAT_API_KEY.

import { OsintCatClient } from "osintcat";

const client = new OsintCatClient(); // reads OSINTCAT_API_KEY

const result = await client.machineViewer.machine({
    machine_id: "742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5"
});
console.log(result);

from osintcat import OsintCat

client = OsintCat()  # reads OSINTCAT_API_KEY

result = client.machine_viewer.machine(
    machine_id="742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5",
)
print(result)

package main

import (
	"context"
	"fmt"

	osintcat "github.com/OsintCatHQ/osintcat-go"
	osintcatclient "github.com/OsintCatHQ/osintcat-go/client"
)

func main() {
	client := osintcatclient.NewClient() // reads OSINTCAT_API_KEY
	request := &osintcat.MachineMachineViewerRequest{
		MachineID: "742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5",
	}
	result, err := client.MachineViewer.Machine(context.Background(), request)
	if err != nil {
		panic(err)
	}
	fmt.Printf("%+v\n", result)
}

<?php
require __DIR__ . '/vendor/autoload.php';

use OsintCat\OsintCatClient;

$client = new OsintCatClient(); // reads OSINTCAT_API_KEY

$result = $client->machineViewer->machine(
    '742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5',
);
echo json_encode($result, JSON_PRETTY_PRINT), PHP_EOL;

Machine files

GET https://www.osintcat.net/api/machine_viewer/machines/{machine_id}/files/treeview

Every file of a machine, with its path and size. Use a file’s id with machineViewer.file.

string

required

Machine ID (a UUID), from machineViewer.search.

string

required

Your API key.

Response

{
  "success": true,
  "tree": [
    {
      "id": "aB3dE5fG7hI9jK1lM3nO",
      "name": "Passwords.txt",
      "path": "Browsers/Chrome/Passwords.txt",
      "size": 4096,
      "type": "file",
      "is_password_file": true,
      "is_token_file": false
    }
  ]
}

cURL

curl "https://www.osintcat.net/api/machine_viewer/machines/742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5/files/treeview" \
     -H "X-API-KEY: YOUR_API_KEY"

SDK example The same request with the official SDKs. Each one reads your key from OSINTCAT_API_KEY.

import { OsintCatClient } from "osintcat";

const client = new OsintCatClient(); // reads OSINTCAT_API_KEY

const result = await client.machineViewer.files({
    machine_id: "742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5"
});
console.log(result);

from osintcat import OsintCat

client = OsintCat()  # reads OSINTCAT_API_KEY

result = client.machine_viewer.files(
    machine_id="742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5",
)
print(result)

package main

import (
	"context"
	"fmt"

	osintcat "github.com/OsintCatHQ/osintcat-go"
	osintcatclient "github.com/OsintCatHQ/osintcat-go/client"
)

func main() {
	client := osintcatclient.NewClient() // reads OSINTCAT_API_KEY
	request := &osintcat.FilesMachineViewerRequest{
		MachineID: "742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5",
	}
	result, err := client.MachineViewer.Files(context.Background(), request)
	if err != nil {
		panic(err)
	}
	fmt.Printf("%+v\n", result)
}

<?php
require __DIR__ . '/vendor/autoload.php';

use OsintCat\OsintCatClient;

$client = new OsintCatClient(); // reads OSINTCAT_API_KEY

$result = $client->machineViewer->files(
    '742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5',
);
echo json_encode($result, JSON_PRETTY_PRINT), PHP_EOL;

File content

GET https://www.osintcat.net/api/machine_viewer/files/{file_id}/info

One file, with its content as text.

string

required

File ID, from machineViewer.files.

string

required

Your API key.

Response

{
  "success": true,
  "info": {
    "id": "aB3dE5fG7hI9jK1lM3nO",
    "machine_id": "742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5",
    "machine_name": "DESKTOP-EXAMPLE",
    "path": "Browsers/Chrome/Passwords.txt",
    "filename": "Passwords.txt",
    "size": 4096,
    "content": "URL: https://example.com/login\nUsername: user@example.com\nPassword: hunter2",
    "is_password_file": true,
    "is_token_file": false
  }
}

cURL

curl "https://www.osintcat.net/api/machine_viewer/files/aB3dE5fG7hI9jK1lM3nO/info" \
     -H "X-API-KEY: YOUR_API_KEY"

SDK example The same request with the official SDKs. Each one reads your key from OSINTCAT_API_KEY.

import { OsintCatClient } from "osintcat";

const client = new OsintCatClient(); // reads OSINTCAT_API_KEY

const result = await client.machineViewer.file({
    file_id: "aB3dE5fG7hI9jK1lM3nO"
});
console.log(result);

from osintcat import OsintCat

client = OsintCat()  # reads OSINTCAT_API_KEY

result = client.machine_viewer.file(
    file_id="aB3dE5fG7hI9jK1lM3nO",
)
print(result)

package main

import (
	"context"
	"fmt"

	osintcat "github.com/OsintCatHQ/osintcat-go"
	osintcatclient "github.com/OsintCatHQ/osintcat-go/client"
)

func main() {
	client := osintcatclient.NewClient() // reads OSINTCAT_API_KEY
	request := &osintcat.FileMachineViewerRequest{
		FileID: "aB3dE5fG7hI9jK1lM3nO",
	}
	result, err := client.MachineViewer.File(context.Background(), request)
	if err != nil {
		panic(err)
	}
	fmt.Printf("%+v\n", result)
}

<?php
require __DIR__ . '/vendor/autoload.php';

use OsintCat\OsintCatClient;

$client = new OsintCatClient(); // reads OSINTCAT_API_KEY

$result = $client->machineViewer->file(
    'aB3dE5fG7hI9jK1lM3nO',
);
echo json_encode($result, JSON_PRETTY_PRINT), PHP_EOL;

Download a file

GET https://www.osintcat.net/api/machine_viewer/files/{file_id}/download

The file itself, as it was in the log.

string

required

File ID, from machineViewer.files.

string

required

Your API key.

Response: the file itself (application/octet-stream).

cURL

curl "https://www.osintcat.net/api/machine_viewer/files/aB3dE5fG7hI9jK1lM3nO/download" \
     -H "X-API-KEY: YOUR_API_KEY" -o file

SDK example The same request with the official SDKs. Each one reads your key from OSINTCAT_API_KEY.

import { OsintCatClient } from "osintcat";

const client = new OsintCatClient(); // reads OSINTCAT_API_KEY

const response = await client.machineViewer.downloadFile({
    file_id: "aB3dE5fG7hI9jK1lM3nO"
});
const file = await response.arrayBuffer();
console.log(file.byteLength, "bytes");

from osintcat import OsintCat

client = OsintCat()  # reads OSINTCAT_API_KEY

data = b"".join(client.machine_viewer.download_file(
    file_id="aB3dE5fG7hI9jK1lM3nO",
))
print(len(data), "bytes")

package main

import (
	"context"
	"fmt"
	"io"

	osintcat "github.com/OsintCatHQ/osintcat-go"
	osintcatclient "github.com/OsintCatHQ/osintcat-go/client"
)

func main() {
	client := osintcatclient.NewClient() // reads OSINTCAT_API_KEY
	request := &osintcat.DownloadFileMachineViewerRequest{
		FileID: "aB3dE5fG7hI9jK1lM3nO",
	}
	result, err := client.MachineViewer.DownloadFile(context.Background(), request)
	if err != nil {
		panic(err)
	}
	data, err := io.ReadAll(result)
	if err != nil {
		panic(err)
	}
	fmt.Println(len(data), "bytes")
}

<?php
require __DIR__ . '/vendor/autoload.php';

use OsintCat\OsintCatClient;

$client = new OsintCatClient(); // reads OSINTCAT_API_KEY

$result = $client->machineViewer->downloadFile(
    'aB3dE5fG7hI9jK1lM3nO',
);
echo strlen($result), " bytes", PHP_EOL;

Download a machine

GET https://www.osintcat.net/api/machine_viewer/machines/{machine_id}/download

Every file of a machine in one ZIP archive.

string

required

Machine ID (a UUID), from machineViewer.search.

string

required

Your API key.

Response: the file itself (application/zip).

cURL

curl "https://www.osintcat.net/api/machine_viewer/machines/742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5/download" \
     -H "X-API-KEY: YOUR_API_KEY" -o machine.zip

SDK example The same request with the official SDKs. Each one reads your key from OSINTCAT_API_KEY.

import { OsintCatClient } from "osintcat";

const client = new OsintCatClient(); // reads OSINTCAT_API_KEY

const response = await client.machineViewer.downloadMachine({
    machine_id: "742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5"
});
const file = await response.arrayBuffer();
console.log(file.byteLength, "bytes");

from osintcat import OsintCat

client = OsintCat()  # reads OSINTCAT_API_KEY

data = b"".join(client.machine_viewer.download_machine(
    machine_id="742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5",
))
print(len(data), "bytes")

package main

import (
	"context"
	"fmt"
	"io"

	osintcat "github.com/OsintCatHQ/osintcat-go"
	osintcatclient "github.com/OsintCatHQ/osintcat-go/client"
)

func main() {
	client := osintcatclient.NewClient() // reads OSINTCAT_API_KEY
	request := &osintcat.DownloadMachineMachineViewerRequest{
		MachineID: "742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5",
	}
	result, err := client.MachineViewer.DownloadMachine(context.Background(), request)
	if err != nil {
		panic(err)
	}
	data, err := io.ReadAll(result)
	if err != nil {
		panic(err)
	}
	fmt.Println(len(data), "bytes")
}

<?php
require __DIR__ . '/vendor/autoload.php';

use OsintCat\OsintCatClient;

$client = new OsintCatClient(); // reads OSINTCAT_API_KEY

$result = $client->machineViewer->downloadMachine(
    '742e1f66-f449-4a6c-80d5-8f5eb8e9c2b5',
);
echo strlen($result), " bytes", PHP_EOL;

See Errors for the responses every endpoint can return. An ID that is not valid is answered with 400, an unknown one with 404 NOT_FOUND.

Machine Viewer

curl --request GET \
  --url https://www.osintcat.net/api/machine_viewer/stats \
  --header 'X-API-KEY: <x-api-key>'

const options = {method: 'GET', headers: {'X-API-KEY': '<x-api-key>'}};

fetch('https://www.osintcat.net/api/machine_viewer/stats', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://www.osintcat.net/api/machine_viewer/stats",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-KEY: <x-api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://www.osintcat.net/api/machine_viewer/stats"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-KEY", "<x-api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://www.osintcat.net/api/machine_viewer/stats")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-API-KEY"] = '<x-api-key>'

response = http.request(request)
puts response.read_body

Overview

Account

Breach & Leak Data

E-mail, Phone & Network

Social & Developer Profiles

Gaming

Link Resolvers

Vehicles & Public Records

Currently Unavailable

Machine Viewer

Machine Viewer statistics

Search machines

Machine details

Machine files

File content

Download a file

Download a machine

​Machine Viewer statistics

​Search machines

​Machine details

​Machine files

​File content

​Download a file

​Download a machine

Machine Viewer statistics

Search machines

Machine details

Machine files

File content

Download a file

Download a machine