Octopii

Why we included this project

Octopii finds personal data that has leaked onto the open internet, a job that falls to security teams and penetration testers. Point it at a local folder, an S3 bucket, or an Apache open directory listing, and it pulls out government IDs, addresses, emails, and phone numbers from images, PDFs, and documents using OCR, regular expressions, and NLP. It also classifies the type of PII it finds, guesses the country of origin, and counts faces in images, which makes it handy for showing how easily a misconfigured server can expose sensitive records. The whole thing runs from a single Python script with a sample dataset included, so you can point it at a directory or URL and get a structured JSON report of what was exposed. That makes it a practical starting point for exposure audits and red-team demos of data leakage.