DEV Community

Christopher Studva
Christopher Studva

Posted on

Running Popular OSINT & Recon Tools Natively on macOS (No VM, No Kali)

If you do security research or OSINT on a Mac, you've hit this wall: half the
best tools are written for Linux, so the "solution" is spinning up a Kali VM or
fighting a pile of dependencies just to run one script.

I got tired of that, so I packaged several popular open-source tools to run
natively on macOS — Intel and Apple Silicon — with copy-paste setup that
a first-timer can follow. Each one is an independent macOS conversion; the
original authors and licenses are credited in every repo.

⚠️ Authorized use only. These are for legal, educational, and authorized
security testing. Only use them against systems you own or have written
permission to test.

Here's the lineup and how to run each one.

🔓 Hash-Buster — identify & crack hashes

Detects a hash's type and looks up the cracked value across multiple databases.

git clone https://github.com/reapersapprentice/Hash-Buster-macOS.git
cd Hash-Buster-macOS
pip3 install -r requirements.txt
python3 hash.py -s 5f4dcc3b5aa765d61d8327deb882cf99
Enter fullscreen mode Exit fullscreen mode

https://github.com/reapersapprentice/Hash-Buster-macOS

🌐 theHarvester — map a domain's public footprint

Gathers emails, subdomains, hosts and names for a domain from dozens of public
sources — a classic first step in an authorized assessment.

git clone https://github.com/reapersapprentice/theHarvester-macOS.git
cd theHarvester-macOS
pip3 install .
python3 -m theHarvester -d example.com -b duckduckgo
Enter fullscreen mode Exit fullscreen mode

https://github.com/reapersapprentice/theHarvester-macOS

🦅 Eagle Eye — find social profiles from a photo

Uses face recognition to match a person across social networks and builds a
tidy report. Needs a couple of Homebrew packages; the repo's Quick Start
installs them for you.

https://github.com/reapersapprentice/EagleEye-macOS

🧭 Sublist3r — fast subdomain enumeration

Rapidly enumerates a domain's subdomains from search engines and public sources.

git clone https://github.com/reapersapprentice/Sublist3r-macOS.git
cd Sublist3r-macOS
pip3 install -r requirements.txt
python3 sublist3r.py -d example.com
Enter fullscreen mode Exit fullscreen mode

https://github.com/reapersapprentice/Sublist3r-macOS

🕳️ httptunnel — tunnel a data stream over HTTP

Creates a bidirectional connection tunnelled inside HTTP. It's written in C, so
this build compiles and runs it for you inside a small container — no compiler
setup by hand.

https://github.com/reapersapprentice/httptunnel-macOS

New to the Terminal?

Every repo has a beginner section: open Terminal (Cmd ⌘ + Space → type
Terminal), run one line at a time, and paste with Cmd ⌘ + V. That's the whole
learning curve.

Why bother converting instead of just using a VM?

Because a VM is a lot of overhead for "I just want to run one recon tool." Native
means it starts instantly, uses your real filesystem, and doesn't eat 4 GB of RAM
in the background. For day-to-day OSINT on a Mac, that's a real quality-of-life
win.

If these are useful to you, a ⭐ on the repos helps others find them. More
conversions are on the way.

— C.Studva

Top comments (0)