Been learning web security for a while and kept jumping between different
tools for every recon task so I just built my own.
It's a Python script with a terminal menu. Give it a URL and it runs
subdomains, directory bruteforce, JS secret scanning, DNS, headers, SSL,
CORS, Shodan, VirusTotal, email security, username search across 30 platforms,
GitHub commit email mining. Spits out a report at the end automatically.
No API keys needed for any of it.
The JS secret detection took a while to get right. Pure regex gives too much
noise so I added Shannon entropy scoring on top to filter out placeholders
and test values automatically.
Everything gets stored in DuckDB so you can query findings with SQL which is
way cleaner than digging through JSON.
If you want to check it out: github.com/FlowThingy/FlowOsint
Top comments (0)