Upload files to "/"
A comprehensive, overpowered Open Source Intelligence (OSINT) gathering tool with a modern GUI. Perform deep reconnaissance on domains, emails, usernames, IP addresses, phone numbers, cryptocurrency wallets, and more - all without requiring API keys.     ## 🔥 Features ### 🌐 Domain Intelligence - **WHOIS Deep Lookup** - Complete domain registration information with age calculation - **DNS Deep Scan** - 14 different DNS record types (A, AAAA, MX, NS, TXT, SOA, CNAME, PTR, SRV, CAA, DNSKEY, DS, NAPTR, TLSA) - **Subdomain Mega Scan** - Aggressive enumeration of 300+ common subdomains with multi-threading - **SSL/TLS Analysis** - Certificate inspection, cipher analysis, and security assessment - **Tech Stack Detection** - Fingerprint 20+ web technologies and frameworks - **Certificate Transparency** - Discover subdomains via CT logs (crt.sh) - **Zone Transfer Attempts** - Automated AXFR testing ### 📧 Email Intelligence - **Deep Validation** - Format checking, MX record verification, domain validation - **Breach Mega Search** - Check against Have I Been Pwned and 4 other breach databases - **Email Permutations** - Generate 26+ common email pattern variations - **Domain Email Harvesting** - Extract emails from websites - **Disposable Email Detection** - Identify temporary/throwaway email services ### 👤 Username Intelligence - **Mega Hunt** - Search across 66+ social media and professional platforms - **GitHub Deep Dive** - Profile analysis, repository enumeration, activity tracking, organization membership - **Gaming Profiles** - Search 11 gaming platforms (Steam, Xbox, PlayStation, etc.) - **Developer Platforms** - Check 13 development sites (GitHub, GitLab, Stack Overflow, etc.) - **Multi-threaded Checking** - Concurrent platform verification for speed ### 🔍 IP/Network Intelligence - **Multi-Source Geolocation** - Location data with Google Maps integration - **Reverse DNS Lookup** - PTR record resolution - **Aggressive Port Scanning** - Top 1000 ports with service/version detection - **Reputation & Threat Intel** - 9 different threat intelligence sources - **ASN Lookup** - Autonomous System information with network classification - **Device Search Engines** - Direct links to Shodan, Censys, FOFA, ZoomEye, etc. ### 📱 Phone Intelligence - **Deep Analysis** - Number breakdown, formatting, location intelligence - **Carrier Intelligence** - Free carrier lookup resources - **Social Media Links** - Facebook, WhatsApp, Telegram search methods - **Area Code Database** - Geographic location and timezone information ### ₿ Cryptocurrency Intelligence - **Bitcoin Lookup** - 4 blockchain explorer integrations - **Ethereum Lookup** - 3 Ethereum-specific explorers - **Multi-Chain Search** - Support for 11 different blockchains - **Wallet Analysis** - Transaction history and balance checking ### 🔓 Data Leaks & Breaches - **Pastebin Search** - Search across 8+ paste sites - **GitHub Dork Generator** - 16 sensitive data search patterns - **Code Leak Search** - 6 code repository platforms - **Paste Site Monitoring** - Access to paste monitoring tools ### ⚡ Advanced Tools - **Google Dork Mega Generator** - 60+ dorks across 7 categories - **Wayback Deep Scan** - 1000+ historical snapshots via Archive.org CDX API - **Web Archive Hunt** - 5 different web archive sources - **Company Intelligence** - Business, financial, employee, and tech stack data ### 📊 Export Capabilities - **JSON Export** - Machine-readable structured data - **TXT Export** - Human-readable text reports - **HTML Reports** - Beautiful styled HTML reports with hacker theme ## 🚀 Installation ### Prerequisites ```bash # Debian/Ubuntu sudo apt update sudo apt install -y python3 python3-pip nmap git # Arch Linux sudo pacman -S python python-pip nmap git # Fedora/RHEL sudo dnf install -y python3 python3-pip nmap git ``` ### Clone Repository ```bash git clone https://github.com/yourusername/darksint.git cd darksint ``` ### Install Python Dependencies ```bash pip3 install -r darksint_requirements.txt ``` ### Make Executable ```bash chmod +x darksint ``` ## 💻 Usage ### Launch DARKSINT ```bash ./darksint ``` ### Quick Examples **Domain Reconnaissance:** 1. Navigate to the "🌐 DOMAIN" tab 2. Enter target domain (e.g., `example.com`) 3. Click "FULL RECON" for comprehensive analysis **Email Investigation:** 1. Go to "📧 EMAIL" tab 2. Enter email address 3. Click "Breach Mega Search" to check for data breaches **Username Hunt:** 1. Select "👤 USERNAME" tab 2. Enter username 3. Click "Social Media Hunt (50+)" to search 66+ platforms **IP Analysis:** 1. Open "🔍 IP/NETWORK" tab 2. Enter IP address 3. Click "Reputation+Threat Intel" for complete analysis **Export Results:** 1. Complete any scan 2. Navigate to "⚡ ADVANCED" tab 3. Choose export format (JSON, TXT, or HTML) ## 📋 Requirements ### System Requirements - **OS:** Linux (Debian, Ubuntu, Arch, Fedora, Kali, etc.) - **Python:** 3.8 or higher - **RAM:** 2GB minimum, 4GB recommended - **Disk:** 100MB for installation ### Python Dependencies - `requests` - HTTP library - `python-whois` - WHOIS lookups - `dnspython` - DNS operations - `python-nmap` - Port scanning - `beautifulsoup4` - HTML parsing - `pyOpenSSL` - SSL/TLS operations ## 🎯 Key Advantages ✅ **100% FREE** - No API keys, no subscriptions, no hidden costs ✅ **No Rate Limits** - Most features work without external APIs ✅ **Comprehensive** - 8 major intelligence categories in one tool ✅ **Fast** - Multi-threaded operations for maximum speed ✅ **Modern GUI** - Beautiful hacker-themed interface ✅ **Privacy-Focused** - All processing happens locally ✅ **Export Options** - JSON, TXT, and HTML report formats ✅ **Actively Maintained** - Regular updates and improvements ## 🔧 Technical Details ### Architecture - **Language:** Python 3 - **GUI Framework:** Tkinter (built-in) - **Threading:** Concurrent execution with ThreadPoolExecutor - **Network:** Socket programming, DNS resolution, HTTP requests - **Scanning:** Nmap integration for port scanning ### Performance - **Subdomain Scanning:** 50 concurrent threads, ~300 subdomains in 2-3 minutes - **Username Hunt:** 20 concurrent threads, 66+ platforms in 1-2 minutes - **Port Scanning:** Top 1000 ports with service detection in 3-5 minutes - **DNS Enumeration:** 14 record types checked simultaneously ### Wordlists - **Subdomains:** 300+ common entries including cloud, admin, dev, staging, production - **Email Patterns:** 26 common variations - **Google Dorks:** 60+ across file types, admin panels, config files, databases ## 🛡️ Legal & Ethical Use **IMPORTANT:** This tool is designed for authorized security testing, defensive security, penetration testing, CTF challenges, and educational purposes only. ### Acceptable Use ✅ Penetration testing with written authorization ✅ Bug bounty programs ✅ Personal infrastructure assessment ✅ Educational research ✅ CTF competitions ✅ Defensive security operations ### Prohibited Use ❌ Unauthorized network scanning ❌ Data theft or exfiltration ❌ Harassment or stalking ❌ Violation of privacy laws ❌ Any illegal activities **By using this tool, you agree to comply with all applicable laws and regulations. The developers assume no liability for misuse.** ## 🤝 Contributing Contributions are welcome! Here's how you can help: 1. **Fork the repository** 2. **Create a feature branch** (`git checkout -b feature/AmazingFeature`) 3. **Commit your changes** (`git commit -m 'Add AmazingFeature'`) 4. **Push to the branch** (`git push origin feature/AmazingFeature`) 5. **Open a Pull Request** ### Areas for Contribution - Additional subdomain wordlists - New platform integrations - Performance optimizations - Bug fixes - Documentation improvements - Translation to other languages ## 🐛 Bug Reports Found a bug? Please open an issue with: - Detailed description - Steps to reproduce - Expected vs actual behavior - Screenshots (if applicable) - System information (OS, Python version) ## 📜 License This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details. ## 🙏 Acknowledgments - **Have I Been Pwned** - Breach data API - **crt.sh** - Certificate Transparency logs - **ip-api.com** - IP geolocation service - **GitHub API** - Profile and repository data - **Archive.org** - Wayback Machine CDX API - **Nmap** - Network scanning capabilities ## 📧 Contact - **Issues:** [GitHub Issues](https://github.com/yourusername/darksint/issues) - **Discussions:** [GitHub Discussions](https://github.com/yourusername/darksint/discussions) ## ⭐ Star History If you find DARKSINT useful, please consider giving it a star! ⭐ ## 🔗 Related Projects - [theHarvester](https://github.com/laramies/theHarvester) - Email, subdomain and people discovery - [Sherlock](https://github.com/sherlock-project/sherlock) - Hunt social media accounts - [Recon-ng](https://github.com/lanmaster53/recon-ng) - Full-featured reconnaissance framework - [SpiderFoot](https://github.com/smicallef/spiderfoot) - OSINT automation --- **Made with 💚 by security researchers, for security researchers** **⚡ DARKSINT - OVERPOWERED OSINT PLATFORM ⚡**
This commit is contained in:
commit
bca3ad86e1
|
|
@ -0,0 +1,267 @@
|
|||
# ⚡ DARKSINT ⚡
|
||||
|
||||
**Advanced OSINT Reconnaissance Platform**
|
||||
|
||||
A comprehensive, overpowered Open Source Intelligence (OSINT) gathering tool with a modern GUI. Perform deep reconnaissance on domains, emails, usernames, IP addresses, phone numbers, cryptocurrency wallets, and more - all without requiring API keys.
|
||||
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
## 🔥 Features
|
||||
|
||||
### 🌐 Domain Intelligence
|
||||
- **WHOIS Deep Lookup** - Complete domain registration information with age calculation
|
||||
- **DNS Deep Scan** - 14 different DNS record types (A, AAAA, MX, NS, TXT, SOA, CNAME, PTR, SRV, CAA, DNSKEY, DS, NAPTR, TLSA)
|
||||
- **Subdomain Mega Scan** - Aggressive enumeration of 300+ common subdomains with multi-threading
|
||||
- **SSL/TLS Analysis** - Certificate inspection, cipher analysis, and security assessment
|
||||
- **Tech Stack Detection** - Fingerprint 20+ web technologies and frameworks
|
||||
- **Certificate Transparency** - Discover subdomains via CT logs (crt.sh)
|
||||
- **Zone Transfer Attempts** - Automated AXFR testing
|
||||
|
||||
### 📧 Email Intelligence
|
||||
- **Deep Validation** - Format checking, MX record verification, domain validation
|
||||
- **Breach Mega Search** - Check against Have I Been Pwned and 4 other breach databases
|
||||
- **Email Permutations** - Generate 26+ common email pattern variations
|
||||
- **Domain Email Harvesting** - Extract emails from websites
|
||||
- **Disposable Email Detection** - Identify temporary/throwaway email services
|
||||
|
||||
### 👤 Username Intelligence
|
||||
- **Mega Hunt** - Search across 66+ social media and professional platforms
|
||||
- **GitHub Deep Dive** - Profile analysis, repository enumeration, activity tracking, organization membership
|
||||
- **Gaming Profiles** - Search 11 gaming platforms (Steam, Xbox, PlayStation, etc.)
|
||||
- **Developer Platforms** - Check 13 development sites (GitHub, GitLab, Stack Overflow, etc.)
|
||||
- **Multi-threaded Checking** - Concurrent platform verification for speed
|
||||
|
||||
### 🔍 IP/Network Intelligence
|
||||
- **Multi-Source Geolocation** - Location data with Google Maps integration
|
||||
- **Reverse DNS Lookup** - PTR record resolution
|
||||
- **Aggressive Port Scanning** - Top 1000 ports with service/version detection
|
||||
- **Reputation & Threat Intel** - 9 different threat intelligence sources
|
||||
- **ASN Lookup** - Autonomous System information with network classification
|
||||
- **Device Search Engines** - Direct links to Shodan, Censys, FOFA, ZoomEye, etc.
|
||||
|
||||
### 📱 Phone Intelligence
|
||||
- **Deep Analysis** - Number breakdown, formatting, location intelligence
|
||||
- **Carrier Intelligence** - Free carrier lookup resources
|
||||
- **Social Media Links** - Facebook, WhatsApp, Telegram search methods
|
||||
- **Area Code Database** - Geographic location and timezone information
|
||||
|
||||
### ₿ Cryptocurrency Intelligence
|
||||
- **Bitcoin Lookup** - 4 blockchain explorer integrations
|
||||
- **Ethereum Lookup** - 3 Ethereum-specific explorers
|
||||
- **Multi-Chain Search** - Support for 11 different blockchains
|
||||
- **Wallet Analysis** - Transaction history and balance checking
|
||||
|
||||
### 🔓 Data Leaks & Breaches
|
||||
- **Pastebin Search** - Search across 8+ paste sites
|
||||
- **GitHub Dork Generator** - 16 sensitive data search patterns
|
||||
- **Code Leak Search** - 6 code repository platforms
|
||||
- **Paste Site Monitoring** - Access to paste monitoring tools
|
||||
|
||||
### ⚡ Advanced Tools
|
||||
- **Google Dork Mega Generator** - 60+ dorks across 7 categories
|
||||
- **Wayback Deep Scan** - 1000+ historical snapshots via Archive.org CDX API
|
||||
- **Web Archive Hunt** - 5 different web archive sources
|
||||
- **Company Intelligence** - Business, financial, employee, and tech stack data
|
||||
|
||||
### 📊 Export Capabilities
|
||||
- **JSON Export** - Machine-readable structured data
|
||||
- **TXT Export** - Human-readable text reports
|
||||
- **HTML Reports** - Beautiful styled HTML reports with hacker theme
|
||||
|
||||
## 🚀 Installation
|
||||
|
||||
### Prerequisites
|
||||
```bash
|
||||
# Debian/Ubuntu
|
||||
sudo apt update
|
||||
sudo apt install -y python3 python3-pip nmap git
|
||||
|
||||
# Arch Linux
|
||||
sudo pacman -S python python-pip nmap git
|
||||
|
||||
# Fedora/RHEL
|
||||
sudo dnf install -y python3 python3-pip nmap git
|
||||
```
|
||||
|
||||
### Clone Repository
|
||||
```bash
|
||||
git clone https://github.com/yourusername/darksint.git
|
||||
cd darksint
|
||||
```
|
||||
|
||||
### Install Python Dependencies
|
||||
```bash
|
||||
pip3 install -r darksint_requirements.txt
|
||||
```
|
||||
|
||||
### Make Executable
|
||||
```bash
|
||||
chmod +x darksint
|
||||
```
|
||||
|
||||
## 💻 Usage
|
||||
|
||||
### Launch DARKSINT
|
||||
```bash
|
||||
./darksint
|
||||
```
|
||||
|
||||
### Quick Examples
|
||||
|
||||
**Domain Reconnaissance:**
|
||||
1. Navigate to the "🌐 DOMAIN" tab
|
||||
2. Enter target domain (e.g., `example.com`)
|
||||
3. Click "FULL RECON" for comprehensive analysis
|
||||
|
||||
**Email Investigation:**
|
||||
1. Go to "📧 EMAIL" tab
|
||||
2. Enter email address
|
||||
3. Click "Breach Mega Search" to check for data breaches
|
||||
|
||||
**Username Hunt:**
|
||||
1. Select "👤 USERNAME" tab
|
||||
2. Enter username
|
||||
3. Click "Social Media Hunt (50+)" to search 66+ platforms
|
||||
|
||||
**IP Analysis:**
|
||||
1. Open "🔍 IP/NETWORK" tab
|
||||
2. Enter IP address
|
||||
3. Click "Reputation+Threat Intel" for complete analysis
|
||||
|
||||
**Export Results:**
|
||||
1. Complete any scan
|
||||
2. Navigate to "⚡ ADVANCED" tab
|
||||
3. Choose export format (JSON, TXT, or HTML)
|
||||
|
||||
## 📋 Requirements
|
||||
|
||||
### System Requirements
|
||||
- **OS:** Linux (Debian, Ubuntu, Arch, Fedora, Kali, etc.)
|
||||
- **Python:** 3.8 or higher
|
||||
- **RAM:** 2GB minimum, 4GB recommended
|
||||
- **Disk:** 100MB for installation
|
||||
|
||||
### Python Dependencies
|
||||
- `requests` - HTTP library
|
||||
- `python-whois` - WHOIS lookups
|
||||
- `dnspython` - DNS operations
|
||||
- `python-nmap` - Port scanning
|
||||
- `beautifulsoup4` - HTML parsing
|
||||
- `pyOpenSSL` - SSL/TLS operations
|
||||
|
||||
## 🎯 Key Advantages
|
||||
|
||||
✅ **100% FREE** - No API keys, no subscriptions, no hidden costs
|
||||
✅ **No Rate Limits** - Most features work without external APIs
|
||||
✅ **Comprehensive** - 8 major intelligence categories in one tool
|
||||
✅ **Fast** - Multi-threaded operations for maximum speed
|
||||
✅ **Modern GUI** - Beautiful hacker-themed interface
|
||||
✅ **Privacy-Focused** - All processing happens locally
|
||||
✅ **Export Options** - JSON, TXT, and HTML report formats
|
||||
✅ **Actively Maintained** - Regular updates and improvements
|
||||
|
||||
## 🔧 Technical Details
|
||||
|
||||
### Architecture
|
||||
- **Language:** Python 3
|
||||
- **GUI Framework:** Tkinter (built-in)
|
||||
- **Threading:** Concurrent execution with ThreadPoolExecutor
|
||||
- **Network:** Socket programming, DNS resolution, HTTP requests
|
||||
- **Scanning:** Nmap integration for port scanning
|
||||
|
||||
### Performance
|
||||
- **Subdomain Scanning:** 50 concurrent threads, ~300 subdomains in 2-3 minutes
|
||||
- **Username Hunt:** 20 concurrent threads, 66+ platforms in 1-2 minutes
|
||||
- **Port Scanning:** Top 1000 ports with service detection in 3-5 minutes
|
||||
- **DNS Enumeration:** 14 record types checked simultaneously
|
||||
|
||||
### Wordlists
|
||||
- **Subdomains:** 300+ common entries including cloud, admin, dev, staging, production
|
||||
- **Email Patterns:** 26 common variations
|
||||
- **Google Dorks:** 60+ across file types, admin panels, config files, databases
|
||||
|
||||
## 🛡️ Legal & Ethical Use
|
||||
|
||||
**IMPORTANT:** This tool is designed for authorized security testing, defensive security, penetration testing, CTF challenges, and educational purposes only.
|
||||
|
||||
### Acceptable Use
|
||||
✅ Penetration testing with written authorization
|
||||
✅ Bug bounty programs
|
||||
✅ Personal infrastructure assessment
|
||||
✅ Educational research
|
||||
✅ CTF competitions
|
||||
✅ Defensive security operations
|
||||
|
||||
### Prohibited Use
|
||||
❌ Unauthorized network scanning
|
||||
❌ Data theft or exfiltration
|
||||
❌ Harassment or stalking
|
||||
❌ Violation of privacy laws
|
||||
❌ Any illegal activities
|
||||
|
||||
**By using this tool, you agree to comply with all applicable laws and regulations. The developers assume no liability for misuse.**
|
||||
|
||||
## 🤝 Contributing
|
||||
|
||||
Contributions are welcome! Here's how you can help:
|
||||
|
||||
1. **Fork the repository**
|
||||
2. **Create a feature branch** (`git checkout -b feature/AmazingFeature`)
|
||||
3. **Commit your changes** (`git commit -m 'Add AmazingFeature'`)
|
||||
4. **Push to the branch** (`git push origin feature/AmazingFeature`)
|
||||
5. **Open a Pull Request**
|
||||
|
||||
### Areas for Contribution
|
||||
- Additional subdomain wordlists
|
||||
- New platform integrations
|
||||
- Performance optimizations
|
||||
- Bug fixes
|
||||
- Documentation improvements
|
||||
- Translation to other languages
|
||||
|
||||
## 🐛 Bug Reports
|
||||
|
||||
Found a bug? Please open an issue with:
|
||||
- Detailed description
|
||||
- Steps to reproduce
|
||||
- Expected vs actual behavior
|
||||
- Screenshots (if applicable)
|
||||
- System information (OS, Python version)
|
||||
|
||||
## 📜 License
|
||||
|
||||
This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.
|
||||
|
||||
## 🙏 Acknowledgments
|
||||
|
||||
- **Have I Been Pwned** - Breach data API
|
||||
- **crt.sh** - Certificate Transparency logs
|
||||
- **ip-api.com** - IP geolocation service
|
||||
- **GitHub API** - Profile and repository data
|
||||
- **Archive.org** - Wayback Machine CDX API
|
||||
- **Nmap** - Network scanning capabilities
|
||||
|
||||
## 📧 Contact
|
||||
|
||||
- **Issues:** [GitHub Issues](https://github.com/yourusername/darksint/issues)
|
||||
- **Discussions:** [GitHub Discussions](https://github.com/yourusername/darksint/discussions)
|
||||
|
||||
## ⭐ Star History
|
||||
|
||||
If you find DARKSINT useful, please consider giving it a star! ⭐
|
||||
|
||||
## 🔗 Related Projects
|
||||
|
||||
- [theHarvester](https://github.com/laramies/theHarvester) - Email, subdomain and people discovery
|
||||
- [Sherlock](https://github.com/sherlock-project/sherlock) - Hunt social media accounts
|
||||
- [Recon-ng](https://github.com/lanmaster53/recon-ng) - Full-featured reconnaissance framework
|
||||
- [SpiderFoot](https://github.com/smicallef/spiderfoot) - OSINT automation
|
||||
|
||||
---
|
||||
|
||||
**Made with 💚 by security researchers, for security researchers**
|
||||
|
||||
**⚡ DARKSINT - OVERPOWERED OSINT PLATFORM ⚡**
|
||||
Loading…
Reference in New Issue