dOsint – Deep OSINT Reconnaissance Tool

dOsint is a modular, passive-first OSINT reconnaissance tool written in Python.
Its main goal is to help security researchers, bug bounty hunters and red teamers quickly map a target's external attack surface using public data sources.

Focus: speed, modularity, minimal footprint, Obsidian-friendly output

🎯 Current Modules

Module	Technique	Data Source	Sends packets to target?	Output examples
Subdomain enum	Certificate Transparency logs	crt.sh	No	dev, staging, api, admin, old, test...
DNS reconnaissance	Common record types lookup	Public DNS resolvers	No	TXT (SPF, DMARC, keys?), MX, NS, A, CNAME
Web metadata scrape	Filetype-specific crawling	Target website	Yes (light)	Author names, software versions, internal paths
(planned) Shodan	Exposed services & banners	Shodan API	No	open ports, IoT, VPN endpoints, server types

🛠️ Tech Stack

Python ≥ 3.9 ├── requests → HTTP / JSON APIs ├── dnspython → DNS queries ├── beautifulsoup4 → HTML parsing ├── colorama → colored terminal output ├── aiohttp (planned) → faster async HTTP └── python-dotenv → API key management 📥 Installation

1. Clone repository

git clone https://github.com/Trifalic47/dOsint.git
cd dOsint

2 Run installation script

sudo chmod +x ./install.sh
sudo chmod +x ./run.sh

3 Run Tool

./run.sh -h
./run.sh -d youtube.com -p https -w e.txt --save test 

textTarget domain (without http/https): example.com

[*] Starting passive reconnaissance on example.com
[>] Subdomain enumeration via crt.sh ........ 47 found
[>] DNS record enumeration .................. 6 records
[>] Metadata & file analysis ................ 3 interesting files
[✓] Report saved → reports/example.com-2025-08-17.md
📄 Obsidian Integration (Recommended)
dOsint automatically creates markdown reports compatible with Obsidian:

Saves files in folder name you gave using --save <dirName> flag
Uses frontmatter + clean hierarchy
Adds helpful tags: #target #recon #osint #pending-review

Recon Report: example.com

⚠️ Legal & Ethical Reminder This tool is provided for educational purposes and authorized security testing only. The author is not responsible for misuse or damage caused by this software. Always obtain explicit permission before testing any target you do not own. 📋 Roadmap (planned features)

Asynchronous HTTP client (aiohttp) Shodan & Censys integration Email harvesting from crawled pages Wayback Machine / common.js analysis Passive SSL certificate fingerprinting JSON / CSV export besides Markdown Configurable rate-limiting & proxy support

📄 License MIT License Made with 🖤 by r00tgr3p textThis version looks professional yet shows that the project is still growing. Feel free to modify version numbers, add badges, shields.io icons, or change the tone to be more aggressive / stealth depending on your target audience.

Good luck with the project!