Skip to content
/ Intel-One Public

Command line tool for passive reconnaissance, able to gather and link public information to a target domain, company or individual. It can make intelligence gathering faster and more effective by drastically reducing manual user interaction. This is achieved through the engineering of a highly customisable single input to multiple output solutio…

License

MIT license
30 stars 5 forks Branches Tags Activity
Star
Notifications You must be signed in to change notification settings

jkcso/Intel-One

BranchesTags

Repository files navigation

Intel-One

Get Started

Welcome Screen:

                  ___                       ___                         ___           ___           ___     
    ___          /__/\          ___        /  /\                       /  /\         /__/\         /  /\    
   /  /\         \  \:\        /  /\      /  /:/_                     /  /::\        \  \:\       /  /:/_   
  /  /:/          \  \:\      /  /:/     /  /:/ /\    ___     ___    /  /:/\:\        \  \:\     /  /:/ /\  
 /__/::\      _____\__\:\    /  /:/     /  /:/ /:/_  /__/\   /  /\  /  /:/  \:\   _____\__\:\   /  /:/ /:/_ 
 \__\/\:\__  /__/::::::::\  /  /::\    /__/:/ /:/ /\ \  \:\ /  /:/ /__/:/ \__\:\ /__/::::::::\ /__/:/ /:/ /\/
    \  \:\/\ \  \:\~~\~~\/ /__/:/\:\   \  \:\/:/ /:/  \  \:\  /:/  \  \:\ /  /:/ \  \:\~~\~~\/ \  \:\/:/ /:/
     \__\::/  \  \:\  ~~~  \__\/  \:\   \  \::/ /:/    \  \:\/:/    \  \:\  /:/   \  \:\  ~~~   \  \::/ /:/ 
     /__/:/    \  \:\           \  \:\   \  \:\/:/      \  \::/      \  \:\/:/     \  \:\        \  \:\/:/  
     \__\/      \  \:\           \__\/    \  \::/        \__\/        \  \::/       \  \:\        \  \::/   
                 \__\/                     \__\/                       \__\/         \__\/         \__\/ 


Version 1.0 - Written by Joseph Katsioloudes, 2018.

Please press 'help' for user manual and options.
Press exit or quit to exit the program
Please refer to 'Issues' section in GitHub for any problems you may have.

Intel-One >>

Passive Reconnaissance for an Individual (i.e John Smith) in 78 Sources:

Browser connects to all 78 sources, passes the search term and outputs results on screen automatically:

alt text

Output in Terminal:

Intel-One >> John Smith -i

---- PEOPLE SEARCH ENGINES ----
Note: We suggest to add a location to make your search more specific.
To do so, please use: <name> -i <location> -l

Search links in multiple people search engines:
https://pipl.com/search/?q=John+Smith
http://www.peekyou.com/John_Smith
http://www.canada411.ca/search/?stype=si&what=John+Smith
http://www.411.com/name/John-Smith
http://www.whitepages.com/name/John-Smith
http://forebears.io/place-search?q=John+Smith
http://search.infospace.com/search/web?q=John+Smith&searchbtn=Search
http://www.interment.net/data/search-general.htm?cx=partner-pub-1928517298809652%3A6045987309&cof=FORID%3A10&ie=ISO-8859-1&q=John+Smith&sa=Search
http://www.marketvisual.com/Search/Results?searchString=John+Smith
http://discovery.nationalarchives.gov.uk/results/r?_q=John+Smith
https://www.spokeo.com/John-Smith
https://thatsthem.com/name/John-Smith
http://www.yasni.com/John+Smith/check+people?sh
http://www.zabasearch.com/people/John+Smith/
https://network.expertisefinder.com/searchexperts?query=John+Smith
https://www.wink.com/people/?pf=&nm=John+Smith

Search in pipl search engine with location:
https://pipl.com/search/?q=John+Smith&l=


---- SOCIAL MEDIA SEARCH ----
Real time social media search:
http://socialmention.com/search?q=John+Smith&t=all&btnG=Search
https://www.social-searcher.com/social-buzz/?q5=John+Smith
https://www.social-searcher.com/google-social-search/?q=John+Smith&fb=on&tw=on&gp=on&in=on&li=on&pi=on
https://app.buzzsumo.com/research/most-shared?type=articles&result_type=total&num_days=365&general_article&infographic&video&guest_post&giveaway&interview&q=John+Smith&page=1
http://www.hashatit.com/hashtags/John+Smith
http://howsociable.com/John+Smith
http://www.uvrx.com/results-social/index.html?cx=008219812513279254587%3Ao2g7x-v-esw&cof=FORID%3A9&ie=UTF-8&q=John+Smith

Facebook search:
http://www.google.com/search?q=John+Smith+site:facebook.com

Instagram search:
http://www.google.com/search?q=John+Smith+site:instagram.com

Linkedin search:
http://www.google.com/search?q=John+Smith+site:linkedin.com

Strava search:
http://www.google.com/search?q=John+Smith+site:strava.com

Browser plugin that finds emails of people's profiles in Linkedin.
https://chrome.google.com/webstore/detail/ftl/lkpekgkhmldknbcgjicjkomphkhhdkjj?hl=en-GB

Twitter search:
http://www.google.com/search?q=John+Smith+site:twitter.com

Tweets mentioning target keyword:
https://twitter.com/search?q=John+Smith&src=typd
http://backtweets.com/search/?q=John+Smith
https://socialbearing.com/search/user/John+Smith

Trying to retrieve twitter user account birthday here:
http://twbirthday.com/John+Smith/

Specific username's twitter analytics:
https://burrrd.com/analyze?username=John+Smith
https://foller.me/John+Smith
http://gettwitterid.com/?user_name=John+Smith&submit=GET+USER+ID
https://www.hashtags.org/analytics/John+Smith/

Instagram search:
http://www.google.com/search?q=John+Smith+site:instagram.com

Instagram posts mentioning target keyword:
http://hashtagify.me/hashtag/John+Smith

Pinterest search:
http://www.google.com/search?q=John+Smith+site:pinterest.com

Youtube search:
https://www.youtube.com/user/John+Smith

Other video database search:
http://www.metacafe.com/videos_about/John+Smith/
http://www.metatube.com/en/videos/?q=John+Smith
https://www.aol.com/video/search/?q=John+Smith
https://www.bing.com/videos/search?q=John+Smith&go=Submit&qs=n&form=QBLH&scope=video&sp=-1&pq=John+Smith
http://www.blinkx.com/search/John+Smith
http://www.veoh.com/find/?query=John+Smith
http://video.search.yahoo.com/search/video;_ylt=AwrDQ2oPaMJZZysAGy36w8QF;_ylc=X1MDOTY3ODEzMDYEX3IDMgRiY2sDMjB2aGwxaGNraXJoaiUyNmIlM0QzJTI2cyUzRDkxBGZyAwRncHJpZAMEbXRlc3RpZANudWxsBG5fc3VnZwMwBG9yaWdpbgN2aWRlby5zZWFyY2gueWFob28uY29tBHBvcwMwBHBxc3RyAwRwcXN0cmwDBHFzdHJsAzYEcXVlcnkDZ2xvdmRpBHRfc3RtcAMxNTA1OTEyOTUyBHZ0ZXN0aWQDbnVsbA--?pvid=mb7ibDEwLjEgfjUMWUluMwCeMjEzLgAAAACoVxVj&fr2=sb-top-video.search.yahoo.com&p=John+Smith
http://www.earthcam.com/search/ft_search.php?term=John+Smith
https://www.liveleak.com/browse?q=John+Smith
http://voxalead.labs.exalead.com/search/?q=John+Smith&lr=&r=&l=en
https://archive.org/details/opensource_movies?and[]=John+Smith
http://www.geosearchtool.com/?q=&la=35.1327266&lo=33.31108219999999&lr=10km&tw=any&cl=&sl=John+Smith

Tumblr search:
http://www.google.com/search?q=John+Smith+site:tumblr.com

Source code search:
https://nerdydata.com/search?query=John+Smith
https://github.com/search?q=John+Smith

Reddit search:
http://www.google.com/search?q=John+Smith+site:reddit.com

Reddit posts mentioning target keyword:
http://metareddit.com/reddits/search/cloud/?query=John+Smith

Stats and Analytics on specific reddit user:
https://snoopsnoo.com/u/John+Smith
https://atomiks.github.io/reddit-user-analyser/#John+Smith
http://redditmetrics.com/r/John+Smith
https://snoopsnoo.com/u/John+Smith

Blog search on given keyword:
http://www.blogsearchengine.org/search.html?cx=partner-pub-9634067433254658%3A5laonibews6&cof=FORID%3A10&ie=ISO-8859-1&q=John+Smith
http://omgili.com/search?siteType=&q=John+Smith


---- SEARCH ENGINES ----
Google search:
http://www.google.com/search?q=John+Smith

DuckDuckGo search:
https://duckduckgo.com/?q=John+Smith

Baidu search:
http://www.baidu.com/s?ie=utf-8&f=8&rsv_bp=0&rsv_idx=1&tn=baidu&wd=John+Smith

Bing search:
https://www.bing.com/search?q=John+Smith

Qwant search:
https://www.qwant.com/?q=John+Smith&t=all

Clustering multi search:
http://search.carrot2.org/stable/search?source=web&view=folders&skin=fancy-compact&query=John+Smith
http://www.cluuz.com/Default.aspx?list=y&yahoo=y&q=John+Smith

Keyword matching search:
http://www.keywordspy.com/research/search.aspx?q=John+Smith&type=domains
https://keywordtool.io/search/google/10371113?keyword=John+Smith&country=&language=en#suggestions
https://www.wordtracker.com/search?query=John+Smith
http://www.onelook.com/reverse-dictionary.shtml?s=John+Smith

Excite news search:
http://msxml.excite.com/search/news?q=John+Smith&fcoid=411&fcop=left&om_nextpage=True&fpid=2

Fact bites news search:
http://www.factbites.com/topics/John+Smith

Search in RSS Feeds:
https://www.rsssearchhub.com/feeds?q=John+Smith
http://fetchrss.com/generator/invalid?url=John+Smith

Intel-One >>

Passive Reconnaissance for a Company (i.e Example Limited) in 85 Sources:

Browser connects to all 85 sources, passes the search term and outputs results on screen automatically:

alt text

Output in Terminal:

Intel-One >> Example Limited -c

---- COMPANY RECORDS ----
Company information and search results can be found here:
https://www.sec.gov/cgi-bin/browse-edgar?company=Example+Limited&owner=exclude&action=getcompany
https://www.corporationwiki.com/search/results?term=Example+Limited
http://www.hoovers.com/company-information/company-search.html?term=Example+Limited
https://www.glassdoor.com/Job/jobs.htm?suggestCount=0&suggestChosen=false&clickSource=searchBtn&typedKeyword=microsoft&sc.keyword=Example+Limited&locT=&locId=&jobType=
https://globaledge.msu.edu/search?q=Example+Limited
https://en.wikipedia.org/wiki/Example+Limited
https://www.canada.ca/en/sr.html?cdn=canada&st=s&num=10&langs=en&st1rt=1&s5bm3ts21rch=x&q=Example+Limited
https://www.comparably.com/search?q=Example+Limited
https://opencorporates.com/companies?jurisdiction_code=&q=Example+Limited
https://serpstat.com/keywords/?query=Example+Limited
https://www.semrush.com/info/Example+Limited
http://www.corporateinformation.com/Company-Search.aspx?s=Example+Limited
https://find.ezilon.com/search.php?q=Example+Limited&v=&x=0&y=0&f=1
https://www.ispionage.com/freeaccountv2.aspx?q=Example+Limited
https://www.owler.com/iaApp/143891/Example+Limited
http://www.marketvisual.com/Search/Results?searchString=Example+Limited
http://www.ebr.org/?s=Example+Limited

Annual reports, presentations and PDFs can be found here:
http://www.annualreports.com/Companies?search=Example+Limited
https://www.reportlinker.com/report/search/keywords/Example+Limited
http://www.authorstream.com/tag/Example+Limited
http://www.freefullpdf.com/#gsc.tab=0&gsc.q=Example+Limited
https://offshoreleaks.icij.org/search?utf8=✓&q=Example+Limited
https://www.slideshare.net/search/slideshow?searchfrom=header&q=Example+Limited

Email format of the company: 
https://email-format.com/i/search_result/?q=Example+Limited


---- SOCIAL MEDIA SEARCH ----
Real time social media search:
http://socialmention.com/search?q=Example+Limited&t=all&btnG=Search
https://www.social-searcher.com/social-buzz/?q5=Example+Limited
https://www.social-searcher.com/google-social-search/?q=Example+Limited&fb=on&tw=on&gp=on&in=on&li=on&pi=on
https://app.buzzsumo.com/research/most-shared?type=articles&result_type=total&num_days=365&general_article&infographic&video&guest_post&giveaway&interview&q=Example+Limited&page=1
http://www.hashatit.com/hashtags/Example+Limited
http://howsociable.com/Example+Limited
http://www.uvrx.com/results-social/index.html?cx=008219812513279254587%3Ao2g7x-v-esw&cof=FORID%3A9&ie=UTF-8&q=Example+Limited

Facebook search:
http://www.google.com/search?q=Example+Limited+site:facebook.com

Linkedin search:
http://www.google.com/search?q=Example+Limited+site:linkedin.com

Browser plugin that finds emails of people's profiles in Linkedin.
https://chrome.google.com/webstore/detail/ftl/lkpekgkhmldknbcgjicjkomphkhhdkjj?hl=en-GB

Twitter search:
http://www.google.com/search?q=Example+Limited+site:twitter.com

Tweets mentioning target keyword:
https://twitter.com/search?q=Example+Limited&src=typd
http://backtweets.com/search/?q=Example+Limited
https://socialbearing.com/search/user/Example+Limited

Trying to retrieve twitter user account birthday here:
http://twbirthday.com/Example+Limited/

Specific username's twitter analytics:
https://burrrd.com/analyze?username=Example+Limited
https://foller.me/Example+Limited
http://gettwitterid.com/?user_name=Example+Limited&submit=GET+USER+ID
https://www.hashtags.org/analytics/Example+Limited/

Instagram search:
http://www.google.com/search?q=Example+Limited+site:instagram.com

Instagram posts mentioning target keyword:
http://hashtagify.me/hashtag/Example+Limited

Pinterest search:
http://www.google.com/search?q=Example+Limited+site:pinterest.com

Youtube search:
https://www.youtube.com/user/Example+Limited

Other video database search:
http://www.metacafe.com/videos_about/Example+Limited/
http://www.metatube.com/en/videos/?q=Example+Limited
https://www.aol.com/video/search/?q=Example+Limited
https://www.bing.com/videos/search?q=Example+Limited&go=Submit&qs=n&form=QBLH&scope=video&sp=-1&pq=Example+Limited
http://www.blinkx.com/search/Example+Limited
http://www.veoh.com/find/?query=Example+Limited
http://video.search.yahoo.com/search/video;_ylt=AwrDQ2oPaMJZZysAGy36w8QF;_ylc=X1MDOTY3ODEzMDYEX3IDMgRiY2sDMjB2aGwxaGNraXJoaiUyNmIlM0QzJTI2cyUzRDkxBGZyAwRncHJpZAMEbXRlc3RpZANudWxsBG5fc3VnZwMwBG9yaWdpbgN2aWRlby5zZWFyY2gueWFob28uY29tBHBvcwMwBHBxc3RyAwRwcXN0cmwDBHFzdHJsAzYEcXVlcnkDZ2xvdmRpBHRfc3RtcAMxNTA1OTEyOTUyBHZ0ZXN0aWQDbnVsbA--?pvid=mb7ibDEwLjEgfjUMWUluMwCeMjEzLgAAAACoVxVj&fr2=sb-top-video.search.yahoo.com&p=Example+Limited
http://www.earthcam.com/search/ft_search.php?term=Example+Limited
https://www.liveleak.com/browse?q=Example+Limited
http://voxalead.labs.exalead.com/search/?q=Example+Limited&lr=&r=&l=en
https://archive.org/details/opensource_movies?and[]=Example+Limited
http://www.geosearchtool.com/?q=&la=35.1327266&lo=33.31108219999999&lr=10km&tw=any&cl=&sl=Example+Limited

Tumblr search:
http://www.google.com/search?q=Example+Limited+site:tumblr.com

Source code search:
https://nerdydata.com/search?query=Example+Limited
https://github.com/search?q=Example+Limited

Reddit search:
http://www.google.com/search?q=Example+Limited+site:reddit.com

Reddit posts mentioning target keyword:
http://metareddit.com/reddits/search/cloud/?query=Example+Limited

Stats and Analytics on specific reddit user:
https://snoopsnoo.com/u/Example+Limited
https://atomiks.github.io/reddit-user-analyser/#Example+Limited
http://redditmetrics.com/r/Example+Limited
https://snoopsnoo.com/u/Example+Limited

Blog search on given keyword:
http://www.blogsearchengine.org/search.html?cx=partner-pub-9634067433254658%3A5laonibews6&cof=FORID%3A10&ie=ISO-8859-1&q=Example+Limited
http://omgili.com/search?siteType=&q=Example+Limited


---- SEARCH ENGINES ----
Google search:
http://www.google.com/search?q=Example+Limited

DuckDuckGo search:
https://duckduckgo.com/?q=Example+Limited

Baidu search:
http://www.baidu.com/s?ie=utf-8&f=8&rsv_bp=0&rsv_idx=1&tn=baidu&wd=Example+Limited

Bing search:
https://www.bing.com/search?q=Example+Limited

Qwant search:
https://www.qwant.com/?q=Example+Limited&t=all

Clustering multi search:
http://search.carrot2.org/stable/search?source=web&view=folders&skin=fancy-compact&query=Example+Limited
http://www.cluuz.com/Default.aspx?list=y&yahoo=y&q=Example+Limited

Keyword matching search:
http://www.keywordspy.com/research/search.aspx?q=Example+Limited&type=domains
https://keywordtool.io/search/google/10371113?keyword=Example+Limited&country=&language=en#suggestions
https://www.wordtracker.com/search?query=Example+Limited
http://www.onelook.com/reverse-dictionary.shtml?s=Example+Limited

Excite news search:
http://msxml.excite.com/search/news?q=Example+Limited&fcoid=411&fcop=left&om_nextpage=True&fpid=2

Fact bites news search:
http://www.factbites.com/topics/Example+Limited

Search in RSS Feeds:
https://www.rsssearchhub.com/feeds?q=Example+Limited
http://fetchrss.com/generator/invalid?url=Example+Limited

Intel-One >>

Passive Reconnaissance for a Domain (i.e www.example.com) in 91 Sources:

Browser connects to all 91 sources, passes the search term and outputs results on screen automatically:

alt text

Output in Terminal:

Intel-One >> www.example.com -d

---- DOMAIN INFO ----
View official whois records:
http://whois.domaintools.com/www.example.com
https://who.is/whois/www.example.com
http://www.dnsstuff.com/tools#whois|type=domain&&value=www.example.com
http://www.whoishostingthis.com/?q=www.example.com
http://domainbigdata.com/www.example.com
http://www.domaincrawler.com/www.example.com
http://www.domainhistory.net/www.example.com
https://majestic.com/reports/site-explorer?q=www.example.com&oq=www.example.com&IndexDataSource=F
https://app2.follow.net/#domains/www.example.com
https://www.robtex.com/dns-lookup/www.example.com
http://www.pageglimpse.com/www.example.com

View results from DNS lookup:
https://mxtoolbox.com/SuperTool.aspx?action=a%3www.example.com
www.example.com.dedicatedornot.com
http://toolbar.netcraft.com/site_report?url=www.example.com#last_reboot
http://dnshistory.org/dns-records/www.example.com
http://www.dnsstuff.com/tools#dnsReport|type=domain&&value=www.example.com
http://dnssec-debugger.verisignlabs.com/www.example.com
https://www.tcpiputils.com/search?q=www.example.com
http://research.dnstrails.com/tools/lookup.htm?domain=www.example.com
https://mxtoolbox.com/SuperTool.aspx?action=mx%3awww.example.com&run=toolpage
http://dnsviz.net/d/www.example.com/analyze/
https://intodns.com/www.example.com
http://sameid.net/id/www.example.com/

View archived versions of the website:
https://web.archive.org/web/www.example.com
http://webcache.googleusercontent.com/search?q=cache:http://www.example.com/
http://webcache.googleusercontent.com/search?q=cache:www.example.com
http://www.screenshots.com/www.example.com/

Technologies and tools used to built the website:
https://builtwith.com/www.example.com

View the robots.txt file with disallowed resource access:
https://www.example.com/robots.txt

Scan the domain for common vulnerabilities here:
https://asafaweb.com/Scan?Url=www.example.com


---- SOCIAL MEDIA SEARCH ----
Real time social media search:
http://socialmention.com/search?q=www.example.com&t=all&btnG=Search
https://www.social-searcher.com/social-buzz/?q5=www.example.com
https://www.social-searcher.com/google-social-search/?q=www.example.com&fb=on&tw=on&gp=on&in=on&li=on&pi=on
https://app.buzzsumo.com/research/most-shared?type=articles&result_type=total&num_days=365&general_article&infographic&video&guest_post&giveaway&interview&q=www.example.com&page=1
http://www.hashatit.com/hashtags/www.example.com
http://howsociable.com/www.example.com
http://www.uvrx.com/results-social/index.html?cx=008219812513279254587%3Ao2g7x-v-esw&cof=FORID%3A9&ie=UTF-8&q=www.example.com

Facebook search:
http://www.google.com/search?q=www.example.com+site:facebook.com

Linkedin search:
http://www.google.com/search?q=www.example.com+site:linkedin.com

Browser plugin that finds emails of people's profiles in Linkedin.
https://chrome.google.com/webstore/detail/ftl/lkpekgkhmldknbcgjicjkomphkhhdkjj?hl=en-GB

Twitter search:
http://www.google.com/search?q=www.example.com+site:twitter.com

Tweets mentioning target keyword:
https://twitter.com/search?q=www.example.com&src=typd
http://backtweets.com/search/?q=www.example.com
https://socialbearing.com/search/user/www.example.com

Trying to retrieve twitter user account birthday here:
http://twbirthday.com/www.example.com/

Specific username's twitter analytics:
https://burrrd.com/analyze?username=www.example.com
https://foller.me/www.example.com
http://gettwitterid.com/?user_name=www.example.com&submit=GET+USER+ID
https://www.hashtags.org/analytics/www.example.com/

Instagram search:
http://www.google.com/search?q=www.example.com+site:instagram.com

Instagram posts mentioning target keyword:
http://hashtagify.me/hashtag/www.example.com

Pinterest search:
http://www.google.com/search?q=www.example.com+site:pinterest.com

Youtube search:
https://www.youtube.com/user/www.example.com

Other video database search:
http://www.metacafe.com/videos_about/www.example.com/
http://www.metatube.com/en/videos/?q=www.example.com
https://www.aol.com/video/search/?q=www.example.com
https://www.bing.com/videos/search?q=www.example.com&go=Submit&qs=n&form=QBLH&scope=video&sp=-1&pq=www.example.com
http://www.blinkx.com/search/www.example.com
http://www.veoh.com/find/?query=www.example.com
http://video.search.yahoo.com/search/video;_ylt=AwrDQ2oPaMJZZysAGy36w8QF;_ylc=X1MDOTY3ODEzMDYEX3IDMgRiY2sDMjB2aGwxaGNraXJoaiUyNmIlM0QzJTI2cyUzRDkxBGZyAwRncHJpZAMEbXRlc3RpZANudWxsBG5fc3VnZwMwBG9yaWdpbgN2aWRlby5zZWFyY2gueWFob28uY29tBHBvcwMwBHBxc3RyAwRwcXN0cmwDBHFzdHJsAzYEcXVlcnkDZ2xvdmRpBHRfc3RtcAMxNTA1OTEyOTUyBHZ0ZXN0aWQDbnVsbA--?pvid=mb7ibDEwLjEgfjUMWUluMwCeMjEzLgAAAACoVxVj&fr2=sb-top-video.search.yahoo.com&p=www.example.com
http://www.earthcam.com/search/ft_search.php?term=www.example.com
https://www.liveleak.com/browse?q=www.example.com
http://voxalead.labs.exalead.com/search/?q=www.example.com&lr=&r=&l=en
https://archive.org/details/opensource_movies?and[]=www.example.com
http://www.geosearchtool.com/?q=&la=35.1327266&lo=33.31108219999999&lr=10km&tw=any&cl=&sl=www.example.com

Tumblr search:
http://www.google.com/search?q=www.example.com+site:tumblr.com

Source code search:
https://nerdydata.com/search?query=www.example.com
https://github.com/search?q=www.example.com

Reddit search:
http://www.google.com/search?q=www.example.com+site:reddit.com

Reddit posts mentioning target keyword:
http://metareddit.com/reddits/search/cloud/?query=www.example.com

Stats and Analytics on specific reddit user:
https://snoopsnoo.com/u/www.example.com
https://atomiks.github.io/reddit-user-analyser/#www.example.com
http://redditmetrics.com/r/www.example.com
https://snoopsnoo.com/u/www.example.com

Blog search on given keyword:
http://www.blogsearchengine.org/search.html?cx=partner-pub-9634067433254658%3A5laonibews6&cof=FORID%3A10&ie=ISO-8859-1&q=www.example.com
http://omgili.com/search?siteType=&q=www.example.com


---- SEARCH ENGINES ----
Google search:
http://www.google.com/search?q=www.example.com

DuckDuckGo search:
https://duckduckgo.com/?q=www.example.com

Baidu search:
http://www.baidu.com/s?ie=utf-8&f=8&rsv_bp=0&rsv_idx=1&tn=baidu&wd=www.example.com

Bing search:
https://www.bing.com/search?q=www.example.com

Qwant search:
https://www.qwant.com/?q=www.example.com&t=all

Clustering multi search:
http://search.carrot2.org/stable/search?source=web&view=folders&skin=fancy-compact&query=www.example.com
http://www.cluuz.com/Default.aspx?list=y&yahoo=y&q=www.example.com

Keyword matching search:
http://www.keywordspy.com/research/search.aspx?q=www.example.com&type=domains
https://keywordtool.io/search/google/10371113?keyword=www.example.com&country=&language=en#suggestions
https://www.wordtracker.com/search?query=www.example.com
http://www.onelook.com/reverse-dictionary.shtml?s=www.example.com

Excite news search:
http://msxml.excite.com/search/news?q=www.example.com&fcoid=411&fcop=left&om_nextpage=True&fpid=2

Fact bites news search:
http://www.factbites.com/topics/www.example.com

Search in RSS Feeds:
https://www.rsssearchhub.com/feeds?q=www.example.com
http://fetchrss.com/generator/invalid?url=www.example.com

Intel-One >>

List of all features (directly taken from the help menu):

Intel-One >> help

Please refer to 'Issues' section in GitHub for any problems you may have.
           
-- [ Options for Help & Symbols Explained ] --
           
Options Short/Long  |  Description                                      |  Example                                 
=================== + ================================================= + =============================================
help                | Prints help on screen                             | Intel-One >> help              
'|' symbol          | Means 'or'                                        | Intel-One >> click 1 | 2 means click 1 or 2  
'-' symbol          | Used for the short flag                           | Intel-One >> john smith -g                   
'--' symbol         | Used for the long flag                            | Intel-One >> john smith --google             
           
           
-- [ ALL in ONE Options ] --
           
Options Short/Long  |  Description                                      |  Example                                 
=================== + ================================================= + =============================================
-c, --company       | Executes all available searches for companies     | Intel-One >> glovdi -c | --company       
-d, --domain        | Executes all available searches for domains       | Intel-One >> glovdi.com -d | --domain
-i, --individual    | Executes all available searches for individuals   | Intel-One >> john smith -i | --individual
-i and -l           | As above including location of an individual      | Intel-One >> john smith -i madrid -l
-e, --email         | Performs all possible searches using an email     | Intel-One >> [email protected] -e | --email

-- Note: The 2 following flags below are executed whenever the above ALL in ONE flags are executed. --  
-sm, --socialMedia  | Executes all available searches in social media   | Intel-One >> john smith -sm | --socialMedia
-s, --search        | Executes all available searches in search engines | Intel-One >> glovdi -s | --search

           
-- [ Options for Social Media ] --
           
Options Short/Long  |  Description                                      |  Example                                 
=================== + ================================================= + =============================================
-rts, --rtsearch    | Returns real time social media search results     | Intel-One >> john smith -rts | --rtsearch  
-fb, --facebook     | Performs facebook search through google           | Intel-One >> john smith -fb | --facebook     
-ln, --linkedin     | Performs linkedin search through google           | Intel-One >> john smith -ln | --linkedin     
-tw, --twitter      | Twitter search plus retrieves tweets and analytics| Intel-One >> john smith -tw | --twitter      
-in, --instagram    | Performs instagram search, posts and analytics    | Intel-One >> john smith -in | --instagram
-st, --strava       | Performs strava search for locations and activity | Intel-One >> john smith -st | --strava
-pn, --pinterest    | Performs pinterest search through google          | Intel-One >> john smith -pn | --pinterest
-yt, --youtube      | Performs search in youtube for username           | Intel-One >> john smith -yt | --youtube
-evs, --extraVid    | Perfroms further search in multiple video engines | Intel-One >> john smith -evs | --extraVid
-tb, --tumblr       | Performs tumblr search through google             | Intel-One >> john smith -tb | --tumblr    
-re, --reddit       | Performs reddit search and posts search           | Intel-One >> john smith -re | --reddit
-ure, --userReddit  | Provides insights and statistics on reddit user   | Intel-One >> john smith -ure | --userReddit
-bl, --blogs        | Searches in blogs about target keyword            | Intel-One >> john smith -bl | --blogs  
-cd ,--code         | Performs github & 'nerdy data' search on repos    | Intel-One >> setoolkit -cd | --code
           
           
-- [ Options for Search Engines ] --
           
Options Short/Long  |  Description                                      |  Example                                 
=================== + ================================================= + =============================================
-g, --google        | Performs normal google search                     | Intel-One >> john smith -g | --google      
-ddg, --ddGo        | Performs search in duck duck go search engine     | Intel-One >> john smith -ddg | --ddGo
-bd, --baidu        | Performs search in chinese engine baidu           | Intel-One >> john smith -bd | --baidu
-bg, --bing         | Performs search in bing search engine             | Intel-One >> john smith -bg | --bing
-qw, --qwant        | Performs search in qwant search engine            | Intel-One >> john smith -qw | --qwant
-km, --keyword      | Performs keyword matching search on given keyword | Intel-One >> john smith -km | --keyword
-cl, --cluster      | Performs clustering search for query              | Intel-One >> john smith -cl | --cluster 
-ex, --exciteNews   | Performs search about recent news on search engine| Intel-One >> john smith -ex | --exciteNews
-oa, --oldArticles  | Performs search about very old posts about query  | Intel-One >> john smith -oa | --oldArticles
-ev, --emailValid   | Performs email validity search for target mail    | Intel-One >> [email protected] -ev | --emailValid
-rss, --rssFeeds    | Performs RSS search in feeds on target keyword    | Intel-One >> john smith -rss | --rssFeeds


-- [ Options for People Search Engines ] --
           
Options Short/Long  |  Description                                      |  Example                                 
=================== + ================================================= + =============================================      
-p, --people        | Provides links on multiple people search engines  | Intel-One >> john smith -p | --people          
-p and -l           | Performs specific pipl using with location        | Intel-One >> john smith -p madrid -l         
           
           
-- [ Options for Companies ] --
           
Options Short/Long  |  Description                                      |  Example                                 
=================== + ================================================= + =============================================       
-cs, --compSearch   | Performs search in multiple companies websites    | Intel-One >> glovdi -cs | compSearch             
-are, --reports     | Provides 2 links with annual reports of companies | Intel-One >> glovdi -are | --reports
-cef, --emailFormat | Returns the email format of the company searched  | Intel-One >> glovdi -cef | --emailFormat
           
                      
-- [ Options for Domains ] --
           
Options Short/Long  |  Description                                      |  Example                                 
=================== + ================================================= + =============================================
-wh, --whois        | Performs whois search in the target domain        | Intel-One >> glovdi.com -wh | --whois
-dns, --dnsLookup   | Performs a DNS lookup about target domain         | Intel-One >> glovdi.com -dns | --dnsLookup     
-sc, --scan         | Performs a vulnerability scan using asafaweb site | Intel-One >> glovdi.com -sc | --scan
-ar, --archive      | Performs search for past versions of website      | Intel-One >> glovdi.com -ar | --arch
-bw, --builtWith    | Shows with which tools and tech the site is built | Intel-One >> glovdi.com -bw | --builtWith
-rb, --robots       | Provides the link including the robots.txt file   | Intel-One >> glovdi.com -rb | --robots     
           
           
-- [ Other Options ] --
           
Options Short/Long  |  Description                                      |  Example                                 
=================== + ================================================= + =============================================
-sh, --shodan       | Performs shodan search for given keyword          | Intel-One >> zanussi -sh | --shodan          


Intel-One >>

Installation

  1. Donwload the repository
  2. In a terminal, run python3 intel-one.py

Packages Needed

  • webbrowser (import webbrowser)
  • random (import random)

Both downloadable through pip or pre-installed in IDEs.

Future versions might include

  • Browser to initiate a single localhost connection with a single opened Browser Tab and have all other website connections (like for example the 85 Tabs opened for a company) as embedded in that one page. This came up from user feedback and might provide features for storage/persistent search such as ticking checkboxes about what resources to save for a target individual, company or domain.
  • Check if retrieved email addresses are stolen using Troy Hunt's https://haveibeenpwned.com. Next step is to try to retrieve credentials using the data breach info.
  • Advanced google dorks for -g / --google flag providing the user with the capability of even choosing the country in which google should run (i.e google.it, google.fr etc)
  • Passive reconnaissance for companies to include job postings as those disclose a lot on both the software and versions that a company is using.

Current version

Powerful searches in one click

Specifically, there exist 4 flags that perform everything:

  • -i for individuals
  • -d for domains
  • -c for companies
  • -e for emails
  • In addition, all of the above include social media and search engine search inclusive.

Constantly improving user experience

  • A well documented help menu explaining all the available options with examples.
  • Individual flags to perform all available features in isolation.

Targeting individuals

  • Real time social media search matching the provided keyword in recent posts on everything that exists out there.
  • Specific social media search using Facebook, Linkedin, Twitter (including tweets and analytics for provided user), Instagram, Pinterest, Youtube, Tumblr and Reddit.
  • Multiple people search engines from various countries using just a name or both a name and a location.
  • Get insights on lifetime reddit user activity by providing a username.
  • Search engine search in google, duckduckgo, baidu, bing, qwant, clustering multi search, excite search (newest posts) and fact bites (old posts).
  • Github and 'nerdy data' search to search keywords on published source code.
  • Search about the email validity of any email and reverse email lookup.
  • Perform all of the above using just one flag.

Targeting companies

  • Same social media search as above when applicable.
  • Company search using multiple company search engines returning difficult to find and often confidential information about companies.
  • Annual reports, slideshows, PDFs and other insights.
  • Search for company's email format.
  • Search engine search in google, duckduckgo, baidu and bing.
  • Perform all of the above using just one flag.

Targeting domains

  • Whois lookup.
  • DNS lookup.
  • Web vulnerability scan.
  • View archived versions of a website since its its day 1.
  • View robots.txt file including links not indexed by search engines.
  • Perform all of the above using just one flag.

Other features

  • Shodan.io search.
  • Perform search engine search and social media search alone very easy. These searches are included in the 'ALL in One' flags.

Directories explained

search

  • companies.py: Includes functions able to target companies such as the edgar search.
  • domains.py: Includes functions to retrieve domain info such as whois lookup and a vulnerability scanner.
  • engines.py: Includes search engines such as google and people search engines such as pipl.
  • other.py: Includes non directly related to OSINT functionality such as shodan search.
  • socialMedia.py: Includes social media search and posts gathering in various ways.
  • utilities.py: Includes functions that help in all other classes.
  • query.py: The parent class from which the rest of the classes inherit, contains functionality about query manipulation.

tests

  • Clear, concise and extensive tests for each of the above class and function.
  • Include specific class tests, end to end and robustness testing.

help

  • Explains with a description and an example each available function.

intro

  • Contains the welcome screen of the tool.

intel-one

  • The main thread of the program responsible for running it.

Motivation

Implemented in my free time from mid August to mid September 2017 as part of my genuine interest in Cyber Security, especially penetration testing. After I played around with some Kali Linux tools, I have identified a gap in performing high quality OSINT search wholly from the command line and by a few clicks to get a browser with many tabs containing useful information.

My short term aim is to make the life of a pentester easier by providing, constantly improving and maintaining an optimised and effective toolset with various powerful features. My main long term goal is to contribute to the cybersecurity progress that has yet to come in both software and hardware systems. A potential first step towards this direction is by offering an optimised OSINT solution by a possible combination or extension of a famous and must have existing OSINT tool with features from Intel-One and also I aspire of writing or contributing into another tool that effeciently performs classification for cyber security related problems by deploying state-of-the-art Machine Learning.

Disclaimer

This tool should be used in the white hat way, however, I have no responsibility if someone will use for malicious purposes.

License

I own all the copyrights of this project. Feel free to contact me and suggestions new features or anything you like.

Codespaces

Press '.' (the fullstop) if you're seeing this now!

About

Command line tool for passive reconnaissance, able to gather and link public information to a target domain, company or individual. It can make intelligence gathering faster and more effective by drastically reducing manual user interaction. This is achieved through the engineering of a highly customisable single input to multiple output solutio…

Topics

cybersecurity penetration-testing intelligence-gathering

Resources

Readme

License

MIT license

Security policy

Security policy
Activity

Stars

30 stars

Watchers

1 watching

Forks

5 forks
Report repository

Releases

No releases published

Packages

No packages published

Languages