Using Spiderfoot (OSINT framework)

                                                                

introduction to OSNIT framework:-

 It is a cybersecurity framework, a collection of OSINT tools to make your intel and data collection tasks easier. This tool is mostly used by security researchers and penetration testers for digital footprinting, OSINT research, intelligence gathering, and reconnaissance.

By gathering publicly available sources of information about a particular target an attacker – or friendly penetration tester – can profile a potential victim to better understand its characteristics and to narrow down the search area for possible vulnerabilities.

introduction to Spiderfoot:-

Its goal is to automate the process of gathering intelligence about a given target, which may be an IP address, domain name, hostname, network subnet, ASN, e-mail address or person's name.

Additional Capabilities

No installation or setup needed at all.

Investigations.

Multi-target scanning

OSINT monitoring

Reporting & Visualisations. 

Custom Scan Profiles. 

Requirements:

1. SPIDERFOOT - download

                              alternative link

2. WINDOWS 10

 3. PYTHON (I prefer ANACONDA) - download

                                                           alternative link

(If you’re using the legacy SpiderFoot 2.12 for Windows, you’ll have a compiled executable (.EXE) file and so all dependencies are packaged with it. No third party tools/libraries need to be installed, not even Python.)

STEP 1:

Download the open source version of Spiderfoot from the above given link.

 

                       SHIFT + Right Click) to get the power shell option in menu.

STEP 2: 

Open PowerShell and type the following commands

Case 1: If you are using just python

pip3 install -r requirements.txt

Case 2: If you are using Anaconda ( my case ) 

pip install -r requirements.txt --user

STEP 3:

Once its done installing all the dependencies, execute the following command to start the web interface-

python sf.py -l 127.0.0.1:5001

Now open any browser and open http://127.0.0.1:5001

STEP 4:

Adding up API keys. To get the API key you need to register in the given service and get the API key.

Paste the API key into relevant box and click on SAVE.

The more API keys you will add the more detailed output you will get. 

STEP 5:

Starting a Scan. Go-To the New Scan tab and provide the details of the target. You can select all the modules or just do module specific scan.

                                                            CLICK on SCAN 

and its done !