Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/jkcso/intel-one

Command line tool for passive reconnaissance, able to gather and link public information to a target domain, company or individual. It can make intelligence gathering faster and more effective by drastically reducing manual user interaction. This is achieved through the engineering of a highly customisable single input to multiple output solution. Tool conceived and developed in my free time as a result of my genuine interest in penetration testing.
https://github.com/jkcso/intel-one

cybersecurity intelligence-gathering penetration-testing

Last synced: 2 months ago
JSON representation

Command line tool for passive reconnaissance, able to gather and link public information to a target domain, company or individual. It can make intelligence gathering faster and more effective by drastically reducing manual user interaction. This is achieved through the engineering of a highly customisable single input to multiple output solution. Tool conceived and developed in my free time as a result of my genuine interest in penetration testing.

Awesome Lists containing this project

README 

        
# Intel-One



## Get Started



### Welcome Screen:



```

                  ___                       ___                         ___           ___           ___     

    ___          /__/\          ___        /  /\                       /  /\         /__/\         /  /\    

   /  /\         \  \:\        /  /\      /  /:/_                     /  /::\        \  \:\       /  /:/_   

  /  /:/          \  \:\      /  /:/     /  /:/ /\    ___     ___    /  /:/\:\        \  \:\     /  /:/ /\  

 /__/::\      _____\__\:\    /  /:/     /  /:/ /:/_  /__/\   /  /\  /  /:/  \:\   _____\__\:\   /  /:/ /:/_ 

 \__\/\:\__  /__/::::::::\  /  /::\    /__/:/ /:/ /\ \  \:\ /  /:/ /__/:/ \__\:\ /__/::::::::\ /__/:/ /:/ /\/

    \  \:\/\ \  \:\~~\~~\/ /__/:/\:\   \  \:\/:/ /:/  \  \:\  /:/  \  \:\ /  /:/ \  \:\~~\~~\/ \  \:\/:/ /:/

     \__\::/  \  \:\  ~~~  \__\/  \:\   \  \::/ /:/    \  \:\/:/    \  \:\  /:/   \  \:\  ~~~   \  \::/ /:/ 

     /__/:/    \  \:\           \  \:\   \  \:\/:/      \  \::/      \  \:\/:/     \  \:\        \  \:\/:/  

     \__\/      \  \:\           \__\/    \  \::/        \__\/        \  \::/       \  \:\        \  \::/   

                 \__\/                     \__\/                       \__\/         \__\/         \__\/ 



Version 1.0 - Written by Joseph Katsioloudes, 2018.



Please press 'help' for user manual and options.

Press exit or quit to exit the program

Please refer to 'Issues' section in GitHub for any problems you may have.



Intel-One >> 

```



### Passive Reconnaissance for an Individual (i.e John Smith) in 78 Sources:



#### Browser connects to all 78 sources, passes the search term and outputs results on screen automatically: ####



![alt text](https://github.com/jkatsioloudes/Intel-One/blob/master/individual_browser_output.png)



#### Output in Terminal: ####

```

Intel-One >> John Smith -i



---- PEOPLE SEARCH ENGINES ----

Note: We suggest to add a location to make your search more specific.

To do so, please use:  -i  -l



Search links in multiple people search engines:

https://pipl.com/search/?q=John+Smith

http://www.peekyou.com/John_Smith

http://www.canada411.ca/search/?stype=si&what=John+Smith

http://www.411.com/name/John-Smith

http://www.whitepages.com/name/John-Smith

http://forebears.io/place-search?q=John+Smith

http://search.infospace.com/search/web?q=John+Smith&searchbtn=Search

http://www.interment.net/data/search-general.htm?cx=partner-pub-1928517298809652%3A6045987309&cof=FORID%3A10&ie=ISO-8859-1&q=John+Smith&sa=Search

http://www.marketvisual.com/Search/Results?searchString=John+Smith

http://discovery.nationalarchives.gov.uk/results/r?_q=John+Smith

https://www.spokeo.com/John-Smith

https://thatsthem.com/name/John-Smith

http://www.yasni.com/John+Smith/check+people?sh

http://www.zabasearch.com/people/John+Smith/

https://network.expertisefinder.com/searchexperts?query=John+Smith

https://www.wink.com/people/?pf=&nm=John+Smith



Search in pipl search engine with location:

https://pipl.com/search/?q=John+Smith&l=



---- SOCIAL MEDIA SEARCH ----

Real time social media search:

http://socialmention.com/search?q=John+Smith&t=all&btnG=Search

https://www.social-searcher.com/social-buzz/?q5=John+Smith

https://www.social-searcher.com/google-social-search/?q=John+Smith&fb=on&tw=on&gp=on&in=on&li=on&pi=on

https://app.buzzsumo.com/research/most-shared?type=articles&result_type=total&num_days=365&general_article&infographic&video&guest_post&giveaway&interview&q=John+Smith&page=1

http://www.hashatit.com/hashtags/John+Smith

http://howsociable.com/John+Smith

http://www.uvrx.com/results-social/index.html?cx=008219812513279254587%3Ao2g7x-v-esw&cof=FORID%3A9&ie=UTF-8&q=John+Smith



Facebook search:

http://www.google.com/search?q=John+Smith+site:facebook.com



Instagram search:

http://www.google.com/search?q=John+Smith+site:instagram.com



Linkedin search:

http://www.google.com/search?q=John+Smith+site:linkedin.com



Strava search:

http://www.google.com/search?q=John+Smith+site:strava.com



Browser plugin that finds emails of people's profiles in Linkedin.

https://chrome.google.com/webstore/detail/ftl/lkpekgkhmldknbcgjicjkomphkhhdkjj?hl=en-GB



Twitter search:

http://www.google.com/search?q=John+Smith+site:twitter.com



Tweets mentioning target keyword:

https://twitter.com/search?q=John+Smith&src=typd

http://backtweets.com/search/?q=John+Smith

https://socialbearing.com/search/user/John+Smith



Trying to retrieve twitter user account birthday here:

http://twbirthday.com/John+Smith/



Specific username's twitter analytics:

https://burrrd.com/analyze?username=John+Smith

https://foller.me/John+Smith

http://gettwitterid.com/?user_name=John+Smith&submit=GET+USER+ID

https://www.hashtags.org/analytics/John+Smith/



Instagram search:

http://www.google.com/search?q=John+Smith+site:instagram.com



Instagram posts mentioning target keyword:

http://hashtagify.me/hashtag/John+Smith



Pinterest search:

http://www.google.com/search?q=John+Smith+site:pinterest.com



Youtube search:

https://www.youtube.com/user/John+Smith



Other video database search:

http://www.metacafe.com/videos_about/John+Smith/

http://www.metatube.com/en/videos/?q=John+Smith

https://www.aol.com/video/search/?q=John+Smith

https://www.bing.com/videos/search?q=John+Smith&go=Submit&qs=n&form=QBLH&scope=video&sp=-1&pq=John+Smith

http://www.blinkx.com/search/John+Smith

http://www.veoh.com/find/?query=John+Smith

http://video.search.yahoo.com/search/video;_ylt=AwrDQ2oPaMJZZysAGy36w8QF;_ylc=X1MDOTY3ODEzMDYEX3IDMgRiY2sDMjB2aGwxaGNraXJoaiUyNmIlM0QzJTI2cyUzRDkxBGZyAwRncHJpZAMEbXRlc3RpZANudWxsBG5fc3VnZwMwBG9yaWdpbgN2aWRlby5zZWFyY2gueWFob28uY29tBHBvcwMwBHBxc3RyAwRwcXN0cmwDBHFzdHJsAzYEcXVlcnkDZ2xvdmRpBHRfc3RtcAMxNTA1OTEyOTUyBHZ0ZXN0aWQDbnVsbA--?pvid=mb7ibDEwLjEgfjUMWUluMwCeMjEzLgAAAACoVxVj&fr2=sb-top-video.search.yahoo.com&p=John+Smith

http://www.earthcam.com/search/ft_search.php?term=John+Smith

https://www.liveleak.com/browse?q=John+Smith

http://voxalead.labs.exalead.com/search/?q=John+Smith&lr=&r=&l=en

https://archive.org/details/opensource_movies?and[]=John+Smith

http://www.geosearchtool.com/?q=&la=35.1327266&lo=33.31108219999999&lr=10km&tw=any&cl=&sl=John+Smith



Tumblr search:

http://www.google.com/search?q=John+Smith+site:tumblr.com



Source code search:

https://nerdydata.com/search?query=John+Smith

https://github.com/search?q=John+Smith



Reddit search:

http://www.google.com/search?q=John+Smith+site:reddit.com



Reddit posts mentioning target keyword:

http://metareddit.com/reddits/search/cloud/?query=John+Smith



Stats and Analytics on specific reddit user:

https://snoopsnoo.com/u/John+Smith

https://atomiks.github.io/reddit-user-analyser/#John+Smith

http://redditmetrics.com/r/John+Smith

https://snoopsnoo.com/u/John+Smith



Blog search on given keyword:

http://www.blogsearchengine.org/search.html?cx=partner-pub-9634067433254658%3A5laonibews6&cof=FORID%3A10&ie=ISO-8859-1&q=John+Smith

http://omgili.com/search?siteType=&q=John+Smith



---- SEARCH ENGINES ----

Google search:

http://www.google.com/search?q=John+Smith



DuckDuckGo search:

https://duckduckgo.com/?q=John+Smith



Baidu search:

http://www.baidu.com/s?ie=utf-8&f=8&rsv_bp=0&rsv_idx=1&tn=baidu&wd=John+Smith



Bing search:

https://www.bing.com/search?q=John+Smith



Qwant search:

https://www.qwant.com/?q=John+Smith&t=all



Clustering multi search:

http://search.carrot2.org/stable/search?source=web&view=folders&skin=fancy-compact&query=John+Smith

http://www.cluuz.com/Default.aspx?list=y&yahoo=y&q=John+Smith



Keyword matching search:

http://www.keywordspy.com/research/search.aspx?q=John+Smith&type=domains

https://keywordtool.io/search/google/10371113?keyword=John+Smith&country=&language=en#suggestions

https://www.wordtracker.com/search?query=John+Smith

http://www.onelook.com/reverse-dictionary.shtml?s=John+Smith



Excite news search:

http://msxml.excite.com/search/news?q=John+Smith&fcoid=411&fcop=left&om_nextpage=True&fpid=2



Fact bites news search:

http://www.factbites.com/topics/John+Smith



Search in RSS Feeds:

https://www.rsssearchhub.com/feeds?q=John+Smith

http://fetchrss.com/generator/invalid?url=John+Smith



Intel-One >>

```



### Passive Reconnaissance for a Company (i.e Example Limited) in 85 Sources:



#### Browser connects to all 85 sources, passes the search term and outputs results on screen automatically: ####



![alt text](https://github.com/jkatsioloudes/Intel-One/blob/master/company_browser_output.png)



#### Output in Terminal: ####



```

Intel-One >> Example Limited -c



---- COMPANY RECORDS ----

Company information and search results can be found here:

https://www.sec.gov/cgi-bin/browse-edgar?company=Example+Limited&owner=exclude&action=getcompany

https://www.corporationwiki.com/search/results?term=Example+Limited

http://www.hoovers.com/company-information/company-search.html?term=Example+Limited

https://www.glassdoor.com/Job/jobs.htm?suggestCount=0&suggestChosen=false&clickSource=searchBtn&typedKeyword=microsoft&sc.keyword=Example+Limited&locT=&locId=&jobType=

https://globaledge.msu.edu/search?q=Example+Limited

https://en.wikipedia.org/wiki/Example+Limited

https://www.canada.ca/en/sr.html?cdn=canada&st=s&num=10&langs=en&st1rt=1&s5bm3ts21rch=x&q=Example+Limited

https://www.comparably.com/search?q=Example+Limited

https://opencorporates.com/companies?jurisdiction_code=&q=Example+Limited

https://serpstat.com/keywords/?query=Example+Limited

https://www.semrush.com/info/Example+Limited

http://www.corporateinformation.com/Company-Search.aspx?s=Example+Limited

https://find.ezilon.com/search.php?q=Example+Limited&v=&x=0&y=0&f=1

https://www.ispionage.com/freeaccountv2.aspx?q=Example+Limited

https://www.owler.com/iaApp/143891/Example+Limited

http://www.marketvisual.com/Search/Results?searchString=Example+Limited

http://www.ebr.org/?s=Example+Limited



Annual reports, presentations and PDFs can be found here:

http://www.annualreports.com/Companies?search=Example+Limited

https://www.reportlinker.com/report/search/keywords/Example+Limited

http://www.authorstream.com/tag/Example+Limited

http://www.freefullpdf.com/#gsc.tab=0&gsc.q=Example+Limited

https://offshoreleaks.icij.org/search?utf8=✓&q=Example+Limited

https://www.slideshare.net/search/slideshow?searchfrom=header&q=Example+Limited



Email format of the company: 

https://email-format.com/i/search_result/?q=Example+Limited



---- SOCIAL MEDIA SEARCH ----

Real time social media search:

http://socialmention.com/search?q=Example+Limited&t=all&btnG=Search

https://www.social-searcher.com/social-buzz/?q5=Example+Limited

https://www.social-searcher.com/google-social-search/?q=Example+Limited&fb=on&tw=on&gp=on&in=on&li=on&pi=on

https://app.buzzsumo.com/research/most-shared?type=articles&result_type=total&num_days=365&general_article&infographic&video&guest_post&giveaway&interview&q=Example+Limited&page=1

http://www.hashatit.com/hashtags/Example+Limited

http://howsociable.com/Example+Limited

http://www.uvrx.com/results-social/index.html?cx=008219812513279254587%3Ao2g7x-v-esw&cof=FORID%3A9&ie=UTF-8&q=Example+Limited



Facebook search:

http://www.google.com/search?q=Example+Limited+site:facebook.com



Linkedin search:

http://www.google.com/search?q=Example+Limited+site:linkedin.com



Browser plugin that finds emails of people's profiles in Linkedin.

https://chrome.google.com/webstore/detail/ftl/lkpekgkhmldknbcgjicjkomphkhhdkjj?hl=en-GB



Twitter search:

http://www.google.com/search?q=Example+Limited+site:twitter.com



Tweets mentioning target keyword:

https://twitter.com/search?q=Example+Limited&src=typd

http://backtweets.com/search/?q=Example+Limited

https://socialbearing.com/search/user/Example+Limited



Trying to retrieve twitter user account birthday here:

http://twbirthday.com/Example+Limited/



Specific username's twitter analytics:

https://burrrd.com/analyze?username=Example+Limited

https://foller.me/Example+Limited

http://gettwitterid.com/?user_name=Example+Limited&submit=GET+USER+ID

https://www.hashtags.org/analytics/Example+Limited/



Instagram search:

http://www.google.com/search?q=Example+Limited+site:instagram.com



Instagram posts mentioning target keyword:

http://hashtagify.me/hashtag/Example+Limited



Pinterest search:

http://www.google.com/search?q=Example+Limited+site:pinterest.com



Youtube search:

https://www.youtube.com/user/Example+Limited



Other video database search:

http://www.metacafe.com/videos_about/Example+Limited/

http://www.metatube.com/en/videos/?q=Example+Limited

https://www.aol.com/video/search/?q=Example+Limited

https://www.bing.com/videos/search?q=Example+Limited&go=Submit&qs=n&form=QBLH&scope=video&sp=-1&pq=Example+Limited

http://www.blinkx.com/search/Example+Limited

http://www.veoh.com/find/?query=Example+Limited

http://video.search.yahoo.com/search/video;_ylt=AwrDQ2oPaMJZZysAGy36w8QF;_ylc=X1MDOTY3ODEzMDYEX3IDMgRiY2sDMjB2aGwxaGNraXJoaiUyNmIlM0QzJTI2cyUzRDkxBGZyAwRncHJpZAMEbXRlc3RpZANudWxsBG5fc3VnZwMwBG9yaWdpbgN2aWRlby5zZWFyY2gueWFob28uY29tBHBvcwMwBHBxc3RyAwRwcXN0cmwDBHFzdHJsAzYEcXVlcnkDZ2xvdmRpBHRfc3RtcAMxNTA1OTEyOTUyBHZ0ZXN0aWQDbnVsbA--?pvid=mb7ibDEwLjEgfjUMWUluMwCeMjEzLgAAAACoVxVj&fr2=sb-top-video.search.yahoo.com&p=Example+Limited

http://www.earthcam.com/search/ft_search.php?term=Example+Limited

https://www.liveleak.com/browse?q=Example+Limited

http://voxalead.labs.exalead.com/search/?q=Example+Limited&lr=&r=&l=en

https://archive.org/details/opensource_movies?and[]=Example+Limited

http://www.geosearchtool.com/?q=&la=35.1327266&lo=33.31108219999999&lr=10km&tw=any&cl=&sl=Example+Limited



Tumblr search:

http://www.google.com/search?q=Example+Limited+site:tumblr.com



Source code search:

https://nerdydata.com/search?query=Example+Limited

https://github.com/search?q=Example+Limited



Reddit search:

http://www.google.com/search?q=Example+Limited+site:reddit.com



Reddit posts mentioning target keyword:

http://metareddit.com/reddits/search/cloud/?query=Example+Limited



Stats and Analytics on specific reddit user:

https://snoopsnoo.com/u/Example+Limited

https://atomiks.github.io/reddit-user-analyser/#Example+Limited

http://redditmetrics.com/r/Example+Limited

https://snoopsnoo.com/u/Example+Limited



Blog search on given keyword:

http://www.blogsearchengine.org/search.html?cx=partner-pub-9634067433254658%3A5laonibews6&cof=FORID%3A10&ie=ISO-8859-1&q=Example+Limited

http://omgili.com/search?siteType=&q=Example+Limited



---- SEARCH ENGINES ----

Google search:

http://www.google.com/search?q=Example+Limited



DuckDuckGo search:

https://duckduckgo.com/?q=Example+Limited



Baidu search:

http://www.baidu.com/s?ie=utf-8&f=8&rsv_bp=0&rsv_idx=1&tn=baidu&wd=Example+Limited



Bing search:

https://www.bing.com/search?q=Example+Limited



Qwant search:

https://www.qwant.com/?q=Example+Limited&t=all



Clustering multi search:

http://search.carrot2.org/stable/search?source=web&view=folders&skin=fancy-compact&query=Example+Limited

http://www.cluuz.com/Default.aspx?list=y&yahoo=y&q=Example+Limited



Keyword matching search:

http://www.keywordspy.com/research/search.aspx?q=Example+Limited&type=domains

https://keywordtool.io/search/google/10371113?keyword=Example+Limited&country=&language=en#suggestions

https://www.wordtracker.com/search?query=Example+Limited

http://www.onelook.com/reverse-dictionary.shtml?s=Example+Limited



Excite news search:

http://msxml.excite.com/search/news?q=Example+Limited&fcoid=411&fcop=left&om_nextpage=True&fpid=2



Fact bites news search:

http://www.factbites.com/topics/Example+Limited



Search in RSS Feeds:

https://www.rsssearchhub.com/feeds?q=Example+Limited

http://fetchrss.com/generator/invalid?url=Example+Limited



Intel-One >> 

```



### Passive Reconnaissance for a Domain (i.e www.example.com) in 91 Sources:



#### Browser connects to all 91 sources, passes the search term and outputs results on screen automatically: ####



![alt text](https://github.com/jkatsioloudes/Intel-One/blob/master/domain_browser_output.png)



#### Output in Terminal: ####



```

Intel-One >> www.example.com -d



---- DOMAIN INFO ----

View official whois records:

http://whois.domaintools.com/www.example.com

https://who.is/whois/www.example.com

http://www.dnsstuff.com/tools#whois|type=domain&&value=www.example.com

http://www.whoishostingthis.com/?q=www.example.com

http://domainbigdata.com/www.example.com

http://www.domaincrawler.com/www.example.com

http://www.domainhistory.net/www.example.com

https://majestic.com/reports/site-explorer?q=www.example.com&oq=www.example.com&IndexDataSource=F

https://app2.follow.net/#domains/www.example.com

https://www.robtex.com/dns-lookup/www.example.com

http://www.pageglimpse.com/www.example.com



View results from DNS lookup:

https://mxtoolbox.com/SuperTool.aspx?action=a%3www.example.com

www.example.com.dedicatedornot.com

http://toolbar.netcraft.com/site_report?url=www.example.com#last_reboot

http://dnshistory.org/dns-records/www.example.com

http://www.dnsstuff.com/tools#dnsReport|type=domain&&value=www.example.com

http://dnssec-debugger.verisignlabs.com/www.example.com

https://www.tcpiputils.com/search?q=www.example.com

http://research.dnstrails.com/tools/lookup.htm?domain=www.example.com

https://mxtoolbox.com/SuperTool.aspx?action=mx%3awww.example.com&run=toolpage

http://dnsviz.net/d/www.example.com/analyze/

https://intodns.com/www.example.com

http://sameid.net/id/www.example.com/



View archived versions of the website:

https://web.archive.org/web/www.example.com

http://webcache.googleusercontent.com/search?q=cache:http://www.example.com/

http://webcache.googleusercontent.com/search?q=cache:www.example.com

http://www.screenshots.com/www.example.com/



Technologies and tools used to built the website:

https://builtwith.com/www.example.com



View the robots.txt file with disallowed resource access:

https://www.example.com/robots.txt



Scan the domain for common vulnerabilities here:

https://asafaweb.com/Scan?Url=www.example.com



---- SOCIAL MEDIA SEARCH ----

Real time social media search:

http://socialmention.com/search?q=www.example.com&t=all&btnG=Search

https://www.social-searcher.com/social-buzz/?q5=www.example.com

https://www.social-searcher.com/google-social-search/?q=www.example.com&fb=on&tw=on&gp=on&in=on&li=on&pi=on

https://app.buzzsumo.com/research/most-shared?type=articles&result_type=total&num_days=365&general_article&infographic&video&guest_post&giveaway&interview&q=www.example.com&page=1

http://www.hashatit.com/hashtags/www.example.com

http://howsociable.com/www.example.com

http://www.uvrx.com/results-social/index.html?cx=008219812513279254587%3Ao2g7x-v-esw&cof=FORID%3A9&ie=UTF-8&q=www.example.com



Facebook search:

http://www.google.com/search?q=www.example.com+site:facebook.com



Linkedin search:

http://www.google.com/search?q=www.example.com+site:linkedin.com



Browser plugin that finds emails of people's profiles in Linkedin.

https://chrome.google.com/webstore/detail/ftl/lkpekgkhmldknbcgjicjkomphkhhdkjj?hl=en-GB



Twitter search:

http://www.google.com/search?q=www.example.com+site:twitter.com



Tweets mentioning target keyword:

https://twitter.com/search?q=www.example.com&src=typd

http://backtweets.com/search/?q=www.example.com

https://socialbearing.com/search/user/www.example.com



Trying to retrieve twitter user account birthday here:

http://twbirthday.com/www.example.com/



Specific username's twitter analytics:

https://burrrd.com/analyze?username=www.example.com

https://foller.me/www.example.com

http://gettwitterid.com/?user_name=www.example.com&submit=GET+USER+ID

https://www.hashtags.org/analytics/www.example.com/



Instagram search:

http://www.google.com/search?q=www.example.com+site:instagram.com



Instagram posts mentioning target keyword:

http://hashtagify.me/hashtag/www.example.com



Pinterest search:

http://www.google.com/search?q=www.example.com+site:pinterest.com



Youtube search:

https://www.youtube.com/user/www.example.com



Other video database search:

http://www.metacafe.com/videos_about/www.example.com/

http://www.metatube.com/en/videos/?q=www.example.com

https://www.aol.com/video/search/?q=www.example.com

https://www.bing.com/videos/search?q=www.example.com&go=Submit&qs=n&form=QBLH&scope=video&sp=-1&pq=www.example.com

http://www.blinkx.com/search/www.example.com

http://www.veoh.com/find/?query=www.example.com

http://video.search.yahoo.com/search/video;_ylt=AwrDQ2oPaMJZZysAGy36w8QF;_ylc=X1MDOTY3ODEzMDYEX3IDMgRiY2sDMjB2aGwxaGNraXJoaiUyNmIlM0QzJTI2cyUzRDkxBGZyAwRncHJpZAMEbXRlc3RpZANudWxsBG5fc3VnZwMwBG9yaWdpbgN2aWRlby5zZWFyY2gueWFob28uY29tBHBvcwMwBHBxc3RyAwRwcXN0cmwDBHFzdHJsAzYEcXVlcnkDZ2xvdmRpBHRfc3RtcAMxNTA1OTEyOTUyBHZ0ZXN0aWQDbnVsbA--?pvid=mb7ibDEwLjEgfjUMWUluMwCeMjEzLgAAAACoVxVj&fr2=sb-top-video.search.yahoo.com&p=www.example.com

http://www.earthcam.com/search/ft_search.php?term=www.example.com

https://www.liveleak.com/browse?q=www.example.com

http://voxalead.labs.exalead.com/search/?q=www.example.com&lr=&r=&l=en

https://archive.org/details/opensource_movies?and[]=www.example.com

http://www.geosearchtool.com/?q=&la=35.1327266&lo=33.31108219999999&lr=10km&tw=any&cl=&sl=www.example.com



Tumblr search:

http://www.google.com/search?q=www.example.com+site:tumblr.com



Source code search:

https://nerdydata.com/search?query=www.example.com

https://github.com/search?q=www.example.com



Reddit search:

http://www.google.com/search?q=www.example.com+site:reddit.com



Reddit posts mentioning target keyword:

http://metareddit.com/reddits/search/cloud/?query=www.example.com



Stats and Analytics on specific reddit user:

https://snoopsnoo.com/u/www.example.com

https://atomiks.github.io/reddit-user-analyser/#www.example.com

http://redditmetrics.com/r/www.example.com

https://snoopsnoo.com/u/www.example.com



Blog search on given keyword:

http://www.blogsearchengine.org/search.html?cx=partner-pub-9634067433254658%3A5laonibews6&cof=FORID%3A10&ie=ISO-8859-1&q=www.example.com

http://omgili.com/search?siteType=&q=www.example.com



---- SEARCH ENGINES ----

Google search:

http://www.google.com/search?q=www.example.com



DuckDuckGo search:

https://duckduckgo.com/?q=www.example.com



Baidu search:

http://www.baidu.com/s?ie=utf-8&f=8&rsv_bp=0&rsv_idx=1&tn=baidu&wd=www.example.com



Bing search:

https://www.bing.com/search?q=www.example.com



Qwant search:

https://www.qwant.com/?q=www.example.com&t=all



Clustering multi search:

http://search.carrot2.org/stable/search?source=web&view=folders&skin=fancy-compact&query=www.example.com

http://www.cluuz.com/Default.aspx?list=y&yahoo=y&q=www.example.com



Keyword matching search:

http://www.keywordspy.com/research/search.aspx?q=www.example.com&type=domains

https://keywordtool.io/search/google/10371113?keyword=www.example.com&country=&language=en#suggestions

https://www.wordtracker.com/search?query=www.example.com

http://www.onelook.com/reverse-dictionary.shtml?s=www.example.com



Excite news search:

http://msxml.excite.com/search/news?q=www.example.com&fcoid=411&fcop=left&om_nextpage=True&fpid=2



Fact bites news search:

http://www.factbites.com/topics/www.example.com



Search in RSS Feeds:

https://www.rsssearchhub.com/feeds?q=www.example.com

http://fetchrss.com/generator/invalid?url=www.example.com



Intel-One >> 

```



## List of all features (directly taken from the help menu):



```

Intel-One >> help



Please refer to 'Issues' section in GitHub for any problems you may have.

           

-- [ Options for Help & Symbols Explained ] --

           

Options Short/Long  |  Description                                      |  Example                                 

=================== + ================================================= + =============================================

help                | Prints help on screen                             | Intel-One >> help              

'|' symbol          | Means 'or'                                        | Intel-One >> click 1 | 2 means click 1 or 2  

'-' symbol          | Used for the short flag                           | Intel-One >> john smith -g                   

'--' symbol         | Used for the long flag                            | Intel-One >> john smith --google             

           

           

-- [ ALL in ONE Options ] --

           

Options Short/Long  |  Description                                      |  Example                                 

=================== + ================================================= + =============================================

-c, --company       | Executes all available searches for companies     | Intel-One >> glovdi -c | --company       

-d, --domain        | Executes all available searches for domains       | Intel-One >> glovdi.com -d | --domain

-i, --individual    | Executes all available searches for individuals   | Intel-One >> john smith -i | --individual

-i and -l           | As above including location of an individual      | Intel-One >> john smith -i madrid -l

-e, --email         | Performs all possible searches using an email     | Intel-One >> [email protected] -e | --email



-- Note: The 2 following flags below are executed whenever the above ALL in ONE flags are executed. --  

-sm, --socialMedia  | Executes all available searches in social media   | Intel-One >> john smith -sm | --socialMedia

-s, --search        | Executes all available searches in search engines | Intel-One >> glovdi -s | --search



           

-- [ Options for Social Media ] --

           

Options Short/Long  |  Description                                      |  Example                                 

=================== + ================================================= + =============================================

-rts, --rtsearch    | Returns real time social media search results     | Intel-One >> john smith -rts | --rtsearch  

-fb, --facebook     | Performs facebook search through google           | Intel-One >> john smith -fb | --facebook     

-ln, --linkedin     | Performs linkedin search through google           | Intel-One >> john smith -ln | --linkedin     

-tw, --twitter      | Twitter search plus retrieves tweets and analytics| Intel-One >> john smith -tw | --twitter      

-in, --instagram    | Performs instagram search, posts and analytics    | Intel-One >> john smith -in | --instagram

-st, --strava       | Performs strava search for locations and activity | Intel-One >> john smith -st | --strava

-pn, --pinterest    | Performs pinterest search through google          | Intel-One >> john smith -pn | --pinterest

-yt, --youtube      | Performs search in youtube for username           | Intel-One >> john smith -yt | --youtube

-evs, --extraVid    | Perfroms further search in multiple video engines | Intel-One >> john smith -evs | --extraVid

-tb, --tumblr       | Performs tumblr search through google             | Intel-One >> john smith -tb | --tumblr    

-re, --reddit       | Performs reddit search and posts search           | Intel-One >> john smith -re | --reddit

-ure, --userReddit  | Provides insights and statistics on reddit user   | Intel-One >> john smith -ure | --userReddit

-bl, --blogs        | Searches in blogs about target keyword            | Intel-One >> john smith -bl | --blogs  

-cd ,--code         | Performs github & 'nerdy data' search on repos    | Intel-One >> setoolkit -cd | --code

           

           

-- [ Options for Search Engines ] --

           

Options Short/Long  |  Description                                      |  Example                                 

=================== + ================================================= + =============================================

-g, --google        | Performs normal google search                     | Intel-One >> john smith -g | --google      

-ddg, --ddGo        | Performs search in duck duck go search engine     | Intel-One >> john smith -ddg | --ddGo

-bd, --baidu        | Performs search in chinese engine baidu           | Intel-One >> john smith -bd | --baidu

-bg, --bing         | Performs search in bing search engine             | Intel-One >> john smith -bg | --bing

-qw, --qwant        | Performs search in qwant search engine            | Intel-One >> john smith -qw | --qwant

-km, --keyword      | Performs keyword matching search on given keyword | Intel-One >> john smith -km | --keyword

-cl, --cluster      | Performs clustering search for query              | Intel-One >> john smith -cl | --cluster 

-ex, --exciteNews   | Performs search about recent news on search engine| Intel-One >> john smith -ex | --exciteNews

-oa, --oldArticles  | Performs search about very old posts about query  | Intel-One >> john smith -oa | --oldArticles

-ev, --emailValid   | Performs email validity search for target mail    | Intel-One >> [email protected] -ev | --emailValid

-rss, --rssFeeds    | Performs RSS search in feeds on target keyword    | Intel-One >> john smith -rss | --rssFeeds



-- [ Options for People Search Engines ] --

           

Options Short/Long  |  Description                                      |  Example                                 

=================== + ================================================= + =============================================      

-p, --people        | Provides links on multiple people search engines  | Intel-One >> john smith -p | --people          

-p and -l           | Performs specific pipl using with location        | Intel-One >> john smith -p madrid -l         

           

           

-- [ Options for Companies ] --

           

Options Short/Long  |  Description                                      |  Example                                 

=================== + ================================================= + =============================================       

-cs, --compSearch   | Performs search in multiple companies websites    | Intel-One >> glovdi -cs | compSearch             

-are, --reports     | Provides 2 links with annual reports of companies | Intel-One >> glovdi -are | --reports

-cef, --emailFormat | Returns the email format of the company searched  | Intel-One >> glovdi -cef | --emailFormat

           

                      

-- [ Options for Domains ] --

           

Options Short/Long  |  Description                                      |  Example                                 

=================== + ================================================= + =============================================

-wh, --whois        | Performs whois search in the target domain        | Intel-One >> glovdi.com -wh | --whois

-dns, --dnsLookup   | Performs a DNS lookup about target domain         | Intel-One >> glovdi.com -dns | --dnsLookup     

-sc, --scan         | Performs a vulnerability scan using asafaweb site | Intel-One >> glovdi.com -sc | --scan

-ar, --archive      | Performs search for past versions of website      | Intel-One >> glovdi.com -ar | --arch

-bw, --builtWith    | Shows with which tools and tech the site is built | Intel-One >> glovdi.com -bw | --builtWith

-rb, --robots       | Provides the link including the robots.txt file   | Intel-One >> glovdi.com -rb | --robots     

           

           

-- [ Other Options ] --

           

Options Short/Long  |  Description                                      |  Example                                 

=================== + ================================================= + =============================================

-sh, --shodan       | Performs shodan search for given keyword          | Intel-One >> zanussi -sh | --shodan          



Intel-One >> 

```



## Installation



1. Donwload the repository

2. In a terminal, run `python3 intel-one.py`



## Packages Needed



* webbrowser (`import webbrowser`)

* random (`import random`)



Both downloadable through `pip` or pre-installed in IDEs.



## Future versions might include



* Browser to initiate a *single* localhost connection with a *single* opened Browser Tab and have all other website connections (like for example the 85 Tabs opened for a company) as embedded in that one page.  This came up from user feedback and might provide features for storage/persistent search such as ticking checkboxes about what resources to save for a target individual, company or domain.

* Check if retrieved email addresses are stolen using Troy Hunt's https://haveibeenpwned.com.  Next step is to try to retrieve credentials using the data breach info.

* Advanced google dorks for -g / --google flag providing the user with the capability of even choosing the country in which google should run (i.e google.it, google.fr etc)

* Passive reconnaissance for companies to include job postings as those disclose a lot on both the software and versions that a company is using.



## Current version



### Powerful searches in one click



Specifically, there exist 4 flags that perform everything:

- `-i` for individuals

- `-d` for domains

- `-c` for companies

- `-e` for emails

- In addition, all of the above include social media and search engine search inclusive.



### Constantly improving user experience



- A well documented help menu explaining all the available options with examples.

- Individual flags to perform all available features in isolation.



### Targeting individuals



- Real time social media search matching the provided keyword in recent posts on everything that exists out there.

- Specific social media search using Facebook, Linkedin, Twitter (including tweets and analytics for provided user), Instagram, Pinterest, Youtube, Tumblr and Reddit.

- Multiple people search engines from various countries using just a name or both a name and a location.

- Get insights on lifetime reddit user activity by providing a username.

- Search engine search in google, duckduckgo, baidu, bing, qwant, clustering multi search, excite search (newest posts) and fact bites (old posts).

- Github and 'nerdy data' search to search keywords on published source code.

- Search about the email validity of any email and reverse email lookup.

- Perform all of the above using just one flag.



### Targeting companies



- Same social media search as above when applicable.

- Company search using multiple company search engines returning difficult to find and often confidential information about companies.

- Annual reports, slideshows, PDFs and other insights.

- Search for company's email format.

- Search engine search in google, duckduckgo, baidu and bing.

- Perform all of the above using just one flag.



### Targeting domains



- Whois lookup.

- DNS lookup.

- Web vulnerability scan.

- View archived versions of a website since its its day 1.

- View robots.txt file including links not indexed by search engines.

- Perform all of the above using just one flag.



### Other features



- Shodan.io search.

- Perform search engine search and social media search alone very easy.  These searches are included in the 'ALL in One' flags.



## Directories explained

### search



- companies.py: Includes functions able to target companies such as the edgar search.

- domains.py: Includes functions to retrieve domain info such as whois lookup and a vulnerability scanner.

- engines.py: Includes search engines such as google and people search engines such as pipl.

- other.py: Includes non directly related to OSINT functionality such as shodan search.

- socialMedia.py: Includes social media search and posts gathering in various ways.

- utilities.py: Includes functions that help in all other classes.

- query.py: The parent class from which the rest of the classes inherit, contains functionality about query manipulation.



### tests



- Clear, concise and extensive tests for each of the above class and function.

- Include specific class tests, end to end and robustness testing.



### help



- Explains with a description and an example each available function.



### intro



- Contains the welcome screen of the tool.



### intel-one



- The main thread of the program responsible for running it.



## Motivation



Implemented in my free time from mid August to mid September 2017 as part of my genuine interest in Cyber Security, especially penetration testing.  After I played around with some Kali Linux tools, I have identified a gap in performing high quality OSINT search wholly from the command line and by a few clicks to get a browser with many tabs containing useful information.  



My short term aim is to make the life of a pentester easier by providing, constantly improving and maintaining an optimised and effective toolset with various powerful features.  My main long term goal is to contribute to the cybersecurity progress that has yet to come in both software and hardware systems.  A potential first step towards this direction is by offering an optimised OSINT solution by a possible combination or extension of a famous and must have existing OSINT tool with features from Intel-One and also I aspire of writing or contributing into another tool that effeciently performs classification for cyber security related problems by deploying state-of-the-art Machine Learning.



## Disclaimer



This tool should be used in the white hat way, however, I have no responsibility if someone will use for malicious purposes.



## License

I own all the copyrights of this project.  Feel free to contact me and suggestions new features or anything you like.



## Codespaces



Press '.' (the fullstop) if you're seeing this now!