Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/mikehorn-git/arch-osint
🌍 🕵️ Arch-Osint Linux OS VM based on Blackarch.
https://github.com/mikehorn-git/arch-osint
archlinux bash blackarch hacking intelligence linux os osint virtual-machine vm
Last synced: 3 months ago
JSON representation
🌍 🕵️ Arch-Osint Linux OS VM based on Blackarch.
- Host: GitHub
- URL: https://github.com/mikehorn-git/arch-osint
- Owner: MikeHorn-git
- License: mit
- Created: 2023-02-25T16:29:35.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2023-09-08T20:05:41.000Z (over 1 year ago)
- Last Synced: 2023-09-08T21:22:13.086Z (over 1 year ago)
- Topics: archlinux, bash, blackarch, hacking, intelligence, linux, os, osint, virtual-machine, vm
- Language: HTML
- Homepage:
- Size: 530 KB
- Stars: 4
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# 🌍 🕵️ Arch-Osint OS VM
# 📋 Table of contents
* [Warning](https://github.com/MikeHorn-git/Arch-Osint#%EF%B8%8F-warning)
* [Description](https://github.com/MikeHorn-git/arch-osint#-description)
* [Installation](https://github.com/MikeHorn-git/arch-osint#-installation)
* [Usage](https://github.com/MikeHorn-git/arch-osint#-usage)
* [Pros](https://github.com/MikeHorn-git/arch-osint#%EF%B8%8F-pros)
* [Tools](https://github.com/MikeHorn-git/arch-osint#%EF%B8%8F-100-tools)
* [Resources](https://github.com/MikeHorn-git/arch-osint#-resources)
* [Features](https://github.com/MikeHorn-git/arch-osint#-miscellaneous-features)
* [OVA](https://github.com/MikeHorn-git/arch-osint#-ova-1)
* [Version](https://github.com/MikeHorn-git/arch-osint#-version-10)
* [Credits](https://github.com/MikeHorn-git/arch-osint#%EF%B8%8F-credits)
* [Contribute & Support](https://github.com/MikeHorn-git/arch-osint#%EF%B8%8F-contribute--support)
* [To-do](https://github.com/MikeHorn-git/arch-osint#-to-do)
# ⚠️ Warning
Run this script in a clean, dedicated and new operating system. Certain configurations and preferences can be disabled or overwriten.
The hardened feature in miscellaneous blocks some functionalities like Bluetooth, network file systems, webcams and more.
# 🔍 Description
Arch-Osint is available with an OVA image or by running the flexible bash script in a clean archlinux VM.
Aiming at contribute to the osint community, the project is useful for beginner to professional. The OS contain more than hundred tools for Osint [SOCMINT, GEOINT, IMINT and more], and other tools for helping in the investigations [Utilities, Forensics, Steganography, Network and more].
For better experience the script provides resources [Bookmarks, Startme pages, Awesome lists, Guides and more] focused on Osint, and miscellaneous features for improving Osint activities with hardened tricks, privacy tools and custom experience.
# 👷 Installation
## 📦 OVA
* Download the [VM](https://mega.nz/file/jrpkkBpQ#bfW3hpCtujIsoPADFc5sTrY1f8swN8vuh8PZKXljW6Q) [5.4GB].
* Verify the sha256sum.
```bash
echo 14d5c8f789e209b297176b15a84a32c441a9dbb29a5f6213eac45a1ea54c71c9 Arch-Osint.ova | sha256sum -c
```
* Credential osint:osint
## 🧑🍳 Installer
```bash
git clone https://github.com/MikeHorn-git/arch-osint.git
cd arch-osint
chmod +x arch-osint
sudo ./arch-osint -h
# Run with logs
# sudo ./arch-osint -$OPTION | tee logs.txt
```
# 🪶 Usage
```bash
Arch-Osint Linux OS VM based on Blackarch.
Syntax: arch-osint -[h|v|a|t|r|m]
options:
-h Print this Help.
-v Print software version.
-a Install all scripts.
-t Install tools.
-r Install resources.
-m Install miscellaneous features.
```
# 🏛️ Pros
* Aur limited usage. Build from source can be long, aim to make update quicker.
* Based on archlinux and blackarch repository.
* Bash installer scripts with options. For build a VM from scratch or add to an existent system.
* Custom experience and features.
* Disk space optimized.
* Hardened OS.
* Osint bookmarks resources.
* Osint guides and lists resources.
* Osint tools arsenal from various categories and fields.
* OVA VM.
* Package Manager are Pacman and Pip3 only.
* Pip3 limited usage for dependencies and tools. Pip3 is slower and can break Pacman.
* Python dependencies are from Pacman / Aur.
* Tools related to Osint for better experience like Privacy, Forensics and many more.
# 🛠️ +100 Tools
* [Amass](https://github.com/owasp-amass/amass) - In-depth attack surface mapping and asset discovery.
* [Atscan](https://github.com/AlisamTechnology/ATSCAN) - Advanced dork Search & Mass Exploit Scanner.
* [Bdfr](https://github.com/aliparlakci/bulk-downloader-for-reddit) - Downloads and archives content from reddit.
* [Blackbird](https://github.com/p1ngul1n0/blackbird) - An OSINT tool to search for accounts by username in social networks.
* [Binwalk](https://github.com/ReFirmLabs/binwalk) - Firmware Analysis Tool.
* [Carbon14](https://github.com/Lazza/Carbon14) - OSINT dating tool for web pages.
* [Cardpwn](https://github.com/itsmehacker/CardPwn) - OSINT Tool to find Breached Credit Cards Information.
* [Chatgpt-shell-cli](https://github.com/0xacx/chatGPT-shell-cli) - Simple shell script to use OpenAI's ChatGPT and DALL-E from the terminal. No Python or JS required.
* [Cloud_enum](https://github.com/initstring/cloud_enum) - Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
* [Cloud_sherlock](https://github.com/Group-IB/cloud_sherlock) - Enum S3 buckets and SaaS.
* [Crosslinked](https://github.com/m8sec/CrossLinked) - LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping.
* [DumpsterDiver](https://github.com/securing/DumpsterDiver) - Tool to search secrets in various filetypes.
* [Elasticsearch](https://github.com/elastic/elasticsearch) - Free and Open, Distributed, RESTful Search Engine.
* [Email2phonenumber](https://github.com/martinvigo/email2phonenumber) - A OSINT tool to obtain a target's phone number just by having his email address.
* [Emdofi](https://github.com/novitae/emdofi) - Uncovers a censored email's domain.
* [ExchangeFinder](https://github.com/mhaskar/ExchangeFinder) - Find Microsoft Exchange instance for a given domain and identify the exact version.
* [Exiflooter](https://github.com/aydinnyunus/exifLooter) - ExifLooter finds geolocation on all image urls and directories also integrates with OpenStreetMap.
* [Exiv2](https://github.com/Exiv2/exiv2) - Image metadata library and tools.
* [FacebookOsint](https://github.com/tomoneill19/FacebookOSINT) - FBOSINT - A tool to replace facebook graph search Resources.
* [Fake-sms](https://github.com/Narasimha1997/fake-sms) - A tool to skip phone number based SMS verification by using a temporary phone number that acts like a proxy.
* [Fbi](https://github.com/xHak9x/fbi) - Facebook Information.
* [Ffmpeg](https://archlinux.org/packages/extra/x86_64/ffmpeg/) - Complete solution to record, convert and stream audio and video.
* [Fierce](https://github.com/mschwager/fierce) - A DNS reconnaissance tool for locating non-contiguous IP space.
* [FinalRecon](https://github.com/thewhiteh4t/FinalRecon) - The Last Web Recon Tool You'll Need.
* [Foremost](https://github.com/korczis/foremost) - Foremost is a console program to recover files based on their headers, footers, and internal data structures.
* [Gallery-dl](https://github.com/mikf/gallery-dl) - Command-line program to download image galleries and collections from several image hosting sites.
* [GhostTrack](https://github.com/HunxByts/GhostTrack) - Useful tool to track location or mobile number.
* [Ghunt](https://github.com/mxrch/GHunt) - Offensive Google framework.
* [Gitfive](https://github.com/mxrch/GitFive) - Track down GitHub users.
* [Githound](https://github.com/tillson/git-hound) - Reconnaissance tool for GitHub code search.
* [Gitleaks](https://github.com/gitleaks/gitleaks) - Protect and discover secrets using Gitleaks.
* [Gobuster](https://github.com/OJ/gobuster) - Directory/File, DNS and VHost busting tool written in Go.
* [GooFuzz](https://github.com/m3n0sd0n4ld/GooFuzz) - GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters.
* [Google Earth Pro](https://www.google.com/earth/about/) - The world's most detailed globe.
* [Gophish](https://github.com/gophish/gophish) - Open-Source Phishing Toolkit.
* [H8mail](https://github.com/khast3x/h8mail) - Email OSINT & Password breach hunting tool, locally or using premium services.
* [Harpoon](https://github.com/Te-k/harpoon) - CLI tool for open source and threat intelligence.
* [Holehe](https://github.com/megadose/holehe) - Holehe check if the mail is used on different sites like twitter, instagram with the forgotten password.
* [Ignorant](https://github.com/megadose/ignorant) - Ignorant allows you to check if a phone number is used on different sites like snapchat, instagram.
* [ILS](https://github.com/bellingcat/instagram-location-search) - Finds Instagram location IDs near a specified latitude and longitude.
* [InstagramOsint](https://github.com/sc1341/InstagramOSINT) - An Instagram Open Source Intelligence Tool.
* [Instaloader](https://github.com/instaloader/instaloader) - Download pictures (or videos) along with their captions and other metadata from Instagram.
* [Ipinfo](https://github.com/ipinfo/cli) - Official Command Line Interface for the IPinfo API (IP geolocation and other types of IP data).
* [Kamerka](https://github.com/woj-ciech/kamerka) - Build interactive map of cameras from Shodan.
* [Linkedin2username](https://github.com/initstring/linkedin2username) - OSINT Tool: Generate username lists for companies on LinkedIn.
* [Mailcat](https://github.com/sharsil/mailcat) - Find existing email addresses by nickname using API/SMTP checking methods without user notification.
* [Maigret](https://github.com/soxoj/maigret) - Collect a dossier on a person by username from thousands of sites.
* [Maltego](https://www.maltego.com/) - Comprehensive tool for graphical link analyses that offers real-time data mining and information gathering.
* [Masto](https://github.com/C3n7ral051nt4g3ncy/Masto) - Masto is an OSINT tool written in python to gather intelligence on Mastodon users and instances.
* [Metagoofil](https://github.com/laramies/metagoofil) - Metadata harvester.
* [Moriarty-Project](https://github.com/AzizKpln/Moriarty-Project) - This tool gives information about the phone number that you entered.
* [Mpv](https://github.com/mpv-player/mpv) - Command line video player.
* [Nqntnqnqmb](https://github.com/megadose/nqntnqnqmb) - Allows you to retrieve information on linkedin profiles/companies and search on linkedin companies/persons.
* [Nmap](https://nmap.org/) - Utility for network discovery and security auditing.
* [Octosuite](https://github.com/bellingcat/octosuite) - An all-in-one GitHub open-source intelligence framework.
* [Onionsearch](https://github.com/megadose/OnionSearch) - OnionSearch is a script that scrapes urls on different .onion search engines.
* [Osintgram](https://github.com/Datalux/Osintgram) - Osintgram is a OSINT tool on Instagram.
* [Osintmap](https://map.malfrats.industries/) - A map of OSINT tools.
* [Phoneinfoga](https://github.com/sundowndev/phoneinfoga) - Information gathering framework for phone numbers.
* [Phonia](https:/$/github.com/coredamage/phonia) - Phonia Toolkit is one of the most advanced toolkits to scan phone numbers using only free resources.
* [Photon](https://github.com/s0md3v/Photon) - Incredibly fast crawler designed for OSINT.
* [PD](https://github.com/limkokhole/pinterest-downloader) - Download all images/videos from Pinterest user/board/section.
* [Proton1ntelligence](https://github.com/C3n7ral051nt4g3ncy/Prot1ntelligence) - Protintelligence is a Python script for helps you to find intelligence on Protonmail users.
* [Protosint](https://github.com/pixelbubble/ProtOSINT) - ProtOSINT is a Python script that helps you investigate Protonmail accounts and ProtonVPN IP addresses.
* [Pwndb](https://github.com/davidtavarez/pwndb) - Search for leaked credentials.
* [PwnedOrNot](https://github.com/thewhiteh4t/pwnedOrNot) - OSINT Tool for Finding Passwords of Compromised Email Addresses.
* [Recon-ng](https://github.com/lanmaster53/recon-ng) - Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
* [Reavealin](https://github.com/mxrch/revealin) - Uncover the full name of a target on Linkedin.
* [Ripme](https://github.com/RipMeApp/ripme) - Downloads albums in bulk.
* [Sherlock](https://github.com/sherlock-project/sherlock) - Hunt down social media accounts by username across social networks.
* [Shodan](https://github.com/achillean/shodan-python) - The official Python library for Shodan.
* [Skiptracer](https://github.com/xillwillx/skiptracer) - OSINT python webscaping framework.
* [SlackPirate](https://github.com/emtunc/SlackPirate) - Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace.
* [SleuthKit](https://github.com/sleuthkit/sleuthkit) - The Sleuth Kit® is a ommand line digital forensics tools that allow you to investigate volume and file system data.
* [SMWYG](https://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got) - This tool allows you to perform OSINT and reconnaissance on an organisation or an individual.
* [SMS](https://github.com/nemec/snapchat-map-scraper) - This program can search at multiple locations and download all stories for later investigation and categorization.
* [Snoop](https://github.com/snooppr/snoop) - Snoop Project One of the most promising OSINT tools to search for nicknames.
* [Snooper](https://github.com/NicholasDollick/Snooper) - OSINT Reddit user activity analyzer.
* [Social-analyzer](https://github.com/qeeqbox/social-analyzer) - API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites.
* [SonicVisualiser](https://www.sonicvisualiser.org/download.html) - Sonic Visualiser is a program for viewing and exploring audio data for semantic music analysis and annotation.
* [Sqlitebrowser](https://github.com/sqlitebrowser/sqlitebrowser) - Official home of the DB Browser for SQLite (DB4S) project.
* [Spiderfoot](https://github.com/smicallef/spiderfoot) - SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
* [Stegoveritas](https://github.com/bannsec/stegoVeritas/) - Yet another Stego Tool.
* [Sterra](https://github.com/novitae/sterraxcyl) - Instagram OSINT tool to export and analyse followers | following with their details.
* [Telepathy](https://github.com/proseltd/Telepathy-Community) - Public release of Telepathy, an OSINT toolkit for investigating Telegram chats.
* [Telescan](https://github.com/pielco11/telescan) - Search users in groups (and in which groups is the user) by id, username or phone number (if it's in your contacts).
* [Theharvester](https://github.com/laramies/theHarvester) - E-mails, subdomains and names Harvester - OSINT.
* [TD](https://github.com/krypton-byte/tiktok-downloader) - Tiktok Downloader/Scraper using requests & bs4.
* [Tinfoleak](https://github.com/vaguileradiaz/tinfoleak) - The most complete open-source tool for Twitter intelligence analysis.
* [TorBrowser](https://github.com/micahflee/torbrowser-launcher) - Securely and easily download, verify, install, and launch Tor Browser in Linux.
* [Torcrawl](https://github.com/MikeMeliz/TorCrawl.py) - Crawl and extract (regular or onion) webpages through TOR network.
* [Translate-shell](https://github.com/soimort/translate-shell) - Command-line translator using Google Translate, Bing Translator, Yandex.Translate, etc.
* [Trape](https://github.com/jofpin/trape) - People tracker on the Internet: OSINT analysis and research tool by Jose Pino.
* [Twint-zero](https://github.com/twintproject/twint-zero) - Old Twint style, but zero fat.
* [Unredacted](https://github.com/BishopFox/unredacter) - Never ever ever use pixelation as a redaction technique.
* [Vt-cli](https://github.com/VirusTotal/vt-cli) - VirusTotal Command Line Interface.
* [Waybackpy](https://github.com/akamhy/waybackpy) - Wayback Machine API interface & a command-line tool.
* [Wafw00f](https://github.com/EnableSecurity/wafw00f) - WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
* [WebOsint](https://github.com/C3n7ral051nt4g3ncy/WebOSINT) - W3b0s1nt (WebOSINT) is a Python tool/script for passive Domain Intelligence gathering.
* [Whatbreach](https://github.com/Ekultek/WhatBreach) - OSINT tool to find breached emails, databases, pastes, and relevant information.
* [Xeuledoc](https://github.com/Malfrats/xeuledoc) - Fetch information about a public Google document.
* [Yara](https://github.com/VirusTotal/yara) - The pattern matching swiss knife.
* [Yoga](https://github.com/WebBreacher/yoga) - Your OSINT Graphical Analyzer.
* [Yt-dlp](https://github.com/yt-dlp/yt-dlp) - A youtube-dl fork with additional features and fixes.
* [Zen](https://github.com/s0md3v/Zen) - Find emails of Github users.
# 📚 Resources
* [DeepdarkCTI](https://github.com/fastfire/deepdarkCTI) resources.
* [Google dorks list](https://github.com/BullsEye0/google_dork_list) resources.
* [Osint awesome lists](https://github.com/sindresorhus/awesome) resources.
* Osint bookmarks
* Osint guides resources.
* Osint startme pages.
* Sanction and Most wanted [lists](https://github.com/bigger312/Sanctions-Lists/).
# 🌟 Miscellaneous Features
* Custom [background](https://github.com/MikeHorn-git/arch-osint/blob/main/background.jpg).
* Firewall with the [Uncomplicated Firewall](https://launchpad.net/ufw).
* Hardened [Firefox](https://www.mozilla.org/en-US/firefox/new/) with [user.js](https://github.com/arkenfox/user.js).
* Hardened system featuring [Kernel hardened](https://archlinux.org/packages/extra/x86_64/linux-hardened/), [blacklist](https://wiki.archlinux.org/title/Kernel_module#Blacklisting) unwanted Kernel module, anti [core dump, file restriction](https://madaidans-insecurities.github.io/guides/linux-hardening.html), [entropy](https://github.com/jirka-h/haveged), tools and many more.
* Note taking and to-do [Joplin](https://github.com/laurent22/joplin) app with [osint notebook](https://github.com/tjnull/TJ-OSINT-Notebook).
* Manipulation of MAC address by [Macchanger](https://github.com/alobbs/macchanger) with [systemd unit](https://wiki.archlinux.org/title/MAC_address_spoofing#macchanger_2).
* Privacy tools featuring [Bleachbit](https://github.com/bleachbit/bleachbit), [Mat2](https://github.com/jvoisin/mat2), [Proxychains-ng](https://github.com/rofl0r/proxychains-ng), [Torctl](https://github.com/BlackArch/torctl).
* Rootkit Hunter with [Rkhunter](https://www.kali.org/tools/rkhunter/).
* Vim with [custom vimrc](https://github.com/amix/vimrc).
* [Waydroid](https://github.com/waydroid/waydroid) for android container-base approach.
* Zsh with [ohmyzsh framework](https://github.com/ohmyzsh/ohmyzsh).
# 📦 OVA
The OVA VM contains exclusive features.
* Blackarch blue theme.
* Custom Grub menu.
* Hardened OS [72 index on lynis].
* Light OS disk [11G].
# 🪧 Version 1.0
# ✉️ Credits
* All author and contributor for the projects, resources, tools and more mentioned in this project.
* The unknown background author.
* [Blackarch](https://www.blackarch.org/)
* [Bookmarks](https://github.com/OhShINT/ohshint.gitbook.io/tree/main/Lists_of_OSINT_Web_Resources/Bookmarks)
## Related Project
* [Trace labs VM](https://github.com/tracelabs/tlosint-vm)
# 🗣️ Contribute & Support
* Feel free to contribute by giving ideas, open/fix issues, ...
* 💫 the project if you like it, it's the best way to support.
# 📡 To-Do
- [ ] Add more features and resources.
- [ ] Add new created tools.
- [x] Create an ova file.
- [ ] Create an updater script for tools from github.