I built an open-source OSINT tool that runs 55 modules with zero API keys
python
dev.to
Been learning web security for a while and kept jumping between different tools for every recon task so I just built my own. It's a Python script with a terminal menu. Give it a URL and it runs subdomains, directory bruteforce, JS secret scanning, DNS, headers, SSL, CORS, Shodan, VirusTotal, email security, username search across 30 platforms, GitHub commit email mining. Spits out a report at the end automatically. No API keys needed for any of it. The JS secret detection took a while to