Sinisterly
SpiderFoot - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.li/Forum-Hacking-Tools)
+--- Thread: SpiderFoot (/Thread-SpiderFoot)

SpiderFoot - ZanGetsu - 09-18-2017

SpiderFoot is an open source intelligence automation tool. Its goal is to automate the process of gathering intelligence about a given target, which may be an IP address, domain name, hostname or network subnet.

SpiderFoot can be used offensively, i.e. as part of a black-box penetration test to gather information about the target or defensively to identify what information your organisation is freely providing for attackers to use against you.

Modules:
  • sfp_dns  : Performs a number of DNS checks to obtain IP Addresses and Affiliates.
  • sfp_geoip   : Identifies the physical location of IP addresses identified.
  • sfp_googlesearch   : Some light Google scraping to identify links for spidering.
  • sfp_mail   :  Identify e-mail addresses in any obtained web content.
  • sfp_pageinfo   : Obtain information about web pages (do they take passwords, do they contain forms, etc.)
  • sfp_portscan_basic :   Scans for commonly open TCP ports on Internet-facing systems.
  • sfp_ripe:   Queries RIPE to identify netblocks and other info.
  • sfp_similar : Search various sources to identify similar looking domain names.
  • sfp_spider :  Spidering of web-pages to extract content for searching. Probably the most important module.
  • sfp_stor_db : Stores scan results into the back-end SpiderFoot database. You will need this.
  • sfp_subdomain :  Identify hostnames / sub-domain names in URLs and obtained content.
  • sfp_websvr : Obtain web server banners to identify versions of web servers being used.
  • sfp_xref : Identify whether other domains are associated ('Affiliates') of the target.

New Scan:

[Image: spiderfoot-modules.png]

Example Results:

[Image: spiderfoot-running.png]

Download (Windows & Linux)


RE: SpiderFoot - Slacker - 09-19-2017

Very interesting k am actually going to fire up the good old trusty laptop tonight and download this and tinker with it