datasploit v1.0: The BEST OSINT FRAMEWORK

by do son · Published July 1, 2017 · Updated August 2, 2017

Overview of the tool:

Performs OSINT on a domain / email / username / phone and find out information from different sources.
Correlates and collaborate the results, show them in a consolidated manner.
Tries to find out credentials, api-keys, tokens, subdomains, domain history, legacy portals, etc. related to the target.
Use specific script / launch automated OSINT for consolidated data.
Performs Active Scans on collected data.
Generates HTML, JSON reports along with text files.

Created using our beloved Python, MongoDb and Django, DataSploit simply requires the bare minimum data (such as domain name, email ID, person name, etc.) before it goes out on a mining spree. Once the data is collected, firstly the noise is removed, after which data is correlated and after multiple iterations it is stored locally in a database which could be easily visualised on the UI provided. The sources that have been integrated are all hand picked and are known to be providing reliable information. We have used them previously during different offensive as well as defensive engagements and found them helpful.