sn0int v0.26 releases: OSINT framework and package manager

sn0int

sn0int is an OSINT framework and package manager. It was built for IT security professionals and bug hunters to gather intelligence about a given target or about yourself. It is an enumerating attack surface by semi-automatically processing public information and mapping the results in a unified format for follow-up investigations.

Among other things, it is currently able to:

• Harvest subdomains from certificate transparency logs and passive dns
• Enrich ip addresses with asn and geoip info
• Harvest emails from pgp keyservers and whois
• Discover compromised logins in breaches
• Find somebody’s profiles across the internet
• Enumerate local networks with unique techniques like passive arp
• Gather information about phonenumbers
• Attempt to bypass Cloudflare with shodan
• Harvest data and images from Instagram profiles
• Scan images for nudity

It is heavily inspired by recon-ng and maltego, but remains more flexible and is fully opensource. None of the investigations listed above is hardcoded in the source, instead, those are provided by modules that are executed in a sandbox. You can easily extend sn0int by writing your own modules and share them with other users by publishing them to the sn0int registry. This allows you to ship updates for your modules on your own since you don’t need to send a pull request.

Changelog v0.26

• Port to clap 4 (this solves a bug in zsh completions too)
• Fix compile issue on Rust 1.72.0 by updating the geo dependency (thanks @ZhongRuoyu, #249)
• Change the workspace size calculation from bytesize and 1 KB -> 1000 bytes, to humansize and 1 KiB -> 1024 bytes.

Install & Use

Copyright (C) 2018 kpcyrd