A terminal-based OSINT and reconnaissance framework built with Python.
This tool gathers public intelligence about an IP address using multiple threat intelligence sources while routing traffic through the Tor network for operational privacy.
Educational and defensive security purposes only.
- Tor-based anonymous requests (SOCKS5)
- IP geolocation intelligence
- ISP and ASN lookup
- Proxy/VPN and hosting detection
- AbuseIPDB threat scoring
- Shodan reconnaissance integration
- Rich terminal dashboard UI
- Open ports and CVE visibility
- Clean modular architecture
TARGET INTEL DASHBOARD: 8.8.8.8
Network & Routing
-------------------------
ISP / Org Google LLC
ASN AS15169
Location California, USA
Proxy/VPN Clean
Datacenter Yes
Threat Intelligence
-------------------------
Abuse Score 0%
Reports 0
Open Ports & Services
-------------------------
Operating System: Linux
Open Ports: 53, 443Install Python dependencies:
pip install requests rich pysocksThis framework requires a running Tor SOCKS5 proxy.
Install Tor:
sudo apt install tor
sudo systemctl start torVerify SOCKS5 Proxy:
127.0.0.1:9050Download from:
https://www.torproject.org/download/
Install and launch Tor Browser once.
Your script uses:
127.0.0.1:9050Tor Browser automatically opens this SOCKS5 proxy port.
Do NOT close Tor Browser while running the script.
Open CMD or PowerShell:
pip install requests rich pysockspython main.pySome advanced features require free API keys.
Get key from: https://www.abuseipdb.com
Get key from: https://account.shodan.io
Add keys inside the script:
ABUSE_IPDB_KEY = "YOUR_KEY"
SHODAN_API_KEY = "YOUR_KEY"Run the script:
python main.pyExample:
Enter Target IP: 1.1.1.1Exit:
exit.
├── main.py
├── README.md
└── requirements.txtrequests
rich
pysocksThis tool is intended strictly for:
- Cybersecurity learning
- Defensive reconnaissance
- Threat intelligence research
- Authorized security testing
Do NOT use this framework against systems without permission.
- Domain intelligence support
- WHOIS integration
- DNS enumeration
- CVE severity scoring
- Multi-threaded scanning
- Export reports as JSON/PDF
- Dark web breach lookup integration
Developed for cybersecurity learning and OSINT research.