soufianetahiri / valkyrie Goto Github PK

Valkyrie is another OSINT tool, it allows you to perform some basics recon/monitoring tasks. This tool stills under development, many other features are yet to come. I barely handled errors, and user inputs so don't be surprised if nothing works :). As always, pull requests are welcomed! Valkirye is built using Razor pages and depends on jQuery, Bootstrap, Datatables and Chart.js. Realtime monitoring is handled by SignalR

Happy recon folks.

Use this interface to get an idea of Current DNS records, Historical DNS records, Subdomains and Navigate through IP subnets and neighborhoods. All data is grabbed from https://securitytrailsr.com, using their API, so before using it, go and grab an API key and edit the appsettings.json accordingly.

IP address research Returns the neighbors in any given IP level range and essentially allows you to explore close-by IP addresses. It will divide the range into 16 groups. Example: a /28 would be divided into 16 /32 blocks or a /24 would be divided into 16 /28 blocks.

Historical DNS records Lists out specific historical information about the given hostname parameter. In addition of fetching the historical data for a particular type, the count statistic is returned as well, which represents the number of that particular resource against current data. (a records will have an ip_count field which will represent the number of records that has the same IP as that particular record) The results are sorted first_seen descending. The number of results is not limited.

Get Subdomains Returns child and sibling subdomains for a given hostname. Limited to 2000 results for the Free plan and to 10000 for all paid subscriptions. (for more subdomains you can use (in-depth) Subs section)

Discovers certificates by searching all of the publicly known Certificate Transparency (CT) logs.

Keep an eye on the latest tweets that contain hashtags/keywords, space-separated, (monitor up to 5 keywords). Chart might be incomplete due to the Twitter rate limit.

New tweets containing your keywords are added as they are tweeted, you can grab the user's info (including avatar, location, profile creation date/time...) by clicking on the user name from the list.

A chart is drawn to give you an idea of how much "talk" is out there about topics you monitor.

It fully relies on Sublist3r which is a tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing, Baidu and Ask. Sublist3r also enumerates subdomains using Netcraft, Virustotal, ThreatCrowd, DNSdumpster, and ReverseDNS.

You need to MANUALLY install it, and to set your Python path on the appsettings.json. Ex (yes I revoked the API key ;)):

  "AppSettings": {
    "PythonPath": "C:\\Users\\soufiane.tahiri\\AppData\\Local\\Programs\\Python\\Python39",
    "SecuritytrailsAPIKey": "blw0TiVLivBCXwHXZgy212suJ35uejEK"
  }

This section helps to keep an eye on bins that contain keywords (space separated) publicly available on Pastbin.com.

You can click on "Fetch" to try to get bins content, the generated chart allows you to know "how many leaks"/month is out there.

Based on the idea behind 'Instant Username Search', this feature helps you find out if the given username is taken (if a profile exists) on more than 130 social media sites