ASE Project Documentation

Overview

Starting from Espionage and ending at OSINT, our data gathering techniques has been developed magnificently. In 90’s, the security posture of national security, law enforcement agencies, Cyber Security agencies was totally different. At that time, gathering data about someone was very difficult due to fewer Internet resources. But, this digital era has overcome the techniques used for information gathering in 90’s by Intelligence Gathering. It includes gathering data from various public sources and their API. Intelligence Gathering includes human, geo-location, open-source, signals, digital and financial intelligence.

Our Project can find information about a person, email, an organization, person’s geolocation, domain names, publically available devices on the internet and so on. It can be used by Data Miners, Infosec Researchers, Penetration Testers and Cyber Crime Investigators in order to find deep information about their target.

Setup

Installing and using the project is very easy. Installation process is very simple and is of 4 steps.

  1. Downloading or cloning the github repository.

  2. Downloading and installing all dependencies.

  3. Generating API Keys

  4. Adding API Keys in config file

Let’s Begin !!

Cloning

In order to install, simply clone the github repository. Below is the command which you can use in order to clone ASEProject repository.:

git clone https://github.com/Sayam753/ASEProject.git

Installing dependencies

Once you clone the repo, install the requirements either in a virtual environment or in the system itself.

pip install -r requirements.txt

Generating API Keys

We need some API Keys before using this tool. Following are the API’s which we are using in this tool for a time being. Paste all the API keys in the config.py in their respective placeholdes.

Clearbit API

  1. Create an account at Clearbit. Fill in the email address and password.

  2. Click Next. Fill in the relevant details.

  3. Confirm your email address.

  4. You will notice API Key in API section in left pane. Copy that and paste in clearbit_api_key.

Shodan API

  1. Create an account at Shadon. Fill in the details.

  2. Confirm the email address.

  3. Login with the credentials.

  4. After login, you will notice API Key in Account Overview section. Copy that and paste in shodan_api_key.

  5. If successfully logged in, the API Key is also visible at the topmost header of shadon.io.

FullContact API

  1. Create an account at FullContact. Use your business email address.

  2. Fill in the required details.

  3. After successfully logging in, select Get an API Key from Getting started section.

  4. Enter the name for the key and after generating, paste the key in fullcontact_api_key.

VirusTotal API

  1. Create an account at VirusTotal. Fill in the details.

  2. Confirm your email address. Log in to your account.

  3. Click on the avatar on top right to visit your profile.

  4. You will notice an API Key. Paste that key in virus_total_api_key.

Email Hunter API

  1. Create an account at Email Hunter. Use your business email address.

  2. Fill in the details. Confirm your email address. Verify your mobile number.

  3. After successfully logging in, find your API Key under your profile in top right.

  4. Paste that API key in email_hunter_api_key.

Usage

OSINT-SPY is very handy tool and easy to use. All you have to do is just have to pass values to parameter. In order to start OSINT-SPY just write

python osint-spy.py

–btc_block

–btc_block parameter gives you the information of the latest bitcoin block chain.

python osint-spy.py --btc_block

–btc_date

–btc_date parameter will give you an information of bitcoin block chain from given date.

python osint-spy.py --btc_date 20170620

–btc_address

–btc_address will give you an information about particular bitcoin owner.

python osint-spy.py --btc_address 1DST3gm6JthxhuoNKFqXrdpzPFfz1WgHpW

–ssl_cipher

-ssl_cipher will show you all the ciphers supported by given website.

python osint-spy.py --ssl_cipher google.com

–ssl_bleed

–ssl_bleed will find out whether given website is vulnerable to heartbleed or not ?

python osint-spy.py --ssl_bleed google.com

–domain

–domain will give you in depth-information about particular domain including whois, dns, ciphers, location and so more.

python osint-spy.py --domain google.com

–email

–email will gather information about given email address from various public sources.

python osint-spy.py --email david@google.com

–device

–device will search for a given device from shodan and will list out all the available devices on public IP.

python osint-spy.py --device webcam

–ip

–ip will gather all the information of given IP Address from public sources.

python osint-spy.py --ip 45.76.151.11

–malware

–malware will send a given piece of file to virustotal and will give you a result whether given file is malware or not?

python osint-spy.py --malware abc.exe

Roadmap

This is the initial version of the project. In future, we will add various social platofrms API and we will try to make it better by adding database functionality.

Github Repository Link: ASE Project.