Identify publicly visible assets, employees, and technologies using OSINT techniques.
npx skills add https://github.com/brucesongs/kali-claw --skill osint-brucesongs
Please help me install this Agent Skill. Skill: osint Source: https://github.com/brucesongs/kali-claw/tree/main/skills/osint Command: npx skills add https://github.com/brucesongs/kali-claw --skill osint-brucesongs
Gathers intelligence from publicly available sources to build a comprehensive view of an organization's digital footprint.
To begin, trigger an OSINT workflow to collect public data and summarize the findings.
High-intent search queries and answers about installing and using this skill.
To map an attack surface using OSINT, you gather intelligence across domains, subdomains, and emails using passive and semi-passive techniques. This builds a comprehensive view of publicly visible assets and technologies.
Yes, passive reconnaissance can find exposed employee data by querying breach data and email addresses. It correlates public sources to identify risk hotspots without directly interacting with the target's network.
Automating subdomain enumeration and fingerprinting is best handled by triggering an OSINT workflow that integrates multiple data sources. This automatically correlates technologies and assets to produce structured reports for assessments.
The system supports 50+ data sources for public data correlation. These sources feed into 13 distinct OSINT workflows, enabling rapid data integration for red-team and defensive security assessments.
Yes, OSINT reconnaissance works for both red-team and defensive assessments. It maps public digital footprints and identifies risk hotspots, informing proactive security strategies and threat modeling.
You should use semi-passive OSINT techniques when you need to map public assets and technologies without alerting the target. This approach safely gathers domains and subdomain data while minimizing direct network interaction.
din4eIdentify target-domain OSINT artifacts and assemble a structured reconnaissance plan.
adminsairolotech-bitOrchestrate dependency audits, SAST, and dataflow analysis into prioritized vulnerability summaries.
transilienceaiCoordinate subdomain discovery and port scanning to build a domain attack surface inventory.
ArianHobson333Identify subdomains, ports, endpoints, APIs, and attack surfaces.
