skills.rest
xalgord
xalgordCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

performing-osint-with-spiderfoot

Automate OSINT collection and target profiling using the SpiderFoot REST API and CLI.

954|172|Updated Mar 13, 2026
Search Tags:#reconnaissance#Automation#threat intelligence#attack surface#osint#target profiling#spiderfoot
One-click install
npx skills add https://github.com/xalgord/xalgorix --skill performing-osint-with-spiderfoot
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: performing-osint-with-spiderfoot
Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/threat-intelligence/performing-osint-with-spiderfoot
Command: npx skills add https://github.com/xalgord/xalgorix --skill performing-osint-with-spiderfoot

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests.

What problem does it solve?

Manual open-source intelligence gathering across hundreds of data sources is slow and inconsistent. This Skill automates SpiderFoot scans to build structured target profiles covering domains, IPs, emails, leaked credentials, and DNS records.

Core Features & Use Cases

  • Automated Scan Management: Create, configure, and monitor SpiderFoot scans via the REST API or CLI (sf.py/spiderfoot-cli) with module selection by use case (all, footprint, investigate, passive).
  • Structured Result Parsing: Retrieve and organize findings by data element type, including subdomains, IP addresses, email addresses, leaked credentials, and DNS records with module source attribution.
  • Use Case: During a security assessment, launch a footprint scan against a target domain, poll the API for completion, then extract all discovered subdomains and exposed credentials into a JSON intelligence report with risk indicators.

Quick Start

Run a SpiderFoot footprint scan against example.com and generate a structured OSINT report of discovered subdomains, IPs, and emails.

Frequently Asked Questions about performing-osint-with-spiderfoot

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate OSINT collection with SpiderFoot?▼

Use the SpiderFoot REST API or CLI to create a scan with a target (domain, IP, email, or name), select a use case like footprint or investigate, poll the API for progress, and retrieve structured results organized by data type.

What is the difference between SpiderFoot passive and footprint scan types?▼

The passive use case avoids directly touching the target but misses live ports and banners. Footprint and investigate actively probe the target, yielding richer data but potentially alerting the target or triggering a WAF.

Why does my SpiderFoot scan return very few results?▼

Most of SpiderFoot's 200+ modules require API keys for sources like VirusTotal, Shodan, and HaveIBeenPwned. Without keys, modules silently skip and produce a thin profile, so audit which modules actually ran before concluding a target has no exposure.

Can SpiderFoot results contain false positives?▼

Yes. Email, name, and username pivots can match unrelated entities, and stale sources may report dead subdomains or expired credentials. Validate high-impact findings directly against authoritative sources before acting on them.

What are the requirements to run SpiderFoot OSINT scans?▼

You need SpiderFoot 4.0+ installed or a SpiderFoot HX cloud account, Python 3.8+ with the requests library, and the SpiderFoot server running on default port 5001. API keys for premium modules are optional but recommended.

Related Skills

Explore More Software Engineering Skills→
hpsgdhpsgd

recon

Automate passive reconnaissance on a target domain using public sources.

Official
Advanced
wojonswojons
4

testing-security

Test applications and infrastructure for security vulnerabilities and weaknesses.

Community
Advanced
0x0pointer0x0pointer
13

osint

Map target organizations through passive OSINT sources with confidence scoring.

Official
Advanced
the-agency-aithe-agency-ai
39

Rebase

Block git rebase commands to prevent history rewriting and data loss.

Official
Basic