Passive intelligence & attack surface exposure framework
OSINT Exposure Toolkit
OSINT Exposure Toolkit is a professional passive reconnaissance framework built in Python for defensive security audits and exposure baseline assessments. Given an email, domain, or username, it executes an orchestration pipeline across multiple passive modules: Credential Leak checks (LeakCheck / HaveIBeenPwned), GitHub secret scanning, DNS email authentication (SPF, DMARC, DKIM, MTA-STS spoofability evaluation), social footprint discovery, Shodan host telemetry, client-side JS secret analysis, and Google Dork query generation. Results are aggregated into a standardized 0–100 exposure risk score and exported as an interactive HTML report, topology graph, structured JSON, and Markdown summary.
Problem
Security engineers and consultants often need a non-invasive way to measure public exposure and credential spillover without launching noisy active vulnerability scanners or triggering defensive WAF alarms.
Solution
A completely passive multi-source OSINT pipeline that parses publicly available telemetry, applies weighted impact scoring, and produces consulting-grade deliverables.
Outcome
A production-ready reconnaissance suite demonstrating Python asynchronous orchestration, modular security architecture, API integration, and automated CI quality checks.
Standout Features
- Multi-vector passive recon across emails, domains, usernames, and public code repositories
- Weighted 0–100 public exposure score with normalized remediation finding IDs
- Full reporting pack: interactive visual exposure graph, comprehensive HTML report, JSON, and Markdown
- Modular engines: credential leaks, DNS SPF/DMARC/MTA-STS spoofability, JS secrets, Shodan, and Google Dorks
Stack & Signals
- Python 3.11+
- Pydantic
- Shodan API
- GitHub API
- LeakCheck / HIBP
- Pytest
- GitHub Actions
Canonical destination