[ZanGetsu]

SpiderFoot is an open source intelligence automation tool. Its goal is to automate the process of gathering intelligence about a given target, which may be an IP address, domain name, hostname or network subnet.

SpiderFoot can be used offensively, i.e. as part of a black-box penetration test to gather information about the target or defensively to identify what information your organisation is freely providing for attackers to use against you.

Modules:

• sfp_dns  : Performs a number of DNS checks to obtain IP Addresses and Affiliates.
  
• sfp_geoip   : Identifies the physical location of IP addresses identified.
  
• sfp_googlesearch   : Some light Google scraping to identify links for spidering.
  
• sfp_mail   :  Identify e-mail addresses in any obtained web content.
  
• sfp_pageinfo   : Obtain information about web pages (do they take passwords, do they contain forms, etc.)
  
• sfp_portscan_basic :   Scans for commonly open TCP ports on Internet-facing systems.
  
• sfp_ripe:   Queries RIPE to identify netblocks and other info.
  
• sfp_similar : Search various sources to identify similar looking domain names.
  
• sfp_spider :  Spidering of web-pages to extract content for searching. Probably the most important module.
  
• sfp_stor_db : Stores scan results into the back-end SpiderFoot database. You will need this.
  
• sfp_subdomain :  Identify hostnames / sub-domain names in URLs and obtained content.
  
• sfp_websvr : Obtain web server banners to identify versions of web servers being used.
  
• sfp_xref : Identify whether other domains are associated ('Affiliates') of the target.
  

New Scan:



Example Results:

Download (Windows & Linux)

[Slacker]

Very interesting k am actually going to fire up the good old trusty laptop tonight and download this and tinker with it