Moriarty

Advanced OSINT and Digital Investigation Tool

Advanced reconnaissance and security analysis tool for OSINT investigations and penetration testing

🌍 Language / Idioma:

📑 Table of Contents

• 🌟 Key Features
• 🚀 Installation
• 💻 Basic Usage
• 🔍 Commands
• 🛡️ Security
• 🤝 Contributing
• 📄 License

🌟 Key Features

🔍 Passive Reconnaissance OSINT information gathering Subdomain discovery SSL/TLS certificate analysis WHOIS/RDAP metadata	🛡️ Security Scanning Service and port detection Web technology identification Vulnerability scanner WAF/IPS/IDS detection
📧 Email Analysis DNS/SMTP validation Multi-source investigation Breach verification Reputation analysis	🎯 Threat Intelligence IOC analysis Credential verification Domain reputation Known threat detection

🚀 Installation

Prerequisites

Python 3.13+ | pip | pipx (recommended)

Via pipx (Recommended)

# Install using pipx
pipx install moriarty-project

# Verify installation
moriarty --help

Via pip

# Global installation
pip install moriarty-project

# User installation
pip install --user moriarty-project

For Development

# Clone repository
git clone https://github.com/DonatoReis/moriarty.git
cd moriarty

# Create virtual environment
python -m venv venv
source venv/bin/activate  # Windows: venv\Scripts\activate

# Install in development mode
pip install -e .
pip install -r requirements-dev.txt

💻 Basic Usage

Command Structure

moriarty [GLOBAL_OPTIONS] COMMAND [ARGUMENTS] [OPTIONS]

Global Options

Option	Description	Default
--verbose	Detailed logs	False
--quiet	Suppress output	False
--concurrency INT	Concurrent tasks	50
--timeout FLOAT	Timeout (seconds)	8.0
--proxy URL	HTTP/SOCKS proxy	-
--format	Output format	table
--output PATH	Save to file	-

🔍 Commands

📧 Email

email check - Validate email address

# Basic usage
moriarty email check user@example.com

# With options
moriarty email check --verbose user@example.com --format json --output result.json

email investigate - Deep investigation

# Investigate across multiple sources
moriarty email investigate user@example.com --verbose

👤 User

user enum - Enumerate username

# Check availability
moriarty user enum username

# On specific sites
moriarty user enum username --sites github,twitter,instagram --output results.json

🌐 Domain

domain scan - Complete scan

# Full scan
moriarty domain scan example.com --stealth 2 --threads 50

# Specific modules
moriarty domain scan example.com --modules dns,ports,ssl

Options:

• --modules: all, dns, subdiscover, wayback, ports, ssl, crawl, fuzzer, template-scan, vuln-scan, waf-detect
• --stealth: Stealth level (0-4)
• --threads: Concurrent threads
• --timeout: Timeout in seconds

domain recon - Passive reconnaissance

moriarty domain recon example.com --output results.json

🎯 Intelligence

intel ioc - IOC analysis

moriarty intel ioc --file iocs.txt --output report.html

🌐 Network

Command	Description
network dns	Advanced DNS queries
network tls	TLS/SSL analysis
network rdap	RDAP queries

🛠️ Tools

Command	Description
tools template	Template management
tools waf	WAF detection tests

🛠️ Practical Examples

# 1. Basic scan with stealth
moriarty domain scan example.com --stealth 2 --threads 50

# 2. Complete passive reconnaissance
moriarty domain recon example.com --output results.json --format json

# 3. Email verification with investigation
moriarty email check user@example.com --verbose
moriarty email investigate user@example.com

# 4. IOC analysis with HTML report
moriarty intel ioc --file iocs.txt --output report.html

# 5. Username enumeration on social networks
moriarty user enum johndoe --sites github,twitter,linkedin

🛡️ Security Features

Professional Mode

moriarty --professional-mode domain scan example.com

Security and Privacy

• ✅ Encrypted connections (HTTPS/TLS)
• ✅ Automatic PII redaction
• ✅ Proxy and Tor support
• ✅ Digital signature of results
• ✅ Advanced stealth mode

🤝 Contributing

Contributions are welcome! 🎉

1. Fork the repository
2. Create a branch (git checkout -b feature/NewFeature)
3. Commit your changes (git commit -m 'Add: New feature')
4. Push to the branch (git push origin feature/NewFeature)
5. Open a Pull Request

Guidelines

• Follow the Style Guide
• Add tests for new features
• Update documentation
• Keep code clean and documented

📄 License

Distributed under the MIT License. See LICENSE for more information.

🌟 Acknowledgments

Thanks to all contributors who help make Moriarty better!

⬆ Back to top

Developed with ❤️ by the community