v0.3.0 — GitHub dorking + 8 modules

osint-recon v0.3.0

Passive OSINT reconnaissance framework in Rust — for authorized security assessments only.

Highlights

Modules (8)

Command	What it does	ATT&CK
subdomain	Passive subdomain enum (crt.sh + hackertarget fallback)	T1590
dns	DNS records via DoH (A, AAAA, MX, NS, TXT)	T1590
asn	IP → ASN / AS name / prefix (Team Cymru over DoH, keyless)	T1590.001
ct	Certificate transparency history, CA stats, expiring certs (crt.sh)	T1596.003
ghdork	GitHub exposure dorks — repos/users keyless, code-search with token	T1593.003
tech	Technology fingerprint (headers + HTML signatures)	T1592
email	Email harvesting from public pages	T1589.002
metadata	PDF metadata extraction (author, creator tool, dates)	T1593
full	All modules combined, JSON + CSV export	—

Quality

• 18/18 tests passing · clippy -D warnings clean · cargo fmt enforced
• CI: fmt → clippy → test → build on every push/PR
• Polite by default: 1 req/s rate limiting, timeouts, retries, graceful degradation

Changelog

• v0.3.0 — GitHub dorking module (keyless tier + optional token tier with 5 code-search dorks)
• v0.2.0 — ASN enumeration and CT history modules, CI workflow
• v0.1.0 — Initial release: 5 core modules, CLI, JSON/CSV export

Install

From source (Rust 1.95+):

cargo install --git https://github.com/JMarchiori13/osint-recon

Prebuilt binary: osint-recon-v0.3.0-windows-x86_64.zip below (Windows x64).

Usage

osint-recon full example.com --json report.json
osint-recon ct example.com
osint-recon ghdork example.com            # keyless
OSINT_RECON_GITHUB_TOKEN=ghp_... osint-recon ghdork example.com

⚠️ For authorized security assessments and research only. See the disclaimer.

SHA-256 osint-recon-v0.3.0-windows-x86_64.zip:

ad6f91141cc5fb738f07ba64689aae55290d3acb33be0dd8285fdeb79b7031a2