OWASP Maryam is an Open-source intelligence(OSINT) and Web-based Footprinting optional/modular framework based on the Recon-ng core and written in Python. If you have skill in Metasploit or Recon-ng, you can easily use it without prerequisites and if not, please read the Quick Guide.
OSINT
- dns_search
Search in the open-sources to find subdomans.
- email_search
Search in open-sources to find emails.
- docs_search
Search in open-sources to find relevant documents. filetypes[pdf,doc,docx,ppt,pptx,xlsx,txt,..].
- onion_search
onion_search is used to create the premier search engine for services residing on the Tor anonymity network.
- godork
Search google for your dork and get result.
- social_nets
Search to find usernames in social networks.
- crawler
Crawl web pages to find links, JS Files, CSS files, Comments and everything else interesting, supports concurrency.
- suggest
Keyword autocompleter to find suggestions in search engines.
FOOTPRINT
- crawl_pages
Search to find keywords, emails, usernames, errors, meta tags and regex on the page/pages.
- dbrute
DNS brute force attack, supports concurrency.
- fbrute
File/Directory brute force attack, supports concurrency.
- tldbrute
TLD brute force attack, supports cocurrency.
- waf
Identify web application firewalls. It can detect over 200 firewalls.
- wapps
Web fingerprinting to identify the applications used with over 1000 pyload.
- interest_files
Search hosts for interesting files in predictable locations and brute force it.
- entry_points
Crawl web pages to find entry points(inputs, urls with param).
SEARCH
- google
Google.com search.
- metacrawler
Metacrawler.com search.
- yippy
Yippy.com search.
- crt
Crt.sh search.
- carrot2
Carrot2.org search.
- bing
Bing.com search.
- twitter
Twitter.com search.
- linkedin
Linkedin.com search.
- facebook
Facebook.com search.
- searchencrypt
Searchencrypt.com search.
- millionshort
Millionshort.com search.
- qwant
Qwant.com search.
What is new?
- Uses python3
- Added dbrute, fbrute, tldbrute, entry_points and waf to footprint
- Added Thread support to modules
- Added csv format output
- Rewrote utils
- Added Search submodule
Liked the project? Donate Bitcoin: 1oGzx7wrstYxzan2n38CzxPk3uqgisA6i
To report bugs, requests, or any other issues please create an issue.