A blazingly fast OSINT framework built with Rust
BUIT is a comprehensive Open Source Intelligence (OSINT) toolkit designed for security professionals, researchers, and ethical hackers. Combine 25+ reconnaissance modules into a single, lightning-fast command-line tool with enhanced IP analysis and complete API results.
Choose your platform:
# Download latest v1.0.4 release
# For Windows x64:
Expand-Archive buit-v1.0.4-windows-x64.zip
.\buit-windows-x64.exe --help
# For Windows x86:
Expand-Archive buit-v1.0.4-windows-x86.zip
.\buit-windows-x86.exe --help# Intel Mac (x64)
curl -L https://github.com/BuuDevOff/BUIT/releases/download/v1.0.4/buit-v1.0.4-macos-x64.tar.gz | tar -xz
./buit-macos-x64 --help
# Apple Silicon (ARM64)
curl -L https://github.com/BuuDevOff/BUIT/releases/download/v1.0.4/buit-v1.0.4-macos-arm64.tar.gz | tar -xz
./buit-macos-arm64 --help# Linux x64
curl -L https://github.com/BuuDevOff/BUIT/releases/download/v1.0.4/buit-v1.0.4-linux-x64.tar.gz | tar -xz
./buit-linux-x64 --help
# Linux ARM64
curl -L https://github.com/BuuDevOff/BUIT/releases/download/v1.0.4/buit-v1.0.4-linux-arm64.tar.gz | tar -xz
./buit-linux-arm64 --helpAfter downloading any version above, make BUIT available system-wide:
# 🚀 Auto-setup: Adds BUIT to your PATH automatically
./buit setup
# ✅ Now use 'buit' from anywhere in your terminal!
buit --help
buit ip 8.8.8.8What the setup command does:
- 🔧 Windows: Adds BUIT to
%PATH%environment variable - 🍎 macOS: Creates symlink in
/usr/local/bin/or adds to~/.bashrc - 🐧 Linux: Creates symlink in
/usr/local/bin/or adds to~/.bashrc - 🔄 Automatic: Detects your system and configures appropriately
# Install Rust if needed
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
# Clone and build
git clone https://github.com/BuuDevOff/BUIT.git && cd BUIT
cargo build --release
# Install globally
./target/release/buit setup💡 Pro tip: Run ./buit setup first to install globally, then use buit from anywhere!
🎯 Common OSINT Tasks
# 🔍 Username reconnaissance
buit username john_doe
# 📧 Email intelligence gathering
buit email target@example.com --breaches --social
# 🌐 Domain reconnaissance
buit domain example.com --dns --ssl --whois
# 📱 Phone number lookup
buit phone +1234567890 --carrier
# 🔐 Hash analysis
buit hash 5d41402abc4b2a76b9719d911017c592 --identify🔍 Advanced Reconnaissance
# 🕷️ Subdomain enumeration
buit subdomain example.com --crt --brute
# 🌍 Complete IP analysis (now with full details by default!)
buit ip 8.8.8.8
# 🌐 Website technology stack
buit urlscan https://example.com --screenshot
# 📚 Wayback Machine lookup
buit wayback https://example.com --year 2020💡 Pro tip: Use buit <module> --help for detailed options on any module!
🚀 NEW in v1.0.4 - Enhanced API Server
# 🌐 Start API server with complete results
buit --api --port 3000
# 🔍 Get real IP analysis data (not just success messages!)
curl "http://localhost:3000/ip/8.8.8.8"
# Returns: {"success": true, "data": {"ip": "8.8.8.8", "reverse_dns": "dns.google", "asn": {"number": "AS15169", "organization": "Google LLC"}, ...}}
# 📊 All modules now return actual analysis results via API
curl "http://localhost:3000/domain/example.com"
curl "http://localhost:3000/email/test@example.com"What's New:
- ✅ Complete Results: APIs now return actual analysis data instead of generic messages
- ✅ Enhanced IP Analysis: Full geolocation, ASN, and reverse DNS by default
- ✅ Better Accuracy: Multiple API fallbacks for reliable data sources
- ✅ Structured Data: JSON responses with all details for integration
| 🔍 Reconnaissance | 🌐 Web Intelligence | 📱 Social & Communications |
|---|---|---|
username - Social media username search |
domain - Comprehensive domain analysis |
email - Email breach & social lookup |
ip - IP geolocation & ASN analysis |
urlscan - URL technology scanning |
phone - Phone number investigation |
subdomain - Subdomain enumeration |
wayback - Wayback Machine queries |
social - Social media reconnaissance |
github - GitHub profile analysis |
search - Multi-engine searches |
leaks - Data breach detection |
| 🛡️ Security & Analysis | 📊 Data & Reporting | ⚡ Interactive Tools |
|---|---|---|
portscan - Port discovery |
metadata - File metadata extraction |
interactive - Guided workflows |
hash - Hash identification & cracking |
report - Generate findings reports |
config - Configuration management |
whois - Domain registration lookup |
reverse-image - Image reverse search |
setup - Installation assistant |
shodan - Device intelligence |
dork - Google dorking |
- |
🔧 Performance Tuning
# 🚀 Boost scanning speed with more threads
buit config set-threads 20
# 🌍 Route through proxy for anonymity
buit config set-proxy http://127.0.0.1:8080
# 🔍 Change user agent for better compatibility
buit config set-user-agent chrome🔑 API Keys & Integrations
# 🛡️ Shodan API for device intelligence
buit config set-key shodan YOUR_SHODAN_API_KEY
# 🐙 GitHub API for enhanced repository analysis
buit config set-key github YOUR_GITHUB_TOKEN
# 📧 Hunter.io for email intelligence
buit config set-key hunter YOUR_HUNTER_API_KEY# 📋 View current configuration
buit config list| 🚀 Performance | 🛡️ Reliability | 🔧 Flexibility |
|---|---|---|
| ⚡ Blazing Fast - Rust-powered for maximum speed | 🔒 Robust - Enterprise-grade error handling | 🎯 25+ Modules - Complete OSINT toolkit |
| 🔄 Multi-threaded - Parallel processing capabilities | 🛠️ Fallback Systems - Never leaves you hanging | ⚙️ Configurable - Adapt to your workflow |
| 📊 Optimized - Memory efficient and resource-aware | 🔍 Tested - Battle-tested in real scenarios | 🌍 Cross-platform - Windows, macOS, Linux |
Help make BUIT even better!
🔧 Add New Modules
Got an innovative OSINT technique? We want to see it!
# Check existing module structure
ls src/modules/
# Follow the established patterns
# - Async/await support
# - Error handling with anyhow::Result
# - Configurable output formats
# - Built-in help documentation🐛 Report Issues & Request Features
- 🐛 Found a bug? Open an issue with reproduction steps
- 💡 Feature idea? Share your vision for new capabilities
- 📖 Documentation? Help improve our guides and examples
- 🧪 Testing? Help us test across different platforms
🌟 Spread the Word
Love BUIT? Help the community grow:
- ⭐ Star this repository - Show your support
- 🔄 Share with colleagues - Security professionals unite!
- 📢 Social media mentions - Tweet, post, discuss
- 💬 Community forums - Share in security communities
Every star, share, and mention helps BUIT reach more security professionals!
🛡️ Ethical Use Only
This tool is designed for authorized security testing and educational purposes only.
Always ensure proper authorization before conducting reconnaissance activities.
The developers assume no responsibility for misuse of this software.
🔥 Major Enhancements - Enhanced IP Analysis & Complete API Results
🌍 Enhanced IP Analysis
Complete Analysis by Default:
# Before v1.0.4: Required manual flags
buit ip 8.8.8.8 --reverse --asn --geo
# v1.0.4+: Everything enabled by default!
buit ip 8.8.8.8
# 🌍 After 'buit setup' - use from anywhere:
buit ip 1.1.1.1
# Output: Complete analysis with ASN "AS13335 Cloudflare Inc., US"New Features:
- ✅ Auto-enabled: Reverse DNS, ASN, and geolocation data shown automatically
- ✅ Accurate ISP Detection: Multiple API fallbacks (hackertarget.com → ipinfo.io → ipapi.co)
- ✅ Better Data Quality: Fixed ASN parsing with correct CSV format handling
- ✅ Real-time Accuracy: No more demo/fake data when APIs fail
🚀 Complete API Results
Before v1.0.4:
{
"success": true,
"data": {
"ip": "8.8.8.8",
"message": "IP analysis completed successfully",
"note": "Detailed results available via CLI"
}
}v1.0.4+ Returns Real Data:
{
"success": true,
"data": {
"ip": "8.8.8.8",
"valid": true,
"version": "IPv4",
"reverse_dns": "dns.google",
"asn": {
"number": "AS15169",
"organization": "Google LLC",
"country": "US"
},
"geolocation": {
"country": "United States",
"city": "Mountain View",
"region": "California",
"latitude": 37.4056,
"longitude": -122.0785
}
}
}Benefits:
- 🎯 Integration-Ready: Use API responses directly in your applications
- 📊 Complete Data: All analysis results available via REST API
- 🔄 Consistent Format: Structured JSON responses across all modules
- ⚡ No More Console Scraping: Direct programmatic access to results
🎯 v1.1.0 - Discord Intelligence Module
- 🎮 discord - Advanced Discord OSINT capabilities
- 🔍 User profile analysis via Discord ID
- 🏰 Server/guild information gathering
- 🤖 Direct Discord API integration
- 🖼️ Avatar/banner analysis (animated support)
- 🏅 Badge detection (Staff, Partner, Bug Hunter, etc.)
- ⏰ Account creation timestamp extraction
- 🕸️ Relationship mapping and connections
- 📊 Enhanced data vs third-party services
- ⚡ Multi-token support for rate limits
- 📚 Comprehensive setup documentation
MIT License - see the LICENSE file for details
Built with ❤️ by BuuDevOff
