Cloud Misconfiguration Scanner - Passive OSINT Tool A Python-based passive OSINT scanner for identifying cloud infrastructure misconfigurations through certificate transparency logs, DNS analysis, and security posture assessment.

🚀 Overview This tool performs non-intrusive passive reconnaissance on a target domain to identify potential cloud security misconfigurations. It analyzes:

Certificate Transparency (CT) logs for certificate history and subdomain discovery

DNS records (SPF, MX, A, AAAA, NS) for misconfigurations

Cloud hosting provider identification

Security posture assessment with actionable recommendations

🛠️ Features Certificate Analysis: Query certificate transparency logs to identify active/expired certificates and discover subdomains

SPF Record Validation: Detect SPF misconfigurations (soft fail vs hard fail)

MX Record Analysis: Review email server configurations

Cloud Provider Identification: Identify hosting providers and ASN information

Subdomain Discovery: Extract subdomains from certificate data

Risk Assessment: Generate prioritized security recommendations

JSON Output: Export findings in structured JSON format

📋 Prerequisites Python 3.6 or higher

Required libraries: requests json (built-in) csv (built-in) datetime (built-in) re (built-in)