slaughterjames / mirage

Modular OSINT tool

Mirage v1.0

Mirage is a tool designed to help security professionals perform OSINT information gathering using open, passive and active techniques. With modularity built-in to the tool, it is easy to create new modules quickly to solve new and unforseen problems in obtaining information.

This tool lends itself to both offensive(bug bounty reconnaisance) and defensive techniques (intelligence on malicious IPs and domains)

Pre-built Modules:

• **[*] majestic: Type: Info - Description: Executes a grep against the top 1 million Internet domains on Majestic Million.
• **[*] VTIPReport: Type: Info - Description: Retrieves the reputation data for IPs against the VirusTotal database.
• **[*] VTDomainReport: Type: Info - Description: Retrieves the reputation data for domains against the VirusTotal database.
• **[*] Shodan: Type: Info - Description: Retrieves the available data for targets against the Shodan dataset.
• **[*] whois: Type: Info - Description: Queries the WhoIs information for a target
• **[*] tor_node: Type: Info - Description: Executes a grep against the current TorDNSEL list of exit nodes.
• **[*] abuse_ch_feodo: Type: Info - Description: Executes a grep against the abuse.ch Feodo IP blocklist feed.
• **[*] abuse_ch_urlhaus_host: Type: Info - Description: Retrieves the reputation data for domains against the URLHaus dataset.
• **[*] URLScanReport: Type: Info - Description: Retrieves the reputation data for domains and IPs against the urlscan.io database.
• **[*] FortiguardReputation: Type: Info - Description: Retrieves the categorization data for domains and IPs against FortiGuard's database.
• **[*] dig: Type: Passive - Description: Executes Dig against the target.
• **[*] pynslookup: Type: Passive - Description: Executes an NSLookup against the target.
• **[*] traceroute: Type: Passive - Description: Executes a traceroute against the target. Requires root privileges!!!
• **[*] wget: Type: Passive/Active - Description: Executes a WGet operation against the target.
• **[*] banner: Type: Passive/Active - Description: Attempts to pull the banner from a target.
• **[*] cert: Type: Active - Description: Pulls the target's certificate data using OpenSSL.
• **[*] jarmwrapper: Type: Active - Description: Fingerprints the site using Salesforce's Jarm.

---

Documentation

Use the Installation Guide to get started.

Go to the User's Guide for additional information.