wssheldon / osintui

OSINT from your favorite services in a friendly terminal user interface - integrations for Virustotal, Shodan, and Censys

osintui

Open Source Intelligence Terminal User Interface

Report Bug · Request Feature

---

Integrations

Installation

First, install Rust (using the recommended rustup installation method) and then

cargo install osintui

Configuration

osintui expects a TOML configuration file stored at ~/.osintui/config/config.toml that sets the necessary API tokens for each service. The configuration file will be created for you on first run if one was not found.

[keys]
virustotal = "api_key"
shodan = "api_key"
censys_id = "api_id"
censys_secret = "api_key"

Hotkeys

Key	Description
h	Home
/	Input
q	Back
c	Censys
s	Shodan
v	Virustotal
→	Move Right
←	Move Left
↑	Move Up
↓	Move Down

Credits

⭐ spotify-tui

The software architecture is almost entirely modeled after spotify-tui. The codebase was invaluable in learning how to cleanly manage complex TUI state and implement generic handling of TUI components.

⭐ wtfis

I needed a good first project to learn rust and wtfis was the primary source of inspiration for osintui.

osintui's Issues

reqwest::Error { kind: Decode, source: Error("missing field `whois`", line: 585, column: 9) }

When i typing ip, and pressing enter i getting 400 error and 'reqwest::Error { kind: Decode, source: Error("missing field whois", line: 585, column: 9) }'

error install

404 status errors are displayed too early to the user

Immediately after processing input, we will raise any error to the user if one occurred within any of the integrations. We should wait to display 404's until the menu for that integration that raised the error is actually visited.

Add summary component to home page, shows high level overview of all integration results after a search

Currently we just update the home view to say "your query is done" or similar. We should show a high level overview of the results immediately, if possible.

Happy to introduce FOFA.

Hi, we are happy to introduce ourself and also we have Open Source Development Support.
https://en.fofa.info/development

Please let me know if you are interested.

Build Error

After installing rust and attempting installation of osintui using cargo i receive the follow error:
( For reference i am using linux os)

installation code entered:

cargo install osintui

Error received:

warning: build failed, waiting for other jobs to finish...
error: failed to compile osintui v0.1.1, intermediate artifacts can be found at /tmp/cargo-installKX3U8e

Implement cache functionality for lookups/queries

Create a lookup/query history view that utilizes a cache

Extend VirusTotal menu view to include comments and relations

Information provided by the community is valuable to cross-reference with the automated checks and other data provided by VirusTotal. Add another menu item that includes comments from the community.

UI Example: https://www.virustotal.com/gui/file/c50bca08a8e80850ec18d258ff937b7b72a500d9027c730c86b05aa73c938b5d/community

API: https://developers.virustotal.com/reference/ip-comments

[Feature Request]: Follow XDG Base Directory Specification

The .osintui/ directory unnecessarily pollute users' $HOME directory.

The XDGBDS defines where files (such as configs) should be placed with environment variables in order to avoid this.

From the XDGBDS:

The XDG Base Directory Specification is based on the following concepts:

There is a single base directory relative to which user-specific data files should be written. This directory is defined by the environment variable $XDG_DATA_HOME.

There is a single base directory relative to which user-specific configuration files should be written. This directory is defined by the environment variable $XDG_CONFIG_HOME.

There is a single base directory relative to which user-specific state data should be written. This directory is defined by the environment variable $XDG_STATE_HOME.

There is a single base directory relative to which user-specific non-essential (cached) data should be written. This directory is defined by the environment variable $XDG_CACHE_HOME.

User-specific executable files may be stored in $HOME/.local/bin.

[Feature Request] Netlas.io

Hello!

I represent Netlas, LLC. We would like to offer you to integrate our product into your utility.
It is a non-intrusive internet scanner, whois, domain names & SSL certs database. Our product is similar to the well-known Shodan, Censys and Zoomeye, but has some advantages. For example, you can search by the full response of the server, it follows up to 5 HTTP redirects while scanning and use various technology, products tags (more than 800).

We have a nice API, so it shouldn't be difficult, and the way osintui and Netlas interact will be the same as with Shodan.
Read more about Netlas: https://netlas.io/
About Netlas API: https://netlas.io/api

I am ready to answer any questions and hope that we will be able to realize this cooperation :)

Run

How do i run tool after installation is complete ?

[Feature Request] Censys Menu

Hi there,

This is a really cool project! I would love to be able to use Censys Search from this same tool. Is that something that might be on the roadmap for this project?

[Feature Request] Criminal IP Menu

Hi,
Hello, thank you for the good service.
Can criminalip service be added?

https://www.criminalip.io/ko
https://www.criminalip.io/ko/developer/api/post-user-me

New Terminal

Add CLI workflow, where users can query integrations directly upon invocation

Add support for searching by domain/host for each integration

[Feature Request] PassiveTotal/RiskIQ Support

Summary

As suggested by the title, immediately after seeing the project and its ability to ingest things like domain and IP, this would be a perfect client to integrate with RiskIQ for additional queries like WHOIS, passive DNS, certificates, etc.