SpiderFoot alternatives

Looking for an alternative tool to replace SpiderFoot? During the review of SpiderFoot we looked at other open source tools. Based on their category, tags, and text, these are the ones that have the best match.

Top 3

  1. OSINT Framework (collection of OSINT resources)
  2. DataSploit (OSINT framework)
  3. OSINT-SPY (open source intelligence gathering tool)

These tools are ranked as the best alternatives to SpiderFoot.

Alternatives (by score)

74

OSINT Framework

Introduction

The OSINT framework provides a collection of tools to gather and parse public data. The tool is web-based and makes it easy to find tools for a particular task.

Project details

OSINT Framework is written in JavaScript.

Strengths and weaknesses

  • + More than 10 contributors
  • + More than 500 GitHub stars
  • + The source code of this software is available
  • - No releases on GitHub available

Typical usage

  • Footprinting
  • Intelligence gathering
  • OSINT research
  • Reconnaissance

OSINT Framework review

74

DataSploit

Introduction

DataSploit is a framework to perform intelligence gathering to discover credentials, domain information, and other information related to the target. It uses various reconnaissance techniques on companies, people, phone numbers, and even cryptocoin technology. It allows aggregating all raw data and return it in multiple formats.

Project details

DataSploit is written in Python.

Strengths and weaknesses

  • + More than 10 contributors
  • + More than 1000 GitHub stars
  • + The source code of this software is available

    Typical usage

    • Information gathering
    • OSINT research
    • Security monitoring

    DataSploit review

    68

    OSINT-SPY

    Introduction

    OSINT-SPY is a modular tool to query information on different subjects like an IP address, domain, email address, or even Bitcoin address. This tool can be valuable during the reconnaissance phase of a penetration test. It can be used also for defenses purpose, like learning what information is publically available about your organization and its assets.

    Project details

    OSINT-SPY is written in Python.

    Strengths and weaknesses

    • + The source code is easy to read and understand
    • + The source code of this software is available
    • - No releases on GitHub available

    Typical usage

    • Information gathering
    • Penetration testing
    • Reconnaissance

    OSINT-SPY review

    64

    GasMask

    Introduction

    GasMask is an open source intelligence gathering tool (OSINT). It can be used to discover more information about a particular target. The sources it uses include search engines like Bing, Google, and Yandex. Additionally it retrieves information from GitHub, YouTube, and social media platforms like Twitter.

    Project details

    Strengths and weaknesses

    • + The source code of this software is available

      Typical usage

      • Information gathering

      GasMask review

      85

      Gitem

      Introduction

      Gitem is a reconnaissance tool to extract information about organizations on GitHub. It can be used to find the leaking of sensitive data.

      Project details

      Gitem is written in Python.

      Strengths and weaknesses

      • + The source code of this software is available

        Typical usage

        • Information gathering
        • Security assessment
        • Security monitoring
        • Self-assessment

        Gitem review

        78

        Intrigue Core

        Introduction

        Intrigue Core provides a framework to measure the attack surface of an environment. This includes discovering infrastructure and applications, performing security research, and doing vulnerability discovery.

        Intrigue also allows enriching available data and perform OSINT research (open source intelligence). The related scans include DNS subdomain brute-forcing, email harvesting, IP geolocation, port scanning, and using public search engines like Censys, Shodan, and Bing.

        Project details

        Intrigue Core is written in Ruby.

        Strengths and weaknesses

        • + More than 500 GitHub stars
        • + The source code of this software is available

          Typical usage

          • Asset discovery
          • Attack surface measurement
          • Intelligence gathering
          • OSINT research
          • Penetration testing
          • Security assessment

          Intrigue Core review

          64

          XRay

          Introduction

          XRay is a security tool for reconnaissance, mapping, and OSINT gathering from public networks.

          Project details

          XRay is written in Golang.

          Strengths and weaknesses

          • + The source code of this software is available

            Typical usage

            • Information gathering
            • Reconnaissance

            XRay review

            74

            pick

            Introduction

            Tools like pick are used to store passwords and secrets safely.

            Project details

            pick is written in Golang.

            Strengths and weaknesses

            • + Very low number of dependencies
            • + The source code of this software is available

              Typical usage

              • Data security
              • Secure storage

              pick review

              60

              pshtt

              Introduction

              Pshtt was developed to push organizations, including government departments, to adopt HTTPS across the enterprise.

              Project details

              pshtt is written in Python.

              Strengths and weaknesses

              • + More than 500 GitHub stars
              • + The source code of this software is available

                Typical usage

                • Security assessment
                • Web application analysis

                pshtt review

                70

                Viper

                Introduction

                Viper organizes the malware samples and exploits you found over time. It calls itself "Metasploit for malware researchers". Viper has a terminal interface to store, search and analyze files. As it is a framework, is also allows you to create your plugins.

                Project details

                60

                Belati

                Introduction

                Belati is security tool to collect public data and information and calls itself a Swiss army knife for OSINT purposes.

                Project details

                Belati is written in Python.

                Strengths and weaknesses

                • + The source code of this software is available
                • - Full name of author is unknown

                Typical usage

                • Information gathering

                Belati review

                60

                Gitrob

                Introduction

                Especially open source developers may share their code in a public repository like GitHub. This is a great way to collaborate between the developer(s) and the community. The risk of sharing code is that sensitive data is part of the repository and uploaded by accident. GitRob helps to detect this kind of accidental leaks.

                Project details

                Gitrob is written in Ruby.

                Strengths and weaknesses

                • + More than 1000 GitHub stars
                • + The source code of this software is available

                  Typical usage

                  • Data leak prevention
                  • Information gathering
                  • Penetration testing
                  • Security assessment

                  Gitrob review

                  60

                  OSRFramework

                  Introduction

                  This OSINT framework allows combining sources and provide data in different formats (web interface, API, command line).

                  Project details

                  OSRFramework is written in Python.

                  Strengths and weaknesses

                  • + Available as package (simplified installation)
                  • + The source code of this software is available
                  • - No releases on GitHub available

                  Typical usage

                  • Information gathering

                  OSRFramework review

                  78

                  theHarvester

                  Introduction

                  This tool is a typical information collection tool to retrieve public data and get it all into one place. It is useful for penetration tests, or if you want to see what is available for your company.

                  Project details

                  60

                  ThreatPinch Lookup

                  Introduction

                  ThreatPinch helps to speed up collecting information from common resources like CVE databases or public WHOIS data. As it works from the browser, it is a helpful addition for people who have to perform forensics, security monitoring, or system administration. For example, getting the owner of a domain and IP address becomes almost instant knowledge.

                  Project details

                  ThreatPinch Lookup is written in JavaScript.

                  Strengths and weaknesses

                  • + Many integration possibilities available
                  • - Unknown project license

                  Typical usage

                  • Information gathering
                  • Threat hunting

                  ThreatPinch Lookup review

                  56

                  0trace.py

                  Introduction

                  This security tool enables the user to perform hop enumeration (similar to traceroute). Instead of sending actual packets, it uses an established TCP connection.

                  Project details

                  0trace.py is written in Python.

                  Strengths and weaknesses

                  • + Project is mature (10+ years)
                  • - Unknown project license

                  Typical usage

                  • Bypassing firewall rules
                  • Bypassing security measures
                  • Reconnaissance

                  0trace.py review

                  100

                  detectem

                  Introduction

                  Detectem can be a good early vulnerability detection system. By scanning regularly the dependencies of web applications, old versions of tools can be detected and upgraded. This tool is also helpful for penetration tests to find out what kind of software components are used.

                  Project details

                  detectem is written in Python.

                  Strengths and weaknesses

                  • + The source code of this software is available

                    Typical usage

                    • Application security
                    • Application testing
                    • Reconnaissance
                    • Vulnerability scanning

                    detectem review

                    64

                    Domain Analyzer

                    Introduction

                    Domain Analyzer is an information gathering tool and comes in handy for reconnaissance. This can be useful for doing penetration testing or evaluating what information is publically available about your own domains. Some pieces of information that can be discovered include DNS servers, IP addresses, mail servers, SPF information, open ports, and more.

                    Project details

                    Domain Analyzer is written in Python.

                    Strengths and weaknesses

                    • + More than 1000 GitHub stars
                    • + Very low number of dependencies
                    • + The source code of this software is available

                      Typical usage

                      • Information gathering
                      • Penetration testing

                      Domain Analyzer review

                      60

                      InstaRecon

                      Introduction

                      InstaRecon is a security tool that can help with the reconnaissance phase of a penetration test. It can collect a number of data points with limited input.

                      Project details

                      InstaRecon is written in Python.

                      Strengths and weaknesses

                      • + The source code of this software is available

                        Typical usage

                        • Penetration testing
                        • Reconnaissance

                        InstaRecon review

                        100

                        IVRE

                        Introduction

                        IVRE is a framework to perform reconnaissance for network traffic. It leverages other tools to pull in the data and show it in the web interface.

                        Project details

                        IVRE is written in Python.

                        Strengths and weaknesses

                        • + More than 10 contributors
                        • + More than 1000 GitHub stars
                        • + The source code of this software is available

                          Typical usage

                          • Digital forensics
                          • Information gathering
                          • Intrusion detection
                          • Network analysis

                          IVRE review

                          56

                          p0f

                          Introduction

                          This tool is a great addition to nmap, especially if that reveals not reliable data or none at all. Due to the passive way of working, it won't be detected nor influences any connection.

                          - Version 3 of p0f is a full rewrite
                          - The idea for p0f dates back to June 10, 2000
                          - Tool can run in foreground or as a daemon process

                          Common uses for p0f include reconnaissance during penetration tests; routine network monitoring; detection of unauthorized network interconnects in corporate environments; providing signals for abuse-prevention tools; and miscellaneous forensics.

                          Project details

                          Strengths and weaknesses

                          • + Project is mature (10+ years)
                          • + The source code of this software is available
                          • + Well-known tool

                            p0f review

                            52

                            Recon-ng

                            Introduction

                            Recon-ng is a full-featured web reconnaissance framework. It is written in Python and modular, useful for penetrating tests and security assessments.

                            Project details

                            Recon-ng is written in Python.

                            Strengths and weaknesses

                            • + The source code of this software is available

                              Typical usage

                              • Collaboration
                              • Information gathering
                              • Information sharing
                              • Security assessment

                              Recon-ng review

                              64

                              Sandmap

                              Introduction

                              Where Nmap is a powerful tool, it comes with many bells and whistles. Sandmap helps with the automation of using the Nmap engine, making it more user-friendly interface. It simplifies, automates, and speeds up the scanning, while still using the advanced scanning techniques available.

                              Project details

                              Sandmap is written in shell script.

                              Strengths and weaknesses

                              • + Used language is shell script

                                Typical usage

                                • Reconnaissance

                                Sandmap review

                                78

                                Sn1per

                                Introduction

                                Sn1per is security scanner that can be used during a penetration test to enumerate and scan for vulnerabilities.

                                Project details

                                Sn1per is written in Python, shell script.

                                Strengths and weaknesses

                                • + More than 10 contributors
                                • + More than 1000 GitHub stars
                                • + The source code of this software is available
                                • - Unknown project license

                                Typical usage

                                • Penetration testing
                                • Reconnaissance

                                Sn1per review

                                60

                                tlsenum

                                Introduction

                                Tlsenum is a CLI tool to enumerate TLS protocol and TLS cipher support by a server. The tool lists then the output based on the order of priority. Tlsenum can be used to find the supported protocols and ciphers of a system and determine if it is properly hardened. This information can be useful to system administrators and pentesters doing a security assessment of the system.

                                Project details

                                tlsenum is written in Python.

                                Strengths and weaknesses

                                • + The source code of this software is available

                                  Typical usage

                                  • Information gathering
                                  • Security assessment
                                  • System enumeration
                                  • System hardening

                                  tlsenum review

                                  Some relevant tool missing as an alternative to SpiderFoot? Please contact us with your suggestion.