Information Gatheringosinthostnamereconnaissanceip-mappingscreenshots

HostHunter

HostHunter discovers and extracts hostnames from a set of target IP addresses using OSINT techniques. It generates CSV or TXT output files with results and optionally captures screenshots of associated web applications.

Description

HostHunter is a tool designed to efficiently discover and extract hostnames by providing a large set of target IP addresses. It utilizes simple OSINT techniques to map IP addresses with virtual hostnames, making it useful for reconnaissance tasks in cybersecurity assessments.

The tool generates a CSV or TXT file containing the results of the reconnaissance, allowing users to easily review and analyze the discovered hostnames. This is particularly valuable when dealing with extensive IP ranges where manual mapping would be impractical.

The latest version includes beta functionality to take screenshots of the targets, specifically any associated web applications, enhancing the visual reconnaissance capabilities.

How It Works

HostHunter employs OSINT techniques to map IP addresses to virtual hostnames. It processes target IP addresses from a file or single target, performing reconnaissance to extract associated hostnames. The tool outputs results in CSV or TXT format and uses screenshot capture for web applications via beta functionality, likely leveraging browser automation with dependencies like Selenium and Chromium.

Installation

bash
sudo apt install hosthunter

Flags

-h, --helpshow this help message and exit
-f, --format FORMATChoose between CSV and TXT output file formats.
-o, --output OUTPUTSets the path of the output file.
-sc, --screen-captureCapture a screenshot of any associated Web Applications.
-t, --target TARGETScan a Single IP.
-V, --versionDisplays the current version.

Examples

Displays the help message and usage information for HostHunter.
hosthunter -h
Processes a file containing target IP addresses to discover and extract hostnames, outputting results to default file.
hosthunter targets.txt
Scans targets from file, outputs hostname results in CSV format to specified output file.
hosthunter -f CSV -o results.csv targets.txt
Processes target IPs from file and saves hostname reconnaissance results in TXT format.
hosthunter -f TXT -o output.txt targets.txt
Scans a single target IP address to extract associated hostnames.
hosthunter -t 192.168.1.1
Scans single IP and captures screenshots of associated web applications.
hosthunter -sc -t 192.168.1.1
Processes IP file with screenshot capture enabled, outputs CSV results.
hosthunter -sc -f CSV targets.txt
Displays the current version of HostHunter.
hosthunter -V
Updated 2026-04-16kali.org ↗