SpiderFoot

SpiderFoot automates the process of gathering intelligence about a given target. This package contains an OSINT tool designed to collect data on various target types including IP addresses, domain names, hostnames, network subnets, ASNs, email addresses, or person's names.

The tool can be used offensively as part of a black-box penetration test to gather information about the target. Defensively, it helps identify what information you or your organization are freely providing for attackers to use against you.

SpiderFoot includes both a main interface (sf.py) and a CLI client (sfcli.py) for interacting with the server.

SpiderFoot operates by automating OSINT collection through enabled modules that query various data sources. It supports scan targets via parameters like -s TARGET and module selection with -m mod1,mod2. The tool runs scans, applies correlation rules with -C scanID, and outputs results in formats like tab, csv, or json. The CLI connects to a SpiderFoot server for remote operations.