Overview
RiskIntel v1.0 marks the inaugural release of this Python-based tool designed for external threat reconnaissance and threat modeling. This initial version introduces a range of core features aimed at aiding penetration testers and cybersecurity professionals in identifying and assessing potential risks associated with target domains.
Key Features
- Domain Enumeration: Gathers and organizes data on the target domain, providing a comprehensive overview.
- Identity Enumeration: Extracts domain-related identities from crt.sh to assist in identifying potential threat vectors.
- IP and Netblock Extraction: Identifies and lists IP addresses and associated netblocks linked to the domain.
- Abuse Score Assessment: Evaluates the risk of abuse for the extracted IP addresses to help prioritize security efforts.
- Typosquatting Detection: Searches for typosquatting domains that might be used for phishing or other malicious activities.
- Email Address Extraction: Collects email addresses related to the domain, which can be useful for further analysis.
- DNS Health Check: Assesses the health and configuration of DNS records for the target domain.
- Web Technology Analysis: Identifies the technologies used by the website, aiding in the understanding of the target's t- stack.
- Web Title and HTTP Header Extraction: Retrieves metadata and HTTP headers to provide additional context about the web pages.
Getting Started
- To begin using RiskIntel, follow the installation instructions to set up the script and configure the necessary API tokens.
- Once set up, run the script and provide the target domain to start the enumeration and analysis process.
Future Plans
- Future updates will focus on enhancing functionality, improving the user interface, and incorporating additional reconnaissance features based on user feedback and emerging security needs.
Thank you for using RiskIntel! We look forward to your feedback and contributions.