When I was assigned an OSINT practice project, I knew from the start that I wanted to build something using free tools — no paid APIs, no services with rate limits, nothing that required signing up or paying for a subscription.
The result was the DOMINI Suite — two complementary tools that map the attack surface of domains and IPs using only public information and open source libraries: nmap, dnspython, python-whois, ip-api.com, AbuseIPDB and AlienVault OTX on their free tiers. The only exception is LeakRadar, which requires a paid subscription for API access, but the suite implements an automatic fallback using Google Dorks on Pastebin that works with no key at all.
The problem I wanted to solve
I wanted to automate the full infrastructure reconnaissance workflow into two tools that worked together naturally.
That workflow — which manually means opening mxtoolbox, whois.domaintools.com, abuseipdb.com and Google separately — should be executable with a single comm
Discussion
Leave the first comment
Be the first to leave a mark on this discussion.