j3ssie/metabigor

Health v2 · maintenance only

Adoption not part of the score

1735 stars · 208 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Metabigor is a Go-based command-line OSINT tool that maps a target's infrastructure—IP ranges, subdomains, related domains, open ports, and CDN/WAF status—using only free, keyless data sources. It is designed for reconnaissance in security testing and bug bounty workflows, with pipeable commands and consistent conventions.

Use cases

• find IP ranges behind an ASN without API keys
• enumerate subdomains from certificate transparency logs
• look up open ports and CVEs for an IP address
• discover related domains owned by a target company
• identify CDN/WAF-protected IPs and find candidate origin servers
• find leaked secrets and credentials in public code repositories
• collect archived URLs for a target domain

When to choose

• you need OSINT reconnaissance without registering for API keys
• you want a fast, scriptable CLI that pipes into other recon tools
• you're doing bug bounty or pentest attack-surface mapping
• you need ASN/IP range and certificate-based domain pivoting

When to avoid

• you need deep, authenticated data from paid providers like full Shodan or Censys
• you want a GUI or web dashboard for recon
• you need continuous monitoring rather than on-demand lookups

Facets

cli-tool · maturity active

osint security cli web-scraping networking security osint penetration-testing developer-tools cli windows cross-platform reconnaissance bug-bounty subdomain-enumeration certificate-transparency asn-lookup ip-enrichment no-api-keys attack-surface-mapping command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="j3ssie/metabigor")