kpcyrd/sn0int

Health v2 · maintenance only

Adoption not part of the score

2515 stars · 227 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

sn0int is a semi-automatic OSINT framework and package manager written in Rust that enumerates attack surface by processing public information and mapping results into a unified format. Its capabilities are provided by sandboxed Lua modules that can be published to a shared registry, inspired by recon-ng and maltego.

Use cases

• harvest subdomains from certificate transparency logs
• find someone's social media profiles across the internet
• enrich ip addresses with asn and geoip info
• discover compromised logins in data breaches
• harvest emails from pgp keyservers and whois
• enumerate local networks with passive arp
• gather information about phone numbers
• scan collected subdomains for http or https services

When to choose

• you need a flexible, fully open-source OSINT framework with a module registry
• you want sandboxed, independently updatable modules instead of hardcoded investigations
• you're a bug bounty hunter or security professional mapping a target's attack surface
• you prefer a CLI-driven workflow over GUI tools like maltego

When to avoid

• you need a fully automated, no-interaction OSINT pipeline since sn0int is semi-automatic
• you want a graphical investigation interface like maltego's
• you can't install Rust-based binaries or use its Lua module ecosystem
• you need deep web or non-public data sources

Facets

cli-tool · maturity active

osint security web-scraping cli search-engine image-processing database plugin-system security osint penetration-testing developer-tools rust cli reconnaissance bug-bounty subdomain-enumeration certificate-transparency lua-modules sandboxed-modules attack-surface-mapping recon-ng-alternative command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="kpcyrd/sn0int")