bloodrecon 1.2.1
Advanced OSINT Intelligence Framework for cybersecurity professionals
License: MIT
Requires Python: >=3.7
Keywords: osint, reconnaissance, cybersecurity, intelligence, framework, penetration-testing

<div align="center">

# 🩸 BloodRecon 🩸

[![Python](https://img.shields.io/badge/python-3.7+-blue.svg)](https://www.python.org/downloads/)
[![License](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)
[![Platform](https://img.shields.io/badge/platform-Linux%20%7C%20Termux-lightgrey.svg)](#compatibility)
[![Version](https://img.shields.io/badge/version-1.2.1-brightgreen.svg)](#overview)
[![Status](https://img.shields.io/badge/status-stable-success.svg)](#overview)
[![Maintained](https://img.shields.io/badge/maintained-yes-green.svg)](#contributing)
[![Stars](https://img.shields.io/github/stars/VritraSecz/BloodRecon?style=social)](https://github.com/VritraSecz/BloodRecon)
[![Forks](https://img.shields.io/github/forks/VritraSecz/BloodRecon?style=social)](https://github.com/VritraSecz/BloodRecon)
[![Issues](https://img.shields.io/github/issues/VritraSecz/BloodRecon)](https://github.com/VritraSecz/BloodRecon/issues)
[![Contributors](https://img.shields.io/github/contributors/VritraSecz/BloodRecon)](https://github.com/VritraSecz/BloodRecon/graphs/contributors)
[![Languages](https://img.shields.io/github/languages/count/VritraSecz/BloodRecon)](https://github.com/VritraSecz/BloodRecon)
[![Code Size](https://img.shields.io/github/languages/code-size/VritraSecz/BloodRecon)](https://github.com/VritraSecz/BloodRecon)

</div>

<div align="center">
  <h3>⚡ OSINT Intelligence Framework ⚡</h3>
  <h4>🩸 Blood is the Key 🩸</h4>
  <p>A comprehensive OSINT toolkit for cybersecurity professionals, penetration testers, bug bounty hunters, and digital forensics investigators.</p>
</div>

---

## 🎉 What's New in v1.2.0

### 🚀 Enhanced Shodan Integration

We've completely revamped the Shodan integration with powerful new features that make API key management effortless!

#### ✨ Key Improvements:

**🔧 Command Line API Management**
```bash
# Set your Shodan API key instantly - no more interactive prompts!
python3 bloodrecon.py --shodan-api "your_api_key_here"
```

**📁 Streamlined Configuration**
- **New Location**: `~/.config-vritrasecz/bloodrecon-shodan.json`
- **Auto Directory Creation**: Tool creates config directories automatically
- **JSON-Only Storage**: Simplified, reliable configuration management

**🔒 Smart API Key Handling**
- **Automatic Replacement**: New API keys seamlessly replace existing ones
- **Input Validation**: Enhanced validation prevents empty or invalid keys
- **Better Error Messages**: Clear, actionable feedback for users

**⚡ Improved User Experience**
- **One-Command Setup**: Get Shodan running with a single command
- **Non-Interactive Mode**: Perfect for automation and scripting
- **Cleaner Output**: More intuitive and professional interface

#### 🛠️ Quick Setup Example:
```bash
# 1. Set your API key (one time setup)
python3 bloodrecon.py --shodan-api "your_shodan_api_key"

# 2. Start using Shodan immediately
python3 bloodrecon.py --shodan 8.8.8.8
python3 bloodrecon.py --shodan google.com
```

> 💡 **Pro Tip**: Your API key is saved securely and will be used automatically for all future Shodan queries!

**📋 What Changed:**
- Moved from `~/.osint_shodan_config` to organized `~/.config-vritrasecz/` directory
- Removed dual config.py file management for simplified workflow
- Enhanced error handling and user feedback
- Added `--shodan-api` command line argument

**🔗 Get Started**: [View complete changelog](CHANGELOG.md) • [API Configuration Guide](#-api-key-configuration)

---

## 📖 Table of Contents

- [🎯 Overview](#-overview)
- [✨ Key Features](#-key-features)
- [🛠️ Installation](#️-installation)
  - [Linux Installation](#linux-installation)
  - [Termux Installation](#termux-installation)
  - [Dependencies](#dependencies)
- [🚀 Usage](#-usage)
  - [Interactive Mode](#interactive-mode)
  - [Command Line Usage](#command-line-usage)
- [🔧 Modules](#-modules)
  - [Network & Infrastructure](#network--infrastructure)
  - [Web Application Security](#web-application-security)
  - [Social Media & Personal Intel](#social-media--personal-intel)
  - [Document & Metadata Analysis](#document--metadata-analysis)
  - [Search & Discovery](#search--discovery)
  - [Communication Intelligence](#communication-intelligence)
  - [Threat Intelligence](#threat-intelligence)
- [🔑 API Key Configuration](#-api-key-configuration)
- [📸 Screenshots](#-screenshots)
- [📁 Folder Structure](#-folder-structure)
- [⚖️ Legal Disclaimer](#️-legal-disclaimer)
- [👨‍💻 Author](#-author)
- [🤝 Contributing](#-contributing)
- [📄 License](#-license)

---

## 🎯 Overview

BloodRecon is a state-of-the-art OSINT (Open Source Intelligence) framework that provides cybersecurity professionals with 34+ specialized modules for comprehensive reconnaissance and intelligence gathering. Built with Python 3.x, it offers both interactive menu-driven and command-line interfaces for maximum flexibility.

## ✨ Key Features

🔍 **34 Specialized OSINT Modules**  
🌐 **Network & Infrastructure Analysis** (IP, DNS, WHOIS, SSL, Ports)  
🔒 **Web Application Security Testing** (Headers, Robots, Directories)  
👥 **Social Media & Personal Intelligence** (GitHub, Social Platforms)  
📄 **Document & Metadata Analysis** (EXIF, Document Properties)  
🔎 **Advanced Search Capabilities** (Google Dorking, Wayback Machine)  
📞 **Communication Intelligence** (Email, Phone Number Analysis)  
🛡️ **Threat Intelligence Integration** (Shodan)  
💾 **Data Breach & Leak Detection**  
🎨 **Interactive CLI Interface** with Target Input Examples  
🌈 **Colored Terminal Output** for Enhanced Readability  

---

## 🛠️ Installation

### Linux Installation

```bash
# Clone the repository
git clone https://github.com/VritraSecz/BloodRecon.git

# Navigate to the project directory
cd BloodRecon

# Install Python dependencies
pip install -r requirements.txt

# Make the script executable
chmod +x bloodrecon.py

# Run the tool
python bloodrecon.py --interactive
```

### Termux Installation

```bash
# Update packages and install dependencies
pkg update && pkg upgrade
pkg install git python

# Clone the repository
git clone https://github.com/VritraSecz/BloodRecon.git

# Navigate to the project directory
cd BloodRecon

# Install Python dependencies
pip install -r requirements.txt

# Run the tool
python bloodrecon.py --interactive
```

### Dependencies

BloodRecon requires the following Python packages:

```text
colorama==0.4.6
dnspython==2.7.0
mmh3==5.1.0
phonenumbers==9.0.10
Pillow==11.3.0
requests==2.32.4
shodan==1.31.0
urllib3==2.5.0
whois==1.20240129.2
```

---

## 🚀 Usage

### Interactive Mode

Launch BloodRecon in interactive mode for a user-friendly menu experience:

```bash
python bloodrecon.py --interactive
```

### Command Line Usage

BloodRecon supports extensive command-line options for automation and scripting:

#### Basic Usage Examples

```bash
# IP Address Analysis
python bloodrecon.py --ip 8.8.8.8

# Domain WHOIS Lookup
python bloodrecon.py --whois example.com

# DNS Records Analysis
python bloodrecon.py --dns google.com

# HTTP Headers Analysis
python bloodrecon.py --headers https://example.com

# Social Media Username Check
python bloodrecon.py --social username123

# Email Validation
python bloodrecon.py --email test@example.com

# Phone Number Intelligence
python bloodrecon.py --phone +1234567890

# Shodan Intelligence Lookup
python bloodrecon.py --shodan 8.8.8.8
```

#### Advanced Usage Examples

```bash
# Google Dorking
python bloodrecon.py --dork "site:example.com filetype:pdf"

# Subdomain Discovery
python bloodrecon.py --subdomains example.com

# SSL Certificate Analysis
python bloodrecon.py --ssl example.com:443

# Directory Bruteforcing
python bloodrecon.py --dir-brute https://example.com

# JavaScript Endpoint Scanner
python bloodrecon.py --js-endpoints https://example.com

# IP Range Scanner
python bloodrecon.py --ip-scan 192.168.1.0/24

# Wayback Machine Search
python bloodrecon.py --wayback example.com

# GitHub Intelligence
python bloodrecon.py --github octocat
```

#### Tool Information

```bash
# Display detailed tool information
python bloodrecon.py --about

# Show developer contact information
python bloodrecon.py --connect

# Show version
python bloodrecon.py --version

# Display help
python bloodrecon.py --help
```

---

## 🔧 Modules

BloodRecon features 34+ specialized OSINT modules organized into categories:

### Network & Infrastructure

| Module | Description | Usage Example |
|--------|-------------|---------------|
| 🌐 **IP Lookup** | Comprehensive IP address intelligence including geolocation, ISP, ASN | `--ip 8.8.8.8` |
| 🔍 **WHOIS Lookup** | Domain registration information and ownership details | `--whois example.com` |
| 📋 **DNS Lookup** | DNS records analysis (A, AAAA, MX, TXT, NS) | `--dns google.com` |
| 🔄 **Reverse DNS** | Reverse DNS lookup for IP addresses | `--reverse 8.8.8.8` |
| 🔌 **Port Scanner** | Network port scanning and service detection | `--ports 192.168.1.1` |
| 🔐 **SSL Scanner** | SSL/TLS certificate analysis and security assessment | `--ssl example.com:443` |
| 🌍 **IP Range Scanner** | Scan IP ranges for active hosts | `--ip-scan 192.168.1.0/24` |
| 🏢 **ASN Resolver** | Resolve ASN numbers to IP ranges | `--asn AS15169` |
| 🌐 **ISP Tracker** | Track IP addresses to ISP information | `--isp 8.8.8.8` |

### Web Application Security

| Module | Description | Usage Example |
|--------|-------------|---------------|
| 📄 **HTTP Headers** | HTTP security headers analysis | `--headers https://example.com` |
| 🤖 **Robots Scanner** | Robots.txt file analysis and discovery | `--robots https://example.com` |
| 📁 **Directory Bruteforce** | Web directory and file discovery | `--dir-brute https://example.com` |
| 🗺️ **Sitemap Parser** | XML sitemap parsing and analysis | `--sitemap https://example.com` |
| ⚡ **JS Endpoint Scanner** | JavaScript file analysis for API endpoints | `--js-endpoints https://example.com` |
| 🎨 **Favicon Hash** | Generate favicon hashes for fingerprinting | `--favicon https://example.com` |
| 🔧 **Tech Fingerprint** | Web technology stack identification | `--tech https://example.com` |
| 🔍 **URL Analyzer** | URL threat analysis and reputation check | `--url https://suspicious-site.com` |
| 🌐 **User-Agent Detector** | User-Agent string analysis and detection | `--useragent "Mozilla/5.0..."` |

### Social Media & Personal Intel

| Module | Description | Usage Example |
|--------|-------------|---------------|
| 👥 **Social Checker** | Username availability across social platforms | `--social johndoe` |
| 🐙 **GitHub Intel** | GitHub user and repository intelligence | `--github octocat` |
| 📱 **Phone Intel** | Phone number intelligence and carrier info | `--phone +1234567890` |
| 📧 **Email Validator** | Email address validation and domain analysis | `--email test@example.com` |
| 🗑️ **Temp Email Checker** | Temporary/disposable email detection | `--temp-email test@tempmail.com` |

### Document & Metadata Analysis

| Module | Description | Usage Example |
|--------|-------------|---------------|
| 📷 **EXIF Extractor** | Image metadata and EXIF data extraction | `--exif image.jpg` |
| 📄 **Doc Metadata** | Document metadata extraction (PDF, DOCX, etc.) | `--metadata document.pdf` |

### Search & Discovery

| Module | Description | Usage Example |
|--------|-------------|---------------|
| 🔍 **Google Dorking** | Advanced Google search queries | `--dork "site:example.com filetype:pdf"` |
| 🌐 **Subdomain Finder** | Subdomain discovery and enumeration | `--subdomains example.com` |
| ⏰ **Wayback Machine** | Historical website data from Internet Archive | `--wayback example.com` |
| 🕷️ **Common Crawl** | Search Common Crawl web archive data | `--common-crawl example.com` |
| 📋 **Pastebin Search** | Search Pastebin for data dumps and leaks | `--pastebin searchterm` |
| 💾 **Leak Search** | Data breach and leak detection | `--leak email@example.com` |
| 📂 **Google Drive Leaks** | Search for leaked Google Drive files | `--gdrive folderID` |
| 🗺️ **Maps Parser** | Parse and analyze Google Maps links | `--maps "https://maps.google.com/..."` |

### Threat Intelligence

| Module | Description | Usage Example |
|--------|-------------|---------------|
| 🛡️ **Shodan Lookup** | Shodan API integration for host intelligence | `--shodan 8.8.8.8` |

---

## 🔑 API Key Configuration

Some modules require API keys for enhanced functionality. BloodRecon now offers multiple convenient ways to configure your API keys:

### Shodan API Key

#### 🚀 **Recommended Method: Command Line Setup (v1.2.0+)**

1. **Get your free API key** at [Shodan.io](https://account.shodan.io/register)
2. **Set it instantly with one command**:

```bash
# Set your Shodan API key (replaces any existing key)
python3 bloodrecon.py --shodan-api "your_shodan_api_key_here"
```

3. **Start using Shodan immediately**:

```bash
# Your API key is now saved and ready to use!
python3 bloodrecon.py --shodan 8.8.8.8
python3 bloodrecon.py --shodan google.com
```

#### 📁 **Configuration Details**
- **Storage Location**: `~/.config-vritrasecz/bloodrecon-shodan.json`
- **Auto Directory Creation**: Config directories are created automatically
- **Key Replacement**: New keys seamlessly replace existing ones
- **Persistent Storage**: API key is saved for all future sessions

#### 🔄 **Alternative Methods**

**Environment Variable:**
```bash
export SHODAN_API_KEY="your_api_key_here"
python3 bloodrecon.py --shodan 8.8.8.8
```

**Legacy config.py (still supported):**
```python
# modules/config.py
SHODAN_API_KEY = 'your_shodan_api_key_here'
```

**Interactive Mode:**
- The tool will prompt for the key if not configured
- Entered keys are automatically saved for future use

### API Key Security

🔒 **Security Best Practices**:
- ✅ Use the `--shodan-api` command for secure local storage
- ✅ Use environment variables for server deployments
- ❌ Never commit API keys to version control
- ❌ Avoid hardcoding keys in scripts

💡 **Pro Tip**: The new JSON config system in v1.2.0 provides the most reliable and user-friendly API key management!

---

## 📸 Screenshots

### Interactive Menu
![Interactive Menu](https://i.ibb.co/bjQZ3xfc/Screenshot-From-2025-07-28-01-46-15.png)

---

## 📁 Folder Structure

```plaintext
BloodRecon/
│
├── 📄 bloodrecon.py             # Main application file
├── 📄 requirements.txt          # Python dependencies
├── 📄 LICENSE                   # License File
├── 📄 README.md                 # This file
├── 📄 CHANGELOG.md              # Version history and changes
│
└── 📁 modules/                  # OSINT modules directory
    ├── 📁 list-imp/             # Important list
    │   ├── 📄 common.txt        # Password list for Dir Bruteforce
    │   └── 📄 temp-domains.txt  # Temp mail domain list
    │
    ├── 📄 __init__.py           # Module initialization
    ├── 📄 colors.py             # Color management and styling
    ├── 📄 config.py             # Configuration file (API keys)
    │
    ├── 🌐 Network & Infrastructure
    ├── 📄 ip_lookup.py          # IP address intelligence
    ├── 📄 whois_lookup.py       # WHOIS domain lookup
    ├── 📄 dns_lookup.py         # DNS records analysis
    ├── 📄 reverse_dns.py        # Reverse DNS lookup
    ├── 📄 port_scanner.py       # Port scanning functionality
    ├── 📄 ssl_scanner.py        # SSL certificate analysis
    ├── 📄 ip_range_scanner.py   # IP range scanning
    ├── 📄 asn_resolver.py       # ASN to IP range resolution
    ├── 📄 isp_tracker.py        # ISP tracking
    │
    ├── 🔒 Web Application Security
    ├── 📄 http_headers.py       # HTTP headers analysis
    ├── 📄 robots_scanner.py     # Robots.txt scanner
    ├── 📄 directory_bruteforce.py # Directory bruteforcing
    ├── 📄 sitemap_parser.py     # Sitemap analysis
    ├── 📄 js_endpoint_scanner.py # JavaScript endpoint discovery
    ├── 📄 favicon_hash.py       # Favicon hash generation
    ├── 📄 tech_fingerprint.py   # Technology fingerprinting
    ├── 📄 url_analyzer.py       # URL threat analysis
    ├── 📄 useragent_detector.py # User-Agent analysis
    │
    ├── 👥 Social & Personal Intel
    ├── 📄 social_checker.py     # Social media username check
    ├── 📄 github_intel.py       # GitHub intelligence
    ├── 📄 phone_intel.py        # Phone number analysis
    ├── 📄 email_validator.py    # Email validation
    ├── 📄 temp_email_checker.py # Temporary email detection
    │
    ├── 📄 Document & Metadata Analysis
    ├── 📄 exif_extractor.py     # EXIF metadata extraction
    ├── 📄 doc_metadata.py       # Document metadata analysis
    │
    ├── 🔍 Search & Discovery
    ├── 📄 google_dorking.py     # Google dorking
    ├── 📄 subdomain_finder.py   # Subdomain discovery
    ├── 📄 wayback_machine.py    # Wayback Machine search
    ├── 📄 common_crawl.py       # Common Crawl search
    ├── 📄 pastebin_search.py    # Pastebin searching
    ├── 📄 leak_search.py        # Data breach search
    ├── 📄 google_drive_leaks.py # Google Drive leak search
    ├── 📄 maps_parser.py        # Google Maps link parser
    └── 📄 shodan_lookup.py   # Shodan API integration

```

---

## ⚖️ Legal Disclaimer

**⚠️ IMPORTANT**: This tool is designed exclusively for **educational purposes** and **authorized security testing**.

### ✅ Authorized Uses
- Educational purposes and learning OSINT techniques
- Authorized penetration testing and security assessments
- Bug bounty programs with proper scope authorization
- Digital forensics investigations by authorized personnel
- Security research within legal boundaries

### ❌ Prohibited Uses
- Unauthorized surveillance or stalking
- Illegal data collection or privacy violations
- Malicious reconnaissance or attack preparation
- Any activity violating local, state, or federal laws

**Users are solely responsible for ensuring compliance with applicable laws and regulations in their jurisdiction.**

---

## 👨‍💻 Author

<div align="center">
  <img src="https://github.com/VritraSecz.png" width="100" height="100" style="border-radius: 50%;">
  <h3>Alex Butler</h3>
  <p><strong>Vritra Security Organization</strong></p>
</div>

### 🌐 Connect With Us

+ [![Creator](https://img.shields.io/badge/Creator-Alex%20%7C%20VritraSec-%23f97316?style=for-the-badge&logo=github)](https://vritrasec.com)
+ [![Website](https://img.shields.io/badge/Website-vritrasec.com-%233b82f6?style=for-the-badge&logo=googlechrome&logoColor=white)](https://vritrasec.com)
+ [![GitHub](https://img.shields.io/badge/GitHub-VritraSecz-%231f2937?style=for-the-badge&logo=github&logoColor=white)](https://github.com/VritraSecz)
+ [![Instagram](https://img.shields.io/badge/Instagram-%40haxorlex-%23E1306C?style=for-the-badge&logo=instagram&logoColor=white)](https://instagram.com/haxorlex)
+ [![YouTube](https://img.shields.io/badge/YouTube-%40Technolex-%23FF0000?style=for-the-badge&logo=youtube&logoColor=white)](https://youtube.com/@Technolex)
+ [![Telegram Channel](https://img.shields.io/badge/Channel-%40LinkCentralX-%2326A5E4?style=for-the-badge&logo=telegram&logoColor=white)](https://t.me/LinkCentralX)
+ [![Main Channel](https://img.shields.io/badge/Main%20Updates-%40VritraSec-%23096AEB?style=for-the-badge&logo=telegram&logoColor=white)](https://t.me/VritraSec)
+ [![Community](https://img.shields.io/badge/Community-%40VritraSecz-%230168C4?style=for-the-badge&logo=telegram&logoColor=white)](https://t.me/VritraSecz)
+ [![Support Bot](https://img.shields.io/badge/Support%20Bot-@ethicxbot-%2363ccff?style=for-the-badge&logo=bot&logoColor=white)](https://t.me/ethicxbot)


---

## 🤝 Contributing

Contributions are welcome! Here's how you can help:

1. 🍴 **Fork the repository**
2. 🌿 **Create a feature branch** (`git checkout -b feature/AmazingFeature`)
3. 💾 **Commit your changes** (`git commit -m 'Add some AmazingFeature'`)
4. 📤 **Push to the branch** (`git push origin feature/AmazingFeature`)
5. 🔄 **Open a Pull Request**

### 💡 Ways to Contribute
- 🐛 Report bugs and issues
- 💡 Suggest new features or modules
- 📖 Improve documentation
- 🔧 Add new OSINT modules
- 🧪 Write tests
- 🌍 Translate to other languages



---

## 📄 License


### 🏷️ MIT License — Permissions, Limitations & Requirements

#### ✅ Permissions

+ ![Commercial Use](https://img.shields.io/badge/✅%20Commercial%20Use-Allowed-brightgreen?style=flat-square&logo=dollar-sign&logoColor=white)
+ ![Modification](https://img.shields.io/badge/✅%20Modification-Allowed-brightgreen?style=flat-square&logo=edit&logoColor=white)
+ ![Distribution](https://img.shields.io/badge/✅%20Distribution-Allowed-brightgreen?style=flat-square&logo=share&logoColor=white)
+ ![Private Use](https://img.shields.io/badge/✅%20Private%20Use-Allowed-brightgreen?style=flat-square&logo=lock&logoColor=white)

#### ❌ Limitations

+ ![No Warranty](https://img.shields.io/badge/❌%20No%20Warranty-Provided-red?style=flat-square&logo=shield-x&logoColor=white)
+ ![No Liability](https://img.shields.io/badge/❌%20No%20Liability-Accepted-red?style=flat-square&logo=alert-triangle&logoColor=white)

#### ⚠️ Requirements

+ ![License Notice](https://img.shields.io/badge/⚠️%20License%20Notice-Required-orange?style=flat-square&logo=document-text&logoColor=white)


---

<div align="center">
  <p>⭐ If you found BloodRecon useful, please consider giving it a star!</p>
  <b>Made with ❤️ by <a href="https://github.com/VritraSecz">Alex Butler</a></b>
</div>