Shad0w Ops H.I.V.E Save

H.I.V.E is an automated OSINT (Open Source Intelligence) multi-tool that enables efficient data gathering from various sources through the utilization of a single, unified platform.

Project README

H.I.V.E Logo

Python Develope & tested on Kali Linux & Black Arch

DISCLAIMER: This tool is intended solely for educational purposes. The creators cannot be held accountable for any unauthorized use. Your utilization of this resource signifies your understanding and acceptance of this disclaimer.

Table Of Contents

Installation (Linux)

pip3 install -r requirements.txt

python3 setup.py

Edit the vars.py file by adding your APIs In the following format:

SHODAN_API = ''
INTELX_API = ''
HUNTER_API = ''
TRUECALLER_ID = ''
DBFILE = ''

Or simply use the new define function in the script.

How to get Truecaller ID

For your truecaller ID run:

truecallerpy login

and follow the steps to get your ID. If you cant see your ID run:

truecallerpy -i

or

truecallerpy --installationid

Running the script

You can run the script using the following command:

sudo python3 hive.py

Module Breakdown

1) Truecaller Reverse Lookup

Truecaller Reverse Lookup allows you to reverse-search any phone number and extract data such as their name directly from the truecaller remote servers.

2) Shodan Crawler

The shodan crawler utilises the shodan API to generate YAML formatted reports on a given IP address passively and saves the report in the Shodan_Output folder.

This module can be used to do recon on a webserver and get most information needed to develop an attack passivly, meaning the webserver itself wont receive any requests from the attacker and will not be able to detect an attack.

3) IP Geolocation

The IP geolocation module gives you an esimated location for a given IP address. Due to the flawed nature of IP addresses this module will not provide a 100% accurate location, but it will provide the country and city. This module can also provide the user with their own public IP if the input field is left empty.

4) IntelX Database Lookup

The database lookup module utilises the IntelX API to search for a given query in thousands of leaked databases

(NOTE) the output may not be complete and in that case take the id of the leak and search for it in the IntelX website and search for your query in the database to find that exact term/query.

In this module you can search for:

  • Email addresses
  • Domains
  • URLs
  • IP Addresses
  • Phone Numbers
  • Bitcoin addresses
  • MAC addresses
  • IPFS Hashes
  • Credit Card Numbers
  • IBANs
  • Ethereum addresses

5) Email Verifier

This module utilises the Hunter.io API and allows you to check if an email address exists, this can be used to check which emails are valid after bruteforcing a partially redacted email address.

6) Sherlock

This module can be used to find usernames across many social networks and saves the output in the Sherlock_Output folder.

7) Misc

1) Anonymous Mode

Allows you to enter commands for anonsurf/tor-router to activate system-wide tor-routing for improved privacy and security. Commands include: start, stop, restart/change and status.

2) Spoof your MAC address

In this module you can change your MAC address to a random or specific MAC address.

8) CredFetch (previously Phonekit)

This module has been completely revised and now neatly sorts all data extracted from each single line, allows the user to search for names, phone numbers, and emails within a text database, and the ability to filter data more efficiently has been added as well.

For example, if one wants to search for a certain John Doe, with an American or Canadian phone number, they could input the following text:

john doe +1

Or if the user wants to find another John Doe that has a GMail address attatched, they can search:

john doe @gmail[.com]

In the future, regex will be used to better sort text databases of all kinds.

API Account Options Table

API Website Status
Shodan API Shodan.io Free, Paid, Academic
Intelx API intelx.io Free, Paid, Academic
Hunter API hunter.io Free, Paid

(NOTE) Academic means that there is a better subscription plan for free/discounted that they provide for accounts created with student emails (.edu)

HIVE Flow Diagram

hive (2)


Credits

Open Source Agenda is not affiliated with "Shad0w Ops H.I.V.E" Project. README Source: Shad0w-ops/H.I.V.E

Open Source Agenda Badge

Open Source Agenda Rating