web-check

by Lissy93

29.9Kstars

2.4Kforks

160watchers

Updated 3 months ago

About

An all-in-one OSINT tool designed to analyze websites for threat intelligence and security insights.

🕵️‍♂️ All-in-one OSINT tool for analysing any website

Primary Use Case

web-check is primarily used by security analysts, penetration testers, and OSINT researchers to gather comprehensive information about any website. It automates the process of collecting data such as DNS records, SSL certificates, IP information, and more to aid in threat intelligence and network monitoring.

Key Features

Comprehensive OSINT data gathering for websites
Automated analysis of DNS, SSL, and IP information
Network monitoring capabilities
Security automation for streamlined investigations
CLI-based tool for easy integration into workflows

Installation

Ensure Python 3.8+ is installed
Clone the repository: git clone https://github.com/Lissy93/web-check.git
Navigate into the directory: cd web-check
Install dependencies: pip install -r requirements.txt
Run the tool using the CLI commands

Usage

>_ python web-check.py -d example.com

Run a full OSINT scan on the domain example.com

>_ python web-check.py --help

Display help information and available commands

>_ python web-check.py -d example.com --dns

Perform DNS-specific information gathering on example.com

>_ python web-check.py -d example.com --ssl

Retrieve SSL certificate details for example.com

Security Frameworks

Reconnaissance

Discovery

Collection

Credential Access

Defense Evasion

Usage Insights

Integrate web-check with automated penetration testing frameworks like Metasploit to streamline reconnaissance and exploitation phases.
Leverage the CLI nature of web-check to embed it into CI/CD pipelines for continuous security monitoring of web assets.
Use web-check outputs to enrich threat intelligence platforms and improve detection rules for network monitoring tools.
Combine web-check with phishing simulation tools to enhance social engineering awareness and defense.
Employ web-check in purple team exercises to bridge gaps between offensive reconnaissance and defensive detection capabilities.