Prompt
Check a dataset before analysis
Find missing values, inconsistent formats, duplicates, and questions that could invalidate results.
ClaudeChatGPTGeminiData & Analytics
Dave AI
Performing OSINT with SpiderFoot
Automate OSINT collection using SpiderFoot REST API and CLI for target
instructions.md
--- name: performing-osint-with-spiderfoot-e27c245dec93 description: Automate OSINT collection with the SpiderFoot REST API and CLI (sf.py/spiderfoot-cli) across 200+ modules, selecting scan modes (footprint, investigate, passive) and parsing results for domains, IPs, emails, leaked credentials, and DNS records into a target intelligence profile. Use when mapping an organization's attack surface or profiling a target for threat intelligence. domain: cybersecurity subdomain: threat-intelligence tags: - osint - spiderfoot - reconnaissance - threat-intelligence - attack-surface - target-profiling version: '1.0' author: mahipal license: Apache-2.0 nist_csf: - ID.RA-01 - ID.RA-05 - DE.CM-01 - DE.AE-02 mitre_attack: - T1591 - T1592 - T1593 - T1589 - T1595 --- # Performing OSINT with SpiderFoot ## Overview SpiderFoot is an open-source OSINT automation tool with 200+ modules that integrates with data sources for threat intelligence and attack surface mapping. This skill uses the SpiderFoot REST API and CLI (sf.py/spiderfoot-cli) to create and manage scans, select modules by use case (footprint, investigate, passive), parse structured results for domains, IPs, email addresses, leaked credentials, and DNS records, and generate target intelligence profiles. ## When to Use - When conducting security assessments that involve performing osint with spiderfoot - When following incident response procedures for related security events - When performing scheduled security testing or auditing activities - When validating security controls through hands-on testing ## Prerequisites - SpiderFoot 4.0+ installed or SpiderFoot HX cloud account - Python 3.8+ with requests library - SpiderFoot server running on default port 5001 - Optional: API keys for VirusTotal, Shodan, HaveIBeenPwned modules ## Steps 1. Connect to SpiderFoot REST API or use CLI interface 2. Create a new scan with target specification (domain, IP, email, name) 3. Select scan modules by use case (all, footprint, investigate, passive) 4. Monitor scan progress via API polling 5. Retrieve and parse scan results by data element type 6. Extract key findings: subdomains, IPs, emails, leaked credentials 7. Generate structured OSINT intelligence report ## Expected Output JSON report containing OSINT findings organized by data type (domains, IPs, emails, credentials, DNS records), module source attribution, and target profile summary with risk indicators.--- name: performing-osint-with-spiderfoot-e27c245dec93 description: Automate OSINT collection with the SpiderFoot REST API and CLI (sf.py/spiderfoot-cli) across 200+ modules, selecting scan modes (footprint, investigate, passive) and parsing results for domains, IPs, emails, leaked credentials, and DNS records into a target intelligence profile. Use when mapping an organization's attack surface or profiling a target for threat intelligence. domain: cybersecurity subdomain: threat-intelligence tags: - osint - spiderfoot - reconnaissance - threat-intelligence - attack-surface - target-profiling version: '1.0' author: mahipal license: Apache-2.0 nist_csf: - ID.RA-01 - ID.RA-05 - DE.CM-01 - DE.AE-02 mitre_attack: - T1591 - T1592 - T1593 - T1589 - T1595 --- # Performing OSINT with SpiderFoot ## Overview SpiderFoot is an open-source OSINT automation tool with 200+ modules that integrates with data sources for threat intelligence and attack surface mapping. This skill uses the SpiderFoot REST API and CLI (sf.py/spiderfoot-cli) to create and manage scans, select modules by use case (footprint, investigate, passive), parse structured results for domains, IPs, email addresses, leaked credentials, and DNS records, and generate target intelligence profiles. ## When to Use - When conducting security assessments that involve performing osint with spiderfoot - When following incident response procedures for related security events - When performing scheduled security testing or auditing activities - When validating security controls through hands-on testing ## Prerequisites - SpiderFoot 4.0+ installed or SpiderFoot HX cloud account - Python 3.8+ with requests library - SpiderFoot server running on default port 5001 - Optional: API keys for VirusTotal, Shodan, HaveIBeenPwned modules ## Steps 1. Connect to SpiderFoot REST API or use CLI interface 2. Create a new scan with target specification (domain, IP, email, name) 3. Select scan modules by use case (all, footprint, investigate, passive) 4. Monitor scan progress via API polling 5. Retrieve and parse scan results by data element type 6. Extract key findings: subdomains, IPs, emails, leaked credentials 7. Generate structured OSINT intelligence report ## Expected Output JSON report containing OSINT findings organized by data type (domains, IPs, emails, credentials, DNS records), module source attribution, and target profile summary with risk indicators.
Platform guidance
Imported from the listed AgentSkill.sh category. Complete supplied package files and notices are retained. Includes source scripts; review them before use. Required external tools and credentials are not installed. No bundled code was executed during import. Individual agent task behavior has not been tested.