Ohsint — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Ohsint (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
73 tools. 5 pipelines. One interface. CLI + MCP server.
Unified OSINT reconnaissance for authorized engagements. Wraps 73 tools behind smart target detection, parallel execution, deduplication, and multi-format reporting (JSON / Markdown / HTML). Runs on Kali Linux; connects to Claude Desktop/Code via an MCP server.
Five multi-stage pipelines chain tools with data flowing between stages:
| Pipeline | Command | What it does |
|---|---|---|
| Subdomain Takeover | ohsint takeover | subfinder + crt.sh → dnsx CNAME → provider filter → subzy + nuclei → cross-validate |
| Historical URL Harvest | ohsint url-harvest | gau + waybackurls + waymore → dedupe → gf pattern match → robots.txt history |
| Secret Surface | ohsint secret-surface | GitHub / Docker Hub / Postman search → TruffleHog + Gitleaks → cross-validate |
| JS Analysis | ohsint js-analysis | subjs + katana → download → beautify → LinkFinder + SecretFinder → source maps → Swagger |
| Full Passive | ohsint passive-full | chains all 4 above with cross-pipeline data flow |
# Install the CLI + MCP entry points
pip install -e . --break-system-packages
# Install all tool binaries (Kali VM — handles every install gotcha)
bash scripts/setup-kali.sh
# Verify tools, API keys, OPSEC config
ohsint install-check
ohsint opsec-check
# Run a pipeline
ohsint takeover -t example.com
ohsint passive-full -t example.com
# Multi-target / scope file
ohsint takeover --scope-file hackerone_scope.txt
ohsint takeover -t a.com -t b.com -t c.com
# Start the MCP server (see docs/mcp-setup.md for binding/IP)
ohsint-mcp --host <vm-ip>Optional protection layer, configured in configs/opsec.yaml:
Verify with ohsint opsec-check. For container-based isolation, see docs/kasm-deployment.md.
Passive tools run freely. Active tools (httpx, naabu, shuffledns, interactsh, spiderfoot, recon-ng, xray, linkedin2username, linkedint) require --authorization. FCRA-gated commercial identity tools require --fcra-permissible-purpose.
Configure in configs/api_keys.yaml (copy from configs/api_keys.yaml.example). Check status: ohsint api-keys.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.