Professor OSINT

The Ultimate Enterprise OSINT & Attack Surface Discovery Framework. Fast, Native, and 100% Dependency-Free.

professor_osint.py — bash

# Run the unified Web Installer
$ curl -sL https://posint.rokibulroni.com/install | bash

# Launch a comprehensive Enterprise-level scan
$ professor-osint --query "tesla.com" --spider --rustscan --workspace --report html

Starting Enterprise Scan Engine... [OK]
Mapping Attack Surface... [OK]
Sweeping Active Ports... [OK]
Generating Executive Report... [DONE]

Enterprise Modules

Attack Surface Mapping

Passively resolve IPs and map out open ports, cloud hostnames, CDN tags, and known vulnerabilities (CVEs) without alerting the target.

--query "example.com" --spider

Active Port Scanner

Harness the power of asynchronous Python (asyncio) to actively sweep thousands of common ports in mere seconds.

--query "scanme.nmap.org" --rustscan

Domain Intelligence

Instantly enumerate subdomains and exposed corporate emails through certificate transparency logs and search scraping.

--query "example.com" --harvester

Workspace Intelligence

Hunt for sensitive documents exposed in Google Drive, Docs, Trello boards, and Notion workspaces associated with the target.

--query "company" --workspace

Social Recon & Dossier

Map a target's digital footprint across platforms and generate detailed dossiers including bios, real names, and profile pictures.

--username "target" --analyzer --dossier

Telecom Intelligence

Perform carrier, regional, and time-zone lookups on international phone numbers, coupled with automated footprint dorking.

--query "+1234567890" --phone

Resource Discovery

Dynamically query GitHub's public APIs to instantly discover the top-rated open-source hacking tools for any specific vulnerability.

--query "phishing" --awesome

The Professor's Toolbox

Access a built-in interactive encyclopedia of curated hacking tools, complete with exact terminal installation commands.

--query "wireless" --toolbox

Terminal Playbook

Dynamically inject ready-to-run terminal commands directly into your CLI based on your target's infrastructure.

--query "target.com" --webcheck --playbook

AI Threat Intelligence

Hand off raw OSINT dumps to a local (Ollama, LM Studio) or cloud (OpenAI, Gemini, Anthropic, DeepSeek) LLM to auto-generate a polished analyst report with prioritized risks and mitigation steps.

--query "example.com" --harvester --spider --ai-analyze

🗑️ Uninstallation

If you need to completely remove Professor OSINT from your system, simply run the provided uninstaller script from the cloned repository:

# macOS / Linux
$ ./uninstall.sh

# Windows
C:\> uninstall.bat

If you installed it globally via pip, you can cleanly remove it by running:

$ pip uninstall professor-osint

A-Z Command Reference

Command / Flag	Description
`--ai-analyze`	AI Threat Intelligence Analysis. Feeds the gathered OSINT dumps to a configured LLM and appends an analyst report (risks + mitigation).
`-a, --analyzer`	Perform Social Analyzer permutations and confidence scoring.
`--awesome`	Resource Discovery Engine (Discover Top Curated GitHub Tools).
`-c, --config`	Path to custom config file (default: config.json).
`--config-ai`	Interactive setup wizard for the AI analyst (provider, model, endpoint) with live validation.
`-x, --dossier`	Generate Deep Dossier for username.
`-e, --extract`	Specific data pattern to extract from dumps. Choices: `emails`, `cards`, `ipv4`, `btc`, `eth`, `aws_key`, `jwt`, `rsa_private`.
`--harvester`	Domain Intelligence Engine (Rapid Subdomain and Email Enumeration).
`-m, --monitor`	Global Threat Monitor (Live OSINT News Integration).
`--phone`	Telecom Intelligence Profile (Carrier, Region, and Footprint Dorking).
`-p, --playbook`	Fetch ready-to-run Terminal commands for your target.
`-q, --query`	Target search keyword/query (Domain or Company).
`-r, --recommend`	Fetch OSINT tool recommendations from your Live API ecosystem.
`--report`	Generate a professional HTML report. Choice: `html`.
`--rustscan`	RustScan Engine (Ultra-Fast Asynchronous Port Scanner).
`--spider`	Attack Surface Mapping Engine (Ports, CVEs).
`-t, --threads`	Number of concurrent connections (default: 10).
`--toolbox`	The Professor's Toolbox (Built-in Installer Menu). Search categories: `phishing`, `wireless`, `osint`, `exploitation`, `anonymity`.
`--tor`	Route traffic through local Tor SOCKS5 proxy (127.0.0.1:9050).
`-u, --username`	Target username to hunt across social media (Social Recon feature).
`-w, --webcheck`	Live Domain Intelligence (DNS, SSL, Headers).
`--workspace`	Enterprise Workspace Intelligence (Google Drive, Docs, Trello, Notion).