We've completely revamped the Shodan integration with powerful new features that make API key management effortless!

🔧 Command Line API Management

# Set your Shodan API key instantly - no more interactive prompts!
python3 bloodrecon.py --shodan-api "your_api_key_here"

📁 Streamlined Configuration

• New Location: ~/.config-vritrasecz/bloodrecon-shodan.json
• Auto Directory Creation: Tool creates config directories automatically
• JSON-Only Storage: Simplified, reliable configuration management

🔒 Smart API Key Handling

• Automatic Replacement: New API keys seamlessly replace existing ones
• Input Validation: Enhanced validation prevents empty or invalid keys
• Better Error Messages: Clear, actionable feedback for users

⚡ Improved User Experience

• One-Command Setup: Get Shodan running with a single command
• Non-Interactive Mode: Perfect for automation and scripting
• Cleaner Output: More intuitive and professional interface

# 1. Set your API key (one time setup)
python3 bloodrecon.py --shodan-api "your_shodan_api_key"

# 2. Start using Shodan immediately
python3 bloodrecon.py --shodan 8.8.8.8
python3 bloodrecon.py --shodan google.com

💡 Pro Tip: Your API key is saved securely and will be used automatically for all future Shodan queries!

📋 What Changed:

• Moved from ~/.osint_shodan_config to organized ~/.config-vritrasecz/ directory
• Removed dual config.py file management for simplified workflow
• Enhanced error handling and user feedback
• Added --shodan-api command line argument

🔗 Get Started: View complete changelog • API Configuration Guide

• 🎯 Overview
• ✨ Key Features
• 🛠️ Installation
  • Linux Installation
  • Termux Installation
  • Dependencies
• 🚀 Usage
  • Interactive Mode
  • Command Line Usage
• 🔧 Modules
  • Network & Infrastructure
  • Web Application Security
  • Social Media & Personal Intel
  • Document & Metadata Analysis
  • Search & Discovery
  • Communication Intelligence
  • Threat Intelligence
• 🔑 API Key Configuration
• 📸 Screenshots
• 📁 Folder Structure
• ⚖️ Legal Disclaimer
• 👨‍💻 Author
• 🤝 Contributing
• 📄 License

BloodRecon is a state-of-the-art OSINT (Open Source Intelligence) framework that provides cybersecurity professionals with 34+ specialized modules for comprehensive reconnaissance and intelligence gathering. Built with Python 3.x, it offers both interactive menu-driven and command-line interfaces for maximum flexibility.

🔍 34 Specialized OSINT Modules
🌐 Network & Infrastructure Analysis (IP, DNS, WHOIS, SSL, Ports)
🔒 Web Application Security Testing (Headers, Robots, Directories)
👥 Social Media & Personal Intelligence (GitHub, Social Platforms)
📄 Document & Metadata Analysis (EXIF, Document Properties)
🔎 Advanced Search Capabilities (Google Dorking, Wayback Machine)
📞 Communication Intelligence (Email, Phone Number Analysis)
🛡️ Threat Intelligence Integration (Shodan)
💾 Data Breach & Leak Detection
🎨 Interactive CLI Interface with Target Input Examples
🌈 Colored Terminal Output for Enhanced Readability

# Clone the repository
git clone https://github.com/VritraSecz/BloodRecon.git

# Navigate to the project directory
cd BloodRecon

# Install Python dependencies
pip install -r requirements.txt

# Make the script executable
chmod +x bloodrecon.py

# Run the tool
python bloodrecon.py --interactive

# Update packages and install dependencies
pkg update && pkg upgrade
pkg install git python

# Clone the repository
git clone https://github.com/VritraSecz/BloodRecon.git

# Navigate to the project directory
cd BloodRecon

# Install Python dependencies
pip install -r requirements.txt

# Run the tool
python bloodrecon.py --interactive

BloodRecon requires the following Python packages:

colorama==0.4.6
dnspython==2.7.0
mmh3==5.1.0
phonenumbers==9.0.10
Pillow==11.3.0
requests==2.32.4
shodan==1.31.0
urllib3==2.5.0
whois==1.20240129.2

Launch BloodRecon in interactive mode for a user-friendly menu experience:

python bloodrecon.py --interactive

BloodRecon supports extensive command-line options for automation and scripting:

# IP Address Analysis
python bloodrecon.py --ip 8.8.8.8

# Domain WHOIS Lookup
python bloodrecon.py --whois example.com

# DNS Records Analysis
python bloodrecon.py --dns google.com

# HTTP Headers Analysis
python bloodrecon.py --headers https://example.com

# Social Media Username Check
python bloodrecon.py --social username123

# Email Validation
python bloodrecon.py --email test@example.com

# Phone Number Intelligence
python bloodrecon.py --phone +1234567890

# Shodan Intelligence Lookup
python bloodrecon.py --shodan 8.8.8.8

# Google Dorking
python bloodrecon.py --dork "site:example.com filetype:pdf"

# Subdomain Discovery
python bloodrecon.py --subdomains example.com

# SSL Certificate Analysis
python bloodrecon.py --ssl example.com:443

# Directory Bruteforcing
python bloodrecon.py --dir-brute https://example.com

# JavaScript Endpoint Scanner
python bloodrecon.py --js-endpoints https://example.com

# IP Range Scanner
python bloodrecon.py --ip-scan 192.168.1.0/24

# Wayback Machine Search
python bloodrecon.py --wayback example.com

# GitHub Intelligence
python bloodrecon.py --github octocat

# Display detailed tool information
python bloodrecon.py --about

# Show developer contact information
python bloodrecon.py --connect

# Show version
python bloodrecon.py --version

# Display help
python bloodrecon.py --help

BloodRecon features 34+ specialized OSINT modules organized into categories:

Some modules require API keys for enhanced functionality. BloodRecon now offers multiple convenient ways to configure your API keys:

1. Get your free API key at Shodan.io
2. Set it instantly with one command:

# Set your Shodan API key (replaces any existing key)
python3 bloodrecon.py --shodan-api "your_shodan_api_key_here"

3. Start using Shodan immediately:

# Your API key is now saved and ready to use!
python3 bloodrecon.py --shodan 8.8.8.8
python3 bloodrecon.py --shodan google.com

• Storage Location: ~/.config-vritrasecz/bloodrecon-shodan.json
• Auto Directory Creation: Config directories are created automatically
• Key Replacement: New keys seamlessly replace existing ones
• Persistent Storage: API key is saved for all future sessions

Environment Variable:

export SHODAN_API_KEY="your_api_key_here"
python3 bloodrecon.py --shodan 8.8.8.8

Legacy config.py (still supported):

# modules/config.py
SHODAN_API_KEY = 'your_shodan_api_key_here'

Interactive Mode:

• The tool will prompt for the key if not configured
• Entered keys are automatically saved for future use

🔒 Security Best Practices:

• ✅ Use the --shodan-api command for secure local storage
• ✅ Use environment variables for server deployments
• ❌ Never commit API keys to version control
• ❌ Avoid hardcoding keys in scripts

💡 Pro Tip: The new JSON config system in v1.2.0 provides the most reliable and user-friendly API key management!

BloodRecon/
│
├── 📄 bloodrecon.py             # Main application file
├── 📄 requirements.txt          # Python dependencies
├── 📄 LICENSE                   # License File
├── 📄 README.md                 # This file
├── 📄 CHANGELOG.md              # Version history and changes
│
└── 📁 modules/                  # OSINT modules directory
    ├── 📁 list-imp/             # Important list
    │   ├── 📄 common.txt        # Password list for Dir Bruteforce
    │   └── 📄 temp-domains.txt  # Temp mail domain list
    │
    ├── 📄 __init__.py           # Module initialization
    ├── 📄 colors.py             # Color management and styling
    ├── 📄 config.py             # Configuration file (API keys)
    │
    ├── 🌐 Network & Infrastructure
    ├── 📄 ip_lookup.py          # IP address intelligence
    ├── 📄 whois_lookup.py       # WHOIS domain lookup
    ├── 📄 dns_lookup.py         # DNS records analysis
    ├── 📄 reverse_dns.py        # Reverse DNS lookup
    ├── 📄 port_scanner.py       # Port scanning functionality
    ├── 📄 ssl_scanner.py        # SSL certificate analysis
    ├── 📄 ip_range_scanner.py   # IP range scanning
    ├── 📄 asn_resolver.py       # ASN to IP range resolution
    ├── 📄 isp_tracker.py        # ISP tracking
    │
    ├── 🔒 Web Application Security
    ├── 📄 http_headers.py       # HTTP headers analysis
    ├── 📄 robots_scanner.py     # Robots.txt scanner
    ├── 📄 directory_bruteforce.py # Directory bruteforcing
    ├── 📄 sitemap_parser.py     # Sitemap analysis
    ├── 📄 js_endpoint_scanner.py # JavaScript endpoint discovery
    ├── 📄 favicon_hash.py       # Favicon hash generation
    ├── 📄 tech_fingerprint.py   # Technology fingerprinting
    ├── 📄 url_analyzer.py       # URL threat analysis
    ├── 📄 useragent_detector.py # User-Agent analysis
    │
    ├── 👥 Social & Personal Intel
    ├── 📄 social_checker.py     # Social media username check
    ├── 📄 github_intel.py       # GitHub intelligence
    ├── 📄 phone_intel.py        # Phone number analysis
    ├── 📄 email_validator.py    # Email validation
    ├── 📄 temp_email_checker.py # Temporary email detection
    │
    ├── 📄 Document & Metadata Analysis
    ├── 📄 exif_extractor.py     # EXIF metadata extraction
    ├── 📄 doc_metadata.py       # Document metadata analysis
    │
    ├── 🔍 Search & Discovery
    ├── 📄 google_dorking.py     # Google dorking
    ├── 📄 subdomain_finder.py   # Subdomain discovery
    ├── 📄 wayback_machine.py    # Wayback Machine search
    ├── 📄 common_crawl.py       # Common Crawl search
    ├── 📄 pastebin_search.py    # Pastebin searching
    ├── 📄 leak_search.py        # Data breach search
    ├── 📄 google_drive_leaks.py # Google Drive leak search
    ├── 📄 maps_parser.py        # Google Maps link parser
    └── 📄 shodan_lookup.py   # Shodan API integration

⚠️ IMPORTANT: This tool is designed exclusively for educational purposes and authorized security testing.

• Educational purposes and learning OSINT techniques
• Authorized penetration testing and security assessments
• Bug bounty programs with proper scope authorization
• Digital forensics investigations by authorized personnel
• Security research within legal boundaries

• Unauthorized surveillance or stalking
• Illegal data collection or privacy violations
• Malicious reconnaissance or attack preparation
• Any activity violating local, state, or federal laws

Users are solely responsible for ensuring compliance with applicable laws and regulations in their jurisdiction.

Alex Butler

Vritra Security Organization

Contributions are welcome! Here's how you can help:

1. 🍴 Fork the repository
2. 🌿 Create a feature branch (git checkout -b feature/AmazingFeature)
3. 💾 Commit your changes (git commit -m 'Add some AmazingFeature')
4. 📤 Push to the branch (git push origin feature/AmazingFeature)
5. 🔄 Open a Pull Request

• 🐛 Report bugs and issues
• 💡 Suggest new features or modules
• 📖 Improve documentation
• 🔧 Add new OSINT modules
• 🧪 Write tests
• 🌍 Translate to other languages