🎉 What's New in v1.2.0

🚀 Enhanced Shodan Integration

We've completely revamped the Shodan integration with powerful new features that make API key management effortless!

✨ Key Improvements:

🔧 Command Line API Management

# Set your Shodan API key instantly - no more interactive prompts!
python3 bloodrecon.py --shodan-api "your_api_key_here"

📁 Streamlined Configuration

• New Location: ~/.config-vritrasecz/bloodrecon-shodan.json
• Auto Directory Creation: Tool creates config directories automatically
• JSON-Only Storage: Simplified, reliable configuration management

🔒 Smart API Key Handling

• Automatic Replacement: New API keys seamlessly replace existing ones
• Input Validation: Enhanced validation prevents empty or invalid keys
• Better Error Messages: Clear, actionable feedback for users

⚡ Improved User Experience

• One-Command Setup: Get Shodan running with a single command
• Non-Interactive Mode: Perfect for automation and scripting
• Cleaner Output: More intuitive and professional interface

🛠️ Quick Setup Example:

# 1. Set your API key (one time setup)
python3 bloodrecon.py --shodan-api "your_shodan_api_key"

# 2. Start using Shodan immediately
python3 bloodrecon.py --shodan 8.8.8.8
python3 bloodrecon.py --shodan google.com

💡 Pro Tip: Your API key is saved securely and will be used automatically for all future Shodan queries!

📋 What Changed:

• Moved from ~/.osint_shodan_config to organized ~/.config-vritrasecz/ directory
• Removed dual config.py file management for simplified workflow
• Enhanced error handling and user feedback
• Added --shodan-api command line argument

🔗 Get Started: View complete changelog • API Configuration Guide

📖 Table of Contents

• 🎯 Overview
• ✨ Key Features
• 🛠️ Installation
  • Linux Installation
  • Termux Installation
  • Dependencies
• 🚀 Usage
  • Interactive Mode
  • Command Line Usage
• 🔧 Modules
  • Network & Infrastructure
  • Web Application Security
  • Social Media & Personal Intel
  • Document & Metadata Analysis
  • Search & Discovery
  • Communication Intelligence
  • Threat Intelligence
• 🔑 API Key Configuration
• 📸 Screenshots
• 📁 Folder Structure
• ⚖️ Legal Disclaimer
• 👨‍💻 Author
• 🤝 Contributing
• 📄 License

🎯 Overview

BloodRecon is a state-of-the-art OSINT (Open Source Intelligence) framework that provides cybersecurity professionals with 34+ specialized modules for comprehensive reconnaissance and intelligence gathering. Built with Python 3.x, it offers both interactive menu-driven and command-line interfaces for maximum flexibility.

✨ Key Features

🔍 34 Specialized OSINT Modules
🌐 Network & Infrastructure Analysis (IP, DNS, WHOIS, SSL, Ports)
🔒 Web Application Security Testing (Headers, Robots, Directories)
👥 Social Media & Personal Intelligence (GitHub, Social Platforms)
📄 Document & Metadata Analysis (EXIF, Document Properties)
🔎 Advanced Search Capabilities (Google Dorking, Wayback Machine)
📞 Communication Intelligence (Email, Phone Number Analysis)
🛡️ Threat Intelligence Integration (Shodan)
💾 Data Breach & Leak Detection
🎨 Interactive CLI Interface with Target Input Examples
🌈 Colored Terminal Output for Enhanced Readability

🛠️ Installation

From PyPI (recommended)

pip install bloodrecon

# Run — all three entry points work
bloodrecon --interactive
python -m bloodrecon --interactive
bloodrecon --dns google.com

From source (Linux)

# Clone the repository
git clone https://github.com/MrHacker-X/BloodRecon.git

# Navigate to the project directory
cd BloodRecon

# Install as a package (editable, with dev tools)
pip install -e .

# ...or classic script style
pip install -r requirements.txt
chmod +x bloodrecon.py

# Run the tool
bloodrecon --interactive          # console script
python -m bloodrecon --interactive # module style
python bloodrecon.py --interactive # legacy launcher

Termux Installation

# Update packages and install dependencies
pkg update && pkg upgrade
pkg install git python

# Clone the repository
git clone https://github.com/MrHacker-X/BloodRecon.git

# Navigate to the project directory
cd BloodRecon

pip install .
bloodrecon --interactive

Dependencies

BloodRecon requires the following Python packages:

colorama==0.4.6
dnspython==2.7.0
mmh3==5.1.0
phonenumbers==9.0.10
Pillow==11.3.0
requests==2.32.4
urllib3==2.5.0
whois==1.20240129.2

Note: the shodan client library is no longer needed — BloodRecon talks to the Shodan REST API directly via requests.

🚀 Usage

Interactive Mode

Launch BloodRecon in interactive mode for a user-friendly menu experience:

python bloodrecon.py --interactive

Command Line Usage

BloodRecon supports extensive command-line options for automation and scripting:

Basic Usage Examples

# IP Address Analysis
python bloodrecon.py --ip 8.8.8.8

# Domain WHOIS Lookup
python bloodrecon.py --whois example.com

# DNS Records Analysis
python bloodrecon.py --dns google.com

# HTTP Headers Analysis
python bloodrecon.py --headers https://example.com

# Social Media Username Check
python bloodrecon.py --social username123

# Email Validation
python bloodrecon.py --email test@example.com

# Phone Number Intelligence
python bloodrecon.py --phone +1234567890

# Shodan Intelligence Lookup
python bloodrecon.py --shodan 8.8.8.8

Advanced Usage Examples

# Google Dorking
python bloodrecon.py --dork "site:example.com filetype:pdf"

# Subdomain Discovery
python bloodrecon.py --subdomains example.com

# SSL Certificate Analysis
python bloodrecon.py --ssl example.com:443

# Directory Bruteforcing
python bloodrecon.py --dir-brute https://example.com

# JavaScript Endpoint Scanner
python bloodrecon.py --js-endpoints https://example.com

# IP Range Scanner
python bloodrecon.py --ip-scan 192.168.1.0/24

# Wayback Machine Search
python bloodrecon.py --wayback example.com

# GitHub Intelligence
python bloodrecon.py --github octocat

Tool Information

# Display detailed tool information
python bloodrecon.py --about

# Show developer contact information
python bloodrecon.py --connect

# Show version
python bloodrecon.py --version

# Display help
python bloodrecon.py --help

🔧 Modules

BloodRecon features 34+ specialized OSINT modules organized into categories:

Network & Infrastructure

Web Application Security

Social Media & Personal Intel

Document & Metadata Analysis

Search & Discovery

Threat Intelligence

🔑 API Key Configuration

Some modules require API keys for enhanced functionality. BloodRecon now offers multiple convenient ways to configure your API keys:

Shodan API Key

🚀 Recommended Method: Command Line Setup (v1.2.0+)

1. Get your free API key at Shodan.io
2. Set it instantly with one command:

# Set your Shodan API key (replaces any existing key)
python3 bloodrecon.py --shodan-api "your_shodan_api_key_here"

3. Start using Shodan immediately:

# Your API key is now saved and ready to use!
python3 bloodrecon.py --shodan 8.8.8.8
python3 bloodrecon.py --shodan google.com

📁 Configuration Details

• Storage Location: ~/.config-vritrasecz/bloodrecon-shodan.json
• Auto Directory Creation: Config directories are created automatically
• Key Replacement: New keys seamlessly replace existing ones
• Persistent Storage: API key is saved for all future sessions

🔄 Alternative Methods

Environment Variable:

export SHODAN_API_KEY="your_api_key_here"
python3 bloodrecon.py --shodan 8.8.8.8

Legacy config.py (still supported):

# modules/config.py
SHODAN_API_KEY = 'your_shodan_api_key_here'

Interactive Mode:

• The tool will prompt for the key if not configured
• Entered keys are automatically saved for future use

API Key Security

🔒 Security Best Practices:

• ✅ Use the --shodan-api command for secure local storage
• ✅ Use environment variables for server deployments
• ❌ Never commit API keys to version control
• ❌ Avoid hardcoding keys in scripts

💡 Pro Tip: The new JSON config system in v1.2.0 provides the most reliable and user-friendly API key management!

📸 Screenshots

Interactive Menu

📁 Folder Structure

BloodRecon/
│
├── 📄 bloodrecon.py             # Main application file
├── 📄 requirements.txt          # Python dependencies
├── 📄 LICENSE                   # License File
├── 📄 README.md                 # This file
├── 📄 CHANGELOG.md              # Version history and changes
│
└── 📁 modules/                  # OSINT modules directory
    ├── 📁 list-imp/             # Important list
    │   ├── 📄 common.txt        # Password list for Dir Bruteforce
    │   └── 📄 temp-domains.txt  # Temp mail domain list
    │
    ├── 📄 __init__.py           # Module initialization
    ├── 📄 colors.py             # Color management and styling
    ├── 📄 config.py             # Configuration file (API keys)
    │
    ├── 🌐 Network & Infrastructure
    ├── 📄 ip_lookup.py          # IP address intelligence
    ├── 📄 whois_lookup.py       # WHOIS domain lookup
    ├── 📄 dns_lookup.py         # DNS records analysis
    ├── 📄 reverse_dns.py        # Reverse DNS lookup
    ├── 📄 port_scanner.py       # Port scanning functionality
    ├── 📄 ssl_scanner.py        # SSL certificate analysis
    ├── 📄 ip_range_scanner.py   # IP range scanning
    ├── 📄 asn_resolver.py       # ASN to IP range resolution
    ├── 📄 isp_tracker.py        # ISP tracking
    │
    ├── 🔒 Web Application Security
    ├── 📄 http_headers.py       # HTTP headers analysis
    ├── 📄 robots_scanner.py     # Robots.txt scanner
    ├── 📄 directory_bruteforce.py # Directory bruteforcing
    ├── 📄 sitemap_parser.py     # Sitemap analysis
    ├── 📄 js_endpoint_scanner.py # JavaScript endpoint discovery
    ├── 📄 favicon_hash.py       # Favicon hash generation
    ├── 📄 tech_fingerprint.py   # Technology fingerprinting
    ├── 📄 url_analyzer.py       # URL threat analysis
    ├── 📄 useragent_detector.py # User-Agent analysis
    │
    ├── 👥 Social & Personal Intel
    ├── 📄 social_checker.py     # Social media username check
    ├── 📄 github_intel.py       # GitHub intelligence
    ├── 📄 phone_intel.py        # Phone number analysis
    ├── 📄 email_validator.py    # Email validation
    ├── 📄 temp_email_checker.py # Temporary email detection
    │
    ├── 📄 Document & Metadata Analysis
    ├── 📄 exif_extractor.py     # EXIF metadata extraction
    ├── 📄 doc_metadata.py       # Document metadata analysis
    │
    ├── 🔍 Search & Discovery
    ├── 📄 google_dorking.py     # Google dorking
    ├── 📄 subdomain_finder.py   # Subdomain discovery
    ├── 📄 wayback_machine.py    # Wayback Machine search
    ├── 📄 common_crawl.py       # Common Crawl search
    ├── 📄 pastebin_search.py    # Pastebin searching
    ├── 📄 leak_search.py        # Data breach search
    ├── 📄 google_drive_leaks.py # Google Drive leak search
    ├── 📄 maps_parser.py        # Google Maps link parser
    └── 📄 shodan_lookup.py   # Shodan API integration

⚖️ Legal Disclaimer

⚠️ IMPORTANT: This tool is designed exclusively for educational purposes and authorized security testing.

✅ Authorized Uses

• Educational purposes and learning OSINT techniques
• Authorized penetration testing and security assessments
• Bug bounty programs with proper scope authorization
• Digital forensics investigations by authorized personnel
• Security research within legal boundaries

❌ Prohibited Uses

• Unauthorized surveillance or stalking
• Illegal data collection or privacy violations
• Malicious reconnaissance or attack preparation
• Any activity violating local, state, or federal laws

Users are solely responsible for ensuring compliance with applicable laws and regulations in their jurisdiction.

🧪 Testing

python -m bloodrecon --version          # entry point check
python bloodrecon.py --help             # full CLI tree
python bloodrecon.py --temp-email test@10minutemail.com   # offline module
python bloodrecon.py --dns google.com   # live network module

All modules accept arbitrary input without crashing (fail-soft design), colors are automatically stripped when output is piped, and all 34 CLI flags are verified to dispatch to their modules.

👨‍💻 Author

Alex Butler

Vritra Security Organization

🌐 Connect With Us

🤝 Contributing

Contributions are welcome! Here's how you can help:

1. 🍴 Fork the repository
2. 🌿 Create a feature branch (git checkout -b feature/AmazingFeature)
3. 💾 Commit your changes (git commit -m 'Add some AmazingFeature')
4. 📤 Push to the branch (git push origin feature/AmazingFeature)
5. 🔄 Open a Pull Request

💡 Ways to Contribute

• 🐛 Report bugs and issues
• 💡 Suggest new features or modules
• 📖 Improve documentation
• 🔧 Add new OSINT modules
• 🧪 Write tests
• 🌍 Translate to other languages

📄 License

🏷️ MIT License — Permissions, Limitations & Requirements

✅ Permissions

❌ Limitations

⚠️ Requirements