farsight-recon 2.0.0b2

CLI-Based Recon and Threat Intelligence Framework

DEFCON 34 🗓️ Aug 6–9, 2026  •  Las Vegas  •  Upcoming Farsight: Turning OSINT into Actionable Attack Surface Intelligence

BLACKHAT 2025 🎯 Oct 1–2, 2025  •  Toronto  •  Presented Arsenal: CLI-Based Recon and Threat Intelligence Framework

FARSIGHT

A fast, modular CLI recon and threat-intelligence framework. Works with or without API keys.

Features

• Organization Discovery: WHOIS, certificate transparency, passive DNS, related domains
• Recon & Asset Discovery: DNS enumeration, subdomain discovery, async port scanning
• Threat Intelligence: leak detection, credential exposure, dark web mentions, email reputation
• Typosquatting Detection: domain permutation, content similarity, risk scoring
• News Monitoring: relevance-scored news tracking across multiple sources
• Reporting: Markdown and PDF output with executive summaries
• API-optional: works out of the box; add keys (Shodan, Censys, VirusTotal, ...) for deeper results

Install

pip install --pre farsight-recon

(--pre is required while FARSIGHT is in beta. The PyPI distribution is named farsight-recon since farsight was already taken, but it installs the same farsight command.)

With Poetry:

poetry add farsight-recon --allow-prereleases

Or run from source:

git clone https://github.com/seedon198/Farsight.git
cd Farsight
python3 -m venv venv && source venv/bin/activate
pip install -r requirements.txt

Requires Python 3.10+.

Usage

# Basic scan (org discovery + recon)
farsight scan example.com

# Everything, verbose
farsight scan example.com --all --verbose

# Specific modules, PDF output
farsight scan example.com -m org -m threat --output report.pdf

Running from source instead of a pip install? Swap farsight for python -m farsight in any command above.

Run farsight scan --help for the full option list.

Web UI

A local-only web UI wraps the same scan modules with a live-progress browser view:

pip install -r requirements-web.txt
python -m farsight web

Opens a browser at http://127.0.0.1:8000 with real-time module progress, live stats, and an in-browser report with Markdown/PDF download. Binds to loopback only — there's no authentication, so don't expose it beyond your own machine. Run python -m farsight web --help for options.

API Keys (optional)

FARSIGHT works with zero configuration. Set these for deeper results:

export FARSIGHT_SHODAN_API_KEY="..."
export FARSIGHT_CENSYS_API_KEY="..."
export FARSIGHT_SECURITYTRAILS_API_KEY="..."
export FARSIGHT_VIRUSTOTAL_API_KEY="..."
export FARSIGHT_INTELX_API_KEY="..."
export FARSIGHT_LEAKPEEK_API_KEY="..."

Development

pip install -r requirements-dev.txt
pytest tests/

Contributions welcome: fork, branch, open a PR.

License

MIT. See LICENSE.

Disclaimer

For authorized security assessments only. Always get permission before scanning a domain or network you don't own.