heartbleed-osint 0.3.0

A command-line OSINT toolkit for identity discovery and correlation.

HeartBleed OSINT Toolkit 🩸

HeartBleed is a modular, high-performance command-line OSINT toolkit designed to discover and correlate publicly available social media and online accounts belonging to a target individual.

Developed by: Alpha-07 (Metis Labs)

---

📑 Table of Contents

• 🚀 Features
• 🛠️ Architecture
• 📦 Installation
• 📖 Usage
• 🌐 Domain Intelligence
• 📄 Professional Export
• 🕸️ Multi-Target Workspaces
• 🛡️ Security & Ethics
• 🗺️ Roadmap

---

🚀 Features

• Concurrent Collection: Parallelized platform scanning for maximum speed.
• Identity Correlation: Advanced scoring engine to determine profile ownership probability.
• Platform Support: GitHub, GitLab, Reddit, Instagram, X (Twitter), and Gravatar.
• Email Discovery: Find profiles linked to an email address.
• Domain Intelligence: Analyze domains for WHOIS, DNS records (MX, SPF), and subdomains.
• Username Mutation: Automatically check variations like user_, user123, realuser (--mutate).
• Digital Footprint Dorker: Instant clickable links for Pastebin, data leaks, and tech forums.
• Persona Profiler: Local, rule-based extraction of Job Titles, Tech Stacks, and Interests.
• Multi-Target Workspaces: Group related scans and map overlaps between targets.
• Professional Reporting: Generate JSON, Interactive HTML (with Graphs), and PDF reports.
• Ethics-First: Strictly operates on publicly accessible data (no auth bypassing).

🛠️ Architecture

HeartBleed follows Clean Architecture principles:

• heartbleed/core: Business logic, data models, and the search orchestrator.
• heartbleed/collectors: Platform-specific plugins (now with Email support).
• heartbleed/modules: Specialized intelligence modules (Domain Analysis).
• heartbleed/analyzers: Correlation, Dorking, and Persona Profiling.
• heartbleed/reporters: Terminal and Interactive HTML formatters.
• heartbleed/exports: JSON and PDF export logic.
• heartbleed/database: SQLite persistence layer.

📦 Installation

Prerequisites

• Python 3.11+
• Pip

Recommended Setup (Pip)

You can install HeartBleed directly from PyPI:

pip install heartbleed-osint

Installation from Source

git clone https://github.com/Alpha07-Intel/HeartBleed.git
cd HeartBleed
pip install .

This will install the heartbleed command globally.

📖 Usage

Basic Scan

# Scan by username
heartbleed scan johndoe

# Scan by email
heartbleed scan [e-mail] --type email

🌐 Domain Intelligence

Analyze a domain's footprint, records, and subdomains.

heartbleed domain scan example.com

📄 Professional Export

Generate a PDF report for your investigation.

# Export existing investigation ID 1 to PDF
heartbleed report 1 --format pdf

🕸️ Multi-Target Workspaces

# Create a workspace and add targets to it
heartbleed workspace create "Case 001"
heartbleed scan alias_1 --workspace 1 --mutate
heartbleed workspace report 1

🛡️ Security & Ethics

HeartBleed is an OSINT tool. It must never be used for unauthorized access or stalking. All information collected originates from publicly accessible sources. Users are responsible for complying with local laws and the terms of service of the platforms being scanned.

🗺️ Roadmap

• Support for Reddit, X, and Instagram.
• Graph-based visualization of correlations.
• Multi-target workspace mapping.
• Username mutation engine.
• Local bio persona profiling.
• Email-to-Account discovery (v0.3).
• Domain-specific intelligence modules (v0.3).
• Export to PDF report (v0.3).
• Automated image reverse-search links.
• Dark web forum search modules.