infradetective 0.1.0

Map the complete cloud footprint of any domain — provider fingerprinting, subdomain discovery, dangling CNAME detection, tech stack analysis, and visual infrastructure diagrams.

🕵️‍♂️ InfraDetective

InfraDetective is a powerful infrastructure intelligence tool designed to map the cloud footprint, security posture, and tech stack of any domain or IP. It combines DNS analysis, fingerprinting, OSINT, and security auditing into a single, high-speed terminal dashboard.

---

🚀 Key Features

🔍 Infrastructure Mapping

• Provider Fingerprinting: Detect hosting providers (AWS, Google, Hostinger, etc.) and CDN presence (Cloudflare, Akamai).
• IP-to-ASN Matching: Fast lookup of network ownership and geography.
• Port Scanner: Detect exposed services (SSH, Redis, MySQL, Postgres) with banner grabbing.

🛡️ Security & OSINT

• Dangling CNAME Detection: Find potential Subdomain Takeover vulnerabilities.
• Phishing & Typosquatting: Hunt for lookalike domains used for brand attacks.
• Code Footprint (OSINT): Find GitHub repositories and leaked dev files (/.env, composer.json).

⚡ Intelligence & Scoring

• Modernity Score: Evaluates tech stack, security headers, and protocol versions.
• GreenStack Score: Estimates carbon intensity based on hosting provider.
• AI-Ready Audit: Checks if the site is optimized for AI agents and LLM scraping.

---

📦 Installation

pip install infradetective

Note: For the caching layer, a running Redis instance is recommended but not required.

---

🛠 Usage

1. Deep Domain Scan

Run a full investigation on any domain:

infradetective scan example.com

2. Hunting for Phishing Clones

Find lookalike domains used for phishing:

infradetective phish example.com

3. Code Footprint Analysis

Find source code links and exposed metadata:

infradetective osint example.com

4. Visual Infrastructure Map

Generate a Mermaid.js diagram of the infrastructure:

infradetective scan example.com --output mermaid

---

🏗 Architecture

InfraDetective is built with a modular "Detective" architecture:

• core/: Individual intelligence modules (DNS, Fingerprint, OSINT, etc.)
• output/: Presentation layers (Rich Terminal, Mermaid.js, JSON)
• cache/: Graceful Redis caching layer

---

📜 License

Distributed under the MIT License. See LICENSE for more information.

---

Built with ❤️ for the DevOps & Security Community.