ThreatNova Tools Engine — a free, real-time, terminal-based suite of 13 network reconnaissance, DNS, IP geolocation, and web security tools powered by ThreatNova Security.
Project description
ThreatNova Tools Engine (tnte)
████████╗ ██████╗ ███████╗████████╗ ██████╗
╚══██╔══╝██╔═══██╗██╔════╝╚══██╔══╝██╔═══██╗
██║ ██║ ██║███████╗ ██║ ██║ ██║
██║ ██║ ██║╚════██║ ██║ ██║ ██║
╚═╝ ╚██████╔╝███████║ ╚═╝ ╚██████╔╝
╚═════╝ ╚══════╝ ╚═════╝
T H R E A T N O V A S E C U R I T Y
Train Smart. Think Secure. Act ThreatNova.
A free, real-time, terminal-based suite of 13 network reconnaissance, DNS, IP geolocation, and web security tools.
🛡️ About ThreatNova Security
ThreatNova Security is a cybersecurity intelligence company founded in 2025 with a singular mission:
To democratize cybersecurity intelligence — giving every defender, sysadmin, and OSINT researcher free, real-time access to the tools that keep the internet safer.
ThreatNova Tools Engine is the flagship product of ThreatNova Security — a polished, privacy-first, free reconnaissance suite available as both a web app and this Python CLI package (tnte). Built on top of trusted upstream network intelligence providers, every query runs live the instant you submit it. No stale caches, no accounts, no tracking, no friction.
Core Values
| Principle | Commitment |
|---|---|
| Privacy-First | Your queries never leave your terminal. No accounts, no tracking, no telemetry. |
| Open & Free | 13 core tools are 100% free, forever. No paywalls, no signup. |
| Real-Time | Every result is fetched live the instant you submit — no stale caches, no approximation. |
| Authoritative | Backed by upstream network intelligence providers trusted by the global security community. |
Product Line
| Product | Description |
|---|---|
| ThreatNova Tools Engine | Free web + CLI reconnaissance suite (this package) |
| ThreatNova Recon API | Programmatic access for security automation pipelines |
| ThreatNova Watchtower | Continuous asset monitoring & alerting (coming soon) |
📦 Installation
From PyPI (recommended)
pip install tnte
From source / local wheel
# Build & install from the source distribution
pip install tnte-1.0.0.zip
# Or after extracting:
cd tnte-1.0.0
pip install .
Requirements
- Python 3.8+ (tested on 3.8, 3.9, 3.10, 3.11, 3.12, 3.13)
requests>=2.28.0rich>=13.0.0
Dependencies are installed automatically by pip.
🚀 Quick Start
After installation, the tnte command is available globally:
tnte
You'll see the animated ThreatNova Security splash screen, then a numbered menu of all 13 tools. Pick a number, enter your target, and get live results rendered in beautiful structured format.
You can also run it as a module:
python -m tnte
🧰 The 13 Tools
Every tool below runs live against trusted upstream APIs the instant you submit a query. No caching, no stale data.
🔵 DNS Queries
| # | Tool | Slug | Description | Input |
|---|---|---|---|---|
| 1 | 🌐 DNS Lookup | dns-lookup |
Resolve A, AAAA, MX, NS, TXT, SOA records for any domain | Domain name |
| 2 | 🔄 Reverse DNS | reverse-dns |
Resolve an IP address back to its registered hostname (PTR record) | IP address |
| 3 | 🔍 Subdomain Finder | host-search |
Discover host records (subdomains) that share a domain | Domain name |
| 4 | 🔗 Find Shared DNS | find-shared-dns |
Find other domains that share a given nameserver | Nameserver hostname |
| 5 | 🛡️ Zone Transfer | zone-transfer |
Test whether a domain allows an AXFR zone transfer (a serious misconfiguration) | Domain name |
🟢 IP Address
| # | Tool | Slug | Description | Input |
|---|---|---|---|---|
| 6 | 📍 IP Geolocation | geoip |
Resolve an IP/domain to country, region, city, coordinates, ASN, ISP, timezone, and flag (uses ipwho.is for accuracy) | IP or domain |
| 7 | 🖥️ Reverse IP Lookup | reverse-ip |
Find all hostnames hosted on a given IP address (shared hosting discovery) | IP or domain |
| 8 | 🧮 Subnet Calculator | subnet-calc |
Calculate network, broadcast, netmask, and host range for a CIDR block | CIDR block |
| 9 | 🌍 ASN Lookup | aslookup |
Look up an Autonomous System Number to reveal its owner and announced prefixes | ASN (e.g. AS15169) |
| 10 | 📡 Banner Grabbing | banner-grab |
Grab service banners, TLS certificate CN/SANs, and server headers from a host | IP or domain |
🟣 Web Tools
| # | Tool | Slug | Description | Input |
|---|---|---|---|---|
| 11 | 📋 HTTP Headers | http-headers |
Inspect the full set of HTTP response headers returned by a URL | URL or domain |
| 12 | 📑 Extract Page Links | page-links |
Pull every hyperlink out of a web page's HTML | URL or domain |
🟡 Utilities
| # | Tool | Slug | Description | Input |
|---|---|---|---|---|
| 13 | 🔑 My IP Address | my-ip |
Quickly find out what your current public IP address is | None |
💻 All Commands & Usage in Detail
Interactive Mode (default)
Simply run:
tnte
You'll be presented with:
- Animated splash screen — ThreatNova Security logo reveal, mission, core values, product line, and property notice.
- Main menu — a numbered list of all 13 tools grouped by category, plus meta-options.
- Tool selection — type a number
1–13to launch that tool. - Target prompt — enter the IP/domain/CIDR/ASN/URL the tool needs (with live validation and example hints).
- Animated launch — a brief "Launching..." sequence.
- Result — rendered in beautiful structured format (KV table, sortable table, links list, JSON panel, or rich geolocation card with flag + Google Maps link).
- What next? — choose
[r]re-run same tool,[m]back to menu,[q]quit.
Meta Options (from the main menu)
| Key | Action |
|---|---|
a |
Display the full About ThreatNova Security panel (mission, values, product line, property notice). |
k |
Set a premium API key (password-masked). Stored only for the current session. Unlocks Whois, Nmap, Traceroute, and Ping. |
q |
Quit ThreatNova Tools Engine. |
In-Tool Prompt Shortcuts
When prompted for a target input, you can type:
| Shortcut | Action |
|---|---|
back / b / menu / m |
Cancel the current tool and return to the main menu. |
Post-Scan Options
After every scan completes, you'll be asked What next? [r/m/q]:
| Key | Action |
|---|---|
r |
Re-run the same tool (you'll be prompted for a new target). |
m |
Return to the main menu (default). |
q |
Quit ThreatNova Tools Engine. |
Environment Variables
| Variable | Purpose |
|---|---|
TNTE_API_KEY |
Optional. Premium API key for unlocking paid-only tools (Whois, Nmap, Traceroute, Ping). Loaded automatically at startup. |
Example:
export TNTE_API_KEY="your_premium_key_here"
tnte
Example Sessions
DNS Lookup for cloudflare.com:
> Your choice: 1
> Enter Domain name (e.g. google.com) (): cloudflare.com
🌐 Launching DNS Lookup on cloudflare.com....
🌐 DNS Lookup · cloudflare.com · 886ms
┏━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ Field ┃ Value ┃
┡━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┩
│ A │ 104.16.132.229 │
│ AAAA │ 2606:4700:10::6814:84e5 │
│ MX │ 5 mxb-canary.cloudflare.net. │
│ NS │ ns1.cloudflare.com. │
│ TXT │ v=spf1 include:_spf.mx.cloudflare ~all │
└──────────┴───────────────────────────────────┘
✓ Scan completed successfully in 886ms
> What next? [r/m/q] (m):
IP Geolocation for 8.8.8.8:
> Your choice: 6
> Enter IP address or domain (e.g. 8.8.8.8) (): 8.8.8.8
📍 IP Geolocation · 8.8.8.8 · 82ms
┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ 🇺🇸 San Jose, California, United States ┃
┃ (US) · Target IP: 8.8.8.8 ┃
┃ 📍 37.3361663, -121.8905913 ┃
┃ 🗺️ https://www.google.com/maps?q=37.3361,-121.8905 ┃
┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛
Geolocation Details
┏━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ Field ┃ Value ┃
┡━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━━━┩
│ IP Address │ 8.8.8.8 │
│ Country │ United States (US) │
│ Region │ California │
│ City │ San Jose │
│ Postal Code │ 95113 │
│ Latitude │ 37.3361663 │
│ Longitude │ -121.8905913 │
│ ASN │ 15169 │
│ Organization │ Google LLC │
│ ISP │ Google LLC │
│ Timezone │ America/Los_Angeles │
│ UTC Offset │ -07:00 │
│ DST Active │ Yes │
│ Calling Code │ +1 │
│ Capital │ Washington D.C. │
│ Flag Image │ 🇮🇳 │
└─────────────────┴─────────────────────────────┘
Subdomain Finder for github.com: returns a sortable table of every discovered subdomain + its IP address.
Banner Grabbing for 8.8.8.8: returns a beautifully formatted JSON panel with TLS certificate CN, SANs, server header, redirect target, and detected apps.
Subnet Calculator for 10.0.0.0/16: returns network address, broadcast, netmask, wildcard mask, host range, host count, IP class, CIDR notation, IP version, and private-range flag.
⌨️ Using tnte as a Python Library
After pip install tnte, you can also use the package programmatically:
from tnte import main
# Launch the interactive CLI
raise SystemExit(main())
Or invoke individual tool runs:
from tnte.cli import run_tool, TOOLS_BY_ID, validate_input
tool = TOOLS_BY_ID[1] # DNS Lookup
ok, result, elapsed, needs_key = run_tool(tool, "cloudflare.com")
if ok:
print(f"Got result in {elapsed*1000:.0f}ms")
print(result)
🎯 Use Cases
For Security Engineers & Penetration Testers
- Reconnaissance phase: enumerate subdomains, identify shared hosting, fingerprint services via banner grabbing.
- Attack surface discovery: find every hostname resolving to a target IP, then pivot via shared DNS infrastructure.
- DNS hygiene audits: test for dangerous zone transfer (AXFR) misconfigurations on your own domains.
For System Administrators
- DNS troubleshooting: instantly resolve A, AAAA, MX, NS, TXT, and SOA records for any domain.
- Reverse DNS verification: confirm PTR records are correctly configured for your mail servers.
- Subnet planning: calculate network ranges, broadcast addresses, and host counts for any CIDR block.
- IP geolocation: identify the geographic origin of suspicious traffic in your logs.
For OSINT Researchers & Bug Bounty Hunters
- Subdomain enumeration: discover forgotten or staging subdomains of your target.
- Shared infrastructure mapping: find other domains hosted on the same IP or sharing nameservers.
- ASN reconnaissance: pivot from an IP to its autonomous system, then enumerate all announced prefixes.
- HTTP security audit: inspect response headers (CSP, HSTS, X-Frame-Options) on any URL.
For Developers & SREs
- HTTP header inspection: verify security headers on your deployments.
- Page link extraction: crawl seed URLs for SEO auditing or sitemap generation.
- CI/CD integration: pipe
tnteoutput into your security pipelines (e.g. fail builds if HTTP headers are missing).
For Students & Educators
- Hands-on DNS learning: see real A, MX, NS, TXT records in real time.
- Network fundamentals: explore CIDR math, ASN routing, and reverse DNS in a clean interface.
- Cybersecurity curriculum: ideal for classroom demonstrations of reconnaissance techniques.
🔒 Privacy & Data Handling
- No accounts, no signup, no tracking.
- No telemetry. We don't collect usage statistics.
- Your queries never leave your terminal — they're sent directly from your machine to the upstream API.
- API keys are stored only in memory for the duration of your session (or in the
TNTE_API_KEYenv var that you control). - No persistent logs. Close the terminal, your session is gone.
⚖️ Acceptable Use Policy
ThreatNova Tools Engine is provided for legitimate security research, OSINT, and authorized network administration only. You are responsible for complying with all applicable laws and the terms of service of any underlying data providers.
Do not use these tools against systems you do not own or do not have explicit permission to test.
📄 License
Proprietary — Property of ThreatNova Security.
ThreatNova Tools Engine is the sole property of ThreatNova Security. Unauthorized redistribution, rebranding, or commercial resale of this product or its source code is strictly prohibited. End users may install and use the package freely for personal and internal business purposes.
🏢 About This Package
| Field | Value |
|---|---|
| Package name | tnte |
| Version | 1.0.0 |
| Author | ThreatNova Security |
| Author email | contact@threatnova.security |
| Homepage | https://threatnovasecurity.com |
| Documentation | https://threatnovasecurity.com |
| Repository | https://threatnovasecurity.com |
| Bug tracker | https://threatnovasecurity.com |
| Python support | 3.8, 3.9, 3.10, 3.11, 3.12, 3.13 |
| License | Proprietary |
| Status | Production/Stable |
🔍 SEO Keywords
ThreatNova Tools Engine (tnte) — free network reconnaissance tools, DNS lookup, reverse DNS, IP geolocation, WHOIS lookup, reverse IP lookup, subdomain finder, subdomain discovery, zone transfer test, HTTP headers inspector, extract page links, subnet calculator, ASN lookup, banner grabbing, security CLI, terminal security tools, OSINT tools, ethical hacking tools, penetration testing tools, bug bounty reconnaissance, network intelligence, threat intelligence, infosec tools, blue team tools, red team reconnaissance, attack surface discovery, free security tools, cybersecurity CLI, Python security package, pip install tnte, ThreatNova Security.
© 2026 ThreatNova Security. All rights reserved.
Train Smart. Think Secure. Act ThreatNova.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file tnte-1.0.0.tar.gz.
File metadata
- Download URL: tnte-1.0.0.tar.gz
- Upload date:
- Size: 28.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.14.6
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
bd896bc45342ea6a0e1d54e0aa12d7fa912c85e950d8d8bb3bff35187a44e53d
|
|
| MD5 |
4a9678fd29fd13b8d1a79dca9ba78426
|
|
| BLAKE2b-256 |
a9e89230fec1c7b3b15b344ae0752ed4ab61815ff78ad43d3c847c58c6848513
|
File details
Details for the file tnte-1.0.0-py3-none-any.whl.
File metadata
- Download URL: tnte-1.0.0-py3-none-any.whl
- Upload date:
- Size: 21.0 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.14.6
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
8e1a4f5396aaef34c53e08ed5ef083f56960f1584257e2ff6dd0f3a97de3a4db
|
|
| MD5 |
35f81e61c62a864ea5dcb78ed03fcb79
|
|
| BLAKE2b-256 |
dcdfa5dec13d5757d105d9f09c1a48dea587793b2a123543ad2e42b40eccddec
|