Harpoon is a command line tool designed to assist with open source intelligence (OSINT) and threat intelligence investigations. It helps security professionals and researchers collect and analyze publicly available information from a wide range of online sources. Harpoon is written in Python and organized around a modular plugin system, where each plugin is responsible for querying a specific platform, API, or intelligence service. This design allows users to automate many reconnaissance and intelligence gathering tasks directly from the terminal. Harpoon integrates with numerous security and data services such as Shodan, VirusTotal, AlienVault OTX, and many other intelligence providers to retrieve information about domains, IP addresses, emails, and other indicators. Many commands rely on API keys that can be configured through a central configuration file, allowing users to connect their own intelligence accounts and data sources.
Features
- Plugin-based architecture that allows new intelligence sources to be added easily
- Command line interface for automating OSINT and threat intelligence queries
- Domain and IP intelligence gathering including DNS and geolocation data
- Integration with multiple security platforms such as Shodan, VirusTotal, and GreyNoise
- Ability to query email addresses, phone numbers, and other indicators
- Support for numerous threat intelligence databases and APIs including OTX and ThreatMiner