estorides

(★ 94)

Open-source intelligence (OSINT) aggregator and correlation engine inspired by Palantir, Bellingcat, Maltego, and Citizen Lab workflows. A pure open-source re-imagining of the original fucklantir / osint_palantir toolchain, with a much bigger source catalogue, a proper knowledge graph, structured parsers, and a multi-backend LLM analyst.

Owner Repos

LazyOwn ★ 220

LazyOwn RedTeam/APT Framework is the first RedTeam Framework with an AI-powered C&C, featuring rootkits to conceal campaigns, undetectable malleable implants compatible with Windows/Linux/Mac OSX, and self-configuring backdoors. With its Web interface and powerful Console Client, it is the best combination for your Autonomous RedTeam/APT campaigns.

Python
LazyOwnInfiniteStorage ★ 30

LazyOwnInfiniteStorage es una herramienta para codificar y decodificar archivos en videos.

Python
FreeDom ★ 19

A free and open-source minimal web browser written in C, focused on Zero Trust and Zero Knowledge principles.

C
blacksandbeacon ★ 15

Black Sand Beacon — a lightweight, memory-resident micro beacon or implant for the LazyOwn RedTeam Framework — is the first offensive platform to deliver true native BOF (Beacon Object File) support for Linux. Inspired by the Windows-based Black Basalt Beacon, it enables red teams to write position-independent, fileless post-exploitation modules

C
beacon ★ 13

Experimental Lightweight Windows pure C Beacon CodeName: BlackBasalt for LazyOwn RedTeam Framework C2

C
QC ★ 13

Functional quasi-quantum computing simulator on classical hardware using physics models as a backend.

Python

File Explorer

ZIP Download
  • .env.example
  • .gitignore
  • _multi_test.sh
  • _test_entity_resolution.py
  • _test_fusion.py
  • _test_hardening.py
  • _test_passive.py
  • _test_people.py
  • _test_proxy.py
  • _test_scope.py
  • _validate.py
  • app.py
  • CHEATSHEET.md
  • CLAUDE.md
  • CODE_OF_CONDUCT.md
  • CONTRIBUTING.md
  • ESSENTIALS.md
  • estorides
  • estorides_cli.py
  • estorides_web.py
  • install.sh
  • KNOWLEDGE_BASE.md
  • LICENSE
  • pull_request_template.md
  • pyproject.toml
  • pytest.ini
  • README.md
  • requirements.txt
  • SECURITY.md
  • web.py
  • wsgi.py

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Link
Example

Command Glossary

Commands referenced in this DOCs, explained below.

🔍

age

View Details ▼

A simple, modern, and secure file encryption tool.
See also: `age-keygen`, `age-inspect`.

age {{[-p|--passphrase]}} {{[-o|--output]}} {{path/to/encrypted_file.age}} {{path/to/unencrypted_file}}

Generate an encrypted file that can be decrypted with a passphrase:

age {{[-r|--recipient]}} {{public_key}} {{[-o|--output]}} {{path/to/encrypted_file.age}} {{path/to/unencrypted_file}}

Encrypt a file with one or more public keys entered as literals (repeat the `--recipient` flag to specify multiple public keys):

age {{[-R|--recipients-file]}} {{path/to/recipients_file.txt}} {{[-o|--output]}} {{path/to/encrypted_file.age}} {{path/to/unencrypted_file}}

Encrypt a file to one or more recipients with their public keys specified in a file (one per line):

🔍

ollama

View Details ▼

A large language model runner.
For a list of available models, see <https://ollama.com/library>.

ollama serve

Start the daemon required to run other commands:

ollama run {{model}}

Run a model and chat with it (will automatically download the model if it's not downloaded):

ollama run {{model}} --think=false "{{prompt}}"

Run a model with a single prompt and thinking turned off:

🔍

pip install

View Details ▼

Install Python packages.

pip install {{package1 package2 ...}}

Install one or more packages:

pip install {{package1 package2 ...}} {{[-U|--upgrade]}}

Upgrade all specified packages to the latest version, installing any that are not already present:

pip install {{package}}=={{version}}

Install a specific version of a package:

🔍

python3

View Details ▼

This command is an alias of `python`.

tldr python

View documentation for the original command:

🔍

wafw00f

View Details ▼

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.

wafw00f {{https://www.example.com}}

Check if a website is using any WAF:

wafw00f {{[-a|--findall]}} {{https://www.example.com}}

Test for all detectable WAFs without stopping at the first match:

wafw00f {{[-p|--proxy]}} {{http://localhost:8080}} {{https://www.example.com}}

Pass requests through a proxy (such as BurpSuite):

🔍

dnsrecon

View Details ▼

DNS enumeration tool.

dnsrecon {{[-d|--domain]}} {{example.com}} --db {{path/to/database.sqlite}}

Scan a domain and save the results to an SQLite database:

dnsrecon {{[-d|--domain]}} {{example.com}} {{[-n|--name_server]}} {{nameserver.example.com}} {{[-t|--type]}} axfr

Scan a domain, specifying the nameserver and performing a zone transfer:

dnsrecon {{[-d|--domain]}} {{example.com}} {{[-D|--dictionary]}} {{path/to/dictionary.txt}} {{[-t|--type]}} brt

Scan a domain, using a brute-force attack and a dictionary of subdomains and hostnames:

🔍

run0

View Details ▼

Elevate privileges interactively.
Similar to `sudo`, but it's not a SUID binary, authentication takes place via polkit, and commands are invoked from a `systemd` service.
See also: `sudo`, `pkexec`, `doas`.

run0 {{command}}

Run a command as root:

run0 {{[-u|--user]}} {{username|uid}} {{[-g|--group]}} {{group_name|gid}} {{command}}

Run a command as another user and/or group:

🔍

query

View Details ▼

Display information about user sessions and process.

query session

Display all user sessions:

query session /server:{{hostname}}

Display the current user sessions on a remote computer:

query user

Display logged in users:

// repository documentation