name: spiderfoot
category: recon
description: OSINT automation tool for threat intelligence gathering.
keywords:
  - osint
  - intelligence
  - automated
  - reconnaissance
  - footprint

parameters:
  target:
    type: string
    flag: "-s"
    description: Target to scan

  modules:
    type: string
    flag: "-m"
    description: "Modules to run (comma-separated)"

  types:
    type: string
    flag: "-t"
    description: "Data types to collect"

  output:
    type: string
    flag: "-o"
    description: "Output format (csv, json, etc.)"

  file:
    type: string
    flag: "-f"
    description: Output file

  quiet:
    type: boolean
    flag: "-q"
    description: Quiet mode

  max_threads:
    type: integer
    flag: "-max-threads"
    description: Maximum threads

  web:
    type: boolean
    flag: "-l"
    description: Start web interface

  port:
    type: integer
    description: Web interface port

requires_root: false
timeout: 0
interactive: true

examples:
  - "spiderfoot -l 127.0.0.1:5001"
  - "spiderfoot -s target.com -o csv -f results.csv"
  - "spiderfoot -s target.com -m sfp_dnsresolve,sfp_whois"
  - "spiderfoot -s target.com -t EMAILADDR,PHONE_NUMBER"

notes: |
  Web interface:
  - Start with -l flag
  - Access via browser
  - Configure scans visually

  Module categories:
  - DNS/Domain
  - Email
  - Social media
  - Threat intel
  - Dark web
  - And many more

  Data types:
  - EMAILADDR
  - PHONE_NUMBER
  - SOCIAL_MEDIA
  - IP_ADDRESS
  - DOMAIN_NAME
  - And many more

  API keys:
  Configure in web interface for:
  - Shodan, VirusTotal
  - Have I Been Pwned
  - And many more