Scanning // stack & tooling
Things I've shipped
An interactive subdomain reconnaissance toolkit — combines certificate transparency log lookups, threaded DNS brute-forcing with custom wordlist support, and HTTP status probing, all behind a clean Rich-powered CLI menu.
git clone https://github.com/himanshurwtt/SubDomain.git cd SubDomain pip install -r requirements.txt# run it
python subdomain.py
# then choose a scan mode from the menu:
1. Full scan (CT logs + brute-force + HTTP probe) 2. CT logs only 3. DNS brute-force only 4. View last saved results 5. About 6. Check for updates
A terminal-themed OSINT Discord bot — every command renders like a live shell session using Discord's ANSI code blocks (green prompts, colored status tags). 27+ commands across 10 modules: domain/IP recon (WHOIS, DNS, CT logs, subdomain discovery, tech-stack fingerprinting, typosquat detection, real ICMP ping), username & social scanning across 12+10 platforms, email/breach checks, image EXIF & reverse search, threat intel (AbuseIPDB, VirusTotal, Shodan favicon pivoting), Wayback/paste-dump lookups, and BTC/ETH wallet balance checks — plus an interactive `.help` panel and a "did you mean?" error system.
git clone https://github.com/himanshurwtt/osint-bot.git cd osint-bot pip install -r requirements.txt# configure .env
cp .env.example .env
DISCORD_TOKEN=your_bot_token_here
OWNER_ID=your_discord_user_id
# enable Message Content + Server Members intents
# in the Discord Developer Portal, then run:
python bash.py
# try a command in Discord, e.g.
.whois example.com .subdomains example.com .help
Currently building out more tooling around recon automation and general dev projects — this section gets a new entry every time something ships.
Resume
Full experience, background, and history — coming soon. Reach out directly in the meantime for a walkthrough.
⚠ resume not uploaded yet — check back soon