做安全的朋友前两天差点被对手扒了个底朝天，他看完这套东西才明白：防人和被人防，用的居然是同一批工具。
This is a dev post classified by AGK Intelligence as Security (a list of tools), kept by the Dev Radar because it carries real work, not commentary.
做安全的朋友前两天差点被对手扒了个底朝天，他看完这套东西才明白：防人和被人防，用的居然是同一批工具。 网警平时查人用的五个开源神器，全免费，查人、查公司、查设备，能想到的场景基本都包圆了。 但话得说前头，我不是教你扒谁，是让你先拿它照照自己。连自己漏了多少都不知道，谈什么防。 五个工具各干各的，别搅在一起用，地址和用途我挨个摆清楚： 1️⃣ Blackbird，6300 Star，用户名和邮箱都能查，接了600多个平台。查完还能白嫖AI整一份人物画像，PDF直接导出。新手别贪，先拿这个练手，最省事。 🔗 https://github.com/antoniaci/blackbird 2️⃣ Maigret，33000 Star，专盯用户名查人的狠货，覆盖3000多个平台。它毒在会递归追踪，比如发现你在别的平台还挂着个小号，就顺着这个小号继续往下刨，一路刨到底。这玩意儿真能把你挖穿。 🔗 https://github.com/soxoj/maigret 3️⃣ SpiderFoot，18000 Star，这就是门重炮，手机号、邮箱、域名、IP全吃。200多个模块同时开火，能查数据泄露、暗网、子域名，最后还甩给你一张可视化关系图，谁跟谁有关系一眼看穿。 🔗 https://github.com/smicallef/spiderfoot 4️⃣ theHarvester，1650
Posted by lumxss (33k followers) 1 h ago · 2 likes · 364 views · view the original post on X. Kept by the Dev Radar as Security. Tools mentioned: blackbird, maigret, spiderfoot, theharvester, shodan-python.
More dev work like this
- stay up to date on security vulnerabilities everyday thanks to Grok Bot — @kr0der
- Most Reverse Engineer bots burn tokens decompiling everything first. — @PixelRainbowNFT
- A full open-source working collection of jailbreak — @0x0SojalSec
- Last Wednesday, Railway said hackers may have obtained decrypted API keys, database… — @every
- #PHP2Shell. The #LiteLLM supply chain compromise. #Brotli2Shell. — @jfrog
- gpt-oss-20b, thinking: "We have token. Avoid sharing, but we can pass it in the command." — @witcheer
- CVE-2024-21413: MonikerLink Outlook Vulnerability PoC — @DarkWebInformer
- CrowdStrike President Michael Sentonas joined Sascha Roehrer on deeptech INSIGHTS to… — @CrowdStrike
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.2k posts from 5k X accounts over the last 21 days, 8.8k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-10-31 01:16 UTC. Full method.