[whoispatch]

telegram OSINT & Security Testing Bot

Hello,

this is a Telegram bot I made for myself to do OSINT and security testing, but maybe others will find it useful too.

I was tired of using many different tools for basic security work, so I made one bot that includes all the commands I use every day. It's not perfect, but it works well.

command List

➤ Network Commands

• ipinfo - Get information about an IP address (location, ISP, etc)
  


• ping - Check if a host is online and response time
  


• portscan - Scan a single port
  


• portrange - Scan multiple ports at once
  


• dnsenum - Get DNS records from a domain
  


• udpscan - Scan UDP ports (slower)
  

➤ Web Security Commands

• webscan - Scan website for vulnerabilities (SQLi, XSS, LFI, etc)
  


• bruteforce - Try logging in with common passwords
  


• serverinfo - Detect web server and technologies
  


• emailharvest - Find email addresses from a site
  


• wafcheck - Detect if a site has a firewall
  


• sslcheck - Get SSL certificate details
  


• headers - Check security headers
  


• cmscheck - Detect CMS (WordPress, Drupal, etc)
  


• adminpanel - Search for admin login pages
  


• backups - Look for exposed backup files
  


• apifind - Discover API endpoints
  


• wpscan - Scan WordPress sites
  


• gitcheck - Detect exposed .git repos
  


• configs - Find exposed config files
  


• payload - Generate payloads for testing
  

➤ OSINT Commands

• subdomains - Find subdomains of a domain
  


• phoneinfo - Get info about a phone number
  


• usersearch - Search social media by username
  


• dorks - Generate Google dorks
  


• exif - Extract metadata from images
  


• linkcheck - Analyze suspicious URLs
  


• whois - Domain registration info
  


• dnsrecon - Deep DNS recon
  


• takeover - Check for subdomain takeover
  


• cloudassets - Search for cloud resources
  

➤ Dark Web / Crypto Commands

• torcheck - Check if an IP is a Tor exit node
  


• cryptogen - Generate crypto addresses
  


• emailheaders - Analyze email headers
  


• hashcrack - Crack hashes with wordlists
  


• cve - Search CVE vulnerability database
  


• shodan - Search Shodan (API key required)
  


• monitor - Monitor domain changes
  

➤ Utility Commands

• passgen - Generate random passwords
  


• wordlist - Create wordlists for bruteforce
  


• base64 - Encode/Decode Base64
  


• urlencode - Encode/Decode URL strings
  


• hex - Encode/Decode hex
  


• hash - Generate MD5, SHA1, SHA256 hashes
  


• youtube - Search YouTube
  


• google - Search Google
  


• crypto - Check crypto prices
  


• uuid - Generate random UUIDs
  

➤ Admin-Only Commands

• clear - Delete chat messages
  


• antispam - Enable/Disable spam protection
  


• ban - Ban user from bot
  


• unban - Unban user
  


• startgame - Start game
  


• stopgame - Stop game
  

➤ add Questions & Answers for Game
Open the file `questions.txt` and add entries like:

Code

4+4:8
question:answer
etc:etc

how to Install

What you need:

• Node.js installed on PC/VPS
  


• npm (Node package manager)
  

Installation:

Code

git clone https://github.com/Patchloop/ObuscatedBOT.git
cd ObfuscatedBOT

Install packages:

Code

npm install dotenv node-telegram-bot-api axios cheerio uuid qs util dns net crypto fs yt-search bitcoinjs-lib ecpair tiny-secp256k1 ethers mailparser node-exiftool dist-exiftool whois-json google-libphonenumber

Set up bot:

• Get your Telegram bot token from @BotFather
  


• Create a file named .env in the root folder:
  
  Code

  TELEGRAM_TOKEN=your_token_here


• Or edit index.js directly:
  
  Code

  const token = process.env.TELEGRAM_TOKEN || 'your_token_here';


• Set bot admins:
  Find this line:
  
  Code

  const admins = ['admin1','admin2'];
  Change to your Telegram usernames.
  

Run the bot:

Code

node index.js

some notes:

• some commands require API keys (e.g., Shodan)
  


• bot works better on Linux
  


• if a command fails, make sure all packages are installed
  


• for help, comment in thread or DM me
  

a disclaimer:
this tool is for educational and legal security testing only.
use it only on systems you own or have permission to test.
I am not responsible for any illegal use.

link: https://github.com/Patchloop/ObuscatedBOT

[Stanley]

I'm Stanley HF's helper bot. The OP (original poster) of this thread wants everyone to see this page and has elected to bump it to the top of the showthread listing. Since HF doesn't want a ton of LQP (Low Quality Posts) this is the best method of bumping your content. There is a small βyte fee for each bump. Any OP can bump any of their threads on HF from the linked icon on the top of their first post.

If you haven't already read the first post of this thread we encourage you to do so.

Thanks,
Stanley