OSINT and threat intelligence CLI tool for querying many external sources from one command line
- Stars1.3k
- Forks178
- Open Issues76
GPL-3.0
- Python
- Makefile

About Harpoon
Harpoon is a command-line tool for OSINT and threat intelligence. It lets investigators pull data from many sources through a single CLI instead of hopping between websites and separate API consoles.
Each external service gets its own subcommand with built-in help, covering platforms such as Shodan, VirusTotal, Censys, GreyNoise, UrlScan, and AlienVault OTX. Geolocation lookups run locally through a GeoIP database, while the rest of the lookups query the providers' APIs.
It is a client for external intelligence services rather than a data store of its own, so what you can retrieve depends on the providers and API keys you configure. It runs locally on any machine with Python and is released under GPLv3.
Key features
- Unified CLI over many OSINT and threat-intel services
- Per-service subcommands with built-in help
- API lookups for Shodan, VirusTotal, Censys, and more
- Local GeoIP geolocation lookups
Details
- First released
- 2017
- Platforms
- CLI
- Deployment
- self-hostable
- License
- GPLv3
- Language
- Python
- Sources
- Shodan · VirusTotal · Censys · OTX