A Firefox add-on for OSINT investigations
FoxyRecon Extension
FoxyRecon is a Firefox add-on that helps you carry out searching and investigation activities by using over 90 Open Source Intelligence (OSINT) web resources and an internal tool to create graphs supporting the STIX format.
Main Features
- You can research and analyse your indicators on more than 90 online OSINT resources, by using the popup or the context menu after selecting your indicator. FoxyRecon will detect the type of the indicator you submitted and suggest you the most suitable web resources.
- You can harvest and collect all the indicators that are present on the web page you are visiting. FoxyRecon allows you also to download them in CSV file for future analysis.
- You can add custom resources to FoxyRecon, for example local tools (e.g.: MISP, OpenCTI and so on)
- You can create a graph from the data collected during your investigation analysis. Graphs are based on STIX format to ensure compatibility with other tools. Moreover, FoxyRecon is able to automatically create graphs on the basis of searches you perform via FoxyRecon
Some web tools requires some user interactions, such as entering a query and clicking a button to submit it. To perform these actions faster, FoxyRecon will automatically fill input fields on these web pages, with the indicator you are looking for.
Currently, FoxyRecon supports the following indicator types:
- Domains
- IPv4 addresses
- URLs
- Hashes
- Email addresses
- CVEs
- Phone Numbers
- Autonomous System numbers
FoxyRecon includes several OSINT web resources. The full list is available on the GitHub repository webpage.
Disclaimer
Data submitted using this add-on will be sent to external web resources that are not under control of FoxyRecon. For this reason the data submitted will be treated in accordance with the terms of service of the several web resources chosen for analysis. Please, be aware of the tools and resources you are using and do not submit any personal information.
Read more
Main Features
- You can research and analyse your indicators on more than 90 online OSINT resources, by using the popup or the context menu after selecting your indicator. FoxyRecon will detect the type of the indicator you submitted and suggest you the most suitable web resources.
- You can harvest and collect all the indicators that are present on the web page you are visiting. FoxyRecon allows you also to download them in CSV file for future analysis.
- You can add custom resources to FoxyRecon, for example local tools (e.g.: MISP, OpenCTI and so on)
- You can create a graph from the data collected during your investigation analysis. Graphs are based on STIX format to ensure compatibility with other tools. Moreover, FoxyRecon is able to automatically create graphs on the basis of searches you perform via FoxyRecon
Some web tools requires some user interactions, such as entering a query and clicking a button to submit it. To perform these actions faster, FoxyRecon will automatically fill input fields on these web pages, with the indicator you are looking for.
Currently, FoxyRecon supports the following indicator types:
- Domains
- IPv4 addresses
- URLs
- Hashes
- Email addresses
- CVEs
- Phone Numbers
- Autonomous System numbers
FoxyRecon includes several OSINT web resources. The full list is available on the GitHub repository webpage.
Disclaimer
Data submitted using this add-on will be sent to external web resources that are not under control of FoxyRecon. For this reason the data submitted will be treated in accordance with the terms of service of the several web resources chosen for analysis. Please, be aware of the tools and resources you are using and do not submit any personal information.
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx",\t"manifest_version": 3,\t"name": "FoxyRecon",\t"version": "0.23.0",\t"description": "A Firefox add-on for OSINT investigations",\t"icons": {\t\t"16": "assets/icons/foxyrecon-icon-16.png",\t\t"48": "assets/icons/foxyrecon-icon-48.png"\t}, "content_security_policy": { "extension_pages": "default-src 'self'; img-src 'self' data:; script-src 'self'; style-src 'self'" }, "background": { "service_worker": "src/background.js", "type": "classic" }, "content_scripts": [{ "matches": ["*://*/*"], "js": [ "src/utils/indicatorparser.js", "src/utils/utils.js", "src/utils/graph.js", "src/content_scripts/graph.js", "src/content_scripts/add_node_popup.js", "src/content_scripts/catch.js", "src/content_scripts/message-box.js", "src/content_scripts/autofill.js" ], "css": [ "src/content_scripts/css/addnode-popup.css", "src/content_scripts/css/message-box.css" ] }], "web_accessible_resources": [ { "resources": [ "assets/icons/foxyrecon-icon-32.png", "src/json/tools.json" ], "matches": ["*://*/*"] } ],\t"permissions": [\t\t"contextMenus", "storage"\t],\t"action": { "default_icon": "assets/icons/foxyrecon-icon-48.png", "default_title": "FoxyRecon", "default_popup": "src/popup/main_popup.html"\t}}
Read more