Laufeyson is made as a experimental project by me to understand various ways a domain's fingerprint can be collected from various sources from the internet. Now since I have graduated, I have open source-ed it :D
- Directory hunting by discovering sitemap or robots.txt
- Content Management System Detection for more specific subdirectory hunting.
- Domain Registrar detection with date of expiry and date of creation
- DNS Record digging
- ReverseIP
- Geolocating servers using domain or IP
- Mail server validity - useful while investigating phishing links
- Wayback Machine to look previous look on IP or domain
- Screenshot of domain without visiting (using manual set useragent)
- Subdomain hunting using bruteforce on wordlists and 3rd party
- Usage of config.json to automate report creation
- archive.org
- mailcheck.com
- dns-lookup.com
- ip-api.com
- norton.com
- w3techs.com
- who.is
If you wish to contribute, checkout CONTRIBUTE.md