Need help with contact.sh?
Click the “chat” button below for chat support from the developer who created it, or find similar developers for support.

About the developer

EdOverflow
222 Stars 45 Forks MIT License 48 Commits 1 Opened issues

Description

An OSINT tool to find contacts in order to report security vulnerabilities.

Services available

!
?

Need anything else?

Contributors list

# 4,128
HTML
Shell
angular...
ruby-on...
32 commits
# 266,198
informa...
golang
Shell
curl
3 commits
# 274,059
Shell
Python
redteam...
slack
2 commits
# 584,443
Shell
Securit...
1 commit

contact.sh

An OSINT tool to find contacts in order to report security vulnerabilities.

image

Buy Me A Coffee

Installation

🐧 GNU/Linux

Make sure you have installed the

whois
and
jq
packages.
$ git clone https://github.com/EdOverflow/contact.sh.git
$ cd contact.sh/
$ chmod u+x contact.sh
$ ./contact.sh -d google.com -c google

🍎 OSX

$ brew install gnu-sed --with-default-names
$ brew install jq
$ git clone https://github.com/EdOverflow/contact.sh.git
$ cd contact.sh/
$ chmod u+x contact.sh
$ ./contact.sh -d google.com -c google

Usage

$ ./contact.sh


_ _ __ | _ _ | _ |_ (_ ()| | |(|( |_ o _> | | --- by EdOverflow

[i] Description: An OSINT tool to find contacts in order to report security vulnerabilities. [i] Usage: ./contact.sh [Options] use -d for hostnames (-d example.com), -c for vendor name (-c example), and -f for a list of hostnames in a file (-f domains.txt) [i] Example: ./contact.sh -d google.com -c google

Use the

-d
flag when trying to find addresses linked to a domain. contact.sh will return a "Confidence level" based on the source of the information retrieved. A security.txt file located on the domain will have a higher priority than a Twitter account on the company's website.
$ ./contact.sh -d google.com

The

-c
flag allows you to specify the company's name.
$ ./contact.sh -c google

If the company's name contains spaces, make sure to place the name inside quotes.

$ ./contact.sh -c "keeper security"

You can check a list of domains using the

-f
flag.
$ ./contact.sh -f domains.txt

For the best results, combine both flags as follows:

$ ./contact.sh -d google.com -c google

contact.sh abides by the target's robots.txt file.

$ ./contact.sh -d linkedin.com


_ _ __ | _ _ | _ |_ (_ ()| | |(|( |_ o _> | | --- by EdOverflow

[+] Finding security.txt files | Confidence level: ★ ★ ★ [!] The robots.txt file does not permit crawling this hostname.

[+] Checking HackerOne's directory for hostname | Confidence level: ★ ★ ★ https://hackerone.com/linkedin

Contributing

I welcome contributions from the public.

Using the issue tracker 💡

The issue tracker is the preferred channel for bug reports and features requests.

Issues and labels 🏷

The bug tracker utilizes several labels to help organize and identify issues.

Guidelines for bug reports 🐛

Use the GitHub issue search — check if the issue has already been reported.

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.