profiles.json

{
    "fast": {
        "description": "Quick scan — fastest no-auth sources only",
        "sources": ["crtsh", "certspotter", "hackertarget", "rapiddns", "jldc", "alienvault", "anubisdb", "subdomaincenter", "urlhaus", "circl", "bing"],
        "options": {}
    },
    "stealth": {
        "description": "Minimal footprint — passive only, rate-limited to avoid detection",
        "sources": ["crtsh", "certspotter", "wayback", "commoncrawl", "robtex", "anubisdb"],
        "options": {"rate_limit": 2}
    },
    "osint": {
        "description": "OSINT-focused — code repos, threat intel, CT logs, and asset databases",
        "sources": [
            "crtsh", "certspotter", "alienvault", "virustotal", "shodan",
            "github", "grep_app",
            "threatminer", "anubisdb", "subdomaincenter",
            "hackertarget", "rapiddns", "urlscan",
            "bevigil", "hunterhow", "urlhaus", "circl", "bing"
        ],
        "options": {}
    },
    "code": {
        "description": "Code search only — GitHub, grep.app",
        "sources": ["github", "grep_app"],
        "options": {}
    },
    "active": {
        "description": "Active techniques only — DNS mining, zone transfer, SRV, HTML/JS crawler, PTR sweep, vhost probing, robots/sitemap, CAA mining, NS brute-force, ASN sweep",
        "sources": ["zone_transfer", "ns_brute", "dns_mining", "caa_enum", "nsec_walk", "srv_enum", "spider", "robots_sitemap", "ptr_sweep", "asn_sweep", "vhost_probe"],
        "options": {}
    },
    "full": {
        "description": "All available passive and active sources",
        "sources": "all",
        "options": {}
    }
}