Categories

An add-on for OSINT investigations

FoxyRecon is a Firefox add-on that helps you carry out searching and investigation activities by using over 90 Open Source Intelligence (OSINT) web resources and an internal tool to create graphs supporting the STIX format.

Main Features

• You can research and analyse your indicators on more than 90 online OSINT resources, by using the popup or the context menu after selecting your indicator. FoxyRecon will detect the type of the indicator you submitted and suggest you the most suitable web resources.
• You can harvest and collect all the indicators that are present on the web page you are visiting. FoxyRecon allows you also to download them in CSV file for future analysis.
• You can add custom resources to FoxyRecon, for example local tools (e.g.: MISP, OpenCTI and so on)
• You can create a graph from the data collected during your investigation analysis. Graphs are based on STIX format to ensure compatibility with other tools. Moreover, FoxyRecon is able to automatically create graphs on the basis of searches you perform via FoxyRecon

Usage
You can perform your researches through FoxyRecon in two ways:

1. Via popup: you can enter the indicator you want to analyze in the textfield located in the FoxyRecon popup. FoxyRecon will suggest you the most suitable web tools for your indicator.
2. Via context menu: on whatever website you are visiting, you can highlight the indicator you want to analyze and by right clicking on it you can choose one of the suggested tool in the FoxyRecon context menu. The indicator submitted will be saved as input in the text field of the popup in order to let you performing further investigations on it.

Some web tools requires some user interactions, such as entering a query and clicking a button to submit it. To perform these actions faster, FoxyRecon will automatically fill input fields on these web pages, with the indicator you are looking for.

Currently, FoxyRecon supports the following indicator types:

• Domains
• IPv4 addresses
• URLs
• Hashes
• Email addresses
• CVEs
• Phone Numbers
• Autonomous System numbers

FoxyRecon includes several OSINT web resources. The full list is available on the GitHub repository webpage.

Disclaimer
Data submitted using this add-on will be sent to external web resources that are not under control of FoxyRecon. For this reason the data submitted will be treated in accordance with the terms of service of the several web resources chosen for analysis. Please, be aware of the tools and resources you are using and do not submit any personal information.

Tags: search security