Point WormGPT at a target — a domain, a company, a GitHub handle — and it plans the intelligence chain automatically. Cert transparency, Wayback archaeology, subdomain enum, secret scanning, Shodan lookups, tech fingerprinting. Reasoned over, summarized, and ready to report.
Drop a domain. WormGPT enumerates subdomains via crt.sh, fingerprints the tech stack, pulls known CVEs, checks Wayback for orphaned pages, scans public repos for secrets, and cross-references Shodan. The output is a coherent picture, not a wall of raw tool output.
Raw OSINT tools give you data. WormGPT gives you conclusions — which subdomain is most likely dev/staging, which secret is actually valid, which archived page still has an active endpoint, which piece of infra was decommissioned in 2023.
Save findings to your workspace as you go. WormGPT drafts timelines, entity relationships, and executive summaries you can drop into a client report, journalist article, or internal writeup.
An AI agent that automates open-source intelligence: subdomain enumeration, cert transparency scraping, GitHub secret discovery, Wayback URL archaeology, Shodan queries, and social/profile aggregation. WormGPT chains these tools autonomously.
It complements them. Maltego and SpiderFoot are great for graph-based investigation; WormGPT is faster for reasoning over messy output, correlating findings, and drafting reports.
Public-source intelligence is generally legal, but scope matters — respect terms of service, don't dox private individuals, and stay within any engagement scope. WormGPT is for authorized research only.
Cert transparency logs, WHOIS, Wayback, GitHub search, Shodan, DNS/subdomain enum, tech fingerprinting, and social-profile lookups — all wired into a single agent that reasons over the output.
Free during beta. One click from an AI that actually cooperates.
Enter WormGPT