Th3inspector: Your OSINT Guide for Cybersecurity
Th3inspector is an ethical hacking and OSINT tool that allows you to analyze domains, servers, and infrastructure in seconds. Written in Python, it’s designed for sysadmins and security professionals who want to discover what the web reveals about their systems.
In the cybersecurity world, knowing what’s exposed on the internet is crucial.
Th3inspector was built exactly for this. It’s an open-source Python tool that automatically gathers information on domains, servers, and online infrastructure.
Sysadmins, ethical hackers, and network analysts use it to get a fast, accurate overview of a target without juggling ten different tools.
What Th3inspector Does
The tool runs a sequence of OSINT checks and returns a comprehensive report.
Its core features include:
- Whois analysis with registration data and domain expiration
- DNS enumeration and subdomain discovery
- Reverse IP lookup to find other sites on the same server
- TCP port scanning to identify active services
- HTTP header analysis to evaluate web server security
- CMS detection for the target website
- robots.txt analysis and internal link extraction
- Geographic location and server ASN
In just a few minutes, it provides a clear map of what a malicious actor could see about your domain.
How to Install on Linux
Installation is straightforward and requires no special configuration.
Open your terminal and run these commands:
sudo apt update
sudo apt install -y git python3 python3-pip
git clone https://github.com/Moham3dRiahi/Th3inspector.git /opt/Th3inspector
cd /opt/Th3inspector
chmod +x install.sh
./install.sh
To start a scan, simply type:
python3 Th3inspector.py -t esempio.com
All results are saved in the output directory.
Practical Usage Examples
For a detailed scan with a custom report output:
python3 Th3inspector.py -t esempio.com -o /tmp/report
You can also combine Th3inspector with other analysis tools like Nmap or Amass for deeper insights.
Pros and Cons
Pros
- Easy to use and quick to install
- Combines multiple OSINT modules into a single tool
- Provides an immediate and comprehensive overview
- Open source and free
Cons
- Sources are public, so data isn’t always complete
- Some modules may return false positives
- Doesn’t replace professional pentesting tools
- Must never be used on third-party sites without authorization
Ethical and Legal Use
Th3inspector is designed for cybersecurity and training purposes.
It should only be used on domains you own or with explicit authorization.
Unauthorized scanning can violate computer fraud and abuse laws (such as the CFAA or similar regulations globally).
It’s always best practice to document your activities and keep a record of your scans.
Alternatives and Integrations
To dig deeper, you can pair Th3inspector with other OSINT tools like:
- TheHarvester for gathering emails and hosts
- Sublist3r or Subfinder for subdomain enumeration
- Amass for complex DNS mapping
- Nmap for detailed port analysis
An effective strategy uses Th3inspector as a first step, followed by these tools to validate and expand on the findings.
Th3inspector is an ideal solution for anyone looking to quickly understand how their infrastructure appears on the internet.
It’s lightweight, free, and easy to use, even for those taking their first steps into the OSINT world.
In minutes, it can reveal actionable data to improve security and reduce a domain’s attack surface.
When used correctly, it becomes a valuable ally in mitigating cybersecurity risks.