Ethical Hacking

Th3inspector: A Complete OSINT Guide for Cybersecurity, Ethical Hacking, and Recon

Th3inspector: A Complete OSINT Guide for Cybersecurity, Ethical Hacking, and Recon

Th3inspector: Your OSINT Guide for Cybersecurity

Th3inspector is an ethical hacking and OSINT tool that allows you to analyze domains, servers, and infrastructure in seconds. Written in Python, it’s designed for sysadmins and security professionals who want to discover what the web reveals about their systems.

In the cybersecurity world, knowing what’s exposed on the internet is crucial.
Th3inspector was built exactly for this. It’s an open-source Python tool that automatically gathers information on domains, servers, and online infrastructure.
Sysadmins, ethical hackers, and network analysts use it to get a fast, accurate overview of a target without juggling ten different tools.

What Th3inspector Does

The tool runs a sequence of OSINT checks and returns a comprehensive report.
Its core features include:

  • Whois analysis with registration data and domain expiration
  • DNS enumeration and subdomain discovery
  • Reverse IP lookup to find other sites on the same server
  • TCP port scanning to identify active services
  • HTTP header analysis to evaluate web server security
  • CMS detection for the target website
  • robots.txt analysis and internal link extraction
  • Geographic location and server ASN

In just a few minutes, it provides a clear map of what a malicious actor could see about your domain.

How to Install on Linux

Installation is straightforward and requires no special configuration.
Open your terminal and run these commands:

sudo apt update
sudo apt install -y git python3 python3-pip
git clone https://github.com/Moham3dRiahi/Th3inspector.git /opt/Th3inspector
cd /opt/Th3inspector
chmod +x install.sh
./install.sh

To start a scan, simply type:

python3 Th3inspector.py -t esempio.com

All results are saved in the output directory.

Practical Usage Examples

For a detailed scan with a custom report output:

python3 Th3inspector.py -t esempio.com -o /tmp/report

You can also combine Th3inspector with other analysis tools like Nmap or Amass for deeper insights.

Pros and Cons

Pros

  • Easy to use and quick to install
  • Combines multiple OSINT modules into a single tool
  • Provides an immediate and comprehensive overview
  • Open source and free

Cons

  • Sources are public, so data isn’t always complete
  • Some modules may return false positives
  • Doesn’t replace professional pentesting tools
  • Must never be used on third-party sites without authorization

Ethical and Legal Use

Th3inspector is designed for cybersecurity and training purposes.
It should only be used on domains you own or with explicit authorization.
Unauthorized scanning can violate computer fraud and abuse laws (such as the CFAA or similar regulations globally).
It’s always best practice to document your activities and keep a record of your scans.

Alternatives and Integrations

To dig deeper, you can pair Th3inspector with other OSINT tools like:

  • TheHarvester for gathering emails and hosts
  • Sublist3r or Subfinder for subdomain enumeration
  • Amass for complex DNS mapping
  • Nmap for detailed port analysis

An effective strategy uses Th3inspector as a first step, followed by these tools to validate and expand on the findings.

Th3inspector is an ideal solution for anyone looking to quickly understand how their infrastructure appears on the internet.
It’s lightweight, free, and easy to use, even for those taking their first steps into the OSINT world.
In minutes, it can reveal actionable data to improve security and reduce a domain’s attack surface.
When used correctly, it becomes a valuable ally in mitigating cybersecurity risks.

Share this article:

Written by

Rosario Giordano

Rosario Giordano is a system administrator and IT consultant specializing in cybersecurity and cloud, with over 20 years of experience managing enterprise Linux infrastructures. His areas of expertise include SSH hardening, Kubernetes platforms, PostgreSQL databases, VMware/ Proxmox virtualization, and compliance with NIS2 and ISO 27001 security frameworks