← retour aux outils back to tools

# maryam

Framework OSINT modulaire. Agrège des informations provenant de multiples sources publiques pour la reconnaissance de domaines, emails, IPs, pseudonymes et numéros de téléphone via un système de modules à la Metasploit. Modular OSINT framework. Aggregates information from multiple public sources for reconnaissance on domains, emails, IPs, usernames, and phone numbers using a Metasploit-like module system.

↗ https://github.com/saeeddhqan/Maryam

## Overview

Maryam is an open-source OSINT framework with a Metasploit-style interface. It has modules for domain/email/IP/phone reconnaissance, credential breach checking, social media investigation, and more — all driven by a command shell with persistent workspaces.

## Installation

    pip3 install maryam
    # or
    git clone https://github.com/saeeddhqan/Maryam
    cd Maryam
    pip3 install -r requirements.txt
    python3 maryam

## Basic Usage

Launch interactive shell

    maryam

Set target

    > set target example.com

Run a module

    > run footprint/domain_finder

List all modules

    > modules list

    # Search modules
    > modules search dns
    > modules search email

## Module Categories

    # Footprint modules
    footprint/domain_finder    — subdomain enumeration
    footprint/ip_info          — IP geolocation/ASN
    footprint/whois_lookup     — domain WHOIS
    footprint/dns_records      — DNS record enumeration
    footprint/email_finder     — email harvesting

    # Search modules
    search/google              — Google dorking
    search/bing                — Bing search
    search/github              — GitHub code search

    # Social modules
    social/instagram           — Instagram user info
    social/twitter             — Twitter/X investigation

Vuln/Audit modules

    vuln/subdomain_takeover    — check for takeovers

## Common Workflows

    # Domain recon
    maryam
    > workspaces create example_com
    > set target example.com
    > run footprint/domain_finder
    > run footprint/whois_lookup
    > run footprint/dns_records

    # Email investigation
    > set target user@example.com
    > run footprint/email_finder
    > run breach/emailrep

    # Export results
    > show hosts
    > export domains /tmp/domains.txt

## API Key Configuration

    # Set API keys for expanded results
    > keys add shodan YOUR_SHODAN_KEY
    > keys add virustotal YOUR_VT_KEY
    > keys add hunter YOUR_HUNTER_KEY

List configured keys

    > keys list

## Tips

- Workspaces keep data organized per target — always create one before starting
- `modules list` shows all available modules grouped by category
- Chain multiple modules — run domain_finder, then email_finder on discovered subdomains
- API keys for Shodan/Hunter/VT dramatically expand passive recon results
- `show` commands display accumulated results: `show hosts`, `show domains`, `show emails`

Help / Man page

    Maryam shell commands:

    set target TARGET    Set target (domain, IP, email)
    run MODULE           Execute a module
    modules list         List all modules
    modules search Q     Search modules by keyword
    workspaces create N  Create workspace
    show hosts           Display discovered hosts
    show domains         Display discovered domains
    keys add K V         Set API key
    help                 Show help
    exit / quit          Exit Maryam

## Vue d’ensemble

Maryam est un framework OSINT open source doté d’une interface façon Metasploit. Il propose des modules pour la reconnaissance de domaines/emails/IPs/téléphones, la vérification de fuites d’identifiants, l’investigation sur les réseaux sociaux, et bien plus, le tout piloté par un shell de commandes avec des workspaces persistants.

## Installation

    pip3 install maryam
    # ou
    git clone https://github.com/saeeddhqan/Maryam
    cd Maryam
    pip3 install -r requirements.txt
    python3 maryam

## Utilisation de base

    # Lancer le shell interactif
    maryam

    # Définir la cible
    > set target example.com

    # Lancer un module
    > run footprint/domain_finder

    # Lister tous les modules
    > modules list

    # Rechercher des modules
    > modules search dns
    > modules search email

## Catégories de modules

    # Modules footprint
    footprint/domain_finder    : subdomain enumeration
    footprint/ip_info          : IP geolocation/ASN
    footprint/whois_lookup     : domain WHOIS
    footprint/dns_records      : DNS record enumeration
    footprint/email_finder     : email harvesting

    # Modules search
    search/google              : Google dorking
    search/bing                : Bing search
    search/github               : GitHub code search

    # Modules social
    social/instagram           : Instagram user info
    social/twitter              : Twitter/X investigation

    # Modules vuln/audit
    vuln/subdomain_takeover    : check for takeovers

## Workflows courants

    # Reconnaissance de domaine
    maryam
    > workspaces create example_com
    > set target example.com
    > run footprint/domain_finder
    > run footprint/whois_lookup
    > run footprint/dns_records

    # Investigation email
    > set target user@example.com
    > run footprint/email_finder
    > run breach/emailrep

    # Exporter les résultats
    > show hosts
    > export domains /tmp/domains.txt

## Configuration des clés API

    # Définir les clés API pour élargir les résultats
    > keys add shodan YOUR_SHODAN_KEY
    > keys add virustotal YOUR_VT_KEY
    > keys add hunter YOUR_HUNTER_KEY

    # Lister les clés configurées
    > keys list

## Conseils

- Les workspaces organisent les données par cible : toujours en créer un avant de commencer
- `modules list` affiche tous les modules disponibles regroupés par catégorie
- Enchaîner plusieurs modules : lancer domain_finder, puis email_finder sur les sous-domaines découverts
- Les clés API pour Shodan/Hunter/VT élargissent considérablement les résultats de reconnaissance passive
- Les commandes `show` affichent les résultats accumulés : `show hosts`, `show domains`, `show emails`

Aide / Page de manuel

    Maryam shell commands:

    set target TARGET    Set target (domain, IP, email)
    run MODULE           Execute a module
    modules list         List all modules
    modules search Q     Search modules by keyword
    workspaces create N  Create workspace
    show hosts           Display discovered hosts
    show domains         Display discovered domains
    keys add K V         Set API key
    help                 Show help
    exit / quit          Exit Maryam