retour aux outils back to tools Ducklings

maryam

Framework OSINT modulaire. Agrège des informations provenant de multiples sources publiques pour la reconnaissance de domaines, emails, IPs, pseudonymes et numéros de téléphone via un système de modules à la Metasploit. Modular OSINT framework. Aggregates information from multiple public sources for reconnaissance on domains, emails, IPs, usernames, and phone numbers using a Metasploit-like module system.

↗ https://github.com/saeeddhqan/Maryam

Overview

Maryam is an open-source OSINT framework with a Metasploit-style interface. It has modules for domain/email/IP/phone reconnaissance, credential breach checking, social media investigation, and more — all driven by a command shell with persistent workspaces.

Installation

pip3 install maryam
# or
git clone https://github.com/saeeddhqan/Maryam
cd Maryam
pip3 install -r requirements.txt
python3 maryam

Basic Usage

Launch interactive shell

maryam

Set target

> set target example.com

Run a module

> run footprint/domain_finder

List all modules

> modules list

# Search modules
> modules search dns
> modules search email

Module Categories

# Footprint modules
footprint/domain_finder    — subdomain enumeration
footprint/ip_info          — IP geolocation/ASN
footprint/whois_lookup     — domain WHOIS
footprint/dns_records      — DNS record enumeration
footprint/email_finder     — email harvesting

# Search modules
search/google              — Google dorking
search/bing                — Bing search
search/github              — GitHub code search

# Social modules
social/instagram           — Instagram user info
social/twitter             — Twitter/X investigation

Vuln/Audit modules

vuln/subdomain_takeover    — check for takeovers

Common Workflows

# Domain recon
maryam
> workspaces create example_com
> set target example.com
> run footprint/domain_finder
> run footprint/whois_lookup
> run footprint/dns_records

# Email investigation
> set target user@example.com
> run footprint/email_finder
> run breach/emailrep

# Export results
> show hosts
> export domains /tmp/domains.txt

API Key Configuration

# Set API keys for expanded results
> keys add shodan YOUR_SHODAN_KEY
> keys add virustotal YOUR_VT_KEY
> keys add hunter YOUR_HUNTER_KEY

List configured keys

> keys list

Tips

Workspaces keep data organized per target — always create one before starting
modules list shows all available modules grouped by category
Chain multiple modules — run domain_finder, then email_finder on discovered subdomains
API keys for Shodan/Hunter/VT dramatically expand passive recon results
show commands display accumulated results: show hosts, show domains, show emails

Help / Man page

Maryam shell commands:

set target TARGET    Set target (domain, IP, email)
run MODULE           Execute a module
modules list         List all modules
modules search Q     Search modules by keyword
workspaces create N  Create workspace
show hosts           Display discovered hosts
show domains         Display discovered domains
keys add K V         Set API key
help                 Show help
exit / quit          Exit Maryam

Vue d’ensemble

Maryam est un framework OSINT open source doté d’une interface façon Metasploit. Il propose des modules pour la reconnaissance de domaines/emails/IPs/téléphones, la vérification de fuites d’identifiants, l’investigation sur les réseaux sociaux, et bien plus, le tout piloté par un shell de commandes avec des workspaces persistants.

Installation

pip3 install maryam
# ou
git clone https://github.com/saeeddhqan/Maryam
cd Maryam
pip3 install -r requirements.txt
python3 maryam

Utilisation de base

# Lancer le shell interactif
maryam

# Définir la cible
> set target example.com

# Lancer un module
> run footprint/domain_finder

# Lister tous les modules
> modules list

# Rechercher des modules
> modules search dns
> modules search email

Catégories de modules

# Modules footprint
footprint/domain_finder    : subdomain enumeration
footprint/ip_info          : IP geolocation/ASN
footprint/whois_lookup     : domain WHOIS
footprint/dns_records      : DNS record enumeration
footprint/email_finder     : email harvesting

# Modules search
search/google              : Google dorking
search/bing                : Bing search
search/github               : GitHub code search

# Modules social
social/instagram           : Instagram user info
social/twitter              : Twitter/X investigation

# Modules vuln/audit
vuln/subdomain_takeover    : check for takeovers

Workflows courants

# Reconnaissance de domaine
maryam
> workspaces create example_com
> set target example.com
> run footprint/domain_finder
> run footprint/whois_lookup
> run footprint/dns_records

# Investigation email
> set target user@example.com
> run footprint/email_finder
> run breach/emailrep

# Exporter les résultats
> show hosts
> export domains /tmp/domains.txt

Configuration des clés API

# Définir les clés API pour élargir les résultats
> keys add shodan YOUR_SHODAN_KEY
> keys add virustotal YOUR_VT_KEY
> keys add hunter YOUR_HUNTER_KEY

# Lister les clés configurées
> keys list

Conseils

Les workspaces organisent les données par cible : toujours en créer un avant de commencer
modules list affiche tous les modules disponibles regroupés par catégorie
Enchaîner plusieurs modules : lancer domain_finder, puis email_finder sur les sous-domaines découverts
Les clés API pour Shodan/Hunter/VT élargissent considérablement les résultats de reconnaissance passive
Les commandes show affichent les résultats accumulés : show hosts, show domains, show emails

Aide / Page de manuel

Maryam shell commands:

set target TARGET    Set target (domain, IP, email)
run MODULE           Execute a module
modules list         List all modules
modules search Q     Search modules by keyword
workspaces create N  Create workspace
show hosts           Display discovered hosts
show domains         Display discovered domains
keys add K V         Set API key
help                 Show help
exit / quit          Exit Maryam