Initial commit: Laravel OSINT platform

Multi-user OSINT investigation tool with owner-controlled per-user and per-group access grants. Includes Sherlock, theHarvester, crt.sh, WHOIS, and ip-api.com collectors wired through a pluggable Runner/queue pipeline, investigation search, and printable/CSV/JSON reporting. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-20 10:22:05 +03:00
commit 873699e23e
165 changed files with 18507 additions and 0 deletions
@@ -0,0 +1,46 @@
+<?php
+
+namespace App\Osint\Runners;
+
+use App\Models\Target;
+use App\Osint\Runner;
+use App\Osint\RunnerException;
+use App\Osint\RunnerResult;
+use Illuminate\Support\Facades\Http;
+
+class CrtShRunner implements Runner
+{
+    public function run(Target $target): RunnerResult
+    {
+        if ($target->type !== 'domain') {
+            throw new RunnerException('crt.sh only supports "domain" targets.');
+        }
+
+        $response = Http::timeout((int) config('osint.run_timeout'))
+            ->get('https://crt.sh/', [
+                'q' => $target->value,
+                'output' => 'json',
+            ]);
+
+        if (! $response->successful()) {
+            throw new RunnerException('crt.sh request failed with status '.$response->status().'.');
+        }
+
+        // crt.sh returns an empty body (not valid JSON) when there are no matches.
+        $certificates = $response->json() ?? [];
+
+        $subdomains = collect($certificates)
+            ->flatMap(fn (array $cert) => explode("\n", $cert['name_value'] ?? ''))
+            ->map(fn (string $name) => strtolower(trim($name)))
+            ->filter()
+            ->unique()
+            ->sort()
+            ->values();
+
+        $summary = $subdomains->isNotEmpty()
+            ? sprintf('Found %d unique subdomain%s in certificate logs.', $subdomains->count(), $subdomains->count() === 1 ? '' : 's')
+            : 'No certificates found.';
+
+        return new RunnerResult(raw: ['subdomains' => $subdomains->all()], summary: $summary);
+    }
+}