Initial commit: Laravel OSINT platform

Multi-user OSINT investigation tool with owner-controlled per-user and
per-group access grants. Includes Sherlock, theHarvester, crt.sh, WHOIS,
and ip-api.com collectors wired through a pluggable Runner/queue pipeline,
investigation search, and printable/CSV/JSON reporting.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

routes/auth.php

@@ -0,0 +1,59 @@
+<?php
+
+use App\Http\Controllers\Auth\AuthenticatedSessionController;
+use App\Http\Controllers\Auth\ConfirmablePasswordController;
+use App\Http\Controllers\Auth\EmailVerificationNotificationController;
+use App\Http\Controllers\Auth\EmailVerificationPromptController;
+use App\Http\Controllers\Auth\NewPasswordController;
+use App\Http\Controllers\Auth\PasswordController;
+use App\Http\Controllers\Auth\PasswordResetLinkController;
+use App\Http\Controllers\Auth\RegisteredUserController;
+use App\Http\Controllers\Auth\VerifyEmailController;
+use Illuminate\Support\Facades\Route;
+
+Route::middleware('guest')->group(function () {
+    Route::get('register', [RegisteredUserController::class, 'create'])
+        ->name('register');
+
+    Route::post('register', [RegisteredUserController::class, 'store']);
+
+    Route::get('login', [AuthenticatedSessionController::class, 'create'])
+        ->name('login');
+
+    Route::post('login', [AuthenticatedSessionController::class, 'store']);
+
+    Route::get('forgot-password', [PasswordResetLinkController::class, 'create'])
+        ->name('password.request');
+
+    Route::post('forgot-password', [PasswordResetLinkController::class, 'store'])
+        ->name('password.email');
+
+    Route::get('reset-password/{token}', [NewPasswordController::class, 'create'])
+        ->name('password.reset');
+
+    Route::post('reset-password', [NewPasswordController::class, 'store'])
+        ->name('password.store');
+});
+
+Route::middleware('auth')->group(function () {
+    Route::get('verify-email', EmailVerificationPromptController::class)
+        ->name('verification.notice');
+
+    Route::get('verify-email/{id}/{hash}', VerifyEmailController::class)
+        ->middleware(['signed', 'throttle:6,1'])
+        ->name('verification.verify');
+
+    Route::post('email/verification-notification', [EmailVerificationNotificationController::class, 'store'])
+        ->middleware('throttle:6,1')
+        ->name('verification.send');
+
+    Route::get('confirm-password', [ConfirmablePasswordController::class, 'show'])
+        ->name('password.confirm');
+
+    Route::post('confirm-password', [ConfirmablePasswordController::class, 'store']);
+
+    Route::put('password', [PasswordController::class, 'update'])->name('password.update');
+
+    Route::post('logout', [AuthenticatedSessionController::class, 'destroy'])
+        ->name('logout');
+});

routes/console.php

@@ -0,0 +1,8 @@
+<?php
+
+use Illuminate\Foundation\Inspiring;
+use Illuminate\Support\Facades\Artisan;
+
+Artisan::command('inspire', function () {
+    $this->comment(Inspiring::quote());
+})->purpose('Display an inspiring quote');

routes/web.php

@@ -0,0 +1,47 @@
+<?php
+
+use App\Http\Controllers\GroupController;
+use App\Http\Controllers\InvestigationAccessController;
+use App\Http\Controllers\InvestigationController;
+use App\Http\Controllers\InvestigationReportController;
+use App\Http\Controllers\ProfileController;
+use App\Http\Controllers\SearchController;
+use App\Http\Controllers\TargetController;
+use Illuminate\Support\Facades\Route;
+
+Route::get('/', function () {
+    return view('welcome');
+});
+
+Route::get('/dashboard', function () {
+    return view('dashboard');
+})->middleware(['auth', 'verified'])->name('dashboard');
+
+Route::middleware('auth')->group(function () {
+    Route::get('/profile', [ProfileController::class, 'edit'])->name('profile.edit');
+    Route::patch('/profile', [ProfileController::class, 'update'])->name('profile.update');
+    Route::delete('/profile', [ProfileController::class, 'destroy'])->name('profile.destroy');
+
+    Route::get('/search', [SearchController::class, 'index'])->name('search.index');
+
+    Route::resource('investigations', InvestigationController::class)->only(['index', 'create', 'store', 'show', 'destroy']);
+    Route::post('investigations/{investigation}/targets', [TargetController::class, 'store'])->name('investigations.targets.store');
+    Route::delete('investigations/{investigation}/targets/{target}', [TargetController::class, 'destroy'])->name('investigations.targets.destroy');
+    Route::post('investigations/{investigation}/targets/{target}/run', [TargetController::class, 'run'])->name('investigations.targets.run');
+
+    Route::get('investigations/{investigation}/access', [InvestigationAccessController::class, 'index'])->name('investigations.access.index');
+    Route::post('investigations/{investigation}/access/users', [InvestigationAccessController::class, 'storeUser'])->name('investigations.access.users.store');
+    Route::delete('investigations/{investigation}/access/users/{user}', [InvestigationAccessController::class, 'destroyUser'])->name('investigations.access.users.destroy');
+    Route::post('investigations/{investigation}/access/groups', [InvestigationAccessController::class, 'storeGroup'])->name('investigations.access.groups.store');
+    Route::delete('investigations/{investigation}/access/groups/{group}', [InvestigationAccessController::class, 'destroyGroup'])->name('investigations.access.groups.destroy');
+
+    Route::get('investigations/{investigation}/report', [InvestigationReportController::class, 'show'])->name('investigations.report');
+    Route::get('investigations/{investigation}/export.csv', [InvestigationReportController::class, 'csv'])->name('investigations.export.csv');
+    Route::get('investigations/{investigation}/export.json', [InvestigationReportController::class, 'json'])->name('investigations.export.json');
+
+    Route::resource('groups', GroupController::class)->only(['index', 'create', 'store', 'show']);
+    Route::post('groups/{group}/members', [GroupController::class, 'addMember'])->name('groups.members.store');
+    Route::delete('groups/{group}/members/{user}', [GroupController::class, 'removeMember'])->name('groups.members.destroy');
+});
+
+require __DIR__.'/auth.php';