OpenCROW OSINT Toolbox

Runtime preflight

Probe required commands with command -v and Python modules with importlib.util.find_spec before use. Prefer a PATH-resolved OpenCROW MCP helper or the ctf/sage environment when available, then the managed helper or system Python. If a capability is missing, stop that path safely and report the exact missing command or module.

Use this skill for challenges that depend on public-source reconnaissance rather than direct target exploitation. It covers username hunting with sherlock, historical site lookups with waybackpy, and Shodan-backed discovery with the shodan CLI and Python client.

Quick Start

Start the MCP server from the installed CLI:

opencrow-osint-mcp

Verify the mapped stack:

python3 scripts/verify_toolkit.py

Workflow

1. Use sherlock for username reuse checks across public services.
2. Use waybackpy when the clue may exist in an archived site snapshot.
3. Use shodan when the problem involves public internet exposure, banners, or service fingerprints.
4. If a full profile was installed, treat theHarvester as a manual follow-up tool from the installer summary.
5. Prefer the MCP server operations first: toolbox_info, toolbox_verify, toolbox_capabilities, osint_username_lookup, osint_archive_lookup, and osint_shodan_lookup.

Resources

• opencrow-osint-mcp: stdio MCP server for typed username, archive, and Shodan lookups.
• scripts/verify_toolkit.py: confirm that the mapped OSINT tools are installed.
• references/tooling.md: quick guidance for choosing OSINT tools.