# HX Security OSINT

Consent-first OSINT toolkit for username and domain exposure checks.

## Scope

Allowed by design:

- domains you own or are authorized to audit,
- usernames/personas you own or have consent to test,
- public web/DNS/certificate transparency data.

Out of scope:

- private-person doxxing,
- login-required scraping,
- credential attacks,
- intrusive port/vulnerability scanning.

## Open-source tools studied

- Sherlock: username profile discovery model.
- Maigret: username dossier and site definitions.
- theHarvester: email/domain/subdomain OSINT pattern.
- SpiderFoot: automated OSINT correlation model.
- Amass/Subfinder: passive attack-surface/subdomain discovery pattern.

HX v0 is intentionally smaller and safer: passive domain recon and controlled username checks.

## Usage

```bash
python3 -m hxsec.cli --pretty domain horii.dev
python3 -m hxsec.cli --pretty username mira.horiilabs
```