OpenCROW OSINT Toolbox
Use this skill for challenges that depend on public-source reconnaissance rather than direct target exploitation. It covers username hunting with sherlock, historical site lookups with waybackpy, and Shodan-backed discovery with the shodan CLI and Python client.
Quick Start
Start the MCP server from the installed CLI:
opencrow-osint-mcp
Verify the mapped stack:
python ~/.codex/skills/opencrow-osint-toolbox/scripts/verify_toolkit.py
Workflow
- Use
sherlockfor username reuse checks across public services. - Use
waybackpywhen the clue may exist in an archived site snapshot. - Use
shodanwhen the problem involves public internet exposure, banners, or service fingerprints. - If a full profile was installed, treat theHarvester as a manual follow-up tool from the installer summary.
- Prefer the MCP server operations first:
toolbox_info,toolbox_verify,toolbox_capabilities,osint_username_lookup,osint_archive_lookup, andosint_shodan_lookup.
Resources
opencrow-osint-mcp: stdio MCP server for typed username, archive, and Shodan lookups.scripts/verify_toolkit.py: confirm that the mapped OSINT tools are installed.references/tooling.md: quick guidance for choosing OSINT tools.