GitHub: https://github.com/Shad0w-ops/H.I.V.E
Last Commit: July 21st, 2024

DISCLAIMER: This tool is intended solely for educational purposes. The creators cannot be held accountable for any unauthorized use. Your utilization of this resource signifies your understanding and acceptance of this disclaimer.

Table Of Contents

• Installation (Linux)
  • How to get Truecaller ID
• Running the script
• Module Breakdown
  • 1) Truecaller Reverse Lookup
  • 2) Shodan Crawler
  • 3) IP Geolocation
  • 4) IntelX Database Lookup
  • 5) Email Verifier
  • 6) Sherlock
  • 7) Spoofing
    • 1) Anonymous Mode
    • 2) Spoof your MAC address
  • 8) CredFetch (previously Phonekit)
• API Account Options Table
• H.I.V.E Flow Diagram (Needs to be updated)
• Credits

v1.3 To-do List

•  Add regex support to CredFetch
•  Attempt to replace all local tools (such as Anonsurf and Sherlock module)
  •  Make it so that the setup.py script pulls/clones Anonsurf from the repository to download an up-to-date version (it will not be included in the repo by default)
  •  Try to replace Sherlock with an API. If not, the script will be downloaded from the repo and (ideally) imported into the script instead of executed using "os.system()"
•  Organize the outputs into one output directory with a directory for each tool/module
•  Add IntelX output folder (possibly other modules as well)
•  Maybe add more APIs or replace some APIs with more competent ones

Setup & Installation (Linux)

python3 setup.py

Edit the vars.py file by adding your APIs In the following format:

SHODAN_API = ''
INTELX_API = ''
HUNTER_API = ''
TRUECALLER_ID = ''
DBFILE = ''

Or simply use the new define function in the script.

How to get Truecaller ID

For your truecaller ID run:

truecallerpy login

and follow the steps to get your ID. If you cant see your ID run:

truecallerpy -i

or

truecallerpy --installationid

Running the script

You can run the script using the following command:

sudo python3 hive.py

Module Breakdown

1) Truecaller Reverse Lookup

Truecaller Reverse Lookup allows you to reverse-search any phone number and extract data such as their name directly from the truecaller remote servers.

2) Shodan Crawler

The shodan crawler utilises the shodan API to generate YAML formatted reports on a given IP address passively and saves the report in the Shodan_Output folder.

This module can be used to do recon on a webserver and get most information needed to develop an attack passivly, meaning the webserver itself wont receive any requests from the attacker and will not be able to detect an attack.

3) IP Geolocation

The IP geolocation module gives you an esimated location for a given IP address. Due to the flawed nature of IP addresses this module will not provide a 100% accurate location, but it will provide the country and city. This module can also provide the user with their own public IP if the input field is left empty.

4) IntelX Database Lookup

The database lookup module utilises the IntelX API to search for a given query in thousands of leaked databases

(NOTE) the output may not be complete and in that case take the id of the leak and search for it in the IntelX website and search for your query in the database to find that exact term/query.

In this module you can search for:

• Email addresses
• Domains
• URLs
• IP Addresses
• Phone Numbers
• Bitcoin addresses
• MAC addresses
• IPFS Hashes
• Credit Card Numbers
• IBANs
• Ethereum addresses

5) Email Verifier

This module utilises the Hunter.io API and allows you to check if an email address exists, this can be used to check which emails are valid after bruteforcing a partially redacted email address.

6) Sherlock

This module can be used to find usernames across many social networks and saves the output in the output/sherlock directory.

7) Spoofing

1) Tor (Anonymous Mode)

Allows you to enter commands for anonsurf/tor-router to activate system-wide traffic routing through tor for improved privacy and security. Commands include: start, stop, restart and status.

2) Spoof your MAC address

In this section of the module, you will be given 4 options:

1. Change to a random MAC address (pretends to be burned in)
2. Change to a random MAC address (doesn't pretend to be burned in)
3. Change to a specific MAC address
4. Reset MAC address to the original

8) CredFetch (previously Phonekit)

This module has been completely revised and now neatly sorts all data extracted from each single line, allows the user to search for names, phone numbers, and emails within a text database, and the ability to filter data more efficiently has been added as well.

For example, if one wants to search for a certain John Doe, with an American or Canadian phone number, they could input the following text:

john doe +1

Or, if the user wants to find another John Doe that has a GMail address attatched, they can search:

john doe @gmail[.com]

Also, if the user wants to search for a specific email or phone number without specifying a name they can do that as well.

In the future, regex will be used to better sort text databases of all kinds.

API Account Options Table

(NOTE) Academic means that there is a better subscription plan for free/discounted that they provide for accounts created with student emails (.edu)

H.I.V.E Flow Diagram