Hello, World!
A quick blog post to present Fcatalog: an open-source fingerprinting application, based on a custom fingerprinting engine, fprint. If you want to start using it, it is currently available on this site’s subdomain:
I decided to build this tool because Hunt.io is too expensive, and the free plans of alternatives are not suiting my needs.
In a nutshell, you can request scans of IPs and domains, and the engine will fingerprint them and return the results. You can then explore everything that has been scanned, and pivot by searching for similar facts, patterns, etc.
At the time of writing this, I have 3600+ scanned servers and 10,700+ facts collected. Entries are enriched using ipinfo API but I got too greedy on the first scanning night and got rate-limited, but enrichment will start again soon after I publish this.
On the admin side, I created a few heuristics that are applied automatically to fingerprinted servers to add labels (open directories, etc…) to ease hunt discovery. But you can also anonymously suggest labels if you have evidences backing the suggestion (usually an URL). I’ll review them as soon as possible.
The real value of this kind of tool is in the amount of data stored, so feel free to give it a shot! Feedback more than welcomed :)