Open-Source Intelligence (OSINT) & Attack Surface Reconnaissance Platform
Caesar is a full-stack Open-Source Intelligence (OSINT) and digital reconnaissance platform designed for security researchers, penetration testers, and threat analysts. Built on an edge-native serverless architecture, Caesar orchestrates decentralized intelligence collection across 50+ reconnaissance modules with real-time caching, CORS proxying, and automated forensic dossier generation.
flowchart TD
subgraph Client [Browser Terminal Interface]
UI[Monospaced Tactical Terminal UI] --> State[TanStack Router & Query]
State --> Exporter[Dossier Compiler: PDF / CSV / JSON]
end
subgraph Edge [Cloudflare Pages & Serverless Runtime]
Router[Edge API Gateway] --> Cache{Tiered Cache Layer}
Cache -->|Hit| Response[Cached Response]
Cache -->|Miss| KV[(Cloudflare KV / In-Memory LRU)]
Router --> Proxy[CORS Isolation & Rate-Limit Shield]
end
subgraph Sources [Intelligence Providers]
Proxy --> P1[DNS-over-HTTPS / RDAP / WHOIS]
Proxy --> P2[Certificate Transparency: crt.sh]
Proxy --> P3[Threat Feeds: NVD / AbuseIPDB / VirusTotal]
Proxy --> P4[Public Identity & Username Registries]
Proxy --> P5[Network & BGP: IP-API / Shodan / BGPView]
end
Client -->|Encrypted Session| Edge
Edge --> Sources
Compiles cross-module findings into structured forensic dossiers:
- JSON: Machine-readable format for ingestion into SIEM, SOAR, or MISP platforms.
- CSV: Tabular evidence for compliance records, audits, and spreadsheets.
- PDF: Formatted executive intelligence summaries ready for stakeholders.
- Production (Cloudflare KV): Globally distributed edge cache reducing upstream API latency and preventing provider rate-limiting.
- Local Fallback (LRU Cache): High-performance in-memory LRU cache for development environments.
Vite bundle splitting (manualChunks) isolates heavy rendering libraries (html2pdf, charting components, icon sets) ensuring sub-second initial page load and fast client-side routing.
Caesar groups its 50+ intelligence tools into 5 operational domains:
| Domain | Modules & Target Vectors | Upstream Intelligence Providers |
|---|---|---|
| Network & Infrastructure | DNS Lookup, Subdomain Enumeration, WHOIS/RDAP, BGP/ASN Peer Mapping, Cloud Range Detector, WAF Fingerprinting, Favicon MurmurHash3 | Google DNS (DoH), crt.sh, RDAP.org, BGPView, IP-API |
| Identity & Footprinting | WhatsMyName (34 developer & social platforms), Phone OSINT, NAMINT Email Combiner, GitFive Commit Deanonymizer, GHunt Google IDs | GitHub, GitLab, Docker Hub, PyPI, NPM, libphonenumber-js |
| Threat Intelligence | NIST NVD CVE Search, AbuseIPDB Reputation, VirusTotal Domain/Hash Analysis, MalwareBazaar, Tor Exit Node Detection, Blacklist DNSBL | NIST NVD API, Abuse.ch, AbuseIPDB, VirusTotal |
| Corporate & GEOINT | CNPJ / Brazilian Corporate Registry, OpenStreetMap Geocoding, Postal/CEP Address Mapping, Wayback Machine Historical Snapshots | BrasilAPI, Minha Receita, Nominatim OSM, Internet Archive |
| Forensics & Cryptanalysis | EXIF / GPS Metadata Extractor, Error Level Analysis (ELA), Hash Algorithm Identifier, Multi-format Encoder/Decoder, Regex Data Miner | Native Client-Side Web Workers |
- Node.js 18+ or Bun
- Git
# 1. Clone repository
git clone https://github.com/ispectr3/Caesar.git
cd Caesar
# 2. Install dependencies
bun install
# or: npm install
# 3. Configure environment variables
cp .env.example .env
# 4. Start local development server
bun dev
# or: npm run devThe terminal interface will be accessible at http://localhost:5173.
Deploy seamlessly to Cloudflare Pages:
bun run build
npx wrangler pages deploy distCaesar is open-source software licensed under the MIT License.