# Argus

> Python interactive CLI toolkit for automated OSINT, network reconnaissance, and security checks

Argus is an open-source reconnaissance and information-gathering toolkit written in Python. It provides an interactive command prompt packed with 135 modular checks across network infrastructure, web application configurations, and threat intelligence sources. It consolidates tasks like DNS inspection, exposed file discovery, and external API queries into single multi-threaded workflows.

Website: https://github.com/jasonxtn/Argus

## What it is for

- Perform automated external attack surface discovery on target domains and IP ranges
- Scan web applications for exposed Git folders, environment files, and cloud buckets
- Investigate domain infrastructure including DNS records, SSL/TLS certificates, and WHOIS entries
- Query threat intelligence services like Shodan, Censys, and VirusTotal through a unified CLI

## Features

- Interactive command-line shell with search, profiles, and module favorites
- 135 specialized modules spanning network, web application, and threat intelligence checks
- Batch execution support to run entire categories or selected module groups concurrently
- Multi-threaded scanning engine with configurable concurrency limits and timeouts
- Integration with external APIs including Shodan, VirusTotal, Censys, and Have I Been Pwned
- Report export options supporting TXT, CSV, and JSON output formats
- Docker support and pip installation options for cross-platform deployment

## Pricing

Open source. Free and open-source (MIT License)

## Details

- Type: GitHub repo
- Category: [Development](https://xiry.app/topics/development.md)
- Open source: yes
- Platforms: Command line, Linux, macOS, Windows
- For: Penetration testers, security analysts, bug bounty hunters, and ethical hackers
- Alternative to: theHarvester, Recon-ng, SpiderFoot, Amass
- Tags: osint, reconnaissance, cybersecurity, penetration testing, python, infosec, cli

## Why it was saved

- [@carterperez.dev, 9 August 2026](https://www.instagram.com/reel/Db0ipK0RLCE/): Maps out a target's complete internet attack surface, active certificates, and vulnerabilities in a single automated command.

## Related

- [holehe](https://xiry.app/resources/holehe): Check if an email address is registered across 120+ online platforms. (GitHub repo, Open source)
- [LeakIX](https://xiry.app/resources/leakix): Threat intelligence search engine tracking exposed internet services and data leaks (Website, Freemium)
- [OpenOSINT](https://xiry.app/resources/openosint): AI OSINT agent, MCP server, and framework chaining intelligence tools (GitHub repo, Open source)
- [VoidAccess](https://xiry.app/resources/voidaccess): Self-hosted dark web OSINT tool for automated threat intelligence. (Desktop app, Open source)
- [AIMap](https://xiry.app/resources/aimap): Discovery and security testing platform for exposed internet-facing AI endpoints. (Web app, Open source)
- [BabelStrike](https://xiry.app/resources/babelstrike): Transliterate non-Latin names and generate username wordlists for security assessments (GitHub repo, Open source)

Updated 3 October 2026. Page: https://xiry.app/resources/argus

Make your own library: Xiry takes your saved reels, tweets, Reddit bookmarks and Watch Later videos, makes them searchable and pulls the useful stuff out, like this library. It's invite-only for now; join the waitlist at https://xiry.app/#waitlist.