metabigor

metabigor collects open source intelligence about internet assets without requiring API keys for its workflow.

github.com/j3ssie/metabigor
metabigor homepage screenshot

About metabigor

metabigor is an open source command-line tool for collecting open source intelligence about a target's internet infrastructure. It can find network ranges, certificate-linked subdomains, related domains, exposed ports, CDN and WAF providers, and code leaks, and it draws on free sources that do not require registering for an API key.

Each command accepts targets as arguments, from a file, or from standard input, and supports text, flat, JSON, and CSV output. Results go to standard output and logs go to standard error, so commands can be chained in pipelines and scripts. The net command searches a bundled offline database by default, and the --live option queries live sources instead. Results depend on third-party services such as crt.sh, Shodan InternetDB, grep.app, and web archives.

Key features

  • Finds IP ranges (CIDRs) from an ASN, organization, domain, or IP
  • Discovers subdomains from certificate transparency logs via crt.sh
  • Lists open ports, hostnames, and CVEs for IPs via Shodan InternetDB
  • Searches public GitHub repositories for secrets and subdomains via grep.app
  • Groups IP addresses by ASN to map infrastructure
  • Separates CDN and WAF-protected addresses from candidate origin servers
Best for: Security researchers and bug bounty hunters who want to map a target's internet infrastructure from the command line and script the results.
Good for
  • Its workflow does not require API keys, and Shodan InternetDB is listed as free with no key
  • Commands can be piped into each other and output can be formatted as text, flat, JSON, or CSV
  • Can be installed with npm or Homebrew using prebuilt binaries, so no Go toolchain is needed
Watch out for
  • The net command uses a bundled offline database by default, so live results require the --live option
  • Depends on third-party sources such as crt.sh, Shodan InternetDB, grep.app, and web archives

metabigor at a glance

Type
Open-source project
Pricing
Not confirmed. Check the site
Open source
Yes · Source code
Language
English
Last checked
Oct 6, 2026 · Online when checked
Listed
Oct 5, 2026

metabigor alternatives

Tools and sites you could use instead, ranked by how closely they match.

All 24 alternatives

Popular in Domain, IP & DNS Lookup

Well-known listings from the same topic.

All 44

metabigor FAQ

Does metabigor require API keys?
The project states that it works without asking users to register for an API key. Shodan InternetDB is described as free with no key.
Can metabigor be installed without Go?
Yes. The npm and Homebrew installations ship the same prebuilt binary for each platform, so no Go toolchain is needed.
How does the net command get its data?
By default, net searches a bundled offline database. Adding --live queries live sources instead.
Is something wrong or out of date?

Tell us and an editor will check it.

Own this website?

Claim the listing and suggest updates yourself. An editor checks every claim first.

Claim this listing