LOADING N0PERM…
A modular desktop intelligence suite for authorized security research, digital footprint analysis, and threat intelligence investigations, with local SQLite storage for investigation records.
.-------..' _____ './ / + \ \|---| [o] [o] |---|| | + | || \ === / |\ |:::| /'. --- .''---------'/ TARGET LOCK \.' '.'-------------------'
Engineered from the ground up for authorized security professionals, threat researchers, and penetration testers. Every feature executes with zero remote tracking.
Deep public repository analysis via official REST endpoints. Automated query translation, language filtering, commit history auditing, and live API rate-limit telemetry with optional personal access token support.
High-speed, bounded asynchronous verification of handles and digital footprints across developer ecosystems, social platforms, and public registries with strict non-attribution safeguards.
Multi-provider query translation across open public search engines, technical documentation aggregators, and vulnerability indexes with client-side deduplication and zero-leak query handling.
Persistent time-series observation delta tracking (NEW, UNCHANGED, MODIFIED, MISSING) with SHA-256 state hashing and interactive vector relationship graphs with degree centrality nexus highlighting.
Transactional SQLite dossier persistence with foreign keys, forensic chain-of-custody logging, untrusted document entity extraction (UDEE), and multi-format exports (OASIS STIX 2.1, ReportLab PDF, CWE-1236 safe CSV, JSON).
Strict client-side execution with zero remote tracking or telemetry. In-kernel SSRF destination guards prohibiting private/RFC-1918/cloud metadata queries, and automated secret-redacting log streams.
Designed around strict separation of concerns, asynchronous non-blocking UI threads, kernel-level SSRF defenses, and offline SQLite evidence integrity.
High-contrast cybersecurity theme (#060b08, #0a120e) with electric matrix green accents. Interactive QGraphicsView vector canvas with smooth zooming/panning and QTableWidget evidence dossiers.
Multithreaded execution outside the UI event loop. Tasks listen to CancellationToken for cooperative instant aborts and emit live thread-safe Qt signals for progress and finding delivery.
Modular providers for DNS (dnspython RFC 1035), RDAP (RFC 7480/7484), IP & ASN Routing, TLS Handshakes, crt.sh Subdomains, Website Headers, Identity, Search, and Repository analysis.
Strict destination verification blocking RFC 1918, loopback (127.0.0.0/8), link-local cloud metadata (169.254.169.254), and CGNAT. Per-hop redirect re-validation and CWE-1236 formula injection defense.
Local database stored at %LOCALAPPDATA%\N0PERM_OSINT\cases.db. Enforced foreign key cascades, idempotent versioned schema migrations (001-004), and automated pre-migration backups.
Standalone, self-contained Windows desktop package. No external servers, no cloud telemetry, and 100% free of licensing fees.
Get-FileHash -Algorithm SHA256 .\N0PERM-RECON-Setup.exeAuthorized Scope: N0PERM RECON is engineered strictly for lawful cybersecurity audits, defensive surface mapping, authorized penetration tests, and ethical digital exposure analysis within defined scopes of work.
Zero Offensive Actions: The software deliberately excludes port scanners, automated exploit injectors, password guessers, and credential-stuffing engines. It operates exclusively via passive public DNS, authoritative RDAP registries, Certificate Transparency logs, public REST endpoints, and safe HTTP header inspections.