Inspiration
While performing cybersecurity reconnaissance and bug bounty research, I observed that most tools generate large amounts of raw data but do not provide meaningful insights. Analysts often need to manually correlate data from multiple sources, which is time-consuming and error-prone.
I wanted to build a system that not only collects OSINT data but also transforms it into structured, actionable intelligence using an AI-driven approach.
What it does
VulnAI Pro is an AI-powered OSINT and attack surface intelligence platform.
It performs passive reconnaissance using multiple public data sources such as certificate transparency logs, DNS records, historical archives, and threat intelligence feeds.
The platform then analyzes the collected data to generate:
- AI Risk Score
- Executive Security Summary
- Attack Surface Analysis
- Actionable remediation recommendations
All operations are passive and do not directly interact with the target system.
How I built it
The system is built using Python and Flask, with integration of multiple OSINT APIs and intelligence sources.
A modular scanning engine aggregates data from different sources and processes it using a custom AI-inspired risk scoring model. The frontend is designed as a hacker-style dashboard to present clear, structured, and readable results.
Challenges I ran into
- Filtering noisy and irrelevant OSINT data
- Managing API rate limits across multiple sources
- Designing meaningful risk scoring instead of raw output
- Ensuring ethical compliance with passive-only scanning
Accomplishments that I'm proud of
- Built a fully functional OSINT intelligence platform
- Converted raw reconnaissance data into actionable insights
- Designed a clean and professional cybersecurity interface
- Implemented ethical scanning constraints
What I learned
- Practical OSINT aggregation and analysis techniques
- Attack surface modeling and risk evaluation
- Building modular cybersecurity tools
- Importance of usability in security platforms
What's next for VulnAI Pro
- Integration with additional intelligence APIs (Shodan, Hunter.io)
- Enhanced AI-based analysis and false positive reduction
- Exportable reports (JSON/PDF)
- Continuous monitoring and automated scanning
Built With
- alienvault-otx)
- css
- dns-resolution
- flask
- hackertarget
- html
- javascript
- osint-apis-(crt.sh
- python
- ssl/tls
- wayback-machine
Log in or sign up for Devpost to join the conversation.