ipbak

About & Resources

Understanding the intelligence checks and APIs powering this tool

What is this?

This application is a unified Open Source Intelligence (OSINT) dashboard designed to aggregate and simplify reconnaissance tasks for security researchers, system administrators, and developers.

Instead of using multiple terminal utilities or visiting various provider websites, you can gather DNS records, geolocation data, subdomains, registration history, and SSL information all from a single query.

Modules & Methodology

IP Intelligence

Resolves the target domain to its underlying IP addresses and performs geolocation lookups. Identifies the Hosting Provider, ASN, and geographic location to help spot anomalies.

Source: ip-api.com

Interactive Mapping

Visualizes geolocation intelligence interactively. Displays the resolved physical location of an IP address or domain on real-world map tiles using Leaflet.

Source: OpenStreetMap

DNS Records

Fetches common DNS records like A, MX (Mail Exchange), NS (Name Servers), and TXT records (used for SPF/DMARC verifications) directly over DNS-over-HTTPS.

Source: Cloudflare DoH

Subdomains

Queries Certificate Transparency (CT) logs to find other subdomains that have had SSL certificates issued for them. This is a passive reconnaissance technique.

Source: crt.sh

SSL/TLS Certificate

Opens a raw TLS socket to fetch the server's certificate. We check the issuer, validity period, expires date, and subject alternative names.

Source: Direct TCP/TLS Socket

Security Headers

Sends an HTTP HEAD request to observe response headers such as Content-Security-Policy, Strict-Transport-Security, and checks for server leakages (X-Powered-By).

Source: HTTP Response

RDAP / WHOIS

Uses the Registration Data Access Protocol (the modern alternative to WHOIS) to find who registered the domain, registration dates, and abuse contact information.

Source: rdap.org API

Common Paths

Performs a quick, non-intrusive HTTP check against common paths to identify exposed administrator panels, `.env` files, `.git` configs, and backups.

Source: HTTP Probing

MAC Lookup

Looks up the OUI (Organizationally Unique Identifier) of a MAC address to determine the hardware manufacturer of a network interface card.

Source: maclookup.app