What is Metabigor?
Metabigor allows you do query from command line to awesome Search Engines (like Shodan, Censys, Fofa, etc) without any API key.

But Why Metabigor?

• Don't use your API key so you don't have to worry about litmit of API quotation.*
  
• Do query from command line without Premium account.*
  
• Get more result without Premium account. *
  
• But I have an Premium account why do I need this shit?
  
  • Again Metabigor will not lose your API quotation.
  • Your query will optimized so you gonna get more result than using it by hand or API key.
  • Never get duplicate result.*

How it works?
Metabigor gonna use your cookie or not to simulate search from browser and optimize the query to get more result.

Search Engine currently supported

• Shodan.
• Censys.
• Fofa Pro.

Installation

git clone https://github.com/j3ssie/Metabigor
 cd Metabigor
 pip3 install -r requirements.txt

Demo

How to use

Basic Usage

./metabigor.py -s <source> -q '<your_query>' [options]

Check out the Advanced Usage to explore some awesome options

Example commands
Note: Fill your credentials or your sessions on config.conf if you wan't to get more results.

./metabigor.py -s fofa -q 'title="Dashboard - Confluence" && body=".org"' 

./metabigor.py -s fofa -q 'title="Dashboard - Confluence" && body=".org"' -b --disable_pages

./metabigor.py -s shodan -q 'port:"3389" os:"Windows"' --debug

Options

[*] Setup session
 ===============
 Do command below or direct modify config.conf file
 ./metabigor.py -s shodan --cookies=<content of polito cookie>
 ./metabigor.py -s censys --cookies=<content of auth_tkt cookie>
 ./metabigor.py -s fofa --cookies=<content of _fofapro_ars_session cookie>
 
 
 [*] Basic Usage
 ===============
 ./metabigor.py -s <source> -q '<your_query>' [options]
 
 [*] More Options
 ===============
   -d OUTDIR, --outdir OUTDIR
                         Directory output
   -o OUTPUT, --output OUTPUT
                         Output file name
   --raw RAW             Directory to store raw query
   --proxy PROXY         Proxy for doing request to search engine e.g:
                         http://127.0.0.1:8080
   -b                    Auto brute force the country code
   --disable_pages       Don't loop though the pages
   --store_content       Store the raw HTML souce or not
   --hh                  Print this message
   --debug               Print debug output
 
 
 [*] Example commands
 ===============
 ./metabigor.py -s fofa -q 'title="Dashboard - Confluence" && body=".org"' -b
 ./metabigor.py -s fofa -q 'title="Dashboard - Confluence" && body=".org"' -b --disable_pages
 
 ./metabigor.py -s shodan -q 'port:"3389" os:"Windows"' --debug
 ./metabigor.py -s shodan -Q list_of_query.txt --debug -o rdp.txt
 
 ./metabigor.py -s censys -q '(scada) AND protocols: "502/modbus"' -o something  --debug --proxy socks4://127.0.0.1:9050
 

TODO

• Predine query to do specific task like subdomain scan, portscan
• Adding more search engine.
  • ZoomEye
  • Baidu

Credits
Logo from flaticon by Vitaly Gorbachev and ascii logo converted by picascii

Contact
@j3ssiejjj