// what it is
Description
Web-driven recon framework written by Steve Micallef. Configure a target (IP, domain, email, name), pick modules, and let it run for hours — feed it back into a HackerOne or pentest engagement.
// use cases
What people use it for
- Hands-off bulk OSINT for an external pentest scope
- Threat-actor profiling using passive-only sources
- Long-running engagement footprint tracking
// commands
The commands you'll type
Start the web UI
$ python3 sf.py -l 127.0.0.1:5001