Skip to content

πŸ” Kenya β€” Deep Passive Infrastructure Assessment (2026)#23

Open
leetcrypt wants to merge 1 commit into
Ringmast4r:mainfrom
leetcrypt:research/kenya-deep-recon-2026
Open

πŸ” Kenya β€” Deep Passive Infrastructure Assessment (2026)#23
leetcrypt wants to merge 1 commit into
Ringmast4r:mainfrom
leetcrypt:research/kenya-deep-recon-2026

Conversation

@leetcrypt
Copy link
Copy Markdown

Kenya Deep Passive Reconnaissance

Overview

Comprehensive passive assessment of Kenya government digital infrastructure (ke).

Findings Summary

Metric Count
Subdomains 1182
Live Hosts 458
SSL Certs Analyzed 20
ASN Mappings 22
DNS Records 25
Historical URLs 10

Assessment Phases

  1. Subdomain Enumeration (Subfinder + Amass passive)
  2. HTTP Probing + Tech Detection (httpx with Wappalyzer)
  3. WHOIS Analysis (registrar, dates, nameservers)
  4. SSL/TLS Certificates (chain, expiry, issuer)
  5. Email Security (SPF: Not Found, DMARC: Not Found)
  6. Security Headers (HSTS, CSP, X-Frame-Options)
  7. Network Topology (ASN mapping, IP geolocation)
  8. DNS Deep Analysis (A, AAAA, MX, NS, TXT, SOA, CNAME)
  9. Historical URLs (GAU/Wayback Machine)

Files Added

  • RESEARCH/kenya-deep-recon-2026/README.md β€” Full report
  • RESEARCH/kenya-deep-recon-2026/*.txt β€” Raw data (11 files)
  • CYBER RECON TOUR/Africa/kenya-websites.txt β€” Domain list

🎬 Video

https://archive.org/details/odint-kenya-passive-recon-2026

Methodology

All reconnaissance is passive only. No active exploitation, no unauthorized access.
Rate-limited (5 req/s). Tools: subfinder, amass, httpx, openssl, dig, curl, gau, whois.


Contributed by OptinAmpOut β€” Archonic Sentinel

Enhanced recon: 1182 subdomains, 458 hosts, 20 SSL certs,
22 ASN mappings, email security (SPF/DMARC), security headers,
network topology. All passive reconnaissance.

Video: https://archive.org/details/odint-kenya-passive-recon-2026
@leetcrypt
Copy link
Copy Markdown
Author

πŸ“Ή Video Companion β€” OSINT Tourism

Full passive recon walkthrough: https://archive.org/details/odint-kenya-passive-recon-2026

Narrated terminal recordings: subdomain enumeration, HTTP fingerprinting, DNS/DMARC analysis, Nuclei passive scan.

🎬 Archive.org permanent link β€” CC BY 4.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant