Open-source investigation

Look it up.
Follow the evidence.

Domain and IP reconnaissance built entirely on public data. No paid APIs, no black boxes — just what is publicly observable, and where each claim came from.

What we build

Services

2 live · 1 in the workshop

Codecaptives is the parent. Each service runs on its own subdomain, shares one engine, and is billed — or not — separately.

How it works

1

Give it a target

A domain or an IP. That is the entire input — no account, no configuration, no dataset to download first.

2

It resolves everything

DNS and delegation, TLS certificates, certificate transparency, mail and SPF/DMARC policy, network ownership, exposure probes.

3

You get evidence

A graph of relationships, ranked findings, and the provenance behind each claim. Export it as a report or query the same engine over HTTP.

In the workshop

Dissect

Image metadata explorer

An EXIF and metadata explorer for images. Drag a file in and see exactly what it carries — camera, GPS coordinates, editing history, embedded thumbnails — then strip it before sharing. Same open-data philosophy, applied to photographs.

dissect.codecaptives.com is not deployed. This stays disabled until it is.

01

Open data only

Every finding traces to public sources — BGP routing tables, certificate transparency logs, WHOIS, DNS. No paid API sits in the path.

02

Evidence, not vibes

Findings carry provenance: where each signal came from, when it was collected, and how confident the engine is in it.

03

Self-hosted

One container, an ephemeral database, no vendor lock-in. No account required to look something up.