NIGHTGLASS
←  Kernal Tech

Nightglass.

Open-source intelligence, gathered without touching the target

A passive reconnaissance toolkit. Point it at a domain, a handle or an address and it assembles what the public internet already says — registration records, certificate history, exposed infrastructure, archived pages, breach appearances — into one timeline you can actually read. Nothing is scanned, probed or logged in at. Every source is one a stranger could open in a browser.

Passive only Python Async collectors Evidence log Export: JSON · CSV · PDF

The console

Run a sweep on any domain. Every line is collected live from a public source, and every finding keeps the source it came from.

nightglass — sweep Live

Collectors

Each module reads one class of public record and writes into a shared timeline.

Registration

Ownership, registrar, creation and expiry dates, historical registrant changes.

RDAP · WHOIS history

Infrastructure

Hosts, name servers, ASN and netblock ownership, hosting provider and region.

DNS · RIR records

Certificates

Every certificate ever issued for the name — which reveals subdomains nobody published.

Certificate transparency

Email exposure

Addresses appearing in public sources, and which known breach corpora list the domain.

Public breach indexes

Handles

Matching usernames across public platforms, with confidence scoring rather than assertions.

Public profile pages

Archive

Historical snapshots — what a site said before it said something else.

Web archives

Document metadata

Author, tool and timestamp fields left inside public PDFs, images and office files.

Published files

Link graph

How the findings connect — shared name servers, reused registrant details, common certificates.

Derived
SpecificationNightglass
CollectionPassive only — no scanning or probing
RuntimePython, async collectors
InterfaceCLI and web console
OutputUnified timeline, JSON / CSV / PDF
AuditEvery finding keeps its source and retrieval time
StatusIn development

Scope and conduct

Passive reconnaissance is lawful in most jurisdictions precisely because it stays within what is already published. Nightglass is built to keep it that way.

  • No port scanning, no probing, no authentication attempts, no rate-limit evasion.
  • Robots and terms of service are respected; sources that forbid automation are skipped.
  • Every finding records where it came from and when, so any claim can be checked.
  • Intended for authorised security assessment, due diligence and brand protection.
Back to Kernal Tech