ipbak - OSINT & IP Intelligence Dashboard

Inspired by: ipbak CLI by NecatiUlker

ipbak is a professional, security-grade IP Intelligence, Domain OSINT, MAC Lookup, and Full Site Audit utility. Originally inspired by the command-line utility, it's now built as a unified web dashboard designed for security researchers, system administrators, and developers.

Features

• IP Intelligence: Resolves IPs and domains, performing geolocation lookups to identify ISP, ASN, and physical locations.
• Full Site Audit: Performs comprehensive security scans for domains, including:
  • DNS Records: Fetches A, MX, NS, and TXT records.
  • Subdomains: Discovers subdomains actively via Certificate Transparency logs.
  • SSL/TLS Certificates: Validates certificate details, issuers, and expiration dates via direct TLS socket.
  • Security Headers: Inspects HTTP headers for security practices (HSTS, CSP, etc.).
  • Common Paths / Directory Scan: Scans domains for exposed admin panels, .env files, backups, and Git configurations.
  • RDAP / WHOIS: Fetches domain registration history, registrar details, and abuse contacts.
• MAC Lookup: Resolves the hardware manufacturer (OUI) for any given MAC address.

How to Run

1. Clone the repository.
2. Install dependencies:

   npm install

3. Start the development server:

   npm run dev

4. Access the dashboard via http://localhost:3000.

Open Source & APIs Used

We strongly rely on the open-source community and reliable public APIs. This project utilizes the following services and tools:

• Next.js & React - Frontend framework.
• Tailwind CSS - Utility-first styling.
• Lucide React - Beautiful, open-source icons.
• Leaflet & React Leaflet - Interactive maps.
• ip-api.com - IP geolocation and intelligence data.
• OpenStreetMap - Map tiles and geographic data.
• Cloudflare DoH (cloudflare-dns.com) - DNS-over-HTTPS lookups.
• crt.sh - Certificate Transparency logs for subdomain discovery.
• rdap.org - Registration Data Access Protocol endpoints.
• maclookup.app - MAC address OUI resolution.

Disclaimer

All data and intelligence provided by this application are aggregated in real-time from public Open Source Intelligence (OSINT) and third-party APIs. We do not host, control, or verify the accuracy of this information. This tool is provided for educational, research, and informational purposes only. The creators decline any responsibility for inaccuracies, or for any actions taken based on these results. Please verify findings through official channels.