Theme: Ember
OSINT orchestration, media intelligence, and Reporter-grade artifacts for profile, surface, fusion, and OCR-led investigations.
Silica-X is a Python intelligence framework for authorized OSINT work. It combines profile reconnaissance, domain-surface analysis, fusion scoring, public-media reconnaissance, and OCR image scanning into one runtime with plugins, filters, engine policies, and categorized artifacts.
- Reporter is now the primary reporting layer for HTML and CLI summaries.
- Media reconnaissance and OCR image scanning are first-class lanes instead of side notes.
- HTML artifacts are organized as case views with graphs, categorized sections, extension drill-downs, vulnerability context, and a closing
Reporter Brief. - The docs tree and website are aligned to the current runtime instead of old release-planning notes.
- Platform intelligence now loads from an expanded manifest with
91validated platforms, including major high-value public OSINT surfaces. - Profile scanning can emit live pipeline events as platforms resolve, allowing downstream enrichment to start before the full scan ends.
- Live enrichment now hunts contact and credential signals from
FOUNDprofile rows during the scan itself. - A persistent SQLite knowledge base tracks targets, found profiles, contact signals, fingerprints, and risk indicators across runs.
silica-x doctornow reports engine health, knowledge-base status, and Docker runtime status.- Docker is now a first-class execution path through
--docker, with runtime detection, image build support, and mounted output persistence. - Tor runtime management now has a higher-level setup layer that can deploy
torrc, check readiness, and coordinate startup.
profilescans usernames and public profiles across platform manifests.surfaceanalyzes domain exposure, transport posture, and surface intelligence.fusioncorrelates profile and surface evidence into scored intelligence.orchestrateruns the policy-led orchestration pipeline directly.ocrruns dedicated OCR image scanning across local paths and remote URLs.- media plugins add public image/video/post-text reconnaissance and stego-style triage.
pip install silica-x
silica-x
silica-x doctorimport silica_x
print(silica_x.__version__)From source:
git clone https://github.com/voltsparx/Silica-X.git
cd Silica-X
pip install -e .
silica-x --helpOptional extras:
pip install ".[reports]"
pip install ".[ocr]"pytesseract is a Python wrapper, but OCR still depends on a reachable tesseract binary. Silica-X now reports which OCR/image backends were actually available during the run, and silica-x doctor gives a quick local diagnostic pass for OCR, Tor, Reporter backends, output settings, and runtime inventory.
Docker runtime:
silica-x --docker
silica-x prompt --docker
silica-x profile alice --docker
silica-x surface example.com --docker
silica-x prompt --docker --torOn first use, Silica-X can check Docker, install it when supported and approved, build the image, and then launch the requested command inside the container.
silica-x profile alice --html
silica-x surface example.com --html
silica-x fusion alice example.com --html
silica-x ocr ./captures/poster.png --url https://example.com/image.png --html
silica-x profile alice --plugin media_recon_engine --plugin post_signal_intel --plugin stego_signal_probe --html
silica-x prompt
silica-x prompt --docker
silica-x doctorSilica-X writes artifacts under output/ and can emit:
- CLI summaries
- JSON payloads
- CSV exports plus companion CSV slices
- HTML Reporter case views
- SQLite case stores
- DOCX case documents
- PDF case documents
- run logs and framework logs
Reporter is designed to make the result easier to triage by grouping identity findings, reliability issues, correlation, vulnerabilities, plugin/filter signals, OCR/media lanes, and the final Reporter Brief.
Recent report/runtime improvements also include:
- live enrichment sections in HTML output when profile pipeline signals are captured
- relationship and graph-backed sections for fusion-style analysis
- persistent knowledge-base storage at
output/silica_x_kb.db - richer
doctorvisibility for OCR, Tor, Docker, engines, and output/runtime state
In prompt mode, attachables can be configured as session defaults with commands like:
enable plugin threat_conductor
enable filter contact_canonicalizer
enable module source-pack-01-module-1
config
- Docs Index
- Operator Guide
- Architecture
- Extensions
- Media Intelligence
- Reporter
- Development
- Docker Guide
- Website
Primary Pages URL:
https://voltsparx.github.io/Silica-X/
If that direct URL shows GitHub's "site not found" page, the usual cause is not the website files themselves. It usually means GitHub Pages is not currently serving the project site yet. For this repository, Pages must be enabled with GitHub Actions as the source, and the Silica-X Pages workflow must complete successfully on main or master.
- Legal and authorized use only
- Respect platform terms, privacy, and local law
- Do not use Silica-X for stalking, harassment, or unauthorized surveillance
Useful local checks:
python -m pytest -q
python -m ruff check .
python -m mypy
python -m compileall -q core filters modules plugins tests silica-x.py
python scripts/smoke_suite.py
silica-x doctor
silica-x --helpCore package naming:
- package install name:
silica-x - CLI entrypoint:
silica-x - Python import path:
silica_x
- Author: voltsparx
- Contact: voltsparx@gmail.com
- Repository: https://github.com/voltsparx/Silica-X