What is Atmosphere?

Atmosphere is a lightweight, zero-external-dependency OSINT tool designed to run entirely on your own infrastructure. It wraps multiple reconnaissance primitives — geolocation, DNS, SSL, Whois, HTTP headers — into a single coherent UI that feels like a GitHub-native dark interface.

The backend is pure Go with no ORM, no framework, and no persistent database. All lookups are performed in real-time using Go's standard library and a small set of well-known public APIs.

Architecture

Project Structure

Installation

Prerequisites

Clone & Build

git clone https://github.com/MatrixTM26/Atmosphere.git
cd Atmosphere
chmod +x build.sh
./build.sh

The build script runs go mod tidy, compiles the binary to ./atmosphere, and marks it executable.

Manual Build

go mod tidy
go build -o atmosphere ./cmd/server/main.go
chmod +x atmosphere

Run

./atmosphere
# Server starts on http://localhost:8080

Quick Start

After running ./atmosphere, open http://localhost:8080 in your browser.

Self Scan

Self Scan is the landing view. When opened, it automatically queries the server for the visitor's own IP-derived intelligence without any user input. All data is collected server-side from HTTP headers.

What it collects

IP Lookup

Resolves geolocation data for any public IPv4 or IPv6 address. Results are displayed in a structured panel with a dual-mode map (2D Leaflet and interactive 3D globe) and deep-linked to Google Maps and OpenStreetMap.

Example request

curl "http://localhost:8080/api/geo?ip=202.4.186.101"

Response fields

Batch Lookup

Resolves geolocation data for multiple IP addresses simultaneously. Enter one IP per line; results render in a collapsible per-IP panel. Each entry is individually exportable as JSON.

Request body

{
  "ips": [
    "8.8.8.8",
    "1.1.1.1",
    "202.4.186.101"
  ]
}

DNS Tools

Three DNS operations in one view: forward hostname resolution, reverse PTR lookup, and full DNS record inspection. All lookups use Go's net.Resolver with a 4-second timeout.

Port Scan

The DNS Tools view also includes a port availability check against 18 common TCP ports. Ports are probed with a 2-second dial timeout; response latency is reported in milliseconds.

SSL Certificate

Dials a host on TCP port 443 using Go's crypto/tls package and inspects the presented certificate chain. No HTTP request is made — this is a raw TLS handshake only.

Certificate fields

Example request

curl "http://localhost:8080/api/ssl?host=github.com"

Whois Lookup

Performs a WHOIS query over TCP port 43 against the appropriate registry server for the queried TLD. Supports automatic referral chaining (IANA → TLD-specific server).

Supported TLDs

All other TLDs fall back to whois.iana.org as the referral resolver.

Example request

curl "http://localhost:8080/api/whois?domain=github.com"

Header Inspector

Issues an HTTP GET request to any target URL and returns all response headers along with a security header presence report. Follows up to 10 redirects.

Security header flags

Network Tools

Provides two HTTP-level network diagnostic utilities: redirect chain tracing and raw port checking on arbitrary hosts.

curl "http://localhost:8080/api/redirect?url=http://github.com"

API Reference

All endpoints return Content-Type: application/json. Error responses use a consistent envelope.

Error envelope

{
  "error": "description of what went wrong"
}

Endpoint summary

Build & Deploy

Build script

#!/usr/bin/sh

go mod tidy
go build -o atmosphere ./cmd/server/main.go
chmod +x atmosphere
echo "build finished."

Run as a background service

nohup ./atmosphere > atmosphere.log 2>&1 &
echo $! > atmosphere.pid
# To stop:
kill $(cat atmosphere.pid)

Systemd unit (optional)

[Unit]
Description=Atmosphere OSINT Tool
After=network.target

[Service]
ExecStart=/opt/atmosphere/atmosphere
WorkingDirectory=/opt/atmosphere
Restart=on-failure
User=nobody

[Install]
WantedBy=multi-user.target

sudo systemctl enable atmosphere
sudo systemctl start atmosphere
sudo systemctl status atmosphere

License

Atmosphere is open source software. See the LICENSE file in the repository root for the full text.