OCV FingerPrint - Deep AI Technology Discovery

Next-generation technology discovery engine using multi-phase AI orchestration (Ollama/Groq) and dynamic browser probing for surgical fingerprinting precision.

Warning

Security First: Never commit your .env file. It contains sensitive API keys. Use the provided .env.example as a template.

• Dynamic Probing: AI analyzes the initial page state and generates custom JavaScript snippets (Deep Probes) to confirm versions.
• Multi-Provider Support: Choose between local inference via Ollama (e.g., Phi-4, GPT-OSS 120B) or cloud-based Groq (Llama 3.1).
• Anti-Hallucination: Rigid reasoning layers ensure that only technologies with positive proof are reported.
• Deep Versioning: Accurate detection of Vue, Nuxt, Next.js, and complex WordPress plugin stacks.

🛠️ Installation

1. Clone the repository:

   git clone https://github.com/OCV-Researcher/ocv-fingerprint.git
   cd ocv-fingerprint

2. Install dependencies:

   pip install -r requirements.txt
   playwright install chromium

3. Configure the environment: Copy .env.example to .env and adjust your settings:

   cp .env.example .env

⚙️ Configuration

Edit .env to select your provider:

• Ollama (Default): Best for privacy and local processing.

  AI_PROVIDER=OLLAMA
  OLLAMA_MODEL=gpt-oss:120b-cloud

• Groq: Best for speed and high-end cloud inference.

  AI_PROVIDER=GROQ
  GROQ_API_KEY=your_key_here
  GROQ_MODEL=openai/gpt-oss-120b

• Scan Configuration:

  # Number of dynamic probes suggested by AI (Phase 1)
  SCAN_NUM_PROBES=8

📖 Usage

Run a deep scan on any URL:

python main.py https://example.com

🧠 How it Works

The tool operates in four layers:

1. Layer 0: Gathering raw headers, globals, and DOM structure.
2. Phase 1 (AI): Analyzing clues and suggesting 8 targeted JS probes.
3. Layer 1: Executing the probes in the browser.
4. Phase 2 (AI): Synthesizing all evidence into the final technology table.

---

Created with ❤️ for the security and development community.

⚖️ Legal Disclaimer

This tool is provided for educational and authorized security testing purposes only. The author is not responsible for any misuse or damage caused by this program. Always ensure you have explicit permission before scanning any target. Use of this tool for attacking targets without prior mutual consent is illegal.