# Installer wtfis avec Homebrew, Nix

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de wtfis pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:wtfis
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install wtfis
```

  Preuve: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#wtfis
```

  Preuve: nixpkgs package indexes: pkgs/by-name/wt/wtfis/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Faits du paquet

- **Clé du paquet:** brew:wtfis
- **Gestionnaire de paquets:** Homebrew
- **Version:** 0.15.0
- **Résumé source:** Passive hostname, domain, and IP lookup tool
- **Page d'accueil:** <https://github.com/pirxthepilot/wtfis>
- **Dépôt:** <https://github.com/pirxthepilot/wtfis>
- **Dernière mise à jour:** 2026-05-15T11:13:24Z
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- wtfis (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 0.15.0
## Historique du projet et usages

wtfis is a Python command-line OSINT lookup tool for hostnames, domains, FQDNs, and IP addresses. Its niche is human-readable passive enrichment: it gathers reputation, resolution, WHOIS, geolocation, ASN, scanner-noise, and malware-distribution context from several services while trying to minimize API calls against free-tier accounts.

### Historique du projet

The author introduced wtfis publicly in a 2022-08-13 blog post, explaining that it was written to replace repeated manual website lookups for FQDN and domain information with one terminal command. The README keeps the same design framing: the tool is for non-robots, organized into readable panels, and named as a play on `whois`.

The earliest PyPI release with files is version 0.0.3 on 2022-08-12, one day before the author's announcement post. By 2026-04-06, PyPI listed 0.15.0 as the current release, showing that the project continued beyond the initial personal utility into a maintained OSINT CLI.

### Historique d'adoption

wtfis was adopted in the security-tooling niche because it wraps several common reputation and enrichment services behind one readable terminal output. The README documents VirusTotal, AbuseIPDB, GreyNoise, IP2Location, IP2Whois, IPinfo, IPWhois, Shodan, and URLhaus, with many optional so users can stay within quotas or add richer context when they have keys.

A Hacker News submission in May 2025 described it as a passive hostname, domain, and IP lookup tool for non-robots and drew visible discussion, which is a useful secondary signal that the project had moved beyond the author's personal workflow into the broader security-operations audience.

### Modes d'utilisation

The basic workflow is `wtfis FQDN_OR_DOMAIN_OR_IP`, with optional flags to enable all enrichments or specific services such as Shodan, GreyNoise, AbuseIPDB, and URLhaus. It accepts defanged input, can limit displayed resolutions, can turn off color, and can present one-column output for terminals where layout matters.

Credentials are optional and are loaded from environment variables or `~/.env.wtfis`. That design matches its free-tier posture: useful defaults work without every service configured, while analysts can add API keys for more complete enrichment.

### Pourquoi les passionnés de paquets s'y intéressent

wtfis is significant as a compact example of modern security CLI ergonomics: it does not try to be a full SIEM or threat-intelligence platform, but it packages the first few minutes of domain/IP triage into a readable terminal command.

### Chronologie

- 2022-08-12: Earliest PyPI file-backed release, 0.0.3.
- 2022-08-13: The author announced wtfis as a passive FQDN and domain lookup tool.
- 2023: The README documented GreyNoise support as quota-sensitive and off by default.
- 2025-05-12: wtfis appeared on Hacker News as a passive lookup tool for non-robots.
- 2026-04-06: PyPI listed release 0.15.0.

### Related projects

- wtfis aggregates data from VirusTotal, AbuseIPDB, GreyNoise, IP2Location, IP2Whois, IPinfo, IPWhois, Shodan, and URLhaus.
- The author describes the project name as a play on the traditional `whois` command.

### Sources

- <https://github.com/pirxthepilot/wtfis#readme>
- <https://news.ycombinator.com/item?id=43967962>
- <https://pirx.io/posts/2022-08-13-wtfis-passive-fqdn-and-domain-lookup-tool/>
- <https://pypi.org/pypi/wtfis/json>


## Notes de sécurité

Aucun manifest local de gestion des secrets correspondant n'a été trouvé pour wtfis. Les métadonnées de paquet Nucleus restent publiées ici afin que la couverture future dispose d'une URL stable.



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.env.wtfis

## Credential files

- Unix: ~/.env.wtfis
## Autres enregistrements de gestionnaires de paquets

- Nix - wtfis: normalized package name match | nixpkgs package indexes: pkgs/by-name/wt/wtfis/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/wtfis.yml](https://github.com/mxcl/pkgdb/blob/main/combined/wtfis.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
