# wtfis を Homebrew, Nix でインストール

wtfis のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:wtfis
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install wtfis
```

  証拠: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#wtfis
```

  証拠: nixpkgs package indexes: pkgs/by-name/wt/wtfis/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## パッケージ情報

- **パッケージキー:** brew:wtfis
- **パッケージマネージャ:** Homebrew
- **バージョン:** 0.15.0
- **ソース概要:** Passive hostname, domain, and IP lookup tool
- **ホームページ:** <https://github.com/pirxthepilot/wtfis>
- **リポジトリ:** <https://github.com/pirxthepilot/wtfis>
- **最終更新:** 2026-05-15T11:13:24Z
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- wtfis (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 0.15.0
## プロジェクトの歴史と使われ方

wtfis is a Python command-line OSINT lookup tool for hostnames, domains, FQDNs, and IP addresses. Its niche is human-readable passive enrichment: it gathers reputation, resolution, WHOIS, geolocation, ASN, scanner-noise, and malware-distribution context from several services while trying to minimize API calls against free-tier accounts.

### プロジェクトの歴史

The author introduced wtfis publicly in a 2022-08-13 blog post, explaining that it was written to replace repeated manual website lookups for FQDN and domain information with one terminal command. The README keeps the same design framing: the tool is for non-robots, organized into readable panels, and named as a play on `whois`.

The earliest PyPI release with files is version 0.0.3 on 2022-08-12, one day before the author's announcement post. By 2026-04-06, PyPI listed 0.15.0 as the current release, showing that the project continued beyond the initial personal utility into a maintained OSINT CLI.

### 採用の歴史

wtfis was adopted in the security-tooling niche because it wraps several common reputation and enrichment services behind one readable terminal output. The README documents VirusTotal, AbuseIPDB, GreyNoise, IP2Location, IP2Whois, IPinfo, IPWhois, Shodan, and URLhaus, with many optional so users can stay within quotas or add richer context when they have keys.

A Hacker News submission in May 2025 described it as a passive hostname, domain, and IP lookup tool for non-robots and drew visible discussion, which is a useful secondary signal that the project had moved beyond the author's personal workflow into the broader security-operations audience.

### 使われ方

The basic workflow is `wtfis FQDN_OR_DOMAIN_OR_IP`, with optional flags to enable all enrichments or specific services such as Shodan, GreyNoise, AbuseIPDB, and URLhaus. It accepts defanged input, can limit displayed resolutions, can turn off color, and can present one-column output for terminals where layout matters.

Credentials are optional and are loaded from environment variables or `~/.env.wtfis`. That design matches its free-tier posture: useful defaults work without every service configured, while analysts can add API keys for more complete enrichment.

### パッケージ好きにとっての重要性

wtfis is significant as a compact example of modern security CLI ergonomics: it does not try to be a full SIEM or threat-intelligence platform, but it packages the first few minutes of domain/IP triage into a readable terminal command.

### タイムライン

- 2022-08-12: Earliest PyPI file-backed release, 0.0.3.
- 2022-08-13: The author announced wtfis as a passive FQDN and domain lookup tool.
- 2023: The README documented GreyNoise support as quota-sensitive and off by default.
- 2025-05-12: wtfis appeared on Hacker News as a passive lookup tool for non-robots.
- 2026-04-06: PyPI listed release 0.15.0.

### Related projects

- wtfis aggregates data from VirusTotal, AbuseIPDB, GreyNoise, IP2Location, IP2Whois, IPinfo, IPWhois, Shodan, and URLhaus.
- The author describes the project name as a play on the traditional `whois` command.

### ソース

- <https://github.com/pirxthepilot/wtfis#readme>
- <https://news.ycombinator.com/item?id=43967962>
- <https://pirx.io/posts/2022-08-13-wtfis-passive-fqdn-and-domain-lookup-tool/>
- <https://pypi.org/pypi/wtfis/json>


## セキュリティノート

wtfis に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.env.wtfis

## Credential files

- Unix: ~/.env.wtfis
## 他のパッケージマネージャ記録

- Nix - wtfis: normalized package name match | nixpkgs package indexes: pkgs/by-name/wt/wtfis/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/wtfis.yml](https://github.com/mxcl/pkgdb/blob/main/combined/wtfis.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
