Wukong is a China-focused OSINT spinoff of the Speculator Project. It provides a Bash installer that turns a clean Debian 13 "Trixie" virtual machine into a workstation purpose-built for investigating the Chinese-language internet and Chinese companies.
The name comes from Sun Wukong (孙悟空), the Monkey King, whose 火眼金睛 — "fiery golden eyes" — see through any disguise or illusion. That is exactly what an analyst needs on Chinese sources, where the challenge is rarely finding text and almost always seeing through it: censored euphemisms, coded slang, and opaque corporate structures.
Wukong keeps the full general-purpose OSINT arsenal of Speculator and adds three China-specific layers:
- Language & culture layer — full CJK font stack (Simplified + Traditional), the
fcitx5Pinyin input method so you can type Chinese queries, Chinese locales, and offline dictionaries (CC-CEDICT, OpenCC Simplified↔Traditional conversion,jieba/pypinyin). - Sinophone OSINT layer — tools for the Chinese web (Baidu/Sogou dorking), social platforms (Weibo, Douyin, Xiaohongshu, Bilibili, WeChat 公众号), and cyberspace reconnaissance (FOFA, ZoomEye/Kunyu, Quake).
- Corporate due-diligence (KYC) layer — ICP 备案 lookup, corporate-registry workflows (GSXT, TianYanCha, QCC, Cninfo) and automated enumeration with ENScan_GO.
Lineage: Argos → Speculator → Wukong. Argos was the hundred-eyed giant; the Speculatores were Rome's scouts; Wukong is the eye that sees through deception on the Chinese net.
- Operating System: Debian 13 "Trixie" (amd64)
- Virtualisation: VirtualBox recommended (Guest Additions installed manually first)
- Disk: 50 GB minimum recommended
- RAM: 4 GB minimum recommended
- Permissions: sudo required
- Internet: required for downloads
- Note on Chinese sources: many mainland platforms require a +86 phone number, a mainland-China proxy/VPN, and/or an API key. Wukong installs the tooling; you supply credentials at runtime. See
documents/CHINA_TOOLKIT.md.
git clone https://github.com/SOsintOps/Wukong.git && cd Wukong && sudo ./wukong_install.shSimulate without changing the system:
sudo ./wukong_install.sh --dry-runAfter installation, reboot so the fonts, locales and fcitx5 input method load cleanly.
Full documentation lives in documentation/:
- Project Overview — the three China layers and inherited architecture.
- Source Material & Context — the texts analysed (thesis, Cyber Detective channel, online research) and what is / isn't yet verified.
- FAQ — OSINT, China OSINT, and this project.
- Methodology & Legal — access prerequisites, the KYC workflow, and the legal/OPSEC context.
- Tools index — one page per China-specific tool (install, access, usage, caveats).
The operational quick-reference (credentials, exact syntax, due-diligence steps) remains in documents/CHINA_TOOLKIT.md.
- Fonts:
fonts-noto-cjk(+extra), Arphic Kai/Ming (fonts-arphic-*), WQY fallback, colour emoji — renders Simplified and Traditional correctly. - Input method:
fcitx5+fcitx5-chinese-addons(Pinyin/Shuangpin) + tables, pre-configured with a US-keyboard + Pinyin profile. Toggle with Ctrl+Space. - Locales:
zh_CN.UTF-8andzh_TW.UTF-8enabled (system UI stays English/Italian). - Dictionaries & conversion: GoldenDict-NG, StarDict, CC-CEDICT (offline), OpenCC,
python3-pypinyin,python3-jieba.
| Tool | Purpose | Notes |
|---|---|---|
| Kunyu / ZoomEye CLI | Cyberspace asset recon | ZoomEye API key |
| Fofax / GoFOFA / fofa-py | FOFA ("Chinese Shodan") queries | FOFA API key |
| ShuiZe (水泽) | Automated recon from a domain | optional engine keys |
| MediaCrawler | Xiaohongshu/Douyin/Weibo/Bilibili/Kuaishou/Zhihu/Tieba | login (QR + real account) |
| weibo-crawler / weiboSpider / snscrape | Weibo scraping | cookie/account |
| you-get / BBDown | Bilibili/Youku/Douyin media download | — |
| we-mp-rss | WeChat 公众号 → RSS/PDF | WeChat account |
| PyDork | Baidu-inclusive dorking | — |
| Tool / source | Purpose |
|---|---|
| ENScan_GO | Subsidiaries, ICP 备案, apps, mini-programs, 公众号 from Aiqicha/TianYanCha |
| ICP_Query | Local ICP filing lookup API (domain → registered company) |
| GSXT / 信用中国 | Official state registry & credit blacklist (web, free, Chinese-only) |
| TianYanCha / QCC / Aiqicha | Commercial KYC aggregators (freemium; IP-blocked outside CN) |
| Cninfo | Official filings for listed companies |
Full credential setup, exact command syntax and the step-by-step due-diligence workflow are in documents/CHINA_TOOLKIT.md.
Wukong inherits Speculator's hub-and-spoke design:
scripts/user.sh— hub for person-tracking (email, username, fullname, phone, hash)- Spokes — one script per investigation type:
domain.sh,instagram.sh,video.sh, … plus the newchina.sh(Sinophone OSINT) andkyc.sh(Chinese due diligence) config/tools.conf— pipe-delimited manifest; adding a tool is a one-line entryscripts/lib/common.sh— shared library (tool execution, Zenity UI, session logging, evidence output)
Evidence is written to ~/Downloads/evidence/{target}/. Tools install to ~/.local/share/wukong/programs/.
Wukong is for authorised open-source research, journalism, and corporate due diligence. Accessing Chinese platforms often intersects with real-name registration law; impersonation or identity fraud to obtain access is out of scope for OSINT and may be illegal in your jurisdiction. Know your mandate before you touch a target — see the OPSEC guidance in documents/CHINA_TOOLKIT.md.
- Built on the Speculator Project by SOsintOps.
- China methodology draws on the thesis "Analisi e Prospettive dell'OSINT in Cina" (A. Rossetti, Ca' Foscari) and on published work by Bellingcat, OSINT Combine, GIJN, All Source China and Project OSINT.
- Developed with a "vibe coding" workflow assisted by various large language models (LLMs), with human review and validation. See the FAQ.
MIT — see LICENSE.
Provided "as-is", without warranty, for educational and authorised research purposes. Use responsibly and at your own risk.