# Phase 11: OSINT Search Engines & Paste Sites - Context

**Gathered:** 2026-04-06
**Status:** Ready for planning
**Mode:** Auto-generated

<domain>
## Phase Boundary
Adds ReconSource implementations for public search engine dorking (Google, Bing, DuckDuckGo, Yandex, Brave) and paste site scraping (Pastebin, GitHub Gist, Ghostbin, Rentry, ControlC) to detect leaked API keys across indexed web pages and public pastes.
</domain>

<decisions>
## Implementation Decisions
### Claude's Discretion
All implementation choices are at Claude's discretion. Follow the established Phase 10 pattern: each source implements recon.ReconSource, uses pkg/recon/sources/httpclient.go for HTTP, uses httptest for tests. Each source goes in its own file.
</decisions>

<code_context>
## Existing Code Insights
### Reusable Assets
- pkg/recon/sources/ — established source implementation pattern from Phase 10
- pkg/recon/sources/httpclient.go — shared retry HTTP client
- pkg/recon/sources/register.go — RegisterAll (extend per phase)
- pkg/recon/source.go — ReconSource interface
</code_context>

<specifics>
## Specific Ideas
- GoogleDorkSource — search engine dorking via Google search
- BingDorkSource — search engine dorking via Bing search
- DuckDuckGoSource — search via DuckDuckGo
- YandexSource — search via Yandex
- BraveSource — search via Brave Search API
- PastebinSource — scrape/search Pastebin for leaked keys
- GistSource — GitHub Gist paste aggregator for public gists
- GhostbinSource / RentrySource / ControlCSource — alternative paste site scrapers
</specifics>

<deferred>
## Deferred Ideas
None — straightforward source implementations.
</deferred>