What is OSINT ?

What is OSINT ?

OSINT (Open Source INTelligence, Open Source Intelligence) or ROSO (Open Source Intelligence) collecting and analysing information from freely accessible (public) sources. It is both tools and methods, but also a lot of thinking. More than an assembly of tools and methods, it is customary to speak of a «state of mind focused on investigation, rigor and ethics. (ethics is a branch of philosophy that deals with human behaviour and, to the conduct of men in this society)

The OSINT is divided into several categories:

- SOCMINT (Social Media Intelligence) is the OSINT centralized on social networks.

- IMINT (IMagery INTelligence) is the analysis of geolocated information, satellite photos.  

- GEOINT (GEOspatia INT&elligence) is a practice involving the analysis of images and geospatial information

- IMINT is the analysis of geological/meteorological data.

- SIGING (SIGnal INTelligence) is the analysis of electromagnetic signals/radio communications.

- MASINT (Measurement And Signature INTelligence) is the analysis of sensor measurements (radio, nuclear, infrared, etc.).

Little more to know:

- RECON is the extraction of information related to websites/web in general.

Yeah, but is OSINT legal?

Totally, The very purpose of OSINT being to consult sources in open access, this method of intelligence is legal.

Onlyfans Dork

So , welcome to our site let me show you very first tips. Today I will show you how to simply "list" or “find” people on OnlyFans via google dorks.

First go to google

Dorks

site:onlyfans.com "city"

site:onlyfans.com "name"

site:onlyfans.com "free"

Voice Messaging

90% of telephone subscribers personalize their voicemail with their first and last names. The trick is to use a service that allows you to go directly to voicemail. There are several such services. Personally I use https://www.repondeurdirect.com/. 

Please note: this site has a charge. You must first call a surtax number and then type the number of the person to call.

In total, the process will not cost you more than €2. The price conditions are clearly indicated on the site. Or if you’re a big lazy, call him at night with an Onoff or, even worse, your number, wait until you get his voicemail.

Generate Google Dork Easily

Google Dork is a very effective technique of filtering content on the web, however, it can quickly become complicated to retain them all.  

That’s where Dork Genius comes in. Dork genius is a free and effective dork generator and allows customization of your google dork easily  

For more info https://dorkgenius.com/

Image research and analysis

All of us have wanted to find the name of a place, a street or a person.

Today I will offer you some sites that can help you in your searches.

https://images.google.com/  

- Image search that analyzes each element of the image you have inserted.

https://yandex.com/images/

- Search engine that can also analyze images.

https://tineye.com/

- Face recognition search engine that uses inverted image search for accurate results.

Or Use telegram bot @LCxRvsImgSrch_bot

18 Threat Hunting and OSINT Tools

 

• https://www.shodan.io/ - Search for devices connected to the internet and their vulnerabilities
• https://prowl.lupovis.io/ - Free IP search & identifications of IoC and IoA
• https://intelx.io/ - Search engine for data archives.
• https://netlas.io/ - Search and monitor devices connected to the internet
• https://urlscan.io/ - Scan a website incoming and outgoing links and assets
• https://fullhunt.io/ - Identify an attack surface
• https://www.zoomeye.org/ - Cyberspace search engine, users can search for network devices
• https://leakix.net/ - Identify public data leaks
• https://www.greynoise.io/ - Search for devices connected to the internet.
• https://search.censys.io/ - Get information about devices connected to the internet
• https://epieos.com/ - Search for email addresses and phone number

Web Osint

I'm going to tell you about the osint around the web.

Google Dork

For example, I branded myself this : 

osint filetype:pdf

I'm going to find some pdfs on the theme of osint.

Here's a pdf on google dork :

https://www.blackhat.com/presentations/bh-europe-05/BH_EU_05-Long.pdf

To search a website :

- https://whois.domaintools.com/

- https://reverseip.domaintools.com/search/?q=65.55.53.233

- https://reversens.domaintools.com/search/?q=cloudflare.com

- https://reversewhois.domaintools.com/?refine#q=%5B%5B%5B%22email%22%2C%220%22%2C%22%40microsoft.com%22%5D%5D%5D

- https://research.domaintools.com/research/hosting-history/

Find deleted web pages :

- https://archive.is/

- https://archive.org/web/web.php

- https://github.com/jsvine/waybackpack

If not, there's a python script that does a lot of web-related stuff : 

- https://github.com/C3n7ral051nt4g3ncy/WebOSINT

If in information of you sound on google you can make a removal request with this :

- https://reportcontent.google.com/forms/rtbf?hl=fr

Useful Sites 

Here are some useful websites to help you with your investigations: 

• http://www.intelius.com – Person Background Check 
• http://radaris.com – Person Background Check 
• http://www.whitepages.com – Also offers free lookups on some people. 

Misc 

• https://www.iplocation.net/ - IP Geolocation Lookup. 
• https://steamid.eu/ - Steam resolver, can view username history, games and friends list. 
• https://www.domainhistory.net/ - Domain WHOIS. 
• https://www.zillow.com/ - House Lookup. 
• http://skyperesolver.net/ - Skype Resolver

Person Lookup 

• http://www.ukphonebook.com/ - United Kingdom Phone, Person & Business Directory. 
• http://www.whitepages.com – Shows some free information. Rest you need to pay. 
• http://www.411.com – Person, Phone & Address Directory 
• http://www.zabasearch.com – Person & Address Directory 
• http://www.yellowpages.com – United Kingdom Business Directory 
• http://www.411locate.com – United States Person Directory 
• http://www.addresses.com – Person, Phone Number & Business Directory 
• http://www.anywho.com – Person Lookup & Reverse Lookup 
• http://www.peoplefinders.com – Background Search 
• http://www.skipease.com – Site Full of Person Lookup Engines. 

Criminal/Public Records

• http://publicrecords.directory/
• http://publicrecords.onlinesearches.com
• http://www.jailbase.com/en/sources/fl-lcso/
• https://www.instantcheckmate.com/
• http://www.courtrecords.org/
• https://www.auccr.com/free
• http://www.people-records.co.uk/Criminal-Records.php
• https://www.judiciary.gov.uk/judgments/
• http://www.thelawpages.com/index.php

Reverse Number 

• https://nuwber.com/
• http://10digits.us
• http://www.fonefinder.net/
• https://www.thatsthem.com

Passwords

• https://haveibeenpwned.com/
• https://www.hacked-db.com/
• http://www.hashkiller.co.uk/md5-decrypter.aspx
• https://hacked-emails.com
• https://breachalarm.com/
• https://leakbase.pw
• https://vedbex.com/tools/leaked_database
• https://publicdb.host/search.php
• http://www.cmd5.org/
• https://md5hashing.net/hash 

Forums 

• https://raidforums.com/Forum-Databases – Databases 
• https://www.nulled.to/forum/184-databases/ - Databases

Social Engineering (Educational Purpose only)

“Social engineering, in the context of information security, refers to psychological manipulation of  

people into performing actions or divulging confidential information. A type of confidence trick for  

the purpose of information gathering in our case anyway.

For example, I know this person who is a scammer and he is selling virtual credit cards, I add him  

on Skype this is how I would gather some information on him. 

Me: Yo, I heard you where selling vcc's? 

Victim: Yeah bro. 

Me: Send me your email then bro $15? 

Victim: Yeah mate and here: victim@gmail.com 

We now have his email more than likely if they are a scammer I wouldn't recommend 

sending them  

money to try get their full name but you can try. From here we would follow the steps on Starting  

off with an Email Address to gather more information. 

Another example of social engineering is ISP doxing, for those of you who don't know what ISP  

doxing is basically its phoning up your victims ISP and pretending to be some sort of support  

worker or something completely up to you and you manipulate them into giving you their  

information. Information capable of lookup: 

– Name on file: 

– DOB on file:  

– SSN on file:  

– Phone on file:  

– Address on file:  

– ISP Account #:  

– Primary Account Email:  

– Credit Card on File:  

A small simple example:  

ISP Employee: Hello, how may we help you? I am Tony.  

You: Hey Tony, this is Fred, I actually work for this ISP myself and I was wondering if you could  

look up a customer in one of our tools for me. My tool is being extremely buggy and my internet is  

down for some reason. I don’t need much, the customer contacted me via support chat and I need a  

number to call him back and a name. I can look up the rest in one of our tools.  

ISP Employee: Sorry to hear that. Here, let me just look up the IP in our master tool. One moment  

please. *Few moments later* Alright, here is the client’s phone number associated with the IP  

address and their full name. Is that all?  

You: Yes ma’am. Thanks Tony. Have a great day!

Getting information through the mail

Here's what we can get:

• Owner's name
• Date of last edit
• Google id
• Possible YouTube channel
• Possible names
• Public photos
• Phone models
• Firmware phones
• Possible physical location

Installation

$ apt update

$ apt upgrade

$ apt install git python

$ git clone https://github.com/mxrch/GHunt

$ pip3 install -r requirements.txt

$ python check_and_gen.py

$ python hunt.py example@gmail.com

METATAGS

#osint analyst

#osint acronym

#osint academy

#osint analyst jobs

#osint army

#osint analyst salary

#osint ai

#osint analysis

#osint apps

#osint alternative

#osint book

#osint background check

#osint bazzell

#osint browser

#osint basics

#osint blogs

#osint bot

#osint bellingcat

#osint blackbird

#osint book michael bazzell

#osint certification

#osint combine

#osint cyber security

#osint curious

#osint ctf

#osint course

#osint challenges

#osint certification free

#osint companies

#osint careers

#osint dojo

#osint defender twitter

#osint defender

#osint digital footprint

#osint definition

#osint discord

#osint database

#osint def

#osint download

#osint digital footprint checker

#osint email search

#osint email

#osint examples

#osint email social media

#osint email address

#osint exercises

#osint entry level jobs

#osint email reddit

#osint essentials

#osint expert

#osint framework

#osint foundation

#osint framework tools

#osint footprint

#osint framework github

#osint free

#osint facial recognition

#osint facebook

#osint framework reddit

#osint full form

#osint github

#osint games

#osint guide

#osint geolocation

#osint gathering

#osint google id

#osint google dorks

#osintgram

#osint github tools

#osint groups

#osint handbook

#osint history

#osint hacking

#osint how to use

#osint handbook 2023 pdf

#osint humint

#osint hash

#osint human trafficking

#osint harvester

#osint hash search

#osint jobs

#osint jobs remote

#osint jobs salary

#osint jobs near me

#osint industries

#osint jobs entry level

#osint jobs reddit

#osint job description

#osint journalism

#osint jobs los angeles

#osint kali linux

#osint kali linux tools

#osint kali tools

#osint industries

#osint industries digital footprint

#osint israel

#osint industries reddit

#osint industries safe

#osint intelligence

#osint instagram