Complete OSINT Fundamentals.

Sagar Shewale
25 min readAug 4, 2023

--

Hello beautiful hackers, welcome back to my new blog, I hope so you all are good !!
So today, in this blog, we are going to discuss about complete OSINT fundamentals, tips, tricks and all types of techniques, including MILLIONS of tools, yes literally MILLIONS of tools you will get in this article IT’S MY PROMISS.
So must read this article until the end.

Before start writing the blog, I have such a small request to all of you, I always right articles on cyber security, ethical hacking, penetration testing. So if you didn’t follow, then follow me first and clap on this article, because that’s give me a motivation to write something new !!

If you didn’t follow me on my socials, here it is.

My-Twitter
My-Linkedin
My-GitHub

Thank you !!!
Let’s Start !!!

✯ Introduction ✯
In this blog we are going to discuss about Introduction of OSINT.

☟ In this blog we are going to discuss about, following topics. ☟
☛ OSINT Overview
☛ Note Keeping
☛ Types of OSINT (There are many types of OSINT, we’re gonna see !!)
☛ OSINT Automation
☛ Practice OSINT CTF
☛ Conclusion & Additional Resources with Some Extra Tips & Materials

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

1) OSINT Overview :

OSINT stands for “Open Source Intellangent”, is the collection and analysis of data gathered from open sources, including social media, websites, images, organization, person, network and from many more, which is present on open source.

✯ Use of OSINT ✯
OSINT involves using publicly available information from social media, websites, and news articles to gather information about an individual or organization. This information can then be used to identify vulnerabilities and plan attacks. OSINT is regularly utilized by intelligence communities, as well as national security teams and law enforcement to protect organizations and society from threats of all kinds. Publicly available information is perfectly legal to access, analyze and distribute.

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

2) Note Keeping :

Note Keeping is the most important part of OSINT
Whatever you are searching, agthering information about target, you should store it into one place for easy management.

I’m suggest you best note keeping software ever which is Obsidian”.

☟ Why osidian ? because it’s second brain for you forever. There are some best feature of osidian note keeping app as follows. ☟
☛ It’s available for windows, mac, linux, android and ios.
☛ 100% free for personal use and no account and signup required.
☛ Access to plugins and API.
☛ Community support on discord and forum.
☛ Customizable toolbar.
☛ Pull down quick actions.
☛ Graph view.
☛ Share to and from Obsidian.
☛ Themes are available.
☛ Sidebar pinning for tablet.

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

3) Basic Search :

Basic search of OSINT is the, gather any information which publicly available to access, such as book news, website, aricle about any company, organization.

☟ Here are some method to get information. ☟
☛ Google is your best friend.
☛ Find website and aricle of your your target.
☛ Find some news of your target.
☛ Read some books releted to your target.
☛ Take the help of your one of the good friend wikipedia.
☛ Gather information from your target social media as well.
Social-Searcher tool will help you.

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

4) Advance search :

In advance search, you can use google dorking technique.
Google dorking is basically google search filter, where you can search and get specific search result.

I already discussed about it, in my privious blog. Here is the link.

SmartResultsNow (For Smart Search)

Here is cheat sheet of google searh operator, which will helps you.

✵ All types of google search operators for advance search✵

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

5) Reverse search :

Normally we are search image by typing name, dork, or any type of text, but in reverse search condition, we are adding image and search that image information from search engine and other public sources.
This method is useful to get information about any image, I’ts name, location and I’ts real source and many more !!

☟ Here are some method and tools for reverse image and audio search. ☟
Tineye
DupliChecker
Google Search
Google-Lens
GoogleAlert
Yandex Search
Bing Search
Baidu Search
Labnol Search
Small-Set-Tools
Berify
Imageidentify
Phototracker-Lite (Browser Extension)
Search-By-Image (Browser Extension)
Karma Decay
SearchThisImage
Picsearch
SauceNAO
GettyImages
Flickr
Eye-Of-God-Bot
InVid (Use for video Verification)
Shazam (This app use to reverse audio search.)

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

6) Face Recognition :

Detection is the process of finding a face in an image. Enabled by computer vision, facial recognition can detect and identify individual faces from an image containing one or many people’s faces. It can detect facial data in both front and side face profiles.

☟ There are some tools, techniques and methods for face recognition.☟
FaceCheck (Best ever face recognition online tool.)
PimpEyes (face recognition search engine)
Image-recognize (Objects in your image by using our Object Recognizer.)
Ribbet (AI tool for face detection.)
OpenFace (facial behavior analysis toolkit)
Pictriev
Betaface
Findclone
FotoForensics
Search4Faces (Search4faces is a reverse face search engine that can help you to find photos of a person all across the web)
☛ I’m suggest you following blog to further know about facial recognition tools.

This Blog is written by Oleksii Kharkovyna !!!!

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

7) Sock Puppet Account :

Online, it came to be used to refer to a false identity assumed by a member of an internet community who spoke to, or about, themselves while pretending to be another person.

I already written the blog on sock puppet account, discussed all type of tools, tips, tricks and techniques.

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

8) Search Engine OSINT :

Search engine OSINT is basically process of osint, where you are using search engines in depth, to gathering information about target.

There are lots of tools nad techniques for search engine OSINT.
But we don’t have enough time and space to write here.

☟ In search engine osint there are lots of search engine we are seeing as follows. ☟

  • National Search Engines
  • General Search Engines
  • Privacy-oriented search engines
  • Metadata Search Engines
  • FTP Search Engines
  • Files Search Engines
  • Images Search Engines
  • Reverse Image Search
  • Faces Search Engines
  • Exploits Search Engines
  • Dark Web Search Engines

And Many More !!!

☟ Here are some online web tools for search engine OSINT. ☟

KeywordTool (Find Great Keywords Using Google Autocomplete.)
Dorksearch google dorking is best way to gather information.
Google Hacking Database (GHDB) is your good friend.
RdropLink Simple and Fast P2P File Transfer Service No compression, No size limit, Secure and Fast !!!
Google Trends (Search about google tranding keywords.)
WordTracker
OneDorkForAll

⮚ Find public files in Google Drive
Searchfiles
Lyzem
FilePurSuit

✵ Top 24 Hackers Search Engine You have to Know. ✵
✵ All Hackers Search Engine You have to Know. ✵

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

9) Image OSINT :

Image OSINT, we are goint to find out following things about any image.

  • Exif & Metadata
  • Reverse Image Search
  • Geolocation via image

✯ Exif & Metadata ✯
EXIF (Exchangeable Image File Format) files store important data about photographs. Almost all digital cameras create these data files each time you snap a new picture.

Image metadata refers to the specific details and information concerning a particular photo file.

☟ Here are some useful tools ☟
Exiftool
Exiv2
Exifprobe
Exif.tools
MetaData2Go
ExifMeta
ExifData
Jimpl
OnlineExifViewer
Image EXIF Viewer
Gvision
GeoGuessr
OpenMinds
29a.ch
FOCA
Sherloq

✯ Reverse Image Search ✯
I already discussed about at point NO. 5, I hope you learn about it !!!

✯ Geolocation via image
Sometime when you click the photos intot your camera / phone, it capture your location co-ordinates and saves into your picture,using that pic you can get the exact geolocation using the exifdata of image.

☟ Some Tools to use. ☟
Pic2Map
ThExifiler
FreeMapTools
Geotag
StolenCameraFinder
Picarta
☛ Google “My Photo Map”

Get the image information by just RIGHT CLICK > PROPORTIES

☟ Here are some tips to get real location of any image. ☟

  1. Reverse image search method.
  2. Search about text, which is showing into the image.
  3. Search about other things which are background of that target image.
  4. Remove.bg can remove the image background, (use if you need)
  5. Cleanup.picture is a tool, where you can remove the any perticular object from image
  6. Take the help of google map to find out location !!
  7. Here are some Image forensics tools
    Getghiro
    Phoenix
    FotoForensics
    LetsEhance

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

10) Phone OSINT :

Phone OSINT is the processes of gathering information about phone numbers which are already published on internet !!!

☟ Some tools for Phone OSINT. ☟
Truecaller
Calleridtest
Infobel
Whitepages
NumVerify
Whocalld
Everycaller
Phoneinfoga
Spytox
Phone-Location
ThatsThem
Privacystar
Nuwber
Getcontact
Phunter
Deep-HLR
411
Telephone-Tools
Sync
FreeCarrierLookup
Spydialer
Ignorant

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

11) Email OSINT :

Email OSINT, short for Email Open Source Intelligence, is the process of gathering and analyzing publicly available information about an email address or its associated sender/recipient.

It involves using various online tools and techniques to extract valuable insights, such as the owner’s name, social media profiles, affiliations, and other relevant data.

Email OSINT is commonly used in cybersecurity investigations, fraud detection, and intelligence gathering to gain a better understanding of individuals or entities associated with an email address.

☟ Some tools for Email OSINT. ☟
Epieos
H8mail
EML-Analyzer
Phonebook
Voilanorbert
GetNotify
GHunt
GeeMailUserFinder
Mosint
Mailfogle
Goog-mail
Email-Checker
Hunter.io
Mailboxlayer
Snov.io
Verifalia
NeverBounce
Holehe
Have-I-been-Pawned
Zehef
Email Permutator+
Spytox
Proofy
Socialscan
Email-Extractor
Emailrep
EmailLookup
Clearbit
NeutrOSINT
Emailhippo
ProtOSINT
Eyes
Name2Email
TheHarvester
☛ Google-Forgat-Password-Method (It’s manual method of google, you can recognise the real and working email)

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

12) Username OSINT :

Username OSINT stands for “Open Source Intelligence” related to usernames. It refers to the process of gathering information and intelligence from publicly available sources specifically related to a person’s online username or handle.

By analyzing data from social media platforms, forums, websites, and other online sources, analysts can attempt to uncover information about an individual’s online presence, activities, and potentially even their real-world identity.

This type of OSINT can be used by security professionals, investigators, or researchers to understand and assess potential security risks, identify online personas, or investigate individuals for various purposes.

☟ Some tools use to Username OSINT. ☟
Oh365UserFinder
Sherlock
X-osint
UserFinder
Enola
DetectDee
Social-Analyzer
Maigret
Maigret-2
Nexfil
Blackbird
WhatsMyName
InstantUsername
Social-Searcher
Namechk
Namecheckr
Namecheck
Namecheckup
CheckUsernames
CheckUser
Randommer
Mcchecker
Knowem
Username-Socials

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

13) Password OSINT :

Password OSINT (Open Source Intelligence) refers to the practice of gathering and analyzing publicly available information from various sources to identify or guess passwords used by individuals or organizations.

This process involves utilizing data from social media, online forums, leaked databases, or any other publicly accessible information to find clues or patterns that might reveal a person’s or a company’s passwords.

Here are some tools and techniques to get password using OSINT method.

  1. Data breach search websites: Websites like “Have I Been Pwned” or “BreachAlarm” allow you to check if your email or username appears in known data breaches. You can search some other hacking forum sites.
  2. Social Engineering: Gathering information about the target (such as their interests, family members, pets, etc.) from social media or other public sources to create educated guesses for passwords.
  3. Leaked Databases: Searching for any past data breaches or password leaks that might include the target’s password.
    Some sites to get password passively.
    Leakix
    Leakpeek
    Leakpeek 2
    Leakcheck
    Leak-Lookup
    LeakCheck
    WeLeakInfo
    Secureito
    Cr3dOv3r
    Dehashed
    DataBreachArchives
    JoeBlack
    BlackKite
    HaveIBeenPwned
    HaveIBeenSold
    ScatteredSecrets
    NuclearLeaks
    GhostProject
    SnusBase
    Checkleaked
    Breachdirectory
    Breachdirectory-2
    Keepassxc-Pwned
    LeakBase
    Sphinx.Bot
    HudsonRock
    LeakTracker
    GlobaLeaks
    Exposed-LoL
    USA-Official-Leaks
  4. Password Spraying: Trying a few commonly used passwords across a large number of accounts to increase the chances of success.
    Breach-Parse tool is most useful tool to password spraying.
  5. Dumpster diving : It is a term used to describe the practice of searching through trash or waste containers to find discarded items that might be valuable, useful, or contain sensitive information.
  6. Credential Stuffing: Hackers may use compromised credentials from one breach to gain unauthorized access to other accounts or systems, leveraging the tendency for people to reuse passwords.
  7. Default Password: Sometimes OR you can say most of the time user
    does not change default password of there machine,and hackers could take the adventage of it.
    Here are some default password website and tools which will use for dictionary and bruteforce attack.
    SecLists
    FuzzDB
    PayloadsAllTheThings
    Pydictor
    CUPP
    Pass-Station
    CIRT
    1.6BillionWordlist
    DefaultPassword
    DefaultPassword2
    DefaultCreds
    Mentalist
    GoMapEnum
    FortyPoundHead
    DefaultPasswordInfo
    Assetnote

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

14) People OSINT :

People OSINT is process of gathearing information about people and there surrounding theings such as address, location, phone number, email and many more.

☟ Some tools for People OSINT. ☟
Spokeo
Peoplelooker
ThatsThem
TruePeopleSearch
TruePeopleSearch 2
TruthFinder
PeekYou
FindaGrave
Rhedesium
Privateeye
Intelius
ZabaSearch
PeopleFinder
Peoplefinders 2
PeopleSearchNow
AnyWho
Foller
Socialcatfish
BeenVerified
WhitePages
FastPeopleSearch
IDcrawl
SearchSystems
SborraTools
PublicDataCheck
Huntintel
Canada411
Doxpop
Voterrecords
InstantCheckMate
BlackBookOnline
Geni
Webmii

Some useful telegram bots.
☛ maigret_s2_bot
☛ userbox_search_bot
☛ ibhldr_bot
☛ QuickOSINT_bot

✵ Mindmap For People OSINT. ✵

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

15) Website OSINT :

Website OSINT refers to the process of gathering and analyzing information from publicly available sources to gain insights and knowledge about a particular website or online presence.

Website OSINT is a unique approach to gather and analyze publicly available information to gain valuable insights about a website or online entity, making it a crucial component of digital security and intelligence gathering.

☟ Some tools for Website OSINT. ☟
Archive-1
Archive-2
Archive-3
Anna’sArchive
Spyonweb
Arquivo
Vstat.Info
SiteWorthTraffic
SimilarWeb
URLvoid
TimeTravel
OldWeb
CachedView
PingDom
GTmetrix
VisualPing
Website-OSINT
Siteliner
EmailExtractorPro
Histats
Duplichecker
Alternativeto
OCCRP-Aleph
Securitytrails

I already written blog on it, Check it out !!!

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

16) Aviation OSINT :

Aviation OSINT is the practice of using publicly available information to gather insights about various aspects of aviation, including flight tracking, aircraft information, airline operations, air accidents, airports, regulations, and aircraft technologies.

☟ Some tools for Aviation OSINT. ☟
FlightRadar24
RadarBox
FlightAware
ADS-B Exchange
Icarus-Flight
Liveatc
AdsbexChange
Opensky-Network
Planemapper
Planefinder
Planespotters
Airhistory
Planeflighttracker
Variflight
Freedar

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

17) Marinedrives & Submarine OSINT :

Marinedrives OSINT stands for “Maritime Intelligence, Surveillance, and Reconnaissance Open Source Intelligence.”

The main objective of Marinedrives OSINT is to monitor and understand maritime developments, such as ship movements, port activities, naval operations, and other events occurring in the maritime domain.

☟ Some tools for Marinedrives OSINT. ☟
MarineTraffic
ShipSpotting
ShipLocation
ShipXplorer
ShippingeXplorer
ShipTracker
MyshipTracking
MaritimeOptima
VesselFinder
VesselTracking
MarineVesselTraffic
VesselTracker
Aishub
Fleetmon
Subtelforum
Boatnerd
Psgllc
SubmarineCableMap
SubmarineCableSystems
SubmarineNetworks
Fiberatlantic
MarineInsight (Marinedrives News Portal)

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

18) Railway OSINT :

Railway OSINT stands for “Railway Open-Source Intelligence.” It refers to the practice of collecting and analyzing information about railway systems and related activities using publicly available sources.

☟ Some tools use to Railway OSINT. ☟
OpenRailwayMap
TrackTrace
SignalBox
WorldlineGlobal
Etrain
RailCabrides
YandexTrain
☛ ChronoTrains
NsinterNational.com/
MobilityPortal
Where-Is-My-Train

Search on google country wise popular railway tracking app because some apps are just limited to specific country. You need to search more on google.

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

19) Geolocation & IP OSINT :

Geolocation OSINT: Utilizing public data to identify the physical location of a device or entity, often through GPS or IP geolocation.

IP OSINT: Gathering information about an IP address from publicly available sources to reveal details about its origin and usage.

Both techniques aid in investigations, mapping, and understanding the geographic aspects of digital interactions.

☟ Some tools for Ip & Geolocation OSINT. ☟

1. Geo Location
Geocreepy
GeoNames
GeoLocation
GisGeography
Liveuamap (Type country as a subdomain)
GoogleEarth
GoogleMap
BingMap
AppleMap
YandexMap
MapsMe
Mapillary
DualMaps
Peakfinder
Waze
UKTraffic
SnapMap
Peakvisor
SkyDB
GPS-Coordinates
Photo-Map
MapChannels
Latlong
SoarEarth
Seeker
Earth3DMap
MapQuest
AllTrails
InstantStreetView
WikiMapia
FreegisData
Shademap
Windy
NASA-FIRMS
SunCalc
WikiMapia
Hound
IPDrone

2. IP Location
IPlocation
IPLocation 2
IPlogger
Grabify 1
Grabify 2
Grabify 3
IpTrap
IPlocation.io
IP2location
Whoer
Whoer 2
InfoByIP
IPinfoDB
IP2locationLite
IPinfo
IP-Tracker
IPwhois
IPlocation
TraxOsint
IP-Rover
OSINTMmap
NominatimOpenstreetmap

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

20) Webcam & CCTV OSINT :

Webcam OSINT is about using online resources and tools to extract valuable intelligence or data from webcams, which can be used for various purposes such as research, security analysis, or understanding real-time events happening in specific areas. It is essential to conduct such activities ethically and within legal boundaries, respecting the privacy and security of individuals and organizations.

☟ Some tools for Webcam OSINT. ☟
OpenTopia
Insecam
Shodon
Earthcam
WebcamTravel
AirportWebCams
Pictimo
Wetter
Wisuki
Hdontap
TabiCam
TravelCam
MyLiveStreams
LiveFromIceland
BalticLiveCam
CamHacker
IPliveCams
WebCamTaxi
World-Webcams
WebCamHopper
WebcamsAbroad
WorldViewStream
WebCamera24
TFljamcams
WebcamNetwork
Worldcam
LiveWorldWebcam
SkyLineWebcams
MassPirates
ArmChairResearch
WhatsUpCams
Goakamai
CamPhish
SkyLineWebCams
Cameradar
Webcam
Blackbird
GHDB
Cam-Hackers
SearchCAM
CamOver

Here are some google dorks to find online web cameras & some default username and password of camera.

allintitle: "Network Camera NetworkCamera"
intitle:"EvoCam" inurl:"webcam.html|"
intitle:"Live View / - AXIS"
intitle:"LiveView / - AXIS" | inurl:view/view.shtml
inurl:indexFrame.shtml "Axis Video Server"
inurl:axis-cgi/jpg
inurl:"MultiCameraFrame?Mode=Motion"
inurl:/view.shtml
inurl:/view/index.shtml
“my webcamXP server!”
intitle:"Network Camera NetworkCamera"
intitle:"Live View / - AXIS"
intitle:"Live View / - AXIS 206M"
intitle:"Live View / - AXIS 210"
intitle:"Toshiba Network Camera"
intitle:"Live NetSnap Cam-Server feed"
intitle:"IP Webcam Viewer"
intitle:"WebCamXP 5"
intitle:"Live 2MP (1920x1080) IP Camera"
intitle:"Live 3MP (2048x1536) IP Camera"
intitle:"Network Camera View"
inurl:viewerframe?mode=refresh
inurl:"/control/userimage.html"
inurl:app/cam
inurl:"/view/index.shtml"

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

21) Social Media OSINT :

Social media OSINT refers to the process of gathering and analyzing publicly available information from various social media platforms to obtain valuable insights and intelligence. In short, it involves using data from websites like Facebook, Twitter, Instagram, LinkedIn, etc., to gain a deeper understanding of individuals, organizations, or events.

In this blog, I explained in deatil about Social Media OSINT aka SOMINT.

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

22) Radio frequency, Wireless & Satellite OSINT :

Radio Frequency (RF) OSINT: Gathering intelligence from publicly available information transmitted over radio frequencies.

Wireless OSINT: Collecting intelligence from publicly available data related to wireless technologies like Wi-Fi, Bluetooth, and cellular networks.

Satellite OSINT: Utilizing publicly available information from satellites and remote sensing for intelligence gathering, including satellite imagery and tracking satellite movements.

☟ Here are some tools, which are used in.☟

1. Radio Frequency
ZoomEarth
RadioGarden
WorldRadioMap
RadioGuide
Radio
LiveRadios
OnlineRadios
LiveOnlineRadio
WorldViewEarthData
Shure-frequency-finder
MapChecking
RadioReference
FMScan
FrequencyFinder
NewEndian-FreqFinder
Siriusxm
DigitalFrequencySearch
OpenMHZ

2. Satellite
SatFlare
Celestrak
OrbTrack
SatMap
EarthExplorer
FindSatellites
Dishpointer
Satellitefinder
N2yo
SatView
UphereSpace
Arachnoid
FastSatFinder
DishPointer
GeoSatFinder
SatIntel
Google-Earth
Intelligence-Airbusds
Geogig
GrassOsgeo
EuspaceImaging
Maxar

3. WiFi
Wigle
WifiMap
Mylnikov
Wiman
OpenWifiMap

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

23) Crypto Currency OSINT :

OSINT for cryptocurrencies involves using publicly available information from sources like social media, forums, GitHub, news websites, blockchain explorers, and more to gather insights into the crypto world.

☟ Here are some tools to Crypto Currency OSINT. ☟
BlockchainExplorer
BlockChair
WalletExplorer
BitinfoCharts
ExplorerCrystalBlockChain
OXT
Blockpath
Orbit-Tool
BitcoinAbuse
BitcoinWhosWho
Etherscan
Bitref
OSINT-SPY

☟ CryptoCurrency attack surface for OSINT investigations. ☟

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

24) Network OSINT :

Network OSINT refers to the practice of gathering information about a network or its components using publicly available sources. OSINT is a valuable tool for understanding and assessing potential security risks, identifying vulnerabilities, and discovering information that could aid in network analysis or investigation.

☟ Here are some tools to Network OSINT. ☟
Centralops
Network-Tools
Toolsvoid
Manytools
All-Nettools
Mxtoolbox
Hackertarget
Nmap
Wireshark
Termshark
Whois
Robtex
Viewdns
Viewdns 2
Netcraft
OpenCorporates
OpenOwnership

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

25) Scammer OSINT :

Scammer OSINT is the practice of gathering information about scammers or fraudulent activities using publicly available sources on the internet.
Also there are some tools which are mostly get use into cyber threat intelligence. (CTI)

☟ Here are some tools to Scammer OSINT. ☟
Scammer
DatingScammer
Bismanonline
Scamalert
ScamSearch
LookupRobokiller
Nomorobo.com
Fraudrecord
Scamadviser
URLscan
CheckPhish
PhishReport
PhishingArmy
PhishCheck
PhishStats
IsItPhishing
IsItPhish
Phishtool
Phishtank
Phishunt
OpenPhish
URL-Scanner
VirusTotal
Phishing-URL-Checker
VX-Underground
Hybrid-Analysis
Malwarebytes
MISP-Project
Stalkface
Hootsuite
Talkwalker
ID-Ransomware
Bitcoinabuse
Nomoreransom
Malware-Bazaar
TALOS-Intelligence
ThreatCop
StopForumSpam
Phishing-Initiative

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

26) IOT OSINT :

IoT OSINT stands for “Internet of Things Open Source Intelligence.” In short, it refers to the process of gathering and analyzing publicly available data from various IoT devices and systems to gain insights, detect vulnerabilities, or identify potential threats. This information can be collected from public sources like social media, forums, websites, or publicly accessible databases related to IoT devices.

☟ Here are some tools to IOT OSINT. ☟
Shodan
Censys
Thingful
Zoomeye
PRET
Recon-Ng
IvreRocks
InSpy
Metasploit
Routersploit
Iot-Inspector
CriminalIP
HunterHow
Firmware-Analysis-Toolkit

✵ Top 24 Hackers Search Engine You have to Know✵
✵ All Hackers Search Engine You have to Know. ✵

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

27) DarkWeb OSINT :

Dark Web OSINT refers to the process of gathering and analyzing publicly available information from the dark web, which is a part of the internet not indexed by traditional search engines.

In short, it involves using specialized tools and techniques to access, monitor, and extract data from hidden online platforms, forums, marketplaces, and other sources within the dark web.

☟ Here are some tools to DarkWeb OSINT. ☟
OnionSearchEngine
OnionSearch
OnionScan
TorBot
TorCrawl
Onioff Katana
DarkWebOsint
VigilantOnion
OnionIngestor
Darc
MidnightSea
DarkWebInformer
DarkDump
DockerOnionNmap
TheHiddenWiki
IacaDarkwebTools
WeboProxy
Uscrapper
Tor2Web
StealthMole
Jarm
DeepDarkCTI
OpenCTI
C2-Tracker
TorMetrics
IKnowWhatYouDownload

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

28) News OSINT :

News OSINT applied to news gathering and analysis. In short, it refers to the process of using publicly available sources to gather and analyze information to understand, verify, and report on news events. OSINT techniques involve utilizing online platforms, social media, websites, government documents, and other publicly accessible sources to collect data and news-related information. Journalists, researchers, and analysts often use OSINT to support their reporting, investigations, and fact-checking processes.

☟ Here are some tools to News OSINT. ☟
Newsnow
Newspapermap
1stheadlines
Newsnow.UK
NewsPaperArchive
AllYouCanRead
NewsPapers
NewsPaperMap
OnlineNewsPapers
NewsPress
GoogleNews
Snopes
Hoaxy
WebArchive
Factcheck
Reviewmeta
ReportersLab
Truthorfiction
CitizenEvidence
FakeNewsVerify
SmartResultsNow

1. Cross-check with Multiple Sources: Verify the information by checking it against multiple reliable news sources. If the story is true, you should find it reported by several reputable outlets.

2. Watch for Clickbait: Be cautious of sensational headlines designed to grab attention but may not reflect the actual content of the article. Look for reputable sources that present information objectively.

3. Check the Date: Sometimes old news is shared as if it’s new. Check the date of the article to ensure you’re getting the latest information.

4. Look for Author Credibility: Check the author’s credentials and reputation. Trustworthy journalists and experts are more likely to provide accurate information.

5. Examine the Evidence: Verify claims by looking for supporting evidence, like official statements, data, or reports.

6. Beware of Misleading Images: Images can be taken out of context. Do a reverse image search to see if the image has been used elsewhere with a different meaning.

7. Check Quotes and Sources: If the article includes quotes, check if they are attributed to credible individuals or organizations.

8. Be Wary of Unverified Content: Social media and user-generated content may not always be reliable. Verify information from credible news sources before sharing.

9. Understand Bias: Be aware of the potential bias of news outlets. Try to read from various sources to get a balanced perspective.

10. Consult Fact-Checking Sites: There are fact-checking websites that can help you verify the accuracy of news stories. Look for reputable fact-checkers.

Remember, taking a few extra minutes to fact-check can help ensure you’re sharing accurate information and not contributing to the spread of misinformation.

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

30) Credit Card OSINT :

Credit Card OSINT, in simple terms, refers to the practice of using publicly available information to gather details about credit cards and their usage.

First 3 are Credit card BIN Checker Websites, BIN Stands for Bank Identification Number. “Bank Identification Number,” or BIN code, refers to the initial sequence of four to six numbers that appears on a credit card. The number is used to identify the card’s issuing bank or other financial institution.

☟ Bin Checking Sites. ☟

Binlist
BincheckIo
Bincheck
CardPwn (Credit Card OSINT Tool)

(Disclaimer : Checking BIN of a credit card on the internet can be risky and potentially unsafe. Use at your own risk, if you are using your own credit card.)

For Practice or if you wants to know, how it BIN checking works, then you can use FakeCreditCardNumberGenerator site, to generate a Fake Credit Card Numbers for better understanding about BIN.

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

31) Universe OSINT :

LOL 🤣🤣🤣🤣🤣 !!!!!! What you thaught ?? I’m I serious ?? No guys just kidding But, I have some websites, where you can gather the information about whole universe. Its a informational website, not used for OSINT.

☟ Some websites to get information about Universe.☟
ChromeExperiments
Theskylive
SolarSystemScope
DeepspaceMap
ViewSpace
MapOfTheUniverse
Hubblesite
WorldwideTelescope
UniverseSandbox
GalxySpace

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

32) OSINT Blogs :

OSINT Blog is must important to read daily, If your cyber security career path going towords OSINT & if you wants to be a “OSINT Researcher” then it should necessary to read it.

☟ Here are some OSINT Blogs that you have to read it !!! ☟
OsintCurio
AwareOnline.com
Osintme
OsintTeam
OsintOrg
OsirtBrowser
WebBreacher.com
OsintNinja
Osintfr
Sector035
UKOSINT
OSINTForAll
DigitalInvestigations
The-DFER-Report
OsintFoundation.com
OsintNewsletter
BleepingComputer
OS2NT
BushidoToken
AccessOSINT

☟ Here are some OSINT Twitter Accounts.☟
OSINTUpdates
AllForOSINT
DailyOSINT
OsintTV
OSINTResearch
OHShint
0xtechrock
OSINT-Technical
OSINTtechniques
osintnewsletter
BushidoToken
Cyb3rops
DailyDarkWeb
VXUnderground

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

33) Some Random OSINT Images :

All credit goes to that peoples who make these information (credit are in the images.)

Metagoofil tool for extracting metadata of public documents such as pdf, doc, xls, ppt, etc.

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

34) Millions Tools Resources :

In a starting of blog, as I told you, here I kept my promiss. In this part, I’m much excited give you millions of tools, which is used for all types of OSINT. Which will definetly helps you to explore more and more new things.
SO,
⚠️ “TIE YOUR SEATBELT, THE WEATHER IS GOING TO TURN BAD !!!” ⚠️

Smart-Myosint-Training (Here you will got the millions of tools, it will take some time to load.)
The-Ultimate-OSINT-Collection
OSINT-Inception
Sim-S-Tools
OSINT-Stuff-Tool-Collection
The-BBC-Africa-Eye-Forensics-Dashboard
OOSINT
OSINT-Link
OSINT-Tools
OSINT-SH
OSINT-Industries
UK-OSINT
OSINT-Combine
OSINT-Essentials
OSINT-Techniques
OSINT-Framework
IntelTechniques-Tools
Intelx-Tools
OSINT-DoJo
MidaSearch
Metaosint
MalfratsIndustries

DON’T GO FORWARD, WITHOUT CHECKING THESE TOOLS RESOURCES LIST !!

Some Google Dorks

site:start.me intitle:"OSINT" OR "osint"
site:start.me inurl:OSINT
site:start.me inurl:osint
site:start.me "OSINT"
site:start.me intext:osint
site:start.me allinurl:osint
site:start.me inurl:/p/ "osint"
site:start.me inurl:/p/ intitle:"osint"

site:github.io inurl:osint | inurl:osint-tools
site:github.io inurl:osint | intitle:"osint"
site:github.io intitle:"osint toolkit"
site:github.io intitle:osint-toolkit
site:github.io inurl:osint
site:github.io intitle:osint
site:github.io inurl:osint-toolkit
site:github.io intitle:*osint

#You Will Got Some More Cool Stuff

⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚

35) Bonus Points :

1) Whenever you are gonna OSINT research, then make a separate workspace to do your work and you can use best ever operating system for your better performance.
CSI Linux
Trace Labs OSINT VM
Tsurugi Linux
These are best ever OS which is mostly used in OSINT researcher.
Check this blog. ☟

2) Practice is more important, if you wanna be perfect in this, hhere are some practice OSINT CTF, which will help you to make better version of yourself.
Check this blog. ☟

3) OSINT methodology is one of the most important part of your research that you should need to know.
OSINT-DoJo is a resourses where you can get lots of digrams of methodology, graphs and more other things.

4) Please note that the availability and functionality of these tool may be avalible or not. If you did not get any link go to archive and check the history. If sometimes you did not get any tool OR cause some reason site is down or not working then try to find it on ARCHIVE. use some other tools either.

5) OSINT is not just about using tools, it’s all about your research, investigation and your methodology. Tools comes and go, but your methodology, you should never forget.

6) If you wanna make career in OSINT then “THIS platform will definetly helps you to find your job. (Check all details by yourself.)

7) All given tools, techniques, methodology are just for education porpose and ethical use only.

8) OSINT tools can assist in finding high-quality images, videos, and infographics from publicly available sources. These visuals can enhance the visual appeal of your blog posts and improve reader engagement.

9) OSINT allows you to gather information from a wide range of sources, such as news articles, social media, government websites, and more. This enables you to create well-informed and fact-based blog posts, enhancing the credibility of your content.

10) OSINT can uncover interesting and compelling stories from various sources, helping you create engaging and narrative-driven blog posts that captivate your audience.

I’ll update this blog, if i got some new about OSINT !!!

I really did lot’s of afforts and time to make this blog. I hope you guys love this blog.
If you like it, then don’t forget to follow, subscribe and claps.
I’ll see you with next article.

--

--

Sagar Shewale
Sagar Shewale

Written by Sagar Shewale

Penetration Testing | Linux | CTF | Hacking | OSINT | Bug Bounty Hunting