Complete OSINT Fundamentals.
Hello beautiful hackers, welcome back to my new blog, I hope so you all are good !!
So today, in this blog, we are going to discuss about complete OSINT fundamentals, tips, tricks and all types of techniques, including MILLIONS of tools, yes literally MILLIONS of tools you will get in this article IT’S MY PROMISS.
So must read this article until the end.
Before start writing the blog, I have such a small request to all of you, I always right articles on cyber security, ethical hacking, penetration testing. So if you didn’t follow, then follow me first and clap on this article, because that’s give me a motivation to write something new !!
If you didn’t follow me on my socials, here it is.
☛ My-Twitter
☛ My-Linkedin
☛ My-GitHub
Thank you !!!
Let’s Start !!!
✯ Introduction ✯
In this blog we are going to discuss about Introduction of OSINT.
☟ In this blog we are going to discuss about, following topics. ☟
☛ OSINT Overview
☛ Note Keeping
☛ Types of OSINT (There are many types of OSINT, we’re gonna see !!)
☛ OSINT Automation
☛ Practice OSINT CTF
☛ Conclusion & Additional Resources with Some Extra Tips & Materials
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
1) OSINT Overview :
OSINT stands for “Open Source Intellangent”, is the collection and analysis of data gathered from open sources, including social media, websites, images, organization, person, network and from many more, which is present on open source.
✯ Use of OSINT ✯
OSINT involves using publicly available information from social media, websites, and news articles to gather information about an individual or organization. This information can then be used to identify vulnerabilities and plan attacks. OSINT is regularly utilized by intelligence communities, as well as national security teams and law enforcement to protect organizations and society from threats of all kinds. Publicly available information is perfectly legal to access, analyze and distribute.
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
2) Note Keeping :
Note Keeping is the most important part of OSINT
Whatever you are searching, agthering information about target, you should store it into one place for easy management.
I’m suggest you best note keeping software ever which is “Obsidian”.
☟ Why osidian ? because it’s second brain for you forever. There are some best feature of osidian note keeping app as follows. ☟
☛ It’s available for windows, mac, linux, android and ios.
☛ 100% free for personal use and no account and signup required.
☛ Access to plugins and API.
☛ Community support on discord and forum.
☛ Customizable toolbar.
☛ Pull down quick actions.
☛ Graph view.
☛ Share to and from Obsidian.
☛ Themes are available.
☛ Sidebar pinning for tablet.
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
3) Basic Search :
Basic search of OSINT is the, gather any information which publicly available to access, such as book news, website, aricle about any company, organization.
☟ Here are some method to get information. ☟
☛ Google is your best friend.
☛ Find website and aricle of your your target.
☛ Find some news of your target.
☛ Read some books releted to your target.
☛ Take the help of your one of the good friend wikipedia.
☛ Gather information from your target social media as well.
☛ Social-Searcher tool will help you.
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
4) Advance search :
In advance search, you can use google dorking technique.
Google dorking is basically google search filter, where you can search and get specific search result.
I already discussed about it, in my privious blog. Here is the link.
☛ SmartResultsNow (For Smart Search)
Here is cheat sheet of google searh operator, which will helps you.
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
5) Reverse search :
Normally we are search image by typing name, dork, or any type of text, but in reverse search condition, we are adding image and search that image information from search engine and other public sources.
This method is useful to get information about any image, I’ts name, location and I’ts real source and many more !!
☟ Here are some method and tools for reverse image and audio search. ☟
☛ Tineye
☛ DupliChecker
☛ Google Search
☛ Google-Lens
☛ GoogleAlert
☛ Yandex Search
☛ Bing Search
☛ Baidu Search
☛ Labnol Search
☛ Small-Set-Tools
☛ Berify
☛ Imageidentify
☛ Phototracker-Lite (Browser Extension)
☛ Search-By-Image (Browser Extension)
☛ Karma Decay
☛ SearchThisImage
☛ Picsearch
☛ SauceNAO
☛ GettyImages
☛ Flickr
☛ Eye-Of-God-Bot
☛ InVid (Use for video Verification)
☛ Shazam (This app use to reverse audio search.)
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
6) Face Recognition :
Detection is the process of finding a face in an image. Enabled by computer vision, facial recognition can detect and identify individual faces from an image containing one or many people’s faces. It can detect facial data in both front and side face profiles.
☟ There are some tools, techniques and methods for face recognition.☟
☛ FaceCheck (Best ever face recognition online tool.)
☛ PimpEyes (face recognition search engine)
☛ Image-recognize (Objects in your image by using our Object Recognizer.)
☛ Ribbet (AI tool for face detection.)
☛ OpenFace (facial behavior analysis toolkit)
☛ Pictriev
☛ Betaface
☛ Findclone
☛ FotoForensics
☛ Search4Faces (Search4faces is a reverse face search engine that can help you to find photos of a person all across the web)
☛ I’m suggest you following blog to further know about facial recognition tools.
This Blog is written by Oleksii Kharkovyna !!!!
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
7) Sock Puppet Account :
Online, it came to be used to refer to a false identity assumed by a member of an internet community who spoke to, or about, themselves while pretending to be another person.
I already written the blog on sock puppet account, discussed all type of tools, tips, tricks and techniques. ☟
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
8) Search Engine OSINT :
Search engine OSINT is basically process of osint, where you are using search engines in depth, to gathering information about target.
There are lots of tools nad techniques for search engine OSINT.
But we don’t have enough time and space to write here.
☟ In search engine osint there are lots of search engine we are seeing as follows. ☟
- National Search Engines
- General Search Engines
- Privacy-oriented search engines
- Metadata Search Engines
- FTP Search Engines
- Files Search Engines
- Images Search Engines
- Reverse Image Search
- Faces Search Engines
- Exploits Search Engines
- Dark Web Search Engines
And Many More !!!
☟ Here are some online web tools for search engine OSINT. ☟
☛ KeywordTool (Find Great Keywords Using Google Autocomplete.)
☛ Dorksearch google dorking is best way to gather information.
☛ Google Hacking Database (GHDB) is your good friend.
☛ RdropLink Simple and Fast P2P File Transfer Service No compression, No size limit, Secure and Fast !!!
☛ Google Trends (Search about google tranding keywords.)
☛ WordTracker
☛ OneDorkForAll
⮚ Find public files in Google Drive
☛ Searchfiles
☛ Lyzem
☛ FilePurSuit
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
9) Image OSINT :
Image OSINT, we are goint to find out following things about any image.
- Exif & Metadata
- Reverse Image Search
- Geolocation via image
✯ Exif & Metadata ✯
EXIF (Exchangeable Image File Format) files store important data about photographs. Almost all digital cameras create these data files each time you snap a new picture.
Image metadata refers to the specific details and information concerning a particular photo file.
☟ Here are some useful tools ☟
☛ Exiftool
☛ Exiv2
☛ Exifprobe
☛ Exif.tools
☛ MetaData2Go
☛ ExifMeta
☛ ExifData
☛ Jimpl
☛ OnlineExifViewer
☛ Image EXIF Viewer
☛ Gvision
☛ GeoGuessr
☛ OpenMinds
☛ 29a.ch
☛ FOCA
☛ Sherloq
✯ Reverse Image Search ✯
I already discussed about at point NO. 5, I hope you learn about it !!!
✯ Geolocation via image ✯
Sometime when you click the photos intot your camera / phone, it capture your location co-ordinates and saves into your picture,using that pic you can get the exact geolocation using the exifdata of image.
☟ Some Tools to use. ☟
☛ Pic2Map
☛ ThExifiler
☛ FreeMapTools
☛ Geotag
☛ StolenCameraFinder
☛ Picarta
☛ Google “My Photo Map”
Get the image information by just RIGHT CLICK > PROPORTIES
☟ Here are some tips to get real location of any image. ☟
- Reverse image search method.
- Search about text, which is showing into the image.
- Search about other things which are background of that target image.
- Remove.bg can remove the image background, (use if you need)
- Cleanup.picture is a tool, where you can remove the any perticular object from image
- Take the help of google map to find out location !!
- Here are some Image forensics tools
☛ Getghiro
☛ Phoenix
☛ FotoForensics
☛ LetsEhance
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
10) Phone OSINT :
Phone OSINT is the processes of gathering information about phone numbers which are already published on internet !!!
☟ Some tools for Phone OSINT. ☟
☛ Truecaller
☛ Calleridtest
☛ Infobel
☛ Whitepages
☛ NumVerify
☛ Whocalld
☛ Everycaller
☛ Phoneinfoga
☛ Spytox
☛ Phone-Location
☛ ThatsThem
☛ Privacystar
☛ Nuwber
☛ Getcontact
☛ Phunter
☛ Deep-HLR
☛ 411
☛ Telephone-Tools
☛ Sync
☛ FreeCarrierLookup
☛ Spydialer
☛ Ignorant
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
11) Email OSINT :
Email OSINT, short for Email Open Source Intelligence, is the process of gathering and analyzing publicly available information about an email address or its associated sender/recipient.
It involves using various online tools and techniques to extract valuable insights, such as the owner’s name, social media profiles, affiliations, and other relevant data.
Email OSINT is commonly used in cybersecurity investigations, fraud detection, and intelligence gathering to gain a better understanding of individuals or entities associated with an email address.
☟ Some tools for Email OSINT. ☟
☛ Epieos
☛ H8mail
☛ EML-Analyzer
☛ Phonebook
☛ Voilanorbert
☛ GetNotify
☛ GHunt
☛ GeeMailUserFinder
☛ Mosint
☛ Mailfogle
☛ Goog-mail
☛ Email-Checker
☛ Hunter.io
☛ Mailboxlayer
☛ Snov.io
☛ Verifalia
☛ NeverBounce
☛ Holehe
☛ Have-I-been-Pawned
☛ Zehef
☛ Email Permutator+
☛ Spytox
☛ Proofy
☛ Socialscan
☛ Email-Extractor
☛ Emailrep
☛ EmailLookup
☛ Clearbit
☛ NeutrOSINT
☛ Emailhippo
☛ ProtOSINT
☛ Eyes
☛ Name2Email
☛ TheHarvester
☛ Google-Forgat-Password-Method (It’s manual method of google, you can recognise the real and working email)
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
12) Username OSINT :
Username OSINT stands for “Open Source Intelligence” related to usernames. It refers to the process of gathering information and intelligence from publicly available sources specifically related to a person’s online username or handle.
By analyzing data from social media platforms, forums, websites, and other online sources, analysts can attempt to uncover information about an individual’s online presence, activities, and potentially even their real-world identity.
This type of OSINT can be used by security professionals, investigators, or researchers to understand and assess potential security risks, identify online personas, or investigate individuals for various purposes.
☟ Some tools use to Username OSINT. ☟
☛ Oh365UserFinder
☛ Sherlock
☛ X-osint
☛ UserFinder
☛ Enola
☛ DetectDee
☛ Social-Analyzer
☛ Maigret
☛ Maigret-2
☛ Nexfil
☛ Blackbird
☛ WhatsMyName
☛ InstantUsername
☛ Social-Searcher
☛ Namechk
☛ Namecheckr
☛ Namecheck
☛ Namecheckup
☛ CheckUsernames
☛ CheckUser
☛ Randommer
☛ Mcchecker
☛ Knowem
☛ Username-Socials
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
13) Password OSINT :
Password OSINT (Open Source Intelligence) refers to the practice of gathering and analyzing publicly available information from various sources to identify or guess passwords used by individuals or organizations.
This process involves utilizing data from social media, online forums, leaked databases, or any other publicly accessible information to find clues or patterns that might reveal a person’s or a company’s passwords.
☟ Here are some tools and techniques to get password using OSINT method.☟
- Data breach search websites: Websites like “Have I Been Pwned” or “BreachAlarm” allow you to check if your email or username appears in known data breaches. You can search some other hacking forum sites.
- Social Engineering: Gathering information about the target (such as their interests, family members, pets, etc.) from social media or other public sources to create educated guesses for passwords.
- Leaked Databases: Searching for any past data breaches or password leaks that might include the target’s password.
Some sites to get password passively.
☛ Leakix
☛ Leakpeek
☛ Leakpeek 2
☛ Leakcheck
☛ Leak-Lookup
☛ LeakCheck
☛ WeLeakInfo
☛ Secureito
☛ Cr3dOv3r
☛ Dehashed
☛ DataBreachArchives
☛ JoeBlack
☛ BlackKite
☛ HaveIBeenPwned
☛ HaveIBeenSold
☛ ScatteredSecrets
☛ NuclearLeaks
☛ GhostProject
☛ SnusBase
☛ Checkleaked
☛ Breachdirectory
☛ Breachdirectory-2
☛ Keepassxc-Pwned
☛ LeakBase
☛ Sphinx.Bot
☛ HudsonRock
☛ LeakTracker
☛ GlobaLeaks
☛ Exposed-LoL
☛ USA-Official-Leaks - Password Spraying: Trying a few commonly used passwords across a large number of accounts to increase the chances of success.
Breach-Parse tool is most useful tool to password spraying. - Dumpster diving : It is a term used to describe the practice of searching through trash or waste containers to find discarded items that might be valuable, useful, or contain sensitive information.
- Credential Stuffing: Hackers may use compromised credentials from one breach to gain unauthorized access to other accounts or systems, leveraging the tendency for people to reuse passwords.
- Default Password: Sometimes OR you can say most of the time user
does not change default password of there machine,and hackers could take the adventage of it.
Here are some default password website and tools which will use for dictionary and bruteforce attack.
☛ SecLists
☛ FuzzDB
☛ PayloadsAllTheThings
☛ Pydictor
☛ CUPP
☛ Pass-Station
☛ CIRT
☛ 1.6BillionWordlist
☛ DefaultPassword
☛ DefaultPassword2
☛ DefaultCreds
☛ Mentalist
☛ GoMapEnum
☛ FortyPoundHead
☛ DefaultPasswordInfo
☛ Assetnote
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
14) People OSINT :
People OSINT is process of gathearing information about people and there surrounding theings such as address, location, phone number, email and many more.
☟ Some tools for People OSINT. ☟
☛ Spokeo
☛ Peoplelooker
☛ ThatsThem
☛ TruePeopleSearch
☛ TruePeopleSearch 2
☛ TruthFinder
☛ PeekYou
☛ FindaGrave
☛ Rhedesium
☛ Privateeye
☛ Intelius
☛ ZabaSearch
☛ PeopleFinder
☛ Peoplefinders 2
☛ PeopleSearchNow
☛ AnyWho
☛ Foller
☛ Socialcatfish
☛ BeenVerified
☛ WhitePages
☛ FastPeopleSearch
☛ IDcrawl
☛ SearchSystems
☛ SborraTools
☛ PublicDataCheck
☛ Huntintel
☛ Canada411
☛ Doxpop
☛ Voterrecords
☛ InstantCheckMate
☛ BlackBookOnline
☛ Geni
☛ Webmii
☟ Some useful telegram bots. ☟
☛ maigret_s2_bot
☛ userbox_search_bot
☛ ibhldr_bot
☛ QuickOSINT_bot
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
15) Website OSINT :
Website OSINT refers to the process of gathering and analyzing information from publicly available sources to gain insights and knowledge about a particular website or online presence.
Website OSINT is a unique approach to gather and analyze publicly available information to gain valuable insights about a website or online entity, making it a crucial component of digital security and intelligence gathering.
☟ Some tools for Website OSINT. ☟
☛ Archive-1
☛ Archive-2
☛ Archive-3
☛ Anna’sArchive
☛ Spyonweb
☛ Arquivo
☛ Vstat.Info
☛ SiteWorthTraffic
☛ SimilarWeb
☛ URLvoid
☛ TimeTravel
☛ OldWeb
☛ CachedView
☛ PingDom
☛ GTmetrix
☛ VisualPing
☛ Website-OSINT
☛ Siteliner
☛ EmailExtractorPro
☛ Histats
☛ Duplichecker
☛ Alternativeto
☛ OCCRP-Aleph
☛ Securitytrails
I already written blog on it, Check it out !!! ☟
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
16) Aviation OSINT :
Aviation OSINT is the practice of using publicly available information to gather insights about various aspects of aviation, including flight tracking, aircraft information, airline operations, air accidents, airports, regulations, and aircraft technologies.
☟ Some tools for Aviation OSINT. ☟
☛ FlightRadar24
☛ RadarBox
☛ FlightAware
☛ ADS-B Exchange
☛ Icarus-Flight
☛ Liveatc
☛ AdsbexChange
☛ Opensky-Network
☛ Planemapper
☛ Planefinder
☛ Planespotters
☛ Airhistory
☛ Planeflighttracker
☛ Variflight
☛ Freedar
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
17) Marinedrives & Submarine OSINT :
Marinedrives OSINT stands for “Maritime Intelligence, Surveillance, and Reconnaissance Open Source Intelligence.”
The main objective of Marinedrives OSINT is to monitor and understand maritime developments, such as ship movements, port activities, naval operations, and other events occurring in the maritime domain.
☟ Some tools for Marinedrives OSINT. ☟
☛ MarineTraffic
☛ ShipSpotting
☛ ShipLocation
☛ ShipXplorer
☛ ShippingeXplorer
☛ ShipTracker
☛ MyshipTracking
☛ MaritimeOptima
☛ VesselFinder
☛ VesselTracking
☛ MarineVesselTraffic
☛ VesselTracker
☛ Aishub
☛ Fleetmon
☛ Subtelforum
☛ Boatnerd
☛ Psgllc
☛ SubmarineCableMap
☛ SubmarineCableSystems
☛ SubmarineNetworks
☛ Fiberatlantic
☛ MarineInsight (Marinedrives News Portal)
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
18) Railway OSINT :
Railway OSINT stands for “Railway Open-Source Intelligence.” It refers to the practice of collecting and analyzing information about railway systems and related activities using publicly available sources.
☟ Some tools use to Railway OSINT. ☟
☛ OpenRailwayMap
☛ TrackTrace
☛ SignalBox
☛ WorldlineGlobal
☛ Etrain
☛ RailCabrides
☛ YandexTrain
☛ ChronoTrains
☛ NsinterNational.com/
☛ MobilityPortal
☛ Where-Is-My-Train
Search on google country wise popular railway tracking app because some apps are just limited to specific country. You need to search more on google.
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
19) Geolocation & IP OSINT :
Geolocation OSINT: Utilizing public data to identify the physical location of a device or entity, often through GPS or IP geolocation.
IP OSINT: Gathering information about an IP address from publicly available sources to reveal details about its origin and usage.
Both techniques aid in investigations, mapping, and understanding the geographic aspects of digital interactions.
☟ Some tools for Ip & Geolocation OSINT. ☟
1. Geo Location
☛ Geocreepy
☛ GeoNames
☛ GeoLocation
☛ GisGeography
☛ Liveuamap (Type country as a subdomain)
☛ GoogleEarth
☛ GoogleMap
☛ BingMap
☛ AppleMap
☛ YandexMap
☛ MapsMe
☛ Mapillary
☛ DualMaps
☛ Peakfinder
☛ Waze
☛ UKTraffic
☛ SnapMap
☛ Peakvisor
☛ SkyDB
☛ GPS-Coordinates
☛ Photo-Map
☛ MapChannels
☛ Latlong
☛ SoarEarth
☛ Seeker
☛ Earth3DMap
☛ MapQuest
☛ AllTrails
☛ InstantStreetView
☛ WikiMapia
☛ FreegisData
☛ Shademap
☛ Windy
☛ NASA-FIRMS
☛ SunCalc
☛ WikiMapia
☛ Hound
☛ IPDrone
2. IP Location
☛ IPlocation
☛ IPLocation 2
☛ IPlogger
☛ Grabify 1
☛ Grabify 2
☛ Grabify 3
☛ IpTrap
☛ IPlocation.io
☛ IP2location
☛ Whoer
☛ Whoer 2
☛ InfoByIP
☛ IPinfoDB
☛ IP2locationLite
☛ IPinfo
☛ IP-Tracker
☛ IPwhois
☛ IPlocation
☛ TraxOsint
☛ IP-Rover
☛ OSINTMmap
☛ NominatimOpenstreetmap
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
20) Webcam & CCTV OSINT :
Webcam OSINT is about using online resources and tools to extract valuable intelligence or data from webcams, which can be used for various purposes such as research, security analysis, or understanding real-time events happening in specific areas. It is essential to conduct such activities ethically and within legal boundaries, respecting the privacy and security of individuals and organizations.
☟ Some tools for Webcam OSINT. ☟
☛ OpenTopia
☛ Insecam
☛ Shodon
☛ Earthcam
☛ WebcamTravel
☛ AirportWebCams
☛ Pictimo
☛ Wetter
☛ Wisuki
☛ Hdontap
☛ TabiCam
☛ TravelCam
☛ MyLiveStreams
☛ LiveFromIceland
☛ BalticLiveCam
☛ CamHacker
☛ IPliveCams
☛ WebCamTaxi
☛ World-Webcams
☛ WebCamHopper
☛ WebcamsAbroad
☛ WorldViewStream
☛ WebCamera24
☛ TFljamcams
☛ WebcamNetwork
☛ Worldcam
☛ LiveWorldWebcam
☛ SkyLineWebcams
☛ MassPirates
☛ ArmChairResearch
☛ WhatsUpCams
☛ Goakamai
☛ CamPhish
☛ SkyLineWebCams
☛ Cameradar
☛ Webcam
☛ Blackbird
☛ GHDB
☛ Cam-Hackers
☛ SearchCAM
☛ CamOver
Here are some google dorks to find online web cameras & some default username and password of camera.
allintitle: "Network Camera NetworkCamera"
intitle:"EvoCam" inurl:"webcam.html|"
intitle:"Live View / - AXIS"
intitle:"LiveView / - AXIS" | inurl:view/view.shtml
inurl:indexFrame.shtml "Axis Video Server"
inurl:axis-cgi/jpg
inurl:"MultiCameraFrame?Mode=Motion"
inurl:/view.shtml
inurl:/view/index.shtml
“my webcamXP server!”
intitle:"Network Camera NetworkCamera"
intitle:"Live View / - AXIS"
intitle:"Live View / - AXIS 206M"
intitle:"Live View / - AXIS 210"
intitle:"Toshiba Network Camera"
intitle:"Live NetSnap Cam-Server feed"
intitle:"IP Webcam Viewer"
intitle:"WebCamXP 5"
intitle:"Live 2MP (1920x1080) IP Camera"
intitle:"Live 3MP (2048x1536) IP Camera"
intitle:"Network Camera View"
inurl:viewerframe?mode=refresh
inurl:"/control/userimage.html"
inurl:app/cam
inurl:"/view/index.shtml"
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
21) Social Media OSINT :
Social media OSINT refers to the process of gathering and analyzing publicly available information from various social media platforms to obtain valuable insights and intelligence. In short, it involves using data from websites like Facebook, Twitter, Instagram, LinkedIn, etc., to gain a deeper understanding of individuals, organizations, or events.
In this blog, I explained in deatil about Social Media OSINT aka SOMINT.
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
22) Radio frequency, Wireless & Satellite OSINT :
Radio Frequency (RF) OSINT: Gathering intelligence from publicly available information transmitted over radio frequencies.
Wireless OSINT: Collecting intelligence from publicly available data related to wireless technologies like Wi-Fi, Bluetooth, and cellular networks.
Satellite OSINT: Utilizing publicly available information from satellites and remote sensing for intelligence gathering, including satellite imagery and tracking satellite movements.
☟ Here are some tools, which are used in.☟
1. Radio Frequency
☛ ZoomEarth
☛ RadioGarden
☛ WorldRadioMap
☛ RadioGuide
☛ Radio
☛ LiveRadios
☛ OnlineRadios
☛ LiveOnlineRadio
☛ WorldViewEarthData
☛ Shure-frequency-finder
☛ MapChecking
☛ RadioReference
☛ FMScan
☛ FrequencyFinder
☛ NewEndian-FreqFinder
☛ Siriusxm
☛ DigitalFrequencySearch
☛ OpenMHZ
2. Satellite
☛ SatFlare
☛ Celestrak
☛ OrbTrack
☛ SatMap
☛ EarthExplorer
☛ FindSatellites
☛ Dishpointer
☛ Satellitefinder
☛ N2yo
☛ SatView
☛ UphereSpace
☛ Arachnoid
☛ FastSatFinder
☛ DishPointer
☛ GeoSatFinder
☛ SatIntel
☛ Google-Earth
☛ Intelligence-Airbusds
☛ Geogig
☛ GrassOsgeo
☛ EuspaceImaging
☛ Maxar
3. WiFi
☛ Wigle
☛ WifiMap
☛ Mylnikov
☛ Wiman
☛ OpenWifiMap
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
23) Crypto Currency OSINT :
OSINT for cryptocurrencies involves using publicly available information from sources like social media, forums, GitHub, news websites, blockchain explorers, and more to gather insights into the crypto world.
☟ Here are some tools to Crypto Currency OSINT. ☟
☛ BlockchainExplorer
☛ BlockChair
☛ WalletExplorer
☛ BitinfoCharts
☛ ExplorerCrystalBlockChain
☛ OXT
☛ Blockpath
☛ Orbit-Tool
☛ BitcoinAbuse
☛ BitcoinWhosWho
☛ Etherscan
☛ Bitref
☛ OSINT-SPY
☟ CryptoCurrency attack surface for OSINT investigations. ☟
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
24) Network OSINT :
Network OSINT refers to the practice of gathering information about a network or its components using publicly available sources. OSINT is a valuable tool for understanding and assessing potential security risks, identifying vulnerabilities, and discovering information that could aid in network analysis or investigation.
☟ Here are some tools to Network OSINT. ☟
☛ Centralops
☛ Network-Tools
☛ Toolsvoid
☛ Manytools
☛ All-Nettools
☛ Mxtoolbox
☛ Hackertarget
☛ Nmap
☛ Wireshark
☛ Termshark
☛ Whois
☛ Robtex
☛ Viewdns
☛ Viewdns 2
☛ Netcraft
☛ OpenCorporates
☛ OpenOwnership
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
25) Scammer OSINT :
Scammer OSINT is the practice of gathering information about scammers or fraudulent activities using publicly available sources on the internet.
Also there are some tools which are mostly get use into cyber threat intelligence. (CTI)
☟ Here are some tools to Scammer OSINT. ☟
☛ Scammer
☛ DatingScammer
☛ Bismanonline
☛ Scamalert
☛ ScamSearch
☛ LookupRobokiller
☛ Nomorobo.com
☛ Fraudrecord
☛ Scamadviser
☛ URLscan
☛ CheckPhish
☛ PhishReport
☛ PhishingArmy
☛ PhishCheck
☛ PhishStats
☛ IsItPhishing
☛ IsItPhish
☛ Phishtool
☛ Phishtank
☛ Phishunt
☛ OpenPhish
☛ URL-Scanner
☛ VirusTotal
☛ Phishing-URL-Checker
☛ VX-Underground
☛ Hybrid-Analysis
☛ Malwarebytes
☛ MISP-Project
☛ Stalkface
☛ Hootsuite
☛ Talkwalker
☛ ID-Ransomware
☛ Bitcoinabuse
☛ Nomoreransom
☛ Malware-Bazaar
☛ TALOS-Intelligence
☛ ThreatCop
☛ StopForumSpam
☛ Phishing-Initiative
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
26) IOT OSINT :
IoT OSINT stands for “Internet of Things Open Source Intelligence.” In short, it refers to the process of gathering and analyzing publicly available data from various IoT devices and systems to gain insights, detect vulnerabilities, or identify potential threats. This information can be collected from public sources like social media, forums, websites, or publicly accessible databases related to IoT devices.
☟ Here are some tools to IOT OSINT. ☟
☛ Shodan
☛ Censys
☛ Thingful
☛ Zoomeye
☛ PRET
☛ Recon-Ng
☛ IvreRocks
☛ InSpy
☛ Metasploit
☛ Routersploit
☛ Iot-Inspector
☛ CriminalIP
☛ HunterHow
☛ Firmware-Analysis-Toolkit
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
27) DarkWeb OSINT :
Dark Web OSINT refers to the process of gathering and analyzing publicly available information from the dark web, which is a part of the internet not indexed by traditional search engines.
In short, it involves using specialized tools and techniques to access, monitor, and extract data from hidden online platforms, forums, marketplaces, and other sources within the dark web.
☟ Here are some tools to DarkWeb OSINT. ☟
☛ OnionSearchEngine
☛ OnionSearch
☛ OnionScan
☛ TorBot
☛ TorCrawl
☛ Onioff Katana
☛ DarkWebOsint
☛ VigilantOnion
☛ OnionIngestor
☛ Darc
☛ MidnightSea
☛ DarkWebInformer
☛ DarkDump
☛ DockerOnionNmap
☛ TheHiddenWiki
☛ IacaDarkwebTools
☛ WeboProxy
☛ Uscrapper
☛ Tor2Web
☛ StealthMole
☛ Jarm
☛ DeepDarkCTI
☛ OpenCTI
☛ C2-Tracker
☛ TorMetrics
☛ IKnowWhatYouDownload
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
28) News OSINT :
News OSINT applied to news gathering and analysis. In short, it refers to the process of using publicly available sources to gather and analyze information to understand, verify, and report on news events. OSINT techniques involve utilizing online platforms, social media, websites, government documents, and other publicly accessible sources to collect data and news-related information. Journalists, researchers, and analysts often use OSINT to support their reporting, investigations, and fact-checking processes.
☟ Here are some tools to News OSINT. ☟
☛ Newsnow
☛ Newspapermap
☛ 1stheadlines
☛ Newsnow.UK
☛ NewsPaperArchive
☛ AllYouCanRead
☛ NewsPapers
☛ NewsPaperMap
☛ OnlineNewsPapers
☛ NewsPress
☛ GoogleNews
☛ Snopes
☛ Hoaxy
☛ WebArchive
☛ Factcheck
☛ Reviewmeta
☛ ReportersLab
☛ Truthorfiction
☛ CitizenEvidence
☛ FakeNewsVerify
☛ SmartResultsNow
1. Cross-check with Multiple Sources: Verify the information by checking it against multiple reliable news sources. If the story is true, you should find it reported by several reputable outlets.
2. Watch for Clickbait: Be cautious of sensational headlines designed to grab attention but may not reflect the actual content of the article. Look for reputable sources that present information objectively.
3. Check the Date: Sometimes old news is shared as if it’s new. Check the date of the article to ensure you’re getting the latest information.
4. Look for Author Credibility: Check the author’s credentials and reputation. Trustworthy journalists and experts are more likely to provide accurate information.
5. Examine the Evidence: Verify claims by looking for supporting evidence, like official statements, data, or reports.
6. Beware of Misleading Images: Images can be taken out of context. Do a reverse image search to see if the image has been used elsewhere with a different meaning.
7. Check Quotes and Sources: If the article includes quotes, check if they are attributed to credible individuals or organizations.
8. Be Wary of Unverified Content: Social media and user-generated content may not always be reliable. Verify information from credible news sources before sharing.
9. Understand Bias: Be aware of the potential bias of news outlets. Try to read from various sources to get a balanced perspective.
10. Consult Fact-Checking Sites: There are fact-checking websites that can help you verify the accuracy of news stories. Look for reputable fact-checkers.
Remember, taking a few extra minutes to fact-check can help ensure you’re sharing accurate information and not contributing to the spread of misinformation.
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
30) Credit Card OSINT :
Credit Card OSINT, in simple terms, refers to the practice of using publicly available information to gather details about credit cards and their usage.
First 3 are Credit card BIN Checker Websites, BIN Stands for Bank Identification Number. “Bank Identification Number,” or BIN code, refers to the initial sequence of four to six numbers that appears on a credit card. The number is used to identify the card’s issuing bank or other financial institution.
☟ Bin Checking Sites. ☟
☛ Binlist
☛ BincheckIo
☛ Bincheck
☛ CardPwn (Credit Card OSINT Tool)
(Disclaimer : Checking BIN of a credit card on the internet can be risky and potentially unsafe. Use at your own risk, if you are using your own credit card.)
For Practice or if you wants to know, how it BIN checking works, then you can use FakeCreditCardNumberGenerator site, to generate a Fake Credit Card Numbers for better understanding about BIN.
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
31) Universe OSINT :
LOL 🤣🤣🤣🤣🤣 !!!!!! What you thaught ?? I’m I serious ?? No guys just kidding But, I have some websites, where you can gather the information about whole universe. Its a informational website, not used for OSINT.
☟ Some websites to get information about Universe.☟
☛ ChromeExperiments
☛ Theskylive
☛ SolarSystemScope
☛ DeepspaceMap
☛ ViewSpace
☛ MapOfTheUniverse
☛ Hubblesite
☛ WorldwideTelescope
☛ UniverseSandbox
☛ GalxySpace
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
32) OSINT Blogs :
OSINT Blog is must important to read daily, If your cyber security career path going towords OSINT & if you wants to be a “OSINT Researcher” then it should necessary to read it.
☟ Here are some OSINT Blogs that you have to read it !!! ☟
☛ OsintCurio
☛ AwareOnline.com
☛ Osintme
☛ OsintTeam
☛ OsintOrg
☛ OsirtBrowser
☛ WebBreacher.com
☛ OsintNinja
☛ Osintfr
☛ Sector035
☛ UKOSINT
☛ OSINTForAll
☛ DigitalInvestigations
☛ The-DFER-Report
☛ OsintFoundation.com
☛ OsintNewsletter
☛ BleepingComputer
☛ OS2NT
☛ BushidoToken
☛ AccessOSINT
☟ Here are some OSINT Twitter Accounts.☟
☛ OSINTUpdates
☛ AllForOSINT
☛ DailyOSINT
☛ OsintTV
☛ OSINTResearch
☛ OHShint
☛ 0xtechrock
☛ OSINT-Technical
☛ OSINTtechniques
☛ osintnewsletter
☛ BushidoToken
☛ Cyb3rops
☛ DailyDarkWeb
☛ VXUnderground
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
33) Some Random OSINT Images :
All credit goes to that peoples who make these information (credit are in the images.)
☛ Metagoofil tool for extracting metadata of public documents such as pdf, doc, xls, ppt, etc.
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
34) Millions Tools Resources :
In a starting of blog, as I told you, here I kept my promiss. In this part, I’m much excited give you millions of tools, which is used for all types of OSINT. Which will definetly helps you to explore more and more new things.
SO,
⚠️ “TIE YOUR SEATBELT, THE WEATHER IS GOING TO TURN BAD !!!” ⚠️
☛ Smart-Myosint-Training (Here you will got the millions of tools, it will take some time to load.)
☛ The-Ultimate-OSINT-Collection
☛ OSINT-Inception
☛ Sim-S-Tools
☛ OSINT-Stuff-Tool-Collection
☛ The-BBC-Africa-Eye-Forensics-Dashboard
☛ OOSINT
☛ OSINT-Link
☛ OSINT-Tools
☛ OSINT-SH
☛ OSINT-Industries
☛ UK-OSINT
☛ OSINT-Combine
☛ OSINT-Essentials
☛ OSINT-Techniques
☛ OSINT-Framework
☛ IntelTechniques-Tools
☛ Intelx-Tools
☛ OSINT-DoJo
☛ MidaSearch
☛ Metaosint
☛ MalfratsIndustries
DON’T GO FORWARD, WITHOUT CHECKING THESE TOOLS RESOURCES LIST !!
Some Google Dorks
site:start.me intitle:"OSINT" OR "osint"
site:start.me inurl:OSINT
site:start.me inurl:osint
site:start.me "OSINT"
site:start.me intext:osint
site:start.me allinurl:osint
site:start.me inurl:/p/ "osint"
site:start.me inurl:/p/ intitle:"osint"
site:github.io inurl:osint | inurl:osint-tools
site:github.io inurl:osint | intitle:"osint"
site:github.io intitle:"osint toolkit"
site:github.io intitle:osint-toolkit
site:github.io inurl:osint
site:github.io intitle:osint
site:github.io inurl:osint-toolkit
site:github.io intitle:*osint
#You Will Got Some More Cool Stuff
⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚⮘⮚
35) Bonus Points :
1) Whenever you are gonna OSINT research, then make a separate workspace to do your work and you can use best ever operating system for your better performance.
☛ CSI Linux
☛ Trace Labs OSINT VM
☛ Tsurugi Linux
These are best ever OS which is mostly used in OSINT researcher.
Check this blog. ☟
2) Practice is more important, if you wanna be perfect in this, hhere are some practice OSINT CTF, which will help you to make better version of yourself.
Check this blog. ☟
3) OSINT methodology is one of the most important part of your research that you should need to know.
☛ OSINT-DoJo is a resourses where you can get lots of digrams of methodology, graphs and more other things.
4) Please note that the availability and functionality of these tool may be avalible or not. If you did not get any link go to archive and check the history. If sometimes you did not get any tool OR cause some reason site is down or not working then try to find it on ARCHIVE. use some other tools either.
5) OSINT is not just about using tools, it’s all about your research, investigation and your methodology. Tools comes and go, but your methodology, you should never forget.
6) If you wanna make career in OSINT then “THIS” platform will definetly helps you to find your job. (Check all details by yourself.)
7) All given tools, techniques, methodology are just for education porpose and ethical use only.
8) OSINT tools can assist in finding high-quality images, videos, and infographics from publicly available sources. These visuals can enhance the visual appeal of your blog posts and improve reader engagement.
9) OSINT allows you to gather information from a wide range of sources, such as news articles, social media, government websites, and more. This enables you to create well-informed and fact-based blog posts, enhancing the credibility of your content.
10) OSINT can uncover interesting and compelling stories from various sources, helping you create engaging and narrative-driven blog posts that captivate your audience.
I’ll update this blog, if i got some new about OSINT !!!
I really did lot’s of afforts and time to make this blog. I hope you guys love this blog.
If you like it, then don’t forget to follow, subscribe and claps.
I’ll see you with next article.