Open Source Intelligence (OSINT) Course
Summary
Provide ways to investigate commercial businesses and individuals uses free and open tools on the internet.
All information is passively gained, meaning that it is achieved through simple looking through websites and tools. No penetration testing has been or is being done.
Resources
- Tracelabs - Helps find missing people through OSINT. All proceeds goes to a good cause.
- Innocent Lives Foundation - Helps track child predators and help find missing kids.
- Alethe Dennis on Twitter
- https://twitter.com/c_3pjoe
- https://twitter.com/AletheDenis
- https://inteltechniques.com/
- https://www.aware-online.com/en/create-your-own-osint-flowcharts/
Tools and Usages
| Website | Description |
|---|---|
| https://www.google.com/advanced_search | best use for filtering down names and information based on various specific criteria of subject |
| https://www.google.com/images | Best use for reverse image searching if information is provided |
| https://privacy.com/ | Use case for providing a credit card and billing information that is not directly tied to any of your financial institutions |
| https://www.fakenamegenerator.com/ | Best use for creating sock puppet accounts with detailed information that may appear as “real” to outside consumers of it |
| https://www.thispersondoesnotexist.com/ | Best use for creating an Artificially Generated Image of a person that in real life does not exist but may seem believable to others |
| https://hunter.io | Best use for reverse engineering contact information in businesses |
| https://phonebook.cz/ | Can be used to get domain information, email address information, or phone numbers to try and credential stuff, or password spray |
| https://www.voilanorbert.com/ | Search for people and find email accounts |
| https://chrome.google.com/webstore/detail/clearbit-connect-supercha/pmnhcgfcafcnkbengdcanjablaabjplo?hl=en | Has to be used within Google chrome. Provides a help context into user contact information crawled from various other website |
| https://dehashsed.com/ | Best use for people searching |
| https://www.hunch.ly/ | Helps track investigation into web applications |
Finding leaked credentials
- https://weleakinfo.to/v2/
- https://leakcheck.io/
- https://snusbase.com/
- https://scylla.sh/
- https://haveibeenpwned.com/
Finding Usernames and Accounts
- https://namechk.com/
- https://whatsmyname.app/
- https://namecheckup.com/
Saarching for People
- https://www.whitepages.com/
- https://www.truepeoplesearch.com/
- https://www.fastpeoplesearch.com/
- https://www.fastbackgroundcheck.com/
- https://webmii.com/
- https://peekyou.com/
- https://www.411.com/
- https://www.spokeo.com/
- https://thatsthem.com/
Searching by Phone Number
- https://www.truecaller.com/
- https://calleridtest.com/
- https://infobel.com/
Crawling Twitter Analytics
- https://tweetdeck.com/
- https://socialbearing.com/
- https://www.twitonomy.com/
- http://sleepingtime.org/
- https://mentionmapp.com/
- https://tweetbeaver.com/
- http://spoonbill.io/
- https://tinfoleak.com/
Voter public records
- https://voterrecords.com/
Training
| Website | Description |
|---|---|
| https://www.geoguessr.com/ | Best use for training on how to investigate images and become familiar with different regions and their laws, customs, architecture, etc. |