Open-Source Intelligence (OSINT) Reconnaissance

Conversations in Social Media; image courtesy of Ethority, 2014
Phases of the OSINT Process; image courtesy of Chiheb Chebbi

OSINT Tools

Google Searching & Dorking

List of simple Google Dorks; courtesy of Techworm

Whois

Using the WHOIS.net tool for website domain name OSINT
Using the WHOIS.icann.org tool for website domain name OSINT

Command Prompt

Using the tracert command in PowerShell to determine the website IP address
Onyphe IP address scan results

Spokeo

Spokeo people search engine

Shodan

Exploring the Shodan search engine

Datasploit

Datasploit OSINT tool; image courtesy of KitPloit

Maltego

The Maltego OSINT tool; image courtesy of Paterva.com

Social Media

Automater

Automater OSINT tool; image courtesy of SecuirtyOnline.com
Cornell Universityโ€™s arXiv.org for Deep Web OSINT
Using the OnionScan OSINT tool to scan the Dark Web; image courtesy of Mascherari.press

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store