Information Gathering

Information Gathering, often referred to as Open Source Intelligence (OSINT) in the context of ethical hacking, is the systematic collection and analysis of publicly available data about a target, providing the foundational knowledge necessary to identify potential vulnerabilities and craft targeted security assessments.

Command line tools

FromUse
Emailholehe $email
ghunt email $email (for google account)
github-recon $email (link, for github account)
DomaintheHarvester -d $domain -l 100
theHarvester -d $domain -l 100 -b all (full)
Usernamesherlock $username
Imageexiftool $imagePath
Instagraminstaloader profile $username
Githubtrufflehog github --org=$usernameOrOrg>
github-recon $username (link)

Online tools

ForUse
VisualiserOSINTracker
IPShodan
Censys
DomainWhois
NameWebmii
BreachDirectory
LeakLookup
IntelX
Genealogic.review
SSIDWigle
ImagePimEyes
TinEye
Pic2Map (exif geolocation)
UsernameDeHashed
BreachDirectory
IntelX
LeakLookup
Oathnet
EmailDeHashed
Hunter
HaveIBeenPwned
BreachDirectory
LeakLookup
IntelX
Oathnet
PhoneEpieos
InstagramDumpor
MiscGoosint
OSINT Framework
OSINT Dojo

OSINT Frameworks

  • Recon-ng is a modular Python framework for automating OSINT collection via many built-in modules
  • SpiderFoot is an open-source tool aggregating dozens of data sources to profile domains, IPs, or identifiers
  • Eleakxir is a self-hosted search engine for leaked data