Blue Team Guides Red Team Recipe DevSecOps Guides

OSINT

advance dork

  • https://hunter.how/list?searchValue=web.body%3D%22hadess%22%26%26web.body%3D%22wordpress%22&timestamp=1676265835805

  • web.body=”hadess”&&web.body=”wordpress”

  • domain=”example.com”

  • web.body=”we hack your company successfully”&&web.title=”How to Restore Your Files”

  • http://fonetask.com/

Wordpress Tip

{site}/wp-json/wp/v2/users

{site}/wp-json/wp/v2/posts/?per_page=100&page=1

Telegram Tip

cat messages.html | grep -A1 "from_name" | cut -f1 -d "<" | sort -u
url:t.me cryptocurrency

Sort for TikTok

  • https://chrome.google.com/webstore/detail/sort-for-tiktok/piiiffonpmeolocfghlpeolmdabhiemi?hl=nl

The Wayback Machine

https://web.archive.org/web/202209/{url}

introduction

  • https://www.howtoverify.info/

flight

  • https://globe.adsb.fi/

  • https://www.flightradar24.com/

  • https://www.radarbox.com/flight/EP3771

  • https://www.ads-b.nl/index.php?pageno=3001&checkcountry=Iran&checktype=C180

  • https://opensky-network.org/network/explorer

BND Spies & gmail

  • https://twitter.com/FakePhD_reveal/status/1621200303315124225

  • https://epieos.com/

  • https://www.google.com/maps/contrib/118081025657207598184/reviews/@38.8639771,33.013704,4z/data=!3m1!4b1!4m3!8m2!3m1!1e1

  • https://get.google.com/albumarchive/{userID}

  • https://www.google.com/maps/contrib/{userID}

  • https://www.youtube.com/feeds/videos.xml?user={accountName}

youtube

  • https://mattw.io/youtube-geofind/location

  • https://hadzy.com/comments

  • https://t.co/dbioIcIEem

  • https://ytlarge.com/youtube/video-data-viewer/

phone

  • https://www.aware-online.com/en/how-can-i-find-a-google-account-by-phone-number/

  • https://www.linkedin.com/posts/bob-engelen_phone-number-gaia-id-location-activity-7000395165211181056-_X9J/?utm_source=share&utm_medium=member_android

  • https://wigle.net/search?ssid=Example

search engine

  • https://www.alltheinternet.com/?q=example.com&area=&file1=&page=2#gsc.q=example.com&gsc.page=2

  • http://isearchfrom.com/

  • https://searx.space/#

  • https://scoperac.com/booleanstringbank/industries?q=Information%20Technology%20&%20Services

  • https://filepursuit.com/

  • https://boardreader.com/

website

  • https://urlscan.io/result/247d32c5-8822-4da5-b3ae-1c627d642539/#summary

  • https://builtwith.com/relationships/example.com

twitter

  • https://web.archive.org/web/20200801000000*/https://twitter.com/rezaduty/status/1319525151252201472

  • http://geosocialfootprint.com/

  • https://socialbearing.com/search/general/stevewoz

  • https://spoonbill.io/

  • to:rezaduty

  • geocode:1.289421,103.8625182,5km

game

  • https://www.geoguessr.com/cups

  • https://quiz.sector035.nl/

Building Databases

template

  • https://github.com/WebBreacher/obsidian-osint-templates

  • https://smart.myosint.training/

map

  • https://www.freemaptools.com/

  • https://gpsjam.org/?lat=33.76715&lon=50.47420&z=4.3&date=2023-02-12

car

  • https://carnet.ai/

Image

  • https://thispersondoesnotexist.com/

  • https://seintpl.github.io/AmIReal/

  • https://fotoforensics.com/

  • https://extract.pics/

  • https://chrome.google.com/webstore/detail/fake-profile-detector-dee/jbpcgcnnhmjmajjkgdaogpgefbnokpcc?hl=en-US

  • https://peakvisor.com/identify-mountains.html#

  • https://scamsearch.io/#anchorCeckNow

  • https://vanceai.com/sharpen-ai/

  • https://neural.love/orders

  • https://github.com/seintpl/osint

  • https://nixintel.info/osint/quiztime-how-to-clean-pictures-for-better-search-results/

  • https://yandex.com/images/search?rpt=imageview&url=https%3A%2F%2Favatars.mds.yandex.net%2Fget-images-cbir%2F1907109%2FL380DEupsfMjDqa8W9bq1g8927%2Forig&cbir_id=1907109%2FL380DEupsfMjDqa8W9bq1g8927

  • https://www.chronophoto.app/game.html

  • https://lens.google.com/search?ep=gisbubb&hl=en&p=AfVzNa-P1sU8Gd2X7c55xHk5yovJ9RiqmKZbyhzIL2cILiQQF21ifolTCXOMGXXLxkaZRpmgM0I1DV2WECcDC1JST4XDT_
7mx9JDRoFa0JxUwaYT4QEAGDVBispEebo0--Fkd7JvTyObAq6dcEtkChM_NcZfTor7Jo8t5OUgpKNWm-BT5fZM1-tgOfzvOdnA_
52j1QpEjoYFm-0-xlRx0Pnc3W0U_xZxguc0OFGVpMUoY82SAkPnOraMCwjwYAJ4NhUjXn_ktUtUb--pQR_fBs1lmT3GZT7WK4CQdfnXBDdjSy
EUin7ultqbB1M732z70DH-VtuPxFLHTZbyyi7AQwdfRtAC8p13oqaM5GPRn0zX08JLBnrlxoqEuM19d-uLYoSXal_dVfr7vPcm#lns=W251bG
wsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsIkVrY0tKR1F3Wm1aa056QXdMVGc1TmpVdE5EWXdPUzFpT1RrMExUVXdNMlF3TTJRMU5
HWm1PQklmWXpWM01ucEpPVFJhWHpoYVVVUjFWV2RKVkUxaWJEVkJjVzlYVjFwQ1p3PT0iLG51bGwsbnVsbCxbW251bGwsbnVsbCwiMi0yIl0s
WyIzNWY4NTljNy01MTJiLTQ5ZTEtOTY1ZC05NzBjZTM1ZGRjMWQiXV0sMSxbImF1dG8iLCJlbiJdLFtbXSxudWxsLG51bGwsbnVsbCw4XSxud
WxsXQ==

Email

  • https://rocketreach.co/browser_extension

  • https://contactout.com/

  • https://app.getprospect.com/303197/contacts/filter/all

tools:

  • https://github.com/josh0xA/darkdump

  • https://www.maltego.com/transform-hub/image-analyzer/

  • https://github.com/mxrch/GitFive

  • https://github.com/matiash26/Steam-OSINT-TOOL

  • https://github.com/C3n7ral051nt4g3ncy/Masto

  • https://github.com/jordanwildon/Telepathy

  • https://gchq.github.io/CyberChef/

  • https://chrome.google.com/webstore/detail/selection-search/gipnlpdeieaidmmeaichnddnmjmcakoe

  • https://addons.mozilla.org/en-GB/firefox/addon/selection-search-ff

  • https://inteltechniques.com/tools/

  • https://github.com/novitae/emdofi

  • https://seintpl.github.io/NAMINT/

  • https://github.com/Genymobile/scrcpy

  • https://github.com/novitae/sterraxcyl

  • https://github.com/tejado/telegram-nearby-map

  • https://lnkd.in/f6hqpg6

  • https://cheatography.com/explore/search/?q=Sherlock

  • https://github.com/megadose/holehe

  • https://github.com/mxrch/GHunt

cctv

  • http://www.insecam.org/en/view/1006815/

  • https://cctv.masspirates.org/

  • https://railwebcams.net/

certificate

  • https://www.aware-online.com/en/our-customers/

book

  • Psychology of Intelligence Analysis

  • Visual Intelligence: Sharpen Your Perception, Change Your Life

  • Fixed.: How to Perfect the Fine Art of Problem Solving

  • Introduction to Social Media Investigation: A Hands-on Approach

linkedin

  • https://theorg.com/organizations

  • https://www.importyeti.com/company/apple

  • https://github.com/chm0dx/peepedIn

  • site:(linkedin.com/in | zoominfo.com/p | rocketreach.co | xing.com/people | contactout.com) "company"

all in one

  • start.me

  • https://start.me/p/PwmvMv/main

  • https://start.me/p/rx6Qj8/nixintel-s-osint-resource-list

  • https://start.me/p/1kJKR9

  • https://start.me/p/aLe0vp/osint-resources-in-canada

  • https://metaosint.github.io/table

  • https://start.me/p/1kBrw9/sans-osint-2022

  • https://map.malfrats.industries/

  • https://start.me/p/9E2mea/linux-tools

  • https://start.me/p/lLBdE6/ukraine-crisis-tracker

  • https://airtable.com/embed/shrYXDdO1V5y33lIX/tblgDtMXI4fxtg9Op

  • https://start.me/p/1kvvxN/

  • https://tor.taxi/

  • https://dark.fail/

Evaluation of information on project management boards

inurl:https://trello.com AND intext:@gmail.com AND intext:password
inurl:https://trello.com AND intext:ftp AND intext:password
inurl:https://trello.com AND intext:ssh AND intext:password
inurl:jira AND intitle:login AND inurl:[company_name]

Collect domain emails

python3 theHarvester.py -d sbmu.ac.ir -b all -l 200

osint framework

https://www.spiderfoot.net/documentation/

Use through the web

python3 sf.py -l 127.0.0.1:8070

Collect domain emails

python3 sf.py -m sfp_spider,sfp_hunter,sfp_fullcontact,sfp_pgp,sfp_clearbit,sfp_emailformat,sfp_email -s tesla.com -q -F EMAILADDR

Evaluation of user account information

python3 ./sf.py -m sfp_accounts -s "elonmusk" -q

Evaluation of metadata information of domain files

python3 ./sf.py -m sfp_intfiles,sfp_spider,sfp_filemeta -s tesla.com -q -F RAW_FILE_META_DATA

PreviousSocial EngineeringNextOT

Last updated