This document provides an overview of open-source intelligence (OSINT) techniques. It defines OSINT as information gathered from publicly available sources on the internet and media. Some key OSINT data sources it outlines include search engines, social networks, maps, public databases, and other online tools that can be used to gather intelligence on people, organizations, domains, and technical information. The document also lists specific tools and websites that can be used for OSINT activities like searching social media, performing online investigations, and monitoring open data sources.

1. OSINT
BY – APURV SINGH GAUTAM

2. SUN TZU -- Art of War
• If you know your opponent
weaknesses and How to
exploit them you will
never loose.

3. Intelligence Gathering
• Intelligence gathering is a process of
collecting intelligence(data) from
various sources.
Open or closed

4. Intelligence Gathering Disciplines
• HUMINT
• GEOINT
• SIGINT
• TECHINT
• FININT
• OSINT
Intel gathered from Humans
Intel gathered from images, geo
location and human activity.
Intel gathered from signals,
communication
Intel gathered about weapons,
defense and military affairs.
Intel gathered from
documents, organizational
data and financial affairs.

5. OSINT ?

6. What is OSINT?
• Information available publicly
from public sources.
• Sources might be -
• Media
• Internet
• Social meetings

7. What kind of data we can gather?

8. • Email
• Social Accounts
• Real Time Monitoring
• Websites
• IP Addresses
• OSINT for Blue Team and Red Team
Main OSINT Search Area

9. OSINT Arsenal
• Search Engines
• People Search Engines
• Social Networks
• Video Sharing Platforms
• Various public API’s
• Tools

10. Search Engines
• Google
• Bing
• Yandex

11. TOR Search Engines
• www.torchtorsearch.com
• https://ahmia.fi
• https://thehiddenwiki.org/
• http://onion.link/
• https://tor2web.org/

12. Twitter Intel Gathering
• https://moz.com
• http://ctrlq.org/first/
• Google Dork is not a bad option 
• Geosocialfootprint.com
• Tweetpaths.com
• App.echosec.net
• Onemilliontweetmap.com
• https://www.allmytweets.net

13. Social Network Traffic Analysis
• Social-searcher.com
• Icerocket.com
• Socialmention.com
• Delicious.com
• stumbleupon.com
• Keyhole.co

14. Online Maps | GEOINT
• Flashearth.com
• Here.com
• Google.com/maps

15. People Search Engines
• Thatsthem.com
• Pipl.com
• Zabasearch.com (For US)
• Intelius.com
• Radaris.com
• Spokeo.com
• Yasni.com
• Advancedbackgroundchecks.com

16. Domain and IP Address
• Viewdns.info/whois
• Whoisology.com
• Domainhistory.net
• Whoishostingthis.com
• Whoismind.com
• Spyonweb.com
• Sameid.net
• Pub-db.com
• Domaincrawler.com
• Nerdydata.com
• Semrush.com

17. CT Logs
• crt.sh
• censys.io
• developer.facebook.com
GitHub
• GitHub Commits (Juicy Info)
• GitHub Issues
• GitHub Dorks -
https://github.com/techgaun/github-dorks

18. Thank You