| Tool | URL | Purpose |
|---|
| Twitter Advanced Search | twitter.com/search-advanced | Complex queries |
| All My Tweets | allmytweets.net | View all tweets from account |
| Social Bearing | socialbearing.com | Analytics and search |
Instagram
| Tool | URL | Purpose |
|---|
| InstaFollowers | instafollowers.co | Profile analysis |
| Pikdo | pikdo.net | Web viewer |
Facebook
| Tool | URL | Purpose |
|---|
| Facebook Search | facebook.com/search | Built-in advanced search |
| WhoPostedWhat | whopostedwhat.com | Post search by date |
LinkedIn
| Tool | URL | Purpose |
|---|
| LinkedIn Sales Navigator | linkedin.com/sales | Advanced search |
| Clearbit Connect | (Chrome extension) | Email discovery |
| Hunter.io | hunter.io | Domain search |
Domain & Website OSINT
| Tool | URL | Purpose |
|---|
| WHOIS | whois.net | Domain registration info |
| DNS Dumpster | dnsdumpster.com | DNS recon |
| Sublist3r | (GitHub) | Subdomain enumeration |
| BuiltWith | builtwith.com | Technology stack |
| Wayback Machine | web.archive.org | Historical snapshots |
People Search Engines
| Tool | URL | Notes |
|---|
| Spokeo | spokeo.com | US-focused |
| Pipl | pipl.com | Global |
| WhitePages | whitepages.com | US contacts |
| TruePeopleSearch | truepeoplesearch.com | Free, US |
| FastPeopleSearch | fastpeoplesearch.com | Free, US |
Professional OSINT Suites
Frameworks
| Tool | Type | Notes |
|---|
| Maltego | Desktop app | Visual link analysis |
| Spiderfoot | Web/CLI | Automated OSINT |
| theHarvester | CLI | Email/subdomain gathering |
| Recon-ng | CLI | Full OSINT framework |
| OSINT Framework | Website | osintframework.com – Tool directory |
Browser Extensions
| Extension | Purpose |
|---|
| Clearbit Connect | Email discovery |
| Hunter | Email finder |
| Wappalyzer | Technology detection |
| Exif Viewer | Image metadata |
| FireShot | Screenshots |
| FoxyProxy | Proxy management |
Kali Linux Pre-installed
| Tool | Purpose |
|---|
| theHarvester | Email/subdomain gathering |
| Recon-ng | Full OSINT framework |
| Maltego | Visual link analysis |
| ExifTool | Image metadata analysis |
| Spiderfoot | Automated OSINT |
Installation
# 2. theHarvester
apt-get install theharvester
# 3. Recon-ng
apt-get install recon-ng
# 4. ExifTool
apt-get install libimage-exiftool-perl
# 5. Spiderfoot
pip install spiderfoot
Cheat Sheets & References
| Resource | URL | Description |
|---|
| Google Dorking | github.com | Various cheat sheets |
| OSINT Framework | osintframework.com | Complete tool directory |
| GeoGuessr Tips | geoguessr.com/tips | Regional identification |
| Yandex Search | yandex.com/support | Search operators |
Essential Reading & Learning
Blogs & Websites
- Bellingcat (bellingcat.com) - Investigative journalism
- OSINT Curious (osintcurious.org) - Community resources
- Sector035 (sector035.nl) - OSINT techniques
- NixIntel (nixintel.com) - OSINT guides
- Trace Labs (tracelabs.org) - Missing persons CTFs
- GeoGuessr (geoguessr.com) - Location practice
- HackTheBox (hackthebox.com) - Technical challenges
YouTube Channels
- The Cyber Mentor (this course instructor)
- OSINT Curious
- Bellingcat
- NixIntel
Quick Reference Card
Emergency OSINT Workflow
1. Starting Point
↓
2. Search Engine (Google, operators)
↓
3. Social Media (Namechk for username)
↓
4. Email Discovery (Hunter.io)
↓
5. Breach Check (Have I Been Pwned → DeHashed)
↓
6. Image Analysis (Google/Yandex reverse search)
↓
7. Location (Maps, Street View, EXIF)
↓
8. Cross-Reference (Find patterns, connections)
↓
9. Document (Screenshots, notes, timeline)
↓
10. Report (Compile findings)
