OSINT: Open-Source Intelligence
- Descrição
- Currículo
- FAQ
- Revisões
In this course you will be learning about OSINT (Open-source intelligence) from a hacker’s point of view. Tools, techniques, setting up a virtual lab, and how to protect yourself. This is a comprehensive course that will be using free open source tools to investigate people and companies. No matter if you are totally new to the fascinating world of OSINT and hacking or have some experience, this course will walk you through how both hackers and investigators use these tools and why.
This course is designed to be beginner friendly and also help educate experienced individuals alike with a easy to follow and practical approach. Your safety is also important as we explore the use of sock puppets, a Linux virtual machine and more.
Worried about out of date content? I have gone through updating the content as things change, become obsolete, I find new cool tools, or techniques. These updates are free along with the bonus content.
Get stuck or have a question? Always feel free to send me a message and I will do my best to help you out!
FYI, a reminder: I not anyone that is a part of DGS has any affiliation with any of the vendors, software manufactures, or programmers in this course.
-
1
IntroductionAn introduction to the course, myself, and expectations for OSINT
-
2
Disclaimer
- The tools presented in this course are free and open-source
- All of the information that we gather and analyze are from publicly available sources
- While OSINT is also used by hackers, OSINT in itself is not illegal (check with your local laws). We are not exploiting systems or people to obtain this information.
- I am not responsible for misuse of the information or techniques demonstrated in this course.
- I am not responsible for for lost, corrupted, or otherwise altered/damaged files, software or hardware.
- This course is presented on a "As is" basis.
-
3
What is OSINT and who is OSINT for?
-
4
Mental preparation
-
5
Data sheet
-
6
OSINT Path
-
7
What will you need?
What will you need for this course?
-
8
Your tools will break
-
9
Ask
-
10
Crossing the line
-
13
Virtualization
What is virtualization? We discuss what virtualization is and why you would want to use it.
-
14
Installing Virtualbox (Windows host)
-
15
CSILinux install
-
16
Temp CSI Download -
17
Linux Terminal basics
In this video we will be going over some basic Linux terminal commands. While knowing terminal commands is not necessary for OSINT per se, it is useful o have a basic understanding of them.
-
18
Bias
-
19
Why a sock puppet account and what is it?
-
20
More sock puppets Gmail
-
21
Sudo
There may be times where we need to conceal our real identity or just need a burner telephone number, text message, and/or email. Sudo to the rescue! This is currently a iOS only app.
-
22
Temp mail
Using a temporary email solution instead of your burner email.
-
23
Using Text Free for texting updated
-
24
CSI Linux Sock Puppets
-
25
Handling data
In this video we talk about handling data and some tips on how not to become overwhelmed.
-
26
Cherry tree templates
These are a couple templates for a OSINT report. There is a technical report and a executive report template. Feel free to modify them to fit your needs.
-
27
Opening Cherry tree files With audio
-
28
Additional content: How to use Cherrytree templates
-
29
Keeping your data safe
In this video we look at some options to keep your data and yourself secure.
-
30
Google Advanced Operators
In this video we will be looking at some advanced search techniques using Google.
-
31
Google Maps
In this video we will be looking at Google maps and how it can be used in OSINT
-
32
Google Images
In this video we talk about doing a reverse image search with Google.
-
33
Exact match Google Images
-
34
Google alerts
Google and Twitter alerts
-
35
Other reverse image searches
In this video we explore other reverse image options
-
36
Geolocation
-
37
Greynoise
-
38
Reverse email
In this video we will be looking at some techniques to perform reverse email searches on our target.
Currently Behindemail is no longer in service.
-
39
Phone OSINT
-
40
Additional content: Reverse phone US and Europe
-
41
Reverse Phone
In this video we will be looking at reverse number lookups.
-
42
Deepfake detection
https://platform.sensity.ai/deepfake-detection
-
43
Deepware.ai
-
45
Black Book Online
https://www.blackbookonline.info/index.html
-
46
USA Public Data Search
Cibib is now xlek, thank you Everand for the heads up.
-
47
Dehashed (Updated 2/2/19)
In this video we take a look at the breach site Dehashed.
-
48
';--have i been pwned?
In this video we learn about have i been pwned and how it can help in OSINT
-
49
webmii
In this video we are looking at webmii.com to search a person's internet footprint.
-
50
Resume finders
In this video we look at some resume finders and how they can be applied to OSINT
-
51
Family trees
In this video we talk a look at how family trees can be applied to OSINT and some sites.
-
52
Property ownership
-
53
Hospitals
-
54
Instant Checkmate
-
55
Unmask Google Users
-
56
Spiderfoot
In this section we will be looking at Spiderfoot, a program designed to crawl websites and harvest information.
https://sf-1485db5.hx.spiderfoot.net/
-
57
wget and HTTrack
-
58
Updated: Metagoofil
https://github.com/laramies/metagoofil
-
59
Webpage Cache
The internet never forgets... In this video we will be looking at some options to retrieve lost pages from the internet.
-
60
Saving to the Internet Archive
-
66
Filtering fake news with SurfSafe
In this video we take a look at the tool SafeSurf that can be used to analyze news photos to make sure they are legitimate.
-
67
Image Capturing
In this video we will be looking at different options to save videos and images from our targets.
-
68
User agent switcher
-
69
start.me
-
70
Building a Facebook sock puppet account
-
71
Twitter Mind map
-
72
Twitter
In this video we look at Tinfoleak that is preinstalled on CSI Linux for Twitter OSINT
-
73
X Part 2
-
74
Facebook ID
In this video we talk about getting a user's Facebook ID number
-
75
FB Down
In this video we talk about downloading Facebook videos
-
76
Bypassing Youtube login Bonus
In this video we talk about how to bypass a Youtube login to view a video.
-
77
Additional content: Using social media to track the Capitol riots
https://projects.propublica.org/parler-capitol-videos/
https://intelx.io/?did=814b39fe-ad98-45a1-9f44-0346bc9f9b94
-
78
Bonus User searches with Maigret
https://github.com/soxoj/maigret
-
79
Youtube Data Viewer
https://citizenevidence.amnestyusa.org/
-
80
Fixed Bonus: Profil3r
-
81
Bluesky
-
82
internect.info
-
83
Hoaxy
