OH SHINT! Blog: Focuses on OSINT investigations, surveillance, and privacy.
The Week in OSINT: Offers weekly insights into the OSINT world, curated by Sector035.
Secjuice: A collective of security writers covering OSINT, hacking, and more.
IntelTechniques Blog: Managed by Michael Bazzell, it provides OSINT tools, techniques, and privacy tips.
OSINTCurious: A community blog by OSINT professionals sharing tools and techniques.
Bellingcat: Known for its investigative journalism using OSINT methods.
The OSINT Guide: Provides guides and tools for OSINT investigations.
Hackers-Arise: Offers tutorials and articles on OSINT and cybersecurity.
AaronCTI: Focuses on cyber threat intelligence and OSINT, offering tools, training, and community resources.
Benjamin Strick’s Blog: Features in-depth analyses and case studies on OSINT investigations, often focusing on human rights and geopolitical issues.
CQCore Blog: Offers insights and updates on OSINT techniques, with a focus on cyber intelligence and investigative methodologies.
OSINT Guardian: Provides practical advice, tools, and case studies for OSINT practitioners, emphasizing security and investigative best practices.
OSINT Combine Blog: Shares tutorials, case studies, and tools for applying OSINT in threat intelligence and digital investigations.
Social Links Blog: Covers a wide range of topics on OSINT and SOCMINT, offering insights into the latest tools, techniques, and case studies in social media intelligence and digital investigations.
nixintel Blog: Offers detailed OSINT tutorials, tool reviews, and case studies, with a focus on practical applications in digital investigations.
Boolean Strings Blog: Specializes in advanced search techniques and sourcing strategies, particularly useful for OSINT and recruitment research.
Blockint Blog: Provides insights into blockchain intelligence and OSINT, with articles on tracking cryptocurrency transactions and other digital footprints.
WonderHowTo OSINT: A collection of tutorials and guides on OSINT techniques, covering a wide range of tools and methods for digital investigations.
Exposing the Invisible: Focuses on investigative journalism using OSINT, providing resources, stories, and guides on uncovering hidden information and tracking digital footprints.
OS2INT Toolbox: A comprehensive collection of OSINT tools and resources, organized to support digital investigations and intelligence gathering.
WebBreacher Blog: Offers deep dives into OSINT techniques, case studies, and tool tutorials, with a focus on practical, hands-on approaches to digital investigations.
OSINTGeek: A German-language OSINT blog offering valuable insights into OSINT tools, techniques, and security practices.
Bashinho: A blog focused on OSINT and information security, offering content related to data collection and analysis techniques.
Loránd Bodo: Specializing in OSINT and digital forensics, this blog covers research techniques and case studies in the field of digital investigations.
WhiteHatInspector: A blog covering security research and OSINT, with a focus on security audits and investigative methods.
nixintel: A blog offering detailed OSINT tutorials, tool reviews, and case studies, emphasizing practical applications in digital investigations.
OSINTCurious: A community-driven blog by OSINT professionals sharing tools, techniques, and insights into the world of open-source intelligence.
“We Are Bellingcat” by Eliot Higgins: Chronicles the rise of Bellingcat and its OSINT investigations.
“The Darkest Web” by Eileen Ormsby: Explores the dark web and its implications.
“This Is How They Tell Me the World Ends” by Nicole Perloth: Focuses on the zero-day market and cybersecurity.
“Open Source Intelligence Techniques” by Michael Bazzell”: A comprehensive guide to OSINT techniques.
“Practical Open Source Intelligence” by Michael J. Clark: Offers practical applications of OSINT.
“Hiding from the Internet” by Michael Bazzell”: Discusses privacy techniques and OSINT.
“The OSINT Guide” by Thomas Caliendo: A beginner’s guide to OSINT.
“Data Mining for Intelligence, Fraud & Criminal Detection” by Christopher Westphal: Combines OSINT with data mining techniques.
“The Art of Investigation” by Robert C. Chandler: Provides methods for investigations, including OSINT.
“Cyber Reconnaissance, Surveillance and Defense” by Robert Shimonski: Offers insight into cyber reconnaissance, an essential aspect of OSINT.
“Big Data: A Revolution That Will Transform How We Live, Work, and Think” by Viktor Mayer-Schönberger and Kenneth Cukier: Explores the impact of big data on various industries, including intelligence gathering, with implications for OSINT.
“Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World” by Bruce Schneier: Discusses data collection practices and their implications, offering a critical view relevant to OSINT.
“The Great Hack” (2019): Explores the Cambridge Analytica scandal and the impact of data harvesting on political campaigns.
“Citizenfour” (2014): A documentary about Edward Snowden’s revelations on mass surveillance.
“Zero Days” (2016): Investigates the Stuxnet cyberattack and the implications of cyber warfare.
“Deep Web” (2015): Covers the rise of the Silk Road and its legal battles, shedding light on the dark web.
“Terms and Conditions May Apply” (2013): Explores how companies and governments use data collected from the internet.
“We Are Legion” (2012): Chronicles the rise of hacktivist group Anonymous and its impact on digital culture.
“The Internet’s Own Boy: The Story of Aaron Swartz” (2014): Follows the life of internet activist Aaron Swartz and his influence on internet freedom.
“Trust Machine: The Story of Blockchain” (2018): Discusses the development of blockchain technology and its privacy implications.
“Killswitch” (2014): Explores the fight to control the internet and the implications of government surveillance.
“The Fifth Estate” (2013): A dramatization of the rise of WikiLeaks and the impact of whistleblowing on global politics.
General OSINT Tools
Maltego: Visualizes relationships between data points, especially useful for social media, domain names, IP addresses, and other open sources.
Recon-ng: A web reconnaissance tool written in Python, designed to be modular for various information-gathering techniques.
TheHarvester: Gathers email addresses, domain names, IP addresses, and other related information from various public sources.
Amass: A tool for network mapping and domain reconnaissance, particularly for discovering subdomains.
OSINT-SPY: A comprehensive OSINT tool for investigating domains, IPs, emails, and more, integrating multiple data sources.
DataSploit: A tool for gathering intelligence on companies, individuals, and domain names using various data sources.
Sn0int: A semi-automated OSINT framework and package manager designed to keep track of large amounts of data and chain together modules.
Alfred – Advanced OSINT information gathering tool.
BBOT – Multi-target OSINT scanner with asyncio performance and NLP-powered subdomain mutations.
EagleOsint – Simple information gathering tool.
D4TA-Hunter – GUI OSINT Framework with Kali Linux.
OSINT-SPY – Comprehensive OSINT tool integrating multiple data sources for domains, IPs, emails, etc.
Sn0int – A semi-automated OSINT framework for managing and chaining together large data modules.
DataSploit – Intelligence gathering tool on companies, individuals, and domain names using various data sources.
reNgine – Automated reconnaissance framework for web applications.
ReconDog – OSINT reconnaissance Swiss Army Knife.
ReconSpider – Advanced OSINT Framework for scanning various targets.
XRay – Tool for recon, mapping, and OSINT gathering from public networks.
I.V.E. – Automated OSINT multi-tool for efficient data gathering.
Trimaxion – Browser extension for simultaneous OSINT searches across multiple engines.
OSINTBuddy – Tool for OSINT data mining and connecting unstructured public data.
Social Media and Personal Information Tools
Twint: A Twitter scraping tool that doesn’t require API keys, capable of collecting tweets, user information, and other related data.
Sherlock: A powerful tool for finding usernames across many social networks, allowing you to identify a person’s social media footprint.
WhatsMyName: A tool for finding usernames across over 500 websites, allowing you to trace an individual’s online presence.
Blackbird: A tool for finding information about social media profiles, especially those related to dark web activity.
Holehe: A tool that checks if an email is registered on multiple websites, useful for identifying online presence.
GHunt: A tool for gathering information about Google accounts, including email addresses, photos, and even private information linked to the account.
Social-Engineer Toolkit (SET): A framework for conducting social engineering attacks, particularly phishing.
Skiptracer: A tool that automates the process of gathering information from various sources like social media, public records, and dark web sites.
Mitaka: A browser extension that allows users to search for cyber threat intelligence data and indicators of compromise (IOCs) across multiple platforms directly from their browser.
CrossLinked – LinkedIn enumeration tool using search engine scraping.
Horus – OSINT/digital forensics tool focusing on social media and personal info.
Sagemode – Tracks and unveils online identities across social media platforms.
OSINTgram – Tool for Instagram OSINT and reconnaissance.
Steam OSINT Tool – Helps find close friends on Steam.
YesItsMe – Simple OSINT script to find Instagram profiles by name and e-mail/phone.
Tookie – Advanced OSINT tool to find social media accounts based on inputs.
Masto – Gathers intelligence on Mastodon users and instances.
OSINTEye – Username enumeration & reconnaissance suite.
Internet and Network Research Tools
Shodan: A search engine for internet-connected devices and systems, often used to identify security vulnerabilities.
Fofa: Fofa is a search engine designed for cybersecurity professionals to discover and analyze internet-connected devices, offering advanced filtering and data mining capabilities.
Censys: Censys is a search engine that scans and indexes the global internet, providing detailed information about online devices, services, and certificates.
ZoomEye: ZoomEye is a cyberspace search engine that enables users to explore and analyze internet-connected devices and services.
BGPView: BGPView is a tool for monitoring and analyzing Border Gateway Protocol (BGP) data, providing insights into internet routing and detecting anomalies in global traffic patterns.
Photon: A web crawler designed for extracting data from web pages based on specified keywords or URLs.
Metadata and File Analysis Tools
ExifTool: A command-line application for reading and editing meta information in images and other files.
Metagoofil: Searches for and extracts metadata from files hosted on a domain.
Email and Phone Number Research Tools
PhoneInfoga: A tool for phone number reconnaissance, identifying carrier information, and more using open sources.
Email2Phonenumber: A tool for finding the phone number associated with an email address, particularly useful in social engineering contexts.
