cyber-security-resources/osint
2023-08-08 18:34:19 -04:00
..
quick_recon Update pasting.py 2021-02-14 22:18:21 -05:00
dns-zone-transfer.md Create dns-zone-transfer.md 2021-03-03 12:40:58 -05:00
README.md Update README.md 2023-08-08 18:34:19 -04:00

Open-source Intelligence (OSINT)

Open-source intelligence (OSINT) is data collected from open source and publicly available sources. The following are a few OSINT resources and references:

Passive Recon Tools:

Open Source Threat Intelligence

  • GOSINT - a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs). GOSINT allows a security analyst to collect and standardize structured and unstructured threat intelligence.
  • Awesome Threat Intelligence - A curated list of awesome Threat Intelligence resources. This is a great resource and I try to contribute to it.

Website Exploration and "Google Hacking"

Data Breach Query Tools

IP address and DNS Lookup Tools

Social Media

Acquisitions and

  • OCCRP Aleph - The global archive of research material for investigative reporting.

Whois

WHOIS information is based upon a tree hierarchy. ICANN (IANA) is the authoritative registry for all of the TLDs and is a great starting point for all manual WHOIS queries.

BGP looking glasses

DNS

The OSINT Framework

Dark Web OSINT Tools

Dark Web Search Engine Tools

Tools to Crawl Dark Web Data

Other Great Intelligence Gathering Sources and Tools

Active Recon