Introduction h8mail is a powerful, user-friendly OSINT tool that allows you to hunt for passwords through different breach and reconnaissance services. It's open source and written in Python with one of the most robust README files I've ever seen. This tool is loaded with features including: 🔎 Email pattern matching (reg exp), useful for reading from … Continue reading h8mail – an OSINT Tool for Finding Passwords in Data Breaches →

Introduction PaGoDo (Passive Google Dork) is an OSINT tool that lets you automate Google hacking (dorking) by scraping Google Search with a predefined list of vulnerabilities and useful information. According to the developer, the goal of this project was to develop a passive Google Dork script to collect potentially vulnerable web pages and applications on the … Continue reading PaGoDo – an OSINT Tool that Automates Google Dorks →

Introduction Facial recognition has been buzz word lately. It's been used by technology companies to improve their products, law enforcement to identify criminals, NGOs to identify missing persons, and more.  It's also been used for nefarious reasons, leading to a general negative sentiment in the public eye. In the United States, cities are limiting the … Continue reading Automate OSINT Using Face Recognition and Instagram →

Introduction The dark web is being used more and more for illicit activity by nefarious actors.  It's becoming easier to access as knowledge of tor becomes more mainstream and cryptocurrencies provide a means to monetize it.  Also, just like the clearnet, it only gets larger with time. Encrypted messaging apps allow for people to exchange … Continue reading OSINT Tools for the Dark Web →

The internet is vast and the amount of content published on it every day, every second, is unfathomable. As an OSINT investigator, collector, or analyst, you need to find a way to cut through the chaff and get the information that's valuable to you.  The first thing you have to understand is that you will … Continue reading OSINT Collection Tools for Pastebin →

I recently did a deep dive on the OSINT tool Spiderfoot.  There are so many features and I don't think I did it much justice in such a short time frame (30 minutes).  I thought a good way to add value is to get the information from the source, the developer of Spiderfoot.  Enjoy this … Continue reading Interview With the Developer of Spiderfoot – Steve Micallef →

Introduction As a follow up to my AML and OSINT post I did last week, here's an intriguing and insightful interview with Andrew Rudd on different aspects of AML and how OSINT is related to the career field. Learn from Andrew how you can apply your OSINT skills to a different career field and where … Continue reading An Interview with an AML and OSINT Specialist – Andrew Rudd →