Open-Source Intelligence (OSINT) in 5 Hours - Full Course - Learn OSINT!

Introduction

This tutorial will guide you through the essentials of Open-Source Intelligence (OSINT) as covered in a comprehensive 5-hour course. OSINT is crucial for gathering information from publicly available resources, and this course will equip you with the tools and techniques to effectively conduct OSINT investigations.

Step 1: Understanding OSINT

• OSINT refers to the process of collecting information from publicly available sources.
• It includes data from social media, websites, public records, and other forms of online content.
• Importance: OSINT is used in cybersecurity, law enforcement, and competitive analysis.

Step 2: Taking Effective Notes

• Utilize digital note-taking tools or traditional notebooks.
• Organize information categorically (e.g., tools, techniques, findings).
• Keep track of sources for future reference and validation.

Step 3: Introduction to Sock Puppets

• Sock puppets are fake online identities used to gather information discreetly.
• They help in maintaining anonymity while conducting OSINT.

Step 4: Creating Sock Puppets

• Choose a platform (e.g., social media, forums).
• Create profiles with plausible backgrounds and interests.
• Avoid using personal information to maintain anonymity.

Step 5: Using Search Engine Operators

• Master advanced search operators to refine your searches:
  • Use site: to limit results to a specific domain (e.g., site:linkedin.com).
  • Use intitle: to find pages with specific words in the title (e.g., intitle:resume).
• Combine operators for more targeted searches.

Step 6: Conducting Reverse Image Searches

• Use tools like Google Images or TinEye to find the origin of an image.
• Upload an image or paste its URL to discover where it appears online.

Step 7: Viewing EXIF Data

• EXIF data contains metadata from images, including camera settings and location.
• Use tools like Jeffrey's Image Metadata Viewer to extract this data.

Step 8: Gathering Physical Location OSINT

• Utilize mapping services (e.g., Google Maps) to identify physical locations.
• Look for landmarks or unique geographical features in images.

Step 9: Identifying Geographical Locations

• Learn to analyze images and videos for geographical markers.
• Use tools like Google Earth for detailed views.

Step 10: Discovering Email Addresses

• Use search engines and social media to find email addresses associated with individuals.
• Tools like Hunter.io can help in finding verified email addresses.

Step 11: Hunting Breached Passwords

• Use sites like Have I Been Pwned to check if accounts have been compromised.
• Be aware of common pitfalls: never use personal passwords in searches.

Step 12: Searching for People

• Use public records, social media, and search engines to gather information about individuals.
• Verify findings by cross-referencing multiple sources.

Step 13: Exploring Social Media OSINT

• Investigate various platforms:
  • Twitter: Use advanced search and hashtags.
  • Facebook: Look for public posts and groups.
  • Instagram: Analyze user profiles and geotags.
  • LinkedIn: Search for professional connections and work history.
  • TikTok: Explore user-generated content and trends.

Conclusion

This tutorial provided an overview of essential OSINT techniques and tools you can use for effective information gathering. By mastering these skills, you can enhance your investigative capabilities whether for personal knowledge, cybersecurity, or professional needs. Consider practicing these techniques and exploring the provided resources to deepen your understanding of OSINT.