Hello everyone. Today I will continue our OSINT blog post about OSINT Framework. There are thousands of public resources for obtaining information about any individual or organization, but they are scattered throughout the Internet and often paired with security and data intelligence tools. This is why OSINT Framework comes into the picture.
Figure 1: OSINT Framework website
OSINT Framework is an asset to the digital world because it facilitates the consolidation of online data and the extraction of more relevant and valuable information.
The majority of security researchers and penetration testers utilize this instrument for digital footprinting, OSINT research, intelligence gathering, and reconnaissance. OSINT Framework provides an easy-to-use web-based interface for browsing OSINT tools organized by category.
It also provides an excellent classification of all extant intel sources, making it a valuable resource for determining which infosec areas you have neglected to investigate or the next OSINT steps recommended for your investigation. The OSINT Framework is categorized based on various topics and objectives. This is readily apparent when examining the OSINT tree accessible via the web interface.
As soon as you open the website https://www.osintframework.com, the OSINT tree will appear on the left side of your screen. There are a few highlights you should be aware of; take a glance at the indicators on the right for a few of the listed tools:
- (T) – Indicates a link to a tool that must be installed and run locally
- (D) – Google Dork (aka Google Hacking)
- (R) – Requires registration
- (M) – Indicates a URL that contains the search term and the URL itself must be edited manually
Figure 2: Using OSINT Framework to find phishing URLs
You can gather information from OSINT Framework such as:
- Gather person’s full names, job roles, phone numbers, photos, etc.
- Various data derived from Google, Bing, Yahoo, and other search engines.
- Information derived from personal and corporate journals, as well as an analysis of user activity on digital forums.
- Determine the social networks utilized by the individual.
- Evaluate content available on social networks like Facebook, Instagram, WhatsApp, Linkedin, or Twitter.
- Accessing outdated Google cached data.
- Recognize e-mail addresses, mobile phone numbers, and Google search results.
- Search for photographs and videos on social photo-sharing websites such as Shutterstock, Google Photos, and others.
- Utilize Google Maps and other open satellite imagery sources to retrieve images of users’ geographic location.
On the next blog post, I will explain to you about what is Sock Puppet and why you need it. Stay tuned :-)
Post a Comment
0Comments