In the digital age, Intellgpt Emerging as a pioneer solution, helping to simplify data collection and analysis from open sources (OSINT) and data science. Designed to narrow the gap between experts and ordinary users, Inotlgpt provides easier and more effective access to powerful analytical tools. Let’s find out details about this tool through the article below.

What is Inotlgpt?

Intellgpt is a custom version of chatgpt, designed to focus on Osint (Open source Intelligence) and data science. Intellgpt’s mission is to provide information, analysis, and explanation of topics related to data exploitation from open sources, data analysis, artificial intelligence and technology applications in practice.

See also: Chatgpt voice advanced: Interact with AI by voice (Vietnamese support)

The main features of Inotlgpt

1. Provide information from open source (osint)

• Support search, synthesize and analyze data from open sources such as Internet, press, social networks, and public databases.
• Suitable for areas such as network security, market research, digital surveys, and risk analysis.

2. Data science expertise

• Explain complex concepts such as machine learning, data mining, and data visualization.
• Guide practice steps such as data processing, programming (Python, R), and building a predictive model.

3. Friendly language and easy to understand

Combining friendly communication style and intensive content, suitable for both beginners and experienced people.

4. Integrated support tools

Ability to perform calculations, graphs, data processing and search information directly from the Internet.

Practical application

• Osint: Search and analyze information about a company, market, or individual.
• Data analysis: Create a report, predict trends, or visualize complicated data.
• Research support: Providing reference materials, quantitative analysis, and explanation of scientific algorithms.

Suitable objects use Intellgpt

• Journalists and researchers: Inotlgpt helps to collect information from many sources quickly, supporting the verification and further research.
• Cyber security expert: This tool is an effective assistant in detecting potential threats and protecting digital assets.
• Marketing and business analysis: Thanks to the ability to analyze the trends and consumer behaviors, Inotlgpt helps businesses build a more effective marketing strategy.
• Policy makers and political analysis: The tool provides detailed reports on public opinion trends, supporting policy decisions or election strategies.

How to use Intellgpt

Step 1: Visit Intellgpt page HERE.

Step 2: Start asking questions, asking for the chat frame.

Example 1: Search for information about a company for risk analysis (osint)

Based on this requirement, Intellgpt can perform the following tasks:

• Collect information from the official ABC Corp website, public financial statements, and related articles in the press.
• Using source as government database, business forums, or company registration records.
• Search to see if the company is related to lawsuits, violations of law, or reputation risk.
• Analysis of published financial figures, revenue growth trends, or debts.
• Compare the company with competitors to assess market share and position.
• From there, evaluate and propose.

Example 2: Collect public information about someone

Intellgpt can be done:

• Searching for information from specialized platforms such as LinkedIn, business press, corporate website or business database (for example, national information portal on business registration).
• Detect articles from major newspapers or forums to determine this individual’s business.

See also: Stylergpt: Change the “boring” interface of chatgpt

Conclusion

Intellgpt Not only is a powerful AI tool but also a powerful companion for those who work with data. From the trend analysis, detecting threats to market research and emotions, Inotlgpt has proven superior effectiveness.

Hippie osint Toolkit A useful tool to help you explore and collect information from many different sources on the internet. With an easy -to -use interface and quick search support, this Toolkit gives users valuable data, especially useful in Capture The Flag (CTF) competitions or online surveys. In this article, let Anonyviet discover how to use Hippie Osint Toolkit and its outstanding features.

What is Osint?

Osint or open information, is the collection of data from public sources for use in information collection. Unlike traditional intelligence methods, Osint is based on the legal information from public sources, such as domain name registration information, public records, social networks, even cloud storage data. This information is extremely useful for security analysts, private investigators and anyone who involved in hunting online threats.

See also: Discover FBI Tools: Github warehouse contains many useful Osint tools

In the world of online security and online surveys, Osint (open information) has become an indispensable tool. With the development of public platforms and databases, experts can collect important information without complex software installation.

Hippie Osint Toolkit is developed to provide you with easy -to -use Osint tools, especially useful for the Capture The Flag (CTF) challenges and investigation.

You can visit Hippie Osint Toolkit HERE

1. Domain analysis (domain)

One of the important areas that Osint is applied is the domain name survey. Whether you are studying the owner of a website or exploring related websites, this tool can disclose important information that is not always easy to find via search on the Internet.

Data can be found:

• Whois information: The Database of WHOIS stores domain name registration information, including the owner’s contact information, the date of creation and the expiry of the domain name and the registered house. This is very important to determine the legality of the domain name and search for the original owner.
• Subdomains (sub -name): Tools like CRT.SH help you find subdomains associated with a domain name, thereby detecting more relevant websites or services.
• Domain server (Name servers): Details of the domain name server help you understand the network infrastructure behind a website and can help detect related domain names or services.

Some of the main tools to investigate domain names:

Look up Whois: Websites like whois.domaintools.com Provide comprehensive search services. They can provide domain historical information, including old communications, which can be revealed more about an individual or organization.

Wayback Machine: Wayback Machine https://web.archive.org is a tool used to monitor the change of websites over time. If you are investigating a change domain name, this tool can display the old versions of the site, helping you detect deleted or hidden information.

Cloud archives: Cloud storage boxes are exposed (such as AWS S3, Azure and Google Cloud) sometimes can contain sensitive information, including private documents and images. Tools like Osint.sh Buckets and Grayhatwarfare can help you find these revealed cloud storage boxes.

Track code: Tools like osint.sh analytics and osint.sh Adsense help you identify the general Google Analytics or AdSense IDs between domain names, indicating the owner or the relationship between them.

Search back: When you find a tracking ID, you can use the tools to find other domain names to share that ID, helping to detect other websites that belong to the same organization.

Leaked data: Information such as email addresses, user names and passwords from data violations can be found through tools such as Dehashed or Intelligence X. These data are very important in testing attacks and identifying cyber threats.

Not stopping there, Hippie Osint Toolkit has many other tools waiting for you to explore!

2. Investigate information on social networks

Tiktok

Only by any video URL link, you can determine the time to post that video

Google

This tool can search for information related to Google account:

• Profile information: Including name, email and profile photo.
• Activity on Google Maps: Information such as photos, evaluation and statistics from user activities on Google Maps.
• Data from other Google services: Data from other Google services is linked to the account.

Github

The data can be found on the GitHub account includes:

• Basic information of users: username, real name, biography, avatar.
• Account information: Date of account creation, last update date.
• Contact information: email address, blog/website link.
• Social statistics: The number of followers and followers.
• Information about archives: The number of public archives and Gists.
• Information about the GPG key: The public key is used to sign the commitment.
• Activities and history of contributions: Details of user contributions, such as commitment and pull request.

Reddit

• Basic information of users: username, ID, date of account creation.
• Analysis of Karma: Including Karma (Link Karma) and Karma comment (Comment Karma).
• User status: may be a golden member, administrator, Reddit staff, have confirmed the email or not.
• Information about user’s personal subreddit: if any, including the Subreddit that the user manages or participates.
• Recent posts: title, content, score, comments of recent posts.

Mastodon

User information:

• Basic record details: username, display name, biography.
• Account statistics: The number of followers, followers and posts.
• Date of creating account and update the latest status.
• Account flag: Is the account BOT, locked, can be detected or not, etc.
• The records and associated accounts.

Information about instance:

• The name, description and miniature image of Instance.
• Registration status and approval request.
• Support languages.
• Administrators and contact emails of Instance.

3. Image analysis

The image is a valuable resource in Osint, and has many techniques to analyze the information hidden inside the image or image found online.

Search for reverse images: Tools like Google Lens, Tineye, and Yandex help you follow the origin of the image or search the same image online. These tools are especially useful to monitor the image spread or identify the origin of the image uploaded by the user.

Image positioning: Tools like Overpass Turbo and Geospy.ai It is possible to analyze the image to infer the location where the image is taken based on geographical features.

Extract Metadata: EXIF data in the image can provide information about shooting time, camera settings, and even GPS coordinates. Tools like EXIFTOOL and Forensically help you extract this Metadata to collect useful information.

Face recognition: Pimeyes As a tool to help identify and search for a person’s image on the Internet, even if they appear on different platforms and site.

Delete details in the photo: Cleanup.pictures will help you quickly remove objects from images, useful when you want to focus on specific factors for further analysis.

4. Investigate user information

This tool can search for username on different platforms and provide the following information:

• Check whether the username exists on different platforms.
• Provide direct links to users’ records on websites or social networks.
• Additional information (if any), including information such as user ID, full name, biography, and other data related to users.

See also: Seekr: Collect & Manage data osint

Conclusion

Hippie osint Toolkit Has proved to be an effective tool to collect information from open sources. Thanks to the easy -to -use interface and useful toolkit, users can quickly search, analyze and discover important data. If you are looking for a quick and effective solution for investigation or CTF, Hippie Osint Toolkit is definitely the option not to be missed.

Collecting and analyzing information from open sources (OSINT) is becoming increasingly important. Whether you are a researcher, journalist, cybersecurity expert, or simply someone who wants to learn more about the world around you, having a powerful and effective OSINT tool is essential. Let's find out Seekra versatile and easy-to-use OSINT toolkit that promises to revolutionize the way you access and exploit information from open source.

Introducing Seekr

Seekr is a versatile toolkit designed to collect and manage OSINT (Open Source Intelligence) data through an intuitive and easy-to-use web interface. Seekr's desktop interface allows you to integrate all your favorite OSINT tools into a single place.

Written in the Go language with BadgerDB as the database, Seekr offers a range of powerful features for data collection, organization and analysis. Whether you are a researcher, investigator, or simply someone who wants to gather information, Seekr will help you easily find and manage the data you need.

See more: Instructions get someone else's IP by Email, QR Code, Word File, Excel, PDF,…

Key features of Seekr

• NO API key required for all features, saving time and effort on API key registration and management.
• Desktop interface is familiar and easy to use.
• The database for OSINT targets is efficiently stored and organized.
• Integration/tuning of many popular OSINT tools (e.g. phoneinfoga)
• Search for information related to email addresses on GitHub.
• Enter the information you have and get recommendations for useful web tools.
• Account cards for each person in the database to manage information about individuals in detail.
• Automatically search and link online accounts.
• Predefined fields are commonly used in databases, helping to save data entry time and ensure consistency.
• Customize themes and plugins to extend Seekr's functionality.

Instructions for installing Seekr

Note: Unstable builds may contain bugs and are not recommended for use in production environments.

Install Seekr on Windows

Download and run the latest exe file here. Then open web interface in the browser.

• Unstable version:

First, install TypeScript and Go. Then to install Seekr on Windows, run the following commands:

git clone https://github.com/seekr-osint/seekr
cd seekr
go generate ./...
tsc --project web
go run main.go

Install Seekr with Docker

docker pull ghcr.io/seekr-osint/seekr:latest
docker run -p 8569:8569 ghcr.io/seekr-osint/seekr:latest

Install Seekr on Linux

Download the latest stable binary file here

• Unstable version:

Make sure you have TypeScript and Go installed. To install Seekr on Linux, run the following commands:

git clone https://github.com/seekr-osint/seekr
cd seekr
go generate ./...
tsc --project web
go run main.go

Then open web interface in the browser.

Run Seekr on NixOS

Seekr is built with NixOS and supports nix flakes. To run Seekr on NixOS, run the following commands:

nix shell github:seekr-osint/seekr
seekr

How to use Seekr

You can refer to the instructions for using this tool through the article THIS

See more: DNS Spy: DNS analysis tool for any domain

Conclusion

Seekr is a flexible OSINT tool that provides users with a comprehensive solution for collecting, organizing and analyzing data from open sources. With a user-friendly interface, integration with many popular tools, and high customization capabilities, Seekr is ideal for researchers, investigators, and anyone who wants to harness the power of OSINT.

OSINT stands for “open source intelligence”. This concept refers to finding information that you can legally access, through legal means. OSINT is primarily performed online, but it can also be performed offline. Pentesters use OSINT to research their targets, and threat intelligence experts use OSINT to learn about cyber threats. OSINT is an important tool for both red and blue teams.

Below are some of the most popular tools for OSINT.

10 OSINT tools that hackers need to know

Shodan

Shodan is a search engine for exploitable network devices on the internet, such as servers and IoT devices. Exploitable means publicly accessible. It is possible to place a server, IoT peripheral or network device on the internet and configure it to be relatively private and difficult to fingerprint. But if a device is connected to the Internet without careful security configuration, you can find it through Shodan with the right searches.

Using Shodan without a premium account will return a very limited number of search results. A premium account is a lot more useful if the type of OSINT cyber research you do requires exploring servers, network devices, and IoT peripherals (such as cameras).

Maltego

Maltego runs as a dedicated application for Windows, Mac and Linux desktops, allowing users to access multiple data sources for OSINT, journalistic research and forensics purposes. There are over 58 data sources in Maltego as of this writing, including Google Maps geocoding, AlienVault OTX, ATII Hades Darkweb Intelligence, Blockchain.info, Crowdstrike, VirusTotal, and many others. I hope the number of data sources integrated into Maltego will increase over time.

The value that Maltego provides to researchers is not only in its vast collection of data sources but also in the way its platform can show users data patterns and trends through visual charts Highly customizable. Up to one million entities can be plotted in the chart that Maltego creates.

Of course, you can take advantage of all of Maltego's features but it's not free, although they will let you see a demo before you decide to sign up. But if you don't want to pay, the free Maltego Community Edition can still be very useful.

Google Dorks

Google Dorks is not an app. Rather, it is a technique that uses the Google search engine that everyone uses every day. Don't go looking for the official Google Dorks app, it doesn't exist. But there are developers who have developed open source software tools for Google Dorking that you can try, such as Pagodo and GoogleDorker.

A typical Google Dorking strategy starts by using simple search queries and then moves on to more complex queries. Most people just type strings of text into Google searches, such as “weather forecast” or “abc xyz”. But there are a number of search operators that can be used in Google searches to return more results than you intended. For example, you can try “site:anonyviet.com” to search specifically on your site, or use quotation marks around a search term to return only results that use the search term. look for that exact thing. Google offers a list of tips for refining your Google searches here.

A lot of websites are very poorly configured when it comes to cybersecurity. Google's web crawling bots are most effective on the web when they have access to explore. So, Google Dorking can be a technique to find data such as email addresses, login information, and bank numbers that have not been properly secured.

Recon-ng

Recon-ng is an open source web reconnaissance tool. Its power will be increased by the modules you can install to it. If you use Recon-ng effectively, you can save a lot of time in OSINT research.

Recon-ng can be run from the command line. If you want to make Recon-ng useful for your purposes, select the Marketplace option from the main menu and explore what's available. There are a huge number of modules you can try out, with more being improved and added continuously.

If you're comfortable with the command line and you want OSINT to work much more efficiently, Recon-ng may become one of your favorite tools.

Ahmia.fi

Ahmia.fi is a search engine specifically for finding sites on the Tor Network, although the search engine itself is also accessible on the “clearnet”. But you will need Tor Browser to open your Tor search results.

Many marketplaces and forums are located on the Tor Network, so making effective use of the Ahmia.fi search engine can be a great method for your OSINT forensics work.

Wayback Machine

Where are the old dead websites now? Wayback Machine is a search engine of over 632 billion websites and growing, many originating in the 1990s.

Archive.org is using the Wayback Machine to archive as much of the web as possible. You can also use their website to manually host websites that are currently online. If and when websites and web servers are deleted or taken offline, an archived copy can be found through the Wayback Machine.

I personally found websites archived from 1994 to 2021 through this tool. And what's really cool is that you can often use links in archived sites to go to the archives of those other sites.

theHarvester

theHarvester is another useful open source spy tool that you can install from GitHub. It can be used to get email addresses, servers, subdomains, employee names, and open internet ports from various public sources such as search engines, PGP key servers, and Shodan.

Once Harvester is installed, you can easily run the application from your command line. There is a particularly rich set of options for exploring data in DNS servers. DNS servers have all kinds of information that is very useful because they associate domain names with specific IP addresses.

Some of my favorite data sources you can explore with Harvester include LinkedIn, Bing, Google, and VirusTotal.

TinEye

TinEye is a powerful tool for online image research. If you have an image on your local device, you can upload it to TinEye and see if and how the image is used on other websites.

The most obvious use case is if you have a photo of someone whose identity you don't know and you want to find out who they are. But there are many other use cases, such as “where was this photo taken?” or “what app is this a screenshot of?”

Conversely, if you have the URL of the image on the web, you can conduct research that way as well.

TinEye is also useful for maintaining your privacy. For example, perhaps you should protect your child's privacy. TinEye can notify you if and when your child's photos are shared online.

OSINT Framework

The OSINT Framework is the perfect web application if you're not sure which OSINT data source you'll need to use to find the information you want. So the OSINT Framework presents you with a giant tree of potential data sources that you can explore.

Do you want to analyze malicious files, usernames, geolocations, IP addresses, domains, IRC, Dark Web, metadata, threat intelligence, phone numbers or maybe something else? other? Keep clicking through the chart tree until you find the source you need.

The OSINT Framework can be your first step in the entire OSINT process.

Mr Holmes is an information gathering tool (OSINT). The main purpose of this tool is to get information about domain names, usernames and phone numbers with the help of public information sources available on the internet as well as use google dorks for specific researchers. It also uses proxies to make your requests completely anonymous and WhoIS Api to get more information about the domain.

This tool is not 100% accurate so it may be error-prone. Additionally, this tool was created for educational and research purposes only. Don't fall into the evil path.

How to install Mr Holmes

On Linux/MAC

git clone https://github.com/Lucksi/Mr.Holmes
cd Mr.Holmes
sudo chmod +x install.sh
sudo ./install.sh

On Windows

git clone https://github.com/Lucksi/Mr.Holmes
cd Mr.Holmes
Install.cmd

On Termux

pkg install proot
git clone https://github.com/Lucksi/Mr.Holmes
cd Mr.Holmes
proot -0 chmod +x install_Termux.sh
./install_Termux.sh

How to use Mr Holmes

On Linux/MAC

sudo python3 MrHolmes.py
Hoặc:
cd Launchers
Execute Launcher.sh

On Termux/Windows

python3 MrHolmes.py

On Windows

python MrHolmes.py
hoặc:
cd Launchers
Execute Win_Launcher.exe

API KEY

You can get the API Key here:

https://whois.whoisxmlapi.com

And customize the tool's configuration file at Configuration/Configuration.ini

Note on Windows

If Python and PHP are not installed, you must download and install them manually.

You can see how to install Python here and PHP here.

Dark/Light Mode interface

cd GUI
cd Theme
edit Mode.json
write:Light=(Light-Mode)
write:Dark=(Dark-Mode) 
write:High-Contrast(High-Contrast-Mode)
write:Uchiha(Uchiha-Mode)

Example in file Mode.json

{
    "Color": {
        "Background": "Light"
    }
}

Username and Password

cd GUI
cd Credentials
edit Login.json
write:Status=Active/Deactive
edit Users.json
write:Username=Your Username
write:Password=Your Password

For example Login.json file

{
    "Database": {
        "Status": "Active"
    }
}

User.json file example

{
    "Users":[
        {
            "Username": "Your Username",
            "Password": "Your Password"
        }
    ]
}

Language settings

cd GUI
cd Language
edit Language.json
write:Italian
write:English 
write:François

Example file Language.json

{
    "Language": {
        "Preference": "English"
    }
}

Default Username and Password

Username:Admin
Password:Qwerty123

Available languages

Italiano 🇮🇹 
English 🏴󠁧󠁢󠁥󠁮󠁧󠁿
Français 🇫🇷

How to use Mr.Holmes on Windows

First, you need to install git here.

Next, open cmd and run the command below to download Mr Holmes:

git clone https://github.com/Lucksi/Mr.Holmes

Then access the just downloaded folder with the command:

cd Mr.Holmes

Open File Explorer and access the Mr Holmes folder, find and open the file Install.cmd

If you have not installed Python3, PHP and other necessary libraries, just click Yes to have the script install for you. Then the tool will ask you to enter necessary things such as email to send data (using secondary email), api key, proxy, database,…

After setup is complete, go to the Launchers folder and open the Win_Launcher.exe file.

You press 1 to use Mr Holmes and press Y to agree to use the tool for educational purposes.

Next, I will demo using feature 1, SOCIAL-ACCOUNT-OSINT. I will enter the content to search as Anonyviet and press number 2 to not use Proxy.

And this is the result I found.

Additionally, you can also use the Mercury tool to collect victim information here.

Did you know that there is a collection of OSINT (Open Source Intelligence) and metrics analysis tools for cybersecurity created by a Romanian programmer named danieldurnea? This collection is called FBI Tools and posted on GitHub with open source code. So what is FBI Tools? Let’s find out through this article!

FBI Tools is an open source project on GitHub led by Danieldurnea – a Romanian programmer with a passion for cybersecurity and OSINT. He started the FBI Tools project in 2020, with the intention of sharing OSINT tools and resources to the cybersecurity community. FBI Tools stands for Forensics and Business Intelligence Tools.

OSINT stands for Open Source Intelligence, which means using public information sources to learn about an object, organization, event or phenomenon. OSINT can be applied to many different fields, such as security, military, business, education, journalism and more.

FBI Tools includes over 4000 tools and resources OSINT for collecting information and analyzing data related to network security in many different categories. Each category can include many different types of tools, such as websites, applications, libraries, and source code.

Users simply click a link to be taken to the website, application, library, or source code of the tool they want to use. In addition, FBI Tools also provides a brief description of the functions and uses of each tool, helping users to better understand the tool.

You can access the link HERE to explore thousands of useful FBI Tools:

Infoga

This is a tool to collect information via email, such as IP address, domain name, SMTP server, etc. This tool can help you identify email senders, check the authenticity of emails, and discover potential threats. Related information.

Chief report of the FBI crime data explorer project

A report on the FBI’s crime data discovery project, including statistics, charts, and analysis. This report gives you an overview of crime trends in the United States by different criteria, such as crime type, geography, time, etc.

Information gathering tool – OSINT

A tool that collects information from different sources, such as Google, Bing, Shodan, Censys, etc. This tool can help you find information about a certain object, organization or event on the internet, such as IP addresses, domain names, web servers, network connection devices, etc.

An Open-Source Mobile Forensic Research Tool for android platform

This tool can help you recover deleted or hidden data on your or someone else’s Android device.

Firefox decrypt

A tool to decrypt passwords stored in Mozilla files (Firefox / Thunderbird / Seabird). This tool can help you retrieve forgotten passwords or view other people’s passwords saved on Mozilla browsers or applications.

Epilogue

FBI Tools is a very useful archive for those interested in OSINT. It provides many tools and resources to help you gather information and analyze data effectively and accurately. Good luck!

Seekr is a versatile toolkit with an intuitive web interface for collecting and managing OSINT data. Seekr’s Backend is written in Go and provides many features/tools for data collection, organization and analysis. This is a very suitable tool for you to do OSINT as it will make it easier for you to find and manage the data you need. In this article, I will show you how to install and use this tool.

Features of Seekr

Seekr combines note taking and OSINT into a single application. Seekr can be used in conjunction with your existing tools. Seekr is designed for OSINT and optimized for real-world use cases.
Main features:

• Has a computer interface
• OSINT targets are stored in the database
• Integrate many popular OSINT tools (e.g. phoneinfoga)
• GitHub for emailing
• There is a target tag used to manage each target in the database
• Detect other targets integrated in the target tag

How to install Seekr

Step 1: Before installing Seekr, you must make sure your system, here I use Ubuntu, has git and go installed.

You can install go with the command:

sudo apt install golang-go

And install git with command:

sudo apt install git

Step 2: Download Seekr’s repo with the command:

git clone https://github.com/seekr-osint/seekr

Step 3: Go to the repo you just downloaded and start Seekr with the command:

cd seekr
go run main.go

So you have successfully installed and started Seekr. Next we will learn how to use Seekr.

How to use Seekr

When you launch Seekr, the program will automatically open the browser and access the web interface. I will choose SEEKR Desktop.

In the lower left corner is Seekr’s tools menu. You choose the first tool to open the target card.

You press new.

Here, you can enter a lot of information of the target such as full name, gender, address, …. After entering the information, press Save.

Click the avatar icon of the newly created target.

Here, you can enter the target’s username to find other accounts that use this information. If that’s the account you need then press Accept to add to the target tag.

In the target tab, you can further investigate the newly added accounts of your target by pressing Deep Investigation.

The second tool in the menu is a page that aggregates all the OSINT tools you need for your target’s crawling.

The 3rd tool in the menu is Whois. You can exploit a lot of related information of the domain and ip you want. However, at the time of testing, this feature is faulty.

The 4th tool in the menu is CRTSH. You can use this tool to search for certificates related to the domain you want.

To get the most out of Seekr, you can use the following procedure.

OSINT stands for “open source intelligence”, which is the activity of finding information that you can access through publicly available data sources on the Internet such as from Google, Bing or specialized search engines. Pentesters use OSINT to research targets or learn about cyber threats. OSINT is an important tool for both Red Team and Blue Team. So in this article, I will introduce you to the top 10 OSINT tools for hackers.

Top 10 OSINT Tools for Hackers

1. Shodan

Shodan is a search engine for open devices on the internet, such as servers and IoT devices. These are devices that are publicly accessible to you. If the device is connected to the internet without careful security configuration, it can be found through Shodan.

The free Shodan version will limit the number of results. So the paid version is much more useful if you need to find servers, networking devices, and IoT peripherals (such as cameras).

2. Maltego

Maltego available on Windows, Mac, and Linux, giving users access to multiple data sources for OSINT, data research, and digital forensics purposes. There are over 58 data sources in Maltego including Google Maps, AlienVault OTX, ATII Hades Darkweb Intelligence, Blockchain.info, Crowdstrike, VirusTotal, etc.

The value that Maltego brings to you lies not only in huge data sources, but also in data patterns and trends through visualization. Of course, all the features of Maltego are not free, but I think the Maltego Community Edition version is enough for newbies.

3. Google Dorks

Google Dork It’s not an app, it’s a technique using Google. Although it’s not an app, there are developers who have developed open source software tools for Google Dorking that you can try, such as Pagodo and GoogleDorker.

Most people just type keyword strings into Google, such as “Vietnam weather” or “anonyviet”. But there are some search operators that you can use in Google. For example, you can try “site:anonyviet.com” to search for content within the anonyviet website, or use quotes around a search term to only return results containing that exact word. You can see more list of operators of Google Dork here.

A lot of websites are configured with very poor security. Google’s crawling bots visit these sites in search of content. So Google Dorking can be a useful technique for you to find data like email addresses, login information and phone numbers that are not properly secured.

4. Recon-ng

Recon-ng is an open source web reconnaissance tool. Its strength lies in the fact that you can install additional modules into this tool. If you use Recon-ng efficiently, you can save a lot of time in your OSINT work.

Recon-ng can be run from the terminal. If you want to add more power to Recon-ng, select Marketplace from the main menu and install the modules you want.

5. Ahmia.fi

Ahmia.fi is a search engine dedicated to finding websites on the Tor Network, although the search engine itself is accessible on the “clearnet”. But you’ll need the Tor Browser to open your search results.

There are many black markets and forums on the Tor Network, so using Ahmia.fi effectively will help with your OSINT investigation.

6. Wayback Machine

The Wayback Machine is a search engine for over 632 billion web pages, many of which date back to the 1990s.

Archive.org is using the Wayback Machine to archive as many web pages as possible. You can also use their website to manually host websites that are currently online. If these sites are deleted or down, you can find a copy of them stored in the Wayback Machine.

7. theHarvester

theHarvester is another useful open source scouting tool that you can install from GitHub. It can be used to collect email addresses, servers, subdomains, employee names and ports from various public sources such as search engines, PGP and Shodan.

You can easily run theHarvester from your command line. This tool has a special set of options for you to explore the data in the DNS server. DNS servers have a lot of useful information because they associate domain names with specific IP addresses.

Some of the data sources you can explore with theHarvester include LinkedIn, Bing, Google, and VirusTotal.

8. TinEye

TinEye is a powerful tool for image analysis. If you have a photo on your device, you can upload it to TinEye and see if the photo is being used on another web.

Specific use cases: Find other people’s information from their photo, the location where the photo was taken, or the app used to take the photo.

9. OSINT Framework

OSINT Framework is the perfect web app if you’re not sure what OSINT data source you’ll need to use to find the information you want. The OSINT Framework provides you with potential data sources that you can use.

You can analyze malicious files, usernames, geolocations, IP addresses, domains, IRCs, Dark Web, big data, threat information, phone numbers or more with this tool. OSINT Framework can be the first step in your OSINT journey.

10. Library

The best offline data source is a library. You can visit the library, or the library’s website can help you directly find the information you are looking for.

There is a lot of information that has not been digitized at the library such as magazines, newspapers and directories. In Ho Chi Minh, you can go to the General Science library. Sign up for a membership card and you can spend the day in the library. I often come here to run the deadline again :v.