What’s the most boring part of Open Source Intelligence? Most OSINT practitioners (including me) usually enjoy the research phase of an assignment the most. Collecting data and finding new lines of enquiry is fun, but writing it all up at the end is usually dull. Well-written reports are a vital part of the OSINT process, …
If you’ve been interested in geolocation for any length of time, you’ll already be familiar with some of the most common tools that researchers make use of: Google Maps & Street View, Google Earth, reverse image search tools, Suncalc, and so on. There are many lesser-known tools that are also useful and can help to …
Being able to discover subdomains is an essential part of researching an organisation. Behind a company’s main domain there are many other subdomains that can provide useful information about an organisation’s structure, technology, and business practices. Subdomain discovery is a foundational skill for security researchers, but it is a very useful tool to add to …
One of the biggest challenges of internet investigation is preserving data once you’ve found it. We have access to more information than ever before, but so much of it can be easily lost if we don’t take steps to archive it. If you’ve ever bookmarked an important resource only to come back later and see …
There’s a huge difference between countries when it comes to using publicly available records for OSINT. If you’re researching a subject in the USA there’s a wealth of available information. In the EU it’s almost the opposite and it can be very difficult to find any public data at all. The UK is much more …
Hunchly is an excellent OSINT tool designed to capture and record your browser activity as you go. Once activated it sits quietly in the background as you browse and saves copies of webpages as you view them. It also records searches, captures EXIF data from images, takes screenshots, and saves lots of other useful data …
In OSINT we make use of the wealth of information that is now available to us, but so often it becomes the case that there is too much information for us to process effectively. It’s easy to drown in a sea of data and you can quickly find yourself with twenty browser tabs open having …
Using Gap Analysis For Smarter OSINT – Quiztime 4th March 2020 Read More »
WordPress is the base that 35% of the world’s websites are built on. If you’re ever going to investigate a website, then it’s really important to be able to know your way around a WordPress setup. In this tutorial I’m going to show how to identify user accounts on a WordPress-based website so that you …
OSINT Techniques: Who’s Behind A WordPress Site? Read More »
Automation or Augmentation? Automation is an increasingly important part of OSINT. Even the simplest of investigations can require large amounts of different data types to be gathered and analysed quickly. Yet it is not accurate to suggest that all OSINT work is going to be automated as time progresses. Good OSINT practitioners will do …
Crypto Scam Investigation: Using Spiderfoot HX For OSINT Automation Read More »
In my last Spiderfoot tutorial I wrote about how Spiderfoot HX could be used to gather information about a suspicious IP address and then analyse and visualise the data. In this guide I’m going to show how Spiderfoot HX can be used to investigate a domain linked to phishing. Despite a lot of high-profile …
Spiderfoot HX: Investigating A Domain Used For Phishing Read More »