OSINT Curious would like to highlight the following blog post by one of its members. Micah Hoffman created a tool (https://smart.myosint.training) and blog post (https://webbreacher.com/2022/11/14/get-smart-about-osint). The tool he made crawls over 200 OSINT start.me sites and retrieves their URL resources…. over 84,000 URLs! All that data is aggregated and searchable in SMART (Start Me Aggregated Resource Tool ..read more

The term Metaverse, a collection of immersive 3D worlds with a social element, is constantly in the news, especially now that Meta is also building their own one. Years ago it started with Second Life, but with the popularity of VR headsets, and more computer power, these environments are slowly taking off. Recently I have looked around in the metaverse of Spatial and had to ..read more

OSINT Curious would like to highlight the following blog post by one of its members. https://webbreacher.com/2022/10/24/grabbing-old-bitmoji-outfits-with-backmoji/. Micah reveals a tool he created based upon the work of Griffin (Hatless1der) Glynn to display old versions of Bitmoji social media avatars ..read more

If you are one of the thousands of new people just learning about the powerful field of OSINT (Open-Source Intelligence), then you also are probably getting overwhelmed with all of the resources that you have to read and watch. In the past 5 years or so, the OSINT world has exploded with amazing, informative blogs and videos that can help you learn the field. To ..read more

Being able to find sensitive information about an organisation is a key skill for OSINT practitioners. Whether you’re doing recon for a phishing engagement or you’re an investigative journalist looking for documents, being able to filter out the noise and find useful information relating to companies and institutions is essential. Using Google dorks is a useful technique for filtering searches. For example, a dork to ..read more

There are a million of reasons why you might not want to visit a particular website. Maybe it’s your competitor and you do not want him/her to notice you are ‘watching’ them. Or maybe you’re in an investigation where you do not want your target to be alarmed by any visits. So how can you figure out what is on a website, without paying a ..read more

We’re going to step back in time to when the World Wide Web didn’t exist, as it’s possible that we can learn things about how to do OSINT investigations from the past that remain relevant today. Although the internet now provides instant access to a stunning diversity of resources from wherever a connection to it can be found, researchers may be wise to look to ..read more

Facebook, still the most popular social media platform, can be full of relevant information for your investigation. So chances are pretty high that you might want to export the friends list, make a screenshot of a post or maybe want to make a copy of the likes under a photo. In this blogpost we’ll give you some tips and tricks on how to ‘save’ your ..read more

If your work involves protecting organizations from social engineering attacks, you will most probably also be required to conduct open-source intelligence on the organization and its people. Your task will be to find vulnerabilities or high-risk information that is likely to be exploited by attackers in a social engineering attack. Such information would include: identifying specific technologies, key people, and their relationships with internal or ..read more

OSINT investigators have some seed data when they start an investigation, for instance they may start with an email address. When we conduct OSINT investigations, having a target’s email address can sometimes result in finding a goldmine of information about the user of that email ..read more