OSINT (Open-Source Intelligence)

Social Media & Online Profiles

• LinkedIn

  • Work history (Look for company affiliations, positions held)

  • Connections (Look for key connections or shared networks)

• Twitter / X

  • Tweets (Examine for patterns, leaks, or personal information)

  • Mentions (Look at the people/organizations the user interacts with)

• Facebook

  • Posts (Review for personal information like locations, interests)

• Instangram

  • Images (Examine for location tags, personal activities, and sensitive information)

• Reddit

  • Subreddits (Review participation in subreddits related to target)

  • osts (Check for exposed info or relevant discussions)

• Telegram

  • Public Groups/Channels (Look for any publicly shared info)

  • Shared Files (Check for leaks, documents shared)

• TikTok

  • Videos (Look for potential location or identity leaks)

Tools

PimEyes: Buscador de reconocimiento facial y búsqueda inversa de imágenes |pimeyes.com

GitHub - sherlock-project/sherlock: Hunt down social media accounts by username across social networksGitHub

Social Searcher - Free Social Media Search Enginewww.social-searcher.com

Maltego | OSINT & Cyber Investigations Platform for High-Stakes Caseswww.maltego.com

Code & Development Repositories

(Platforms: GitHub, GitLab, Bitbucket, etc.)

• Repositories

  • Keys, Secrets (Look for exposed API keys, credentials, etc.)

• Commits

  • Old Versions (Check for old versions of the code)

  • Users (Identify contributors and their activity)

• Issues

  • Open issues (Look for technical details, security vulnerabilities, etc.)

• Pull request

  • Pending pull requests (Review discussions and changes proposed)

  • Closed pull requests (Check if any discussions are relevant or leaked data)

• Other Relevant Info

  • Forks (Check for forks and related repositories)

Tools

searchcode.com is shutting downsearchcode.com

GitHub - michenriksen/gitrob: Reconnaissance tool for GitHub organizationsGitHub

GitHub - trufflesecurity/trufflehog: Find, verify, and analyze leaked credentialsGitHub