background preloader

OSINT

Facebook Twitter

OSINT Training by Michael Bazzell. Virtual Gumshoe - Investigative Resources Directory. Free Tools: Online Investigation & Brand Protection – ICMS Worldwide. Recommended Brand Protection Solutions For Your Industry This list of online investigation tools has been compiled by ICMS- A global service providing anti-counterfeit, brand protection solutions for High risk world regions such as China, Southeast Asia, Latin America, Russia and East Europe.

Free Tools: Online Investigation & Brand Protection – ICMS Worldwide

Most of the tools below require some basic computer skills. We hope you can put them to good use! —Disclaimer: Please use these tools with caution. They are created and hosted by third parties with absolutely no affiliation with ICMS. Mapping Google Maps Engine Lite Link: Create your own detailed maps, markers and labels. Maltego. OSINT Tools - Recommendations List. With the New Year fast approaching I thought now would be a great time to post the first draft of some recommended Open Source Intelligence (OSINT) gathering tools and resources.

OSINT Tools - Recommendations List

I will look to maintain this list overtime and have it grow, so if you come across something you think should be on the list, drop me an email or leave a comment for consideration. The reconnaissance phase of any engagement is very important and can often save you alot of time and of course money. If you are really lucky you may even find the information you are looking for freely available posted online. Either way the information you find will only be as good as the tools you use, so with this in mind here is the list based on tools I have come across over the years or have been recommended by other InfoSec peeps. * Please note even though the aim is to provide information for free OSINT Tools, some may require a subscription or commercial fee.

Maltego Transformtastic - Information Gathering Made Simple. Free People Search Engines & People Finder. Find People Free, Locate People and Search People Free. Person Search, Locator, Finder and Searches Online. Soople. People Directory. Overview - Redmine. Free Internet Research ResourcesToddington International Inc.

Page Last Updated: November 20, 2014 at 12:15 am Click On Each Category Below for Listings of Free Internet Search Resources TII Online Investigator’s Checklist™ The TII Online Investigator’s Checklist™ is designed to be an active reference guide to assist you with current and future online investigations and should be used in conjunction with the Online Research Framework™ TII Online Research Framework™The TII Online Research Framework™ is designed to assist you with current and future online investigations and should be used in conjunction with the Online Investigators Checklist™

Free Internet Research ResourcesToddington International Inc.

OSINT (Open-Source Intelligence) With an estimated 80% of required information available for use in an open source for specific information vital for a deep analysis in newspapers, magazines, industry newsletters, television transcripts, and blogs.

OSINT (Open-Source Intelligence)

OSINT makes our work easier, by using OSINT we are able to get important information in just a couple of minutes. Network Intelligence Gathering. This article is all about different information-gathering techniques on the network.

Network Intelligence Gathering

It is the most essential and important task of attackers. Knowing the opponents and their interests can be valuable. Here I am going to show you which are the different ways and techniques one can do the network information/intelligence gathering. Let’s think of any thrilling movie theft. What do robbers do before they break into the bank or anything else? The same scenario can also be applied in the information security world. The map below shows the juicy areas in which attackers might be interested. Before starting to footprint anything, we need to keep in mind what or who our target is. OSINT.

Police Oracle. Facebook FBStalker tool uses Graph Search for powerful OSINT analysis. Facebook, and more in general social networks, is a platform that if not properly managed could harm user’s privacy, the fact that also friends’ social behavior could have a dangerous impact on our digital experience is very concerning.

Facebook FBStalker tool uses Graph Search for powerful OSINT analysis

Recently at the Hack In The Box conference in Kuala Lumpur, security experts Jonathan Werrett and Keith Lee from SpiderLabs demonstrated how to conduct a powerful OSINT analysis using a simple tool they created, anyone using it could find a comprehensive amount of data on any user of the popular social network. The tool for information gathering on Facebook created by the researchers is named FBStalker, a name that give us the idea of the potential of the instrument. FBStalker reverse-engineers the Facebook Graph to find information on every user, the tool does not require a direct friendship with targeted profiles, it just needs to access to parts of victim’s posts marked as public. Facebook FBStalker tool uses Graph Search for powerful OSINT analysis. IP Location Tool - Locate a Network Address on a Google Map. Deep Web Search - A How-To Site.

The realm of Deep Web and that of Open Source Intelligence overlap heavily.

Deep Web Search - A How-To Site

OSINT Open Source Intelligence. Automated Open Source Intelligence (OSINT) Using APIs. Introduction The first step to performing any successful security engagement is reconnaissance.

Automated Open Source Intelligence (OSINT) Using APIs

How much information one is able to enumerate about given personnel (for social engineering engagements) or systems can often impact the effectiveness of the engagement. In this post, we will discuss what Open Source Intelligence (OSINT) is and why it takes so much time, as well as ways we can use various application programming interfaces (APIs) to automate much of this process for us. Hopefully this post will help shed light on the importance of proper privacy settings, and the threat of automated information gathering due to APIs.