OSINT Tools - Recommendations List With the New Year fast approaching I thought now would be a great time to post the first draft of some recommended Open Source Intelligence (OSINT) gathering tools and resources. I will look to maintain this list overtime and have it grow, so if you come across something you think should be on the list, drop me an email or leave a comment for consideration. The reconnaissance phase of any engagement is very important and can often save you alot of time and of course money. If you are really lucky you may even find the information you are looking for freely available posted online. Either way the information you find will only be as good as the tools you use, so with this in mind here is the list based on tools I have come across over the years or have been recommended by other InfoSec peeps. * Please note even though the aim is to provide information for free OSINT Tools, some may require a subscription or commercial fee.
So, You Want A Searchable Database, Huh? - www.htmlgoodies.com Use these to jump around or read it all... [Search Someone Else's Database] [But I Want To Search MY Site!] [Goodies Search -- Java-Driven Search Engine] [Use AltaVista or HotBot] I am asked this question time and time again, "How do I set up a searchable database?"
OSINT (Open-Source Intelligence) With an estimated 80% of required information available for use in an open source for specific information vital for a deep analysis in newspapers, magazines, industry newsletters, television transcripts, and blogs. OSINT makes our work easier, by using OSINT we are able to get important information in just a couple of minutes. Ethical Hacking Training – Resources (InfoSec) OSINT (Open-Source Intelligence) helps us to find, select and acquire information from available public sources. It’s a myth that OSINT is an Open Source Software like nmap. OSINT refers to any un-classified intelligence and includes anything freely available on the Web. OSINT Resources - The Grey Network Why: This site is a guide to resources for finding information on the internet and some tools that allow it to be aggregated and interpreted into actionable intelligence. It is a link to search tools to find information. What: This site has information on Open source data sources.
Searching the invisible web (deep web, hidden web): WebLens sear Custom Search Locate deepweb resources by adding the word database to a regular search engine query. The terms invisible web, hidden web, and deep web all refer to the same thing: a massive storehouse of online data that regular search engines don't capture. That's because terabytes of information are buried in databases and other research resources. Searchable and accessible online but often ignored by conventional search engines, these resources exist by the thousands. Known in research circles as the deep web, invisible web, or hidden web, this buried content is an estimated 500 times larger than the surface Web, which is estimated at over eight billion pages.
Deep Web Search - A How-To Site The realm of Deep Web and that of Open Source Intelligence overlap heavily. I won’t deny it (even with plausible denibility). What is Open Source Intelligence aka OSInt? For those who aren’t familiar with Open Source Intelligence, it is merely intelligence gathering from open third party sources. Search: The Future of OSINT [is M4IS2-Multinational] Paradise Found The future of OSINT is M4IS2. The future of Open Source Intelligence (OSINT) is Multinational, Multifunctional, Multidisciplinary, Multidomain Information-Sharing & Sense-Making (M4IS2). The following, subject to the approval of Executive and Congressional leadership, are suggested hueristics (rules of thumb): Rule 1: All Open Source Information (OSIF) goes directly to the high side (multinational top secret) the instant it is received at any level by any civilian or military element responsive to global OSINT grid.
The Deep Web and Open Source Intelligence (OSINT): Two Peas in a Pod At BrightPlanet we often throw around the acronym OSINT and talk about open source intelligence but what is it, what/if anything does it have to do with the Deep Web and how is it being used? We answer those questions in this post. What is OSINT? For the purposes of this post, we’ll keep the definition of OSINT at a high level. Automated Open Source Intelligence (OSINT) Using APIs Introduction The first step to performing any successful security engagement is reconnaissance. How much information one is able to enumerate about given personnel (for social engineering engagements) or systems can often impact the effectiveness of the engagement. In this post, we will discuss what Open Source Intelligence (OSINT) is and why it takes so much time, as well as ways we can use various application programming interfaces (APIs) to automate much of this process for us. Hopefully this post will help shed light on the importance of proper privacy settings, and the threat of automated information gathering due to APIs.
2008 Open Source Intelligence (Strategic) 2.0 Now that everyone is paying attention, this is being posted in full text online in support of a larger M4IS2 / OSE dialog. Document: Strategic OSINT (Chapter 6 in Strataegic Intelligence Vol 2) 10 MB Links added below throughout, updated where appropriate. See Also: 21st Century Intelligence Core References 2.0 Open Source Intelligence (OSINT)