background preloader

OSINT Training by Michael Bazzell

OSINT Training by Michael Bazzell
Related:  OSINT

Free People Search Engines & People Finder. Find People Free, Locate People and Search People Free. Person Search, Locator, Finder and Searches Online. OSINT Search Tool by Michael Bazzell | Open Source Intelligence Techniques Live Events Online Resources Blog Podcast Books Contact Facebook FBStalker tool uses Graph Search for powerful OSINT analysis Facebook, and more in general social networks, is a platform that if not properly managed could harm user’s privacy, the fact that also friends’ social behavior could have a dangerous impact on our digital experience is very concerning. Recently at the Hack In The Box conference in Kuala Lumpur, security experts Jonathan Werrett and Keith Lee from SpiderLabs demonstrated how to conduct a powerful OSINT analysis using a simple tool they created, anyone using it could find a comprehensive amount of data on any user of the popular social network. The tool for information gathering on Facebook created by the researchers is named FBStalker, a name that give us the idea of the potential of the instrument. FBStalker reverse-engineers the Facebook Graph to find information on every user, the tool does not require a direct friendship with targeted profiles, it just needs to access to parts of victim’s posts marked as public. It is questionable whether a tool like FBStalker is legal:

Resources - Toddington The Web’s largest OSINT resources portal Toddington International is pleased to curate the Web’s largest database of free OSINT resources and tools, research “cheat sheets,” and other online investigative aids. Continually updated, this database contains thousands of sites to assist in locating people, places and things, including personal and corporation information, images and videos, social media content, live streamed data and other essential investigative resources, such as geo-location tools, proxy servers, privacy guides, and more. Select a category above to expand the selection, or search for the type of information you are looking for by keyword. Want to improve your OSINT and online research skills? To report a broken link or to make a suggestion, contact us.

Network Intelligence Gathering This article is all about different information-gathering techniques on the network. It is the most essential and important task of attackers. Knowing the opponents and their interests can be valuable. Here I am going to show you which are the different ways and techniques one can do the network information/intelligence gathering. Let’s think of any thrilling movie theft. What do robbers do before they break into the bank or anything else? The same scenario can also be applied in the information security world. The map below shows the juicy areas in which attackers might be interested. Before starting to footprint anything, we need to keep in mind what or who our target is. Techniques of Intelligence Gathering Information Available in Air There is much information that is publicly available, but no one knows about it. In older days, Company Webpages used to provide valuable information about their security policy and configuration directly to the client side. Want to learn more?? Summary

OSINT (Open-Source Intelligence) With an estimated 80% of required information available for use in an open source for specific information vital for a deep analysis in newspapers, magazines, industry newsletters, television transcripts, and blogs. OSINT makes our work easier, by using OSINT we are able to get important information in just a couple of minutes. Ethical Hacking Training – Resources (InfoSec) OSINT (Open-Source Intelligence) helps us to find, select and acquire information from available public sources. It’s a myth that OSINT is an Open Source Software like nmap. OSINT is unclassified and available, but link-crawling search engines like Google do not always access it. Today it’s common to see corporations using OSINT but perhaps calling it “Competitive Intelligence”. Open Sources of Information: Sources from where we can collect information (seen below): Open Source Information Transition 1455 to 2008 Elements of OSINT The OSINT process includes four key elements: What OSINT can do? ● Email addresses ● OS info

OSINT Tools - Recommendations List | Subliminal Hacking With the New Year fast approaching I thought now would be a great time to post the first draft of some recommended Open Source Intelligence (OSINT) gathering tools and resources. I will look to maintain this list overtime and have it grow, so if you come across something you think should be on the list, drop me an email or leave a comment for consideration. The reconnaissance phase of any engagement is very important and can often save you alot of time and of course money. If you are really lucky you may even find the information you are looking for freely available posted online. Either way the information you find will only be as good as the tools you use, so with this in mind here is the list based on tools I have come across over the years or have been recommended by other InfoSec peeps. * Please note even though the aim is to provide information for free OSINT Tools, some may require a subscription or commercial fee.

tinfoleak | Free dossier of a twitter user

Related: