> For the complete documentation index, see [llms.txt](https://moharat.gitbook.io/cylabs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://moharat.gitbook.io/cylabs/cyber-security-assessment/reconnaissance/passive-reconnaissance/open-source-intelligence-osint.md).

# Open Source Intelligence (OSINT)

**OSINT (Open Source Intelligence)** refers to the practice of gathering information and intelligence from publicly available sources and open data. This information can be collected from a wide range of sources, including websites, social media platforms, news articles, public records, government reports, and more. OSINT is a valuable tool for various purposes, including cybersecurity, threat intelligence, investigations, and competitive analysis. Below, I'll explain OSINT in more detail and mention various commercial and open-source tools used for OSINT activities:

**Key Aspects of OSINT:**

1. **Publicly Accessible Data:** OSINT relies on information that is openly available to anyone without the need for specialized access or authorization.
2. **Legal and Ethical:** OSINT activities must be conducted in a legal and ethical manner. It is essential to respect privacy laws and terms of service of the sources being used.
3. **Versatility:** OSINT can be used for a wide range of purposes, including cybersecurity research, threat hunting, digital forensics, competitive analysis, and due diligence.
4. **Data Analysis:** OSINT involves collecting, analyzing, and correlating data from multiple sources to derive meaningful insights.

**OSINT Tools:**

1. **Maltego:** Maltego is a widely used commercial OSINT tool that offers data visualization and link analysis capabilities. It can be used to discover relationships between various pieces of information.
2. **Recorded Future:** Recorded Future is an OSINT platform that provides threat intelligence and real-time information on cybersecurity threats and vulnerabilities.
3. **TheHarvester:** TheHarvester is a popular open-source tool for gathering email addresses, subdomains, and other information from various sources, including search engines and public databases.
4. **OSINT Framework:** OSINT Framework is a collection of OSINT tools, resources, and websites organized in a structured manner, making it easy to find and use different resources.
5. **Shodan:** Shodan is a search engine for internet-connected devices and services. It can be used to discover open ports, vulnerable devices, and more.
6. **SpiderFoot:** SpiderFoot is an open-source OSINT automation tool that gathers data from various sources and performs automated reconnaissance.
7. **Sn1per:** Sn1per is a reconnaissance and OSINT tool that automates information gathering and vulnerability scanning.

Reference: 

{% embed url="<https://osintframework.com/>" %}

Rae Baker: Deep Dive OSINT - start.me <https://start.me/p/7kYgk2/rae-baker-deep-dive-osint>