Navigating the Digital Landscape: OSINT Tools for Online Safety and Awareness

In today’s interconnected world, understanding the digital landscape is crucial. Whether you are exploring online communities, researching potential threats, or even looking into the nuances of online gaming and tools (like, hypothetically, understanding how individuals search for “Cara Mengintsal League Of Angel 2 Hack Tool” and the associated risks), Open Source Intelligence (OSINT) techniques and tools can provide invaluable insights. This guide offers a curated list of resources and tips to navigate the online world safely and effectively, drawing upon the principles of OSINT.

Github repository badge displaying project Jieyab89 OSINT-Cheat-sheet with black background and white Github logo.

This compilation presents a range of OSINT tools, valuable tips, datasets, and more, designed for educational and informational purposes. It is important to remember that the responsible use of these resources is paramount. Always prioritize ethical considerations and be aware of the terms of service for each tool and platform. The user assumes full responsibility for their actions when utilizing these tools.

Safe Practices for Online Exploration

Navigating the digital world requires caution and awareness. To ensure a safer experience when using online resources, consider these essential practices:

Virtual Environments: Utilize virtual machines, isolated hosts, or containerization technologies like Docker. These create a sandbox environment, separating your online activities from your primary system.
Private Networks: Employ Virtual Private Networks (VPNs), Tor, or peer-to-peer (P2P) networks to encrypt your connection and mask your IP address, enhancing your online anonymity.
Secondary Accounts: Use accounts that are separate from your personal or primary accounts for online investigations or explorations. This minimizes the risk of exposing your personal information.
Terms of Service Awareness: Always carefully review the Terms of Service (ToS) of any online resource or tool before using it. Understanding these terms ensures compliance and ethical usage.
Robust Security Measures: Activate your firewall, antivirus software (AV), and intrusion detection system (IDS) on your host machine or virtual environment to protect against potential threats.
Browser Privacy Enhancements: Strengthen your browser’s privacy settings by using privacy-focused extensions. Consider disabling JavaScript, blocking advertisements, and implementing other privacy-enhancing configurations.
Data Handling Precautions: Avoid uploading personal or sensitive files when using online tools. Maintain a separate, clean folder for any files used in your online activities.
File Scanning: Thoroughly scan any downloaded files with antivirus software before opening them to prevent malware infections.
Encryption: Encrypt your network traffic, messages, and disk storage to safeguard your data from unauthorized access.
Attachment Vigilance: Exercise extreme caution with email attachments, particularly document formats like DOCX, XLSM, or macro-enabled files. Disable macros by default and carefully inspect file properties before enabling them if necessary.

Who Benefits from OSINT?

The principles and tools of OSINT are valuable across a wide spectrum of professions and interests, including:

IT Security Professionals: To proactively identify vulnerabilities, conduct threat intelligence, and enhance cybersecurity defenses.
CTF (Capture The Flag) Players: To gather information, solve puzzles, and develop skills in information gathering and problem-solving.
Journalists: To conduct in-depth research, verify information, and uncover hidden narratives in their reporting.
Investigators: To gather evidence, track down individuals or entities, and build comprehensive cases.
Cyber Crime Analysts: To investigate online criminal activities, trace perpetrators, and understand cybercrime trends.
Researchers and Analysts: To collect and analyze data from open sources for academic, market, or competitive research.
Law Enforcement: To support investigations, gather intelligence, and track criminal activities online.
General Public: To enhance personal online safety, verify information encountered online, and develop a better understanding of the digital world.

Leveraging Linux for OSINT

Linux distributions offer a powerful and flexible environment for OSINT activities. You can create a dedicated OSINT environment using a virtual machine (VM) or a Live USB. It is recommended to utilize a sandboxed machine to isolate your OSINT activities.

Metadata Analysis with ExifTool

ExifTool is a powerful command-line tool for reading, writing, and manipulating metadata in various file types, especially images.

Understanding Exif Tags

Exif tags store various types of metadata within files. Some common examples include:

Artist: Name of the image creator (string).

Author: Author of the content (string).

Caption: Descriptive text about the image (string).

Categories: Keywords or categories associated with the file (string).

Collections: Collection or album information (string).

DateTime: Date and time of file creation or modification (date).

DPP (Digital Print Order): Digital print order information (lang-alt).

EditStatus: Status of file editing (string).

FixtureIdentifier: Identifier for physical location or fixture (string).

Keywords: Keywords associated with the file (string).

Notes: Additional notes or comments (string).

ObjectCycle: Object lifecycle information (string).

OriginatingProgram: Software used to create the file (string).

Rating: User rating (real number).

Rawrppused: Indicates if raw processing was used (boolean).

ReleaseDate: Date of content release (string).

ReleaseTime: Time of content release (string).

RPP (Raw Processing Program): Raw processing program information (lang-alt).

Snapshots: Snapshot information (string).

Tagged: Indicates if the file is tagged (boolean).

For more detailed information, consult the ExifTool manual by running man exiftool in your terminal. You can also find comprehensive documentation on the official ExifTool website.

Writing Metadata

To add metadata to a file:

exiftool -tagname="string" file

Example: exiftool -Author="Your Name" image.jpg

You can add multiple tags and process multiple files simultaneously.

Deleting Metadata

To remove specific metadata tags:

exiftool -tagname="" file

Example: exiftool -Author="" image.jpg

Mass Metadata Removal

To delete all writable metadata from a file:

exiftool -all="" file

Example: exiftool -all="" document.pdf

Refer to the ExifTool documentation (man exiftool or exiftool.org) for complete usage instructions and options.

Important Note: Some metadata tags are not writable. Ensure the tag you intend to modify is writable.

Automated tools, like those provided by David Bombal, can simplify metadata manipulation tasks.

Metadata Considerations

It is recommended to work with fresh, uncompressed files when manipulating metadata. If a file has been compressed or previously edited, default metadata may be present. The XMP (Extensible Metadata Platform) format can be used for more robust metadata editing, writing, and deletion. Always consult the documentation for best practices.

Exploring OSINT Resources

The following categories highlight a range of OSINT resources and tools:

SOCMINT: Social Media Intelligence tools and techniques.
Collection Datasets: Repositories of publicly available data.
Forums & Sites: Online communities and platforms for OSINT practitioners.
Meta Search Engines: Search engines that aggregate results from multiple sources.
Code Search Engines: Search engines specifically for code repositories and snippets.
Competitive Programming Platforms: Resources for honing coding and problem-solving skills relevant to OSINT.
File & FTP Search Engines: Tools for discovering files and FTP servers.
Social Media Search and Monitoring Tools: Platforms for searching and monitoring social media activity.
Social Media Management and Content Discovery Tools: Tools for managing social media presence and finding trending content.
Hashtag & Keyword Analysis Tools: Tools for analyzing hashtag and keyword trends across platforms.
Web Intelligence Tools: Resources for in-depth web analysis and information extraction.
URL Analysis Tools: Tools for examining and dissecting URLs.
Cyber Threat Research Resources: Platforms and databases for researching cyber threats and vulnerabilities.
IoT Search Engines: Search engines specifically for Internet of Things devices.
IP Address Tools: Resources for IP address lookup and analysis.
Wireless Network Tools: Tools for analyzing and monitoring wireless networks.
SOC & Threat Hunting Resources: Tools and techniques for Security Operations Center (SOC) and threat hunting activities.
Automation Dorking Tools: Scripts and tools for automating Google dorking and similar techniques.
Github Dorking Resources: Techniques and queries for searching Github repositories effectively.
Dorking Techniques: Advanced search operators and methodologies for refining search queries.
Dorking Other Search Engine Resources: Adapting dorking techniques for search engines beyond Google.
Bash Dorking Scripts: Example scripts for automating dorking tasks in a Bash environment.
Google Advanced Search Tools: Utilizing Google’s advanced search operators and filters.
Alternative Search Engines: Exploring search engines beyond Google for diverse results.
Internet Archive (Wayback Machine): Accessing archived versions of websites.
Data Breach OSINT Resources: Databases and tools for investigating data breaches.
Crack Journal Resources: (Note: Use with caution and ethically) Resources related to software cracking and vulnerabilities.
Search Journal Resources: Academic and research journal search engines.
Blog Search Engines: Search engines specializing in blog content.
Website Change Tracking Tools: Services for monitoring website modifications.
Company Reconnaissance Sites (Passive): Platforms for gathering passive information about companies.
People Search Engines: Search engines designed for finding information about individuals.
Family People Search Resources: Specialized people search engines focused on family history.
Phone Number Lookup Tools: Services for identifying information associated with phone numbers.
Public Records Search Resources: Platforms for accessing public records.
Username Finding Tools: Services for checking username availability across platforms.
Social Network Search Resources: Tools and techniques for searching within specific social networks.
Google Queries for Facebook: Example Google search queries for finding Facebook content.
Facebook Query Language (FQL) Resources: Information on using Facebook’s now deprecated FQL.
Ultimate Facebook Investigation Tools: (Note: Tool availability may vary) Tools designed for in-depth Facebook analysis.
OnlyFans Search Resources: (Note: Ethical considerations apply) Resources for searching publicly available OnlyFans content.
Steam Search Resources: Tools for searching Steam profiles and game information.
Slack Search Resources: (Note: Access may be limited) Techniques for searching Slack workspaces (where authorized).
Office365 Search Resources: (Note: Access may be limited) Techniques for searching Office 365 environments (where authorized).
Keybase Search Resources: (Note: Keybase is now part of Zoom) Resources for searching Keybase (historical context).
VK (VKontakte) Search Resources: Tools and techniques for searching the VK social network.
Bluesky Search Resources: Tools for searching the Bluesky social network.
Instagram Search Resources: Tools and techniques for searching Instagram profiles and content.
Microsoft OneDrive Search Resources: (Note: Access may be limited) Techniques for searching OneDrive (where authorized).
Pinterest Search Resources: Tools and techniques for searching Pinterest.
Reddit Search Resources: Tools and techniques for searching Reddit.
Youtube Search Resources: Tools and techniques for searching YouTube videos and channels.
Mastodon Search Resources: Tools for searching the Mastodon social network.
Twitter (X) Search Resources: Tools and techniques for searching Twitter/X.
Snapchat Search Resources: (Note: Limited public search capabilities) Resources for Snapchat (limited OSINT applicability).
LinkedIn Search Resources: Tools and techniques for searching LinkedIn profiles and company information.
MySpace Search Resources: (Historical) Resources for searching MySpace (primarily for historical OSINT).
TikTok Search Resources: Tools and techniques for searching TikTok.
Parler Search Resources: (Historical) Resources for searching Parler (primarily for historical OSINT).
Monitoring & Alerting Tools: Services for setting up alerts for specific keywords or events online.
EXIF Analysis Tools: Tools for analyzing image metadata (EXIF data).
Email Tracking Tools: (Note: Ethical and legal considerations apply) Tools for tracking email opens and clicks (use responsibly).
PGP or GPG Keybase Resources: (Note: Keybase is now part of Zoom) Information on PGP/GPG and Keybase (historical context).
Shodan Query Options: Resources for effective Shodan searches for internet-connected devices.
Information Capturing Tools: Tools for capturing screenshots, web pages, and other online content.
OSINT Online Tool Suites: Web-based platforms that integrate multiple OSINT tools.
Telegram Tool Resources: Tools for searching Telegram channels and usernames.
Document and Slides Search OSINT Resources: Search engines for finding documents and presentations online.
Real-Time Search, Social Media Search, and General Social Media Tools: Platforms offering real-time search and social media analysis capabilities.
Image Search Engines: Reverse image search engines and tools for image analysis.
Image Analysis Tools: Tools for analyzing image content and metadata.
Stock Image Resources: Repositories of stock images for comparison or identification purposes.
Video Search and Other Video Tools: Video search engines and tools for video analysis.
Geospatial Research and Mapping Tools: Tools for geospatial analysis, mapping, and location intelligence.
Nearby Map Tools from Geospatial Data: Tools for generating maps of nearby locations based on geospatial data.
Fact-Checking Resources: Platforms and resources for verifying information and combating misinformation.
Server Information Gathering & Web Analysis Tools: Tools for gathering server information and analyzing websites.
CTF Analysis & Exploit Resources: Resources for Capture The Flag competitions and exploit research.
Zero-Day Exploit Resources: (Note: Use ethically and for defensive purposes only) Information on zero-day vulnerabilities (use responsibly).
Cryptocurrency Investigation Tools: Tools for tracking and analyzing cryptocurrency transactions.
Crypto Market & Analysis Platforms: Platforms for cryptocurrency market data and analysis.
Cell Investigation Resources: (Note: Legal and ethical considerations are paramount) Resources related to mobile phone investigation (use responsibly and legally).
IMEI Investigation Resources: (Note: Legal and ethical considerations are paramount) Resources related to IMEI tracking and investigation (use responsibly and legally).
Chat Apps Investigation Resources: (Note: Privacy and legal considerations are paramount) Resources related to investigating chat applications (use responsibly and legally).
Sockpuppet Account Building Resources: Guidance on creating and managing sockpuppet accounts for OSINT (use ethically and responsibly).
Deepfake Building Resources: (Note: Ethical considerations are paramount) Tools and techniques for creating deepfakes (use ethically and responsibly).
Image Quality Enhancement Tools: Tools for improving the quality of images for analysis.
Location Data Mapping Tools: Tools for mapping and visualizing location data.
Discord Server Search Resources: Tools for searching Discord servers.
Darkweb Search Engines: Search engines for accessing content on the dark web (use cautiously and be aware of risks).
Darkweb Intelligence Resources: Resources for understanding and analyzing dark web activity.
Digital Forensics Resources: Tools and techniques for digital forensics investigations.
Investigation Writing Resources: Guides and tools for documenting and writing OSINT investigations.
Privacy Securing Resources: Tools and techniques for enhancing personal online privacy.
Fraud Checker Tools: Services for checking for fraudulent activity or indicators.
Content Removal & Strict Media Content Resources: (Note: Legal and ethical considerations apply) Resources related to content removal and handling sensitive media (use responsibly and legally).
Vehicle OSINT Resources: Tools and databases for vehicle information and VIN lookups.
Aircraft Tracking Resources: Platforms for tracking aircraft movements.
Ship Tracking & Maritime Resources: Platforms for tracking ships and maritime activity.
Railway Resources: (Limited OSINT applicability) Resources related to railways (limited OSINT applicability).
GPT OSINT (AI) Tools: AI-powered tools for OSINT tasks and analysis.
OSINT for Red Team Resources: OSINT techniques and tools relevant to red teaming and penetration testing.
Audio OSINT Resources: Tools and techniques for audio analysis in OSINT.
OSINT Network Analysis Tools: Tools for network analysis, ASN lookups, and IP geolocation.
Medical OSINT Resources: (Note: Privacy and ethical considerations are paramount) OSINT resources related to medical information (use responsibly and legally).
OSINT Military Resources: OSINT resources related to military information and analysis.
OSINT Shadow Analysis Resources: Techniques for shadow analysis in imagery intelligence (IMINT).
Academic Search Tools: Search engines for academic research and publications.
Web Directory Resources: Web directories (less common now, but some historical value).
Torrent Search Engines: (Note: Legal and ethical considerations apply) Torrent search engines (use responsibly and legally).
SDR OSINT Resources: Software Defined Radio (SDR) tools for OSINT.
API for OSINT Resources: APIs and resources for developing custom OSINT tools.
Data Visualization Tools: Tools for visualizing and presenting OSINT data.
Emoji Investigation Resources: (Niche) Techniques for analyzing emojis in OSINT contexts.
OSINT Branding & Verification Resources: Tools for brand monitoring and online verification.
NEWS OSINT Resources: Tools and techniques for OSINT in news gathering and journalism.
Threat Actor & Criminal OSINT Resources: Resources for researching threat actors and criminal activities.
OSINT for Politics and Geopolitics Resources: OSINT resources for political and geopolitical analysis.
Maltego Transform Lists: Lists of transforms for the Maltego OSINT platform.
OSINT Wildlife Resources: (Niche) OSINT resources related to wildlife monitoring and conservation.
OSINT Satellite Resources: Satellite imagery resources for OSINT.
OSINT for Scraping and Data Collection Resources: Tools and techniques for web scraping and data collection.
OSINT IRC Chat Resources: (Historical) Resources for IRC chat in OSINT (less common now).
OSINT Historical Resources: Resources for historical research in OSINT.
OSINT Art Collection Resources: (Niche) OSINT resources related to art collections.
OSINT The Artists Resources: (Niche) OSINT resources related to artists.
OSINT Language Resources: Language translation and analysis tools for OSINT.
OSINT OPSEC (Operational Security) Resources: Resources for OSINT operational security.
OSINT Journalism Project Resources: Resources and guides for OSINT in journalism projects.
OSINT Deepfake Detection Resources: Tools and techniques for detecting deepfakes.
OSINT Similarity (Plagiarism) Detection Resources: Tools for plagiarism detection and content similarity analysis.
Secure Code & Application Resources: Resources for secure coding practices and application security.
Linux Distribution Package Search Resources: Tools for searching Linux distribution packages.
Shortlink for OSINT Resources: Shortlink services for OSINT purposes (use cautiously and ethically).
OSINT Jobs Resources: Job boards and resources for OSINT professionals.
IP CIDR Converter Tools: Tools for converting IP addresses and CIDR notations.
OSINT Data Broker Lists: Lists of data brokers (for research or privacy management purposes).
OSINT Software Resources: Software directories and repositories relevant to OSINT.
OSINT Barcode Reader Tools: Barcode reader tools for OSINT applications.
OSINT Measurement Tools: Tools for measurement and analysis in OSINT (e.g., geospatial measurements).
OSINT Financial (FININT) Resources: OSINT resources related to financial intelligence.
OSINT Cryptography (Cipher) Resources: Cryptography tools and cipher resources for OSINT.
OSINT Game Resources: (Niche) OSINT resources related to online games and gaming communities.
OSINT Device for Device Information: Tools for gathering device and hardware information.
OSINT Cloud Resources: Tools and techniques for searching cloud storage services.
OSINT Property Resources: Resources for property information and real estate research.
OSINT Technique Tips: General tips and techniques for effective OSINT research.

Dorking Techniques Explained

Dorking, also known as Google dorking or search engine dorking, is a powerful technique that leverages advanced search operators to refine search engine queries and uncover specific information that might not be readily accessible through basic searches. It allows you to pinpoint specific file types, website vulnerabilities, or hidden content. Here are some common dorking operators:

intitle:: Searches for pages where the specified term appears in the HTML title tag.
inurl:: Searches for pages where the specified term appears in the URL. Useful for finding specific paths or filenames.
intext:: Searches for pages where the specified term appears anywhere within the body text of the page.
filetype:: Restricts search results to files of a specific type (e.g., filetype:pdf, filetype:docx).
site:: Limits search results to a specific website or domain (e.g., site:example.com).
*Wildcard `:** The asterisk acts as a wildcard, matching any word or phrase. Example:seccodeid*` will find pages containing words starting with “seccodeid”.
define:: Searches for definitions of a term. Example: define:seccodeid.
cache:: Displays the cached version of a webpage as indexed by the search engine. Useful for viewing older versions of websites or accessing sites that are temporarily down. Example: cache:example.com.
allintext:: Similar to intext:, but requires all specified terms to be present in the page text.
allinurl:: Similar to inurl:, but requires all specified terms to be present in the URL.
allintitle:: Similar to intitle:, but requires all specified terms to be present in the page title.
link:: Lists pages that link to a specified URL. Example: link:example.com.
| (Pipe): The OR operator. Searches for pages containing either one term or another. Example: "security" | "privacy".
+ (Plus): Requires both terms to be present on the page. Useful for finding pages that discuss multiple related concepts. Example: "security" + "vulnerability".
- (Minus): Excludes pages containing the specified term. Example: security -trails will find pages about security but exclude results containing the word “trails”.

Example Dorking List:

Refer to resources like Dorking list (from the original cheat sheet) for pre-compiled lists of dorking queries.

Advanced Search and Beyond

Explore Google Advanced Search for a user-friendly interface to construct complex queries. Remember that dorking techniques can be adapted for other search engines beyond Google.

Staying Updated

The field of OSINT is constantly evolving. New tools and techniques emerge regularly. Continuously update your knowledge and adapt your strategies to stay effective in your online investigations and security practices.

Satellite Imagery in OSINT

Satellite imagery plays an increasingly important role in OSINT, providing valuable data for various investigations. Different satellites offer varying resolutions and revisit frequencies:

Satellite	Resolution	Overpass Frequency
Planet Satellite	3 Meters	Daily
Sentinel-2 Satellite	10 Meters	Every 5 days
Landsat 8/9 Satellite	30 Meters	Every 16 days
Sentinel-3 Satellite	300 Meters	Daily
MODIS Satellite	250-1000 Meters	Daily
Google Maps Sat	15 – 30 CM	1 – 6 Years
Bing Maps	30 CM	1 – 3 Years
Apple Maps	15 – 30 CM	1 – 3 Years

Source: Bellingcat & GIJN

Understanding Satellite Capabilities:

Different types of satellites serve different purposes. Thermal satellites, for example, are particularly useful for:

Forest Fire Monitoring: Detecting heat signatures and tracking fire spread.
Agriculture: Measuring soil moisture and crop temperature for agricultural monitoring.
Climate Change Monitoring: Observing global temperature changes and climate patterns.
Environmental Quality Monitoring: Monitoring ocean and land temperatures for environmental assessments.
Natural Resource Mapping: Mapping geological formations, groundwater resources, and other natural resources.

By understanding the capabilities and limitations of different satellite systems, OSINT practitioners can effectively leverage satellite imagery for their investigations.

This guide provides a starting point for exploring the vast landscape of OSINT. Remember to use these tools and techniques responsibly, ethically, and within legal boundaries. Continuous learning and adaptation are key to mastering OSINT for online safety and awareness.