Information gathering

Table of contents

1. Information gathering
   1. Command line tools
   2. Online tools
   3. Full OSINT Frameworks

---

Command line tools

From	Use
Email	holehe <email>
Domain	theharvester -d <domain> -l 100
	theharvester -d <domain> -l 100 -b all (full)
Username	sherlock <username>
Image	exiftool <image>
Instagram	instaloader profile <username>
Github	trufflehog github --org=<username,org>

Online tools

From	Use
Visualiser	OSINTracker
IP	Shodan
Name	Webmii
SSID	Wigle
Image	PimEyes
	TinEye
	Pic2Map (exif geolocation)
Email	DeHashed
	Hunter
	HaveIBeenPwned
Misc	Goosint
	OSINT Framework
	OSINT Dojo

Full OSINT Frameworks

• Recon-ng is a modular Python framework for automating OSINT collection via many built-in modules
• SpiderFoot is an open-source tool aggregating dozens of data sources to profile domains, IPs, or identifiers