Building a OSINT Machine (VM) from scratch

Enable virtualization technology in the bios to run virtual machines; access the bios with f1 or f10 during boot, save changes, reboot, and install VirtualBox.

Install VirtualBox on a Windows host to run multiple operating systems on one computer and isolate investigations with snapshots. Learn installation steps and basic virtual machine creation for osint.

Learn to download Debian 64-bit ISO, create a Linux VM in VirtualBox, configure memory and dynamic storage, install Debian, and boot into KDE Plasma.

Resolve the full screen issue in a virtual machine by updating and upgrading the OS, installing the VirtualBox editions, and rebooting to enable full screen.

Adjust virtual box VM settings to boost performance, including memory and CPU allocations. Enable bidirectional clipboard and drag and drop, and set up a shared folder for file transfer.

Use snapshots in VirtualBox to revert a machine to a pristine state between OSINT investigations, saving a pre-built baseline and restoring as needed.

Explore the Debian Linux base install and navigate the application launcher, terminal, Firefox, settings, system monitor, file manager, and the barebones desktop with shortcuts and widgets.

Learn core Linux commands for setting up an osint vm, including sudo, ls, cd, clear, apt update and upgrade, pip install, apt install, git clone, chmod +x, and running executables.

Install Java on a Debian Linux virtual machine using apt install default-jdk, since Java isn't preinstalled and is needed to run Montego; verify with java -version showing 11.0.11.

Install pip 2 and pip 3, Python’s package managers linked to Python Package Index. Learn why Python 3 is preferred while keeping Python 2 for compatibility, and perform updates and installations.

Install Google Go, download the Go binary, set the path, and verify the installation by checking Go version. Follow along as the video shows terminal commands and copyable links.

Learn how to install git on Debian Linux, use root privileges, ensure the system is up to date, and clone GitHub repositories to install tools.

Install Terminator on Linux to boost terminal productivity; launch, pin, and use horizontally or vertically split windows for multiple concurrent tasks.

Install and use AnonSurf to route all traffic through the Tor network, enabling anonymized osint workflows with DNS leak protection and dark web access on Debian-based systems.

Demonstrates using an osint tool to build a dossier from a username across 1100+ sites, generate a pdf report, and verify data to confirm the actual target.

Twint, a Python-based Twitter scraping tool, retrieves tweets from profiles without the Twitter API. It outputs to text or CSV and supports date and location filters for OSINT.

Install and run Sherlock to search a username across multiple sites, verify findings to avoid false positives, and explore how related accounts can reveal more information about a target.

Demonstrate installing metagoofil on a linux vm and using it to crawl a website for specific file types, downloading PDFs, Excel, and PowerPoint files for osint analysis.

Explore holehe, an OSINT tool that checks if an email is used on other sites, and learn how to install and run it from GitHub.

Analyze file metadata with the Mycroft osint tool on Debian-based systems to extract hashes, timestamps, and properties across documents, images, and archives for evidence preservation.

Install Audacity on a virtual machine to analyze audio with waveforms, record and clean up audio, export in mp3 and wav formats, and explore potential signal analysis for OSINT workflows.

Install and configure Chromium on the virtual machine alongside Firefox for flexibility. Pin Chromium to the taskbar and explore apps from the Chrome store for enhanced browsing.

Install onion share to securely transfer files over the tor network, with encryption and relayed traffic, using drag-and-drop sharing on Linux, Windows, and OS X, plus a unique recipient URL.

Install and use nmap and zenmap for network scanning, identify open ports and potential operating systems, and explore the graphical zenmap interface to simplify mapping on your osint machine.

Install Maltego community edition on Linux, verify the download with a hash, ensure Java is installed, run the application, and register for a free account to begin graph-based searches.

Install the Brave browser, a chromium-based tool with a built-in Tor private window for enhanced anonymity. Use private Tor browsing to mask your location and conduct OSINT investigations securely.

Learn how to use the Brave browser with an integrated Tor browser to access onion sites and browse the dark web with enhanced privacy for OSINT investigations.

Install and configure Keepassxc in a virtual machine to store an encrypted password vault with usernames, passwords, and urls, and create a demo entry to illustrate password management.

Compare the pros and cons of web tools and install tools for investigations, including reverse phone number searches, people searches, and data privacy considerations.

Master OSINT workflows by installing firefox addons like wayback machine, you block origin, https everywhere, netcraft, and shodan in a virtual machine to securely gather evidence and preserve pages.

Install and pin Chrome extensions in Chromium and Brave, using Google Translate to translate pages, and follow browser-specific steps via the Chrome Web Store.

Explore Intelligence X, a versatile OSINT search engine for domains, emails, IPs, and bitcoin addresses, then export intel from data dumps and breaches, with both free and paid options.

Explore free public records search systems dot net to locate names, aliases, locations, and relatives, and see how paid services like BeenVerified or Spokeo extend investigations.

Explore spy dialer for OSINT: perform reverse phone lookups, view phone details and voicemails, and combine with U.S. phone book, white pages, and Google searches.

Explore Have I Been Pwned to check if your email has been part of data breaches, view breached websites and compromised data, and use osint to uncover related accounts.

Learn how dehashed functions as a data breach search tool, allowing you to search emails or usernames across breaches, view breaches and hashes, and monitor assets under lawful guidelines.

Explore Spiderfoot, an OSINT web-based tool that crawls the internet for emails, domains, and other data, with a local web interface and configurable scans.

Explores the epieos osint tool for email lookups and social media linkage, showing how to search an email address and identify connected accounts, with an offline phone lookup.

Set auto start pages in chrome, chromium, brave, and firefox to open your essential OSINT sites on startup, using current pages or custom URLs for faster investigations.

Explore graynoise on viz.graynoise.io to analyze global network attacks and CVEs, tracking malicious, suspicious, and benign IP activity and specific exploits like CVE 2026-21962.

Explore facepair.com to compare two faces, as ai analyzes facial features like the nose and eyes and assesses likeness scores to determine how similar two people look.

Explore leaked domains and related databases on leaked, practice searching domains, emails, usernames, and other data, and note partial redactions and the need to verify results.

Explore meta dot r dot, a beta url analysis tool that scans a full url to reveal language, http headers, metadata, ssl certificates, robots.txt, sitemaps, and cdn details.

discover vormweb, a flexible dark web tool you can use in any browser, with color coded links, gdpr compliant privacy policy, and onion access via tor for osint exploration.

Explore meta osint, a GitHub search tool that organizes disinformation and hacking resources by category, highlighting sources like Snopes, PolitiFact, and Hoaxy.

Explore a web page downloader chrome extension to archive and save websites offline, download HTML, images, links, or assets (CSS, JavaScript, PDFs), and inspect site structure.

Discover how to locate OSINT tools for your case by searching Google, DuckDuckGo, or Bing, exploring GitHub and curated awesome lists, and consulting Udemy courses for guidance.

Build your own osint machine from the ground up using a customizable template of tools and configurations tailored to your investigations.

Closing the course, the instructor reflects on building an osint machine and demonstrates a tracker vm, encouraging customization, updates, and ongoing refinement of tools and passwords.

Explore a start.me OSINT page of linked tools and resources, organized into sections like search engines, social media, web3, and country lists.

Learn how to build your own OSINT machine (VM) from scratch, using Mint Linux or other distros, and customize tools, templates, tor routing, and reporting scripts.

Load linux mint in a virtual machine, choosing the cinnamon edition and a nearby mirror, allocate memory and disk, then install mint and enable guest editions for full screen.

Customize Linux Mint by changing wallpaper and menu images, adding items, and moving applications. Change lock screen and Plymouth logo by editing backgrounds, resizing to 100 by 100 with pinta.

Learn to write scripts and programs for a custom os, using shell or python, with tor routing and a start-stop-status menu, and launch them with vim and desktop launchers.

Explore a practical OSINT machine setup by detailing recommended apps and tools, from Tor browser and Brave to Data Miner, deep fake detectors, OSINT suites, and password managers.

Join a community for security, open source intelligence, and pen testing while discussing building an osint machine (vm) from scratch, chat on discord, and share course ideas at disposablegames.studio.