Learn OSINT (Open-source Intelligence) From Scratch

Master OSINT search techniques with operators across Google, Bing, and Yandex, use AI to create custom operators, and explore the Google Hacking Database for sensitive information such as public cameras.

Explore how Google Docs search operators like double quotes and verbatim search narrow results to uncover people's profiles, such as LinkedIn and Contact Out, with notes and caching tips.

Learn OSINT from scratch by using Google search operators such as in URL, in title, or, asterisk, minus, and site to uncover social media profiles across GitHub, Twitter, Facebook.

Discover how to locate PDFs and other file types across the web using file type and site search operators, and extract PDF metadata such as creation date, author, and software.

Bypass European search restrictions with a VPN connected to a US server to obtain an IP address, then overcome captcha using a dedicated US IP to reveal more search results.

Explore OSINT fundamentals with the Google hacking database, using search operators to locate public cameras and analyze image metadata with ExifTool, while upholding authorization boundaries.

Explore enhancing Google searches with AI by generating Google Docs from search results, using manual search methods and operators, and extracting details like emails and university information.

Learn how to use Bing to search for people, uncover social profiles, and gather online accounts by applying exclusive operators, cached pages, location, and language filters.

Explore exclusive OSINT search operators beyond Google, use Bing and Yandex to find cached copies, and uncover link from domain results, IP hosting, site operator, and file-type findings.

Explore the Yandex search engine and its exclusive operators, including date and our host, to refine results and uncover subdomains, saved copies, and information beyond Google.

Expand OSINT results by using alternative search engines like DuckDuckGo and Baidu, apply search operators, translate pages in Chrome, and use the Intel Technique tool for cross-site queries.

Examine breached and leaked databases, including major leaks like Facebook and Twitter, revealing names, social security numbers, passwords, emails, and phone numbers, and safely download and search for osint breaches.

Distinguish data leaks from data breaches as unintentional exposure versus intentional unauthorized access. Learn the legality and ethical use of leaked data for OSINT investigators and researchers.

Explore how to search breach databases using email or phone numbers, refine results with name and city, and use Have I Been Pwned to reveal leaked data.

discover how to search leaked databases with the hashed search engine, using email, name, IP, and username queries; learn to trace breached data and passwords and verify findings with haveibeenpwned.

Explore Intelligence X to search leaked databases for emails, domains, IP addresses, URLs, and more, using free access and advanced search for unredacted results.

Set up an isolated virtual machine to safely download leaked databases for OSINT, protecting your main system and enhancing anonymity. Use virtualization software like VirtualBox to run multiple systems.

Install utorrent and agent ransac on your virtual machine to download and search leaked databases, and plan for ample disk space (100–500 GB) for large data leaks.

Explore the 2019 Facebook data leak exposing millions of profiles, including phone numbers and IDs. Learn to download and search leaked data with tools like grip and agent transact.

Learn osint from a leaked Twitter data set with over 200 million profiles, including emails and usernames. Discover how to download and search the data to uncover contact details.

Learn how to download a leaked LinkedIn bridge database and search by member ID to uncover emails and work history, illustrating OSINT techniques for investigators.

Explore OSINT techniques to analyze a 2014 Snapchat data breach, mapping usernames to partial phone numbers and using public sources to infer full numbers.

Learn to locate leaked databases publicly available on the internet using a simple search operator. Use virtual machines, download databases, and magnet links to access datasets.

Recap how to gather a target's information from social accounts, extract profile or member IDs, verify leaks with haveibeenpwned and Dehacked, and consider legal guidelines.

Learn to extend OSINT findings by creating covert social media accounts. Build burner emails and phones to hide your identity and reduce account shutdown risk during investigations.

Create a sockpuppet covert account using a virtual machine to protect your identity, build an online identity with generated names and non-identifiable photos, and manage traces for OSINT investigations.

Learn how to keep covert OSINT accounts safe and active by creating a Fastmail email, verifying with a burner number, and maintaining activity with regular logins and two-factor authentication.

Explore social media osint by gathering and analyzing data from platforms like Facebook and Twitter; extract user IDs, timestamps, metadata, and download profiles and posts to build timelines.

Discover how to extract osint from Facebook profiles using filters to narrow results by city, education, and work. Analyze posts, photos, and links to map relationships and birthdays.

Explore osint techniques to extract Facebook user IDs, track profiles even if usernames change, and compile friends lists and related accounts for investigative context.

Learn to use Facebook's forgot password feature to uncover a profile's email and phone number by entering a name or username and selecting the correct account.

Discover how to locate public comments and tags on a Facebook profile using search operators like site:facebook.com and URL posts, across Google, Bing, and Yandex.

Learn to use Facebook filters to locate a target profile, save profile picture for reverse image search, compare username and display name, note the user ID, and leverage search operators.