Checklist for Open-Source Intelligence (OSINT)

Internal URLs:

• Netcraft's What's this site running? tool:

  • https://news.netcraft.com

Information removed from the Internet:

• Wayback Machine:

  • https://archive.org

Physical Locations:

• Google Earth:

  • https://earth.google.com/web/

Job Boards:

• https://www.linkedin.com
• https://www.dice.com
• https://www.indeed.com
• https://www.careerbuilder.com
• https://www.monster.com

Employee and People Searches:

• Data Aggregation Brokerage Sites:

  • Pipl

    • https://pipl.com/

  • Spokeo

    • https://www.spokeo.com/

  • Whitepages

    • https://www.whitepages.com/

  • People Search Now

    • https://www.peoplesearchnow.com/

  • Zabasearch

    • https://www.zabasearch.com/

  • Peoplefinders

    • https://www.peoplefinders.com/

  • Justia email finder

    • https://virtualchase.justia.com/content/finding-email-addresses

• Social Networking Sites:

  • Facebook

    • https://www.facebook.com/

  • Twitter

    • https://twitter.com/

  • LinkedIn

    • https://www.linkedin.com/

  • Google+

    • https://plus.google.com/

  • Pinterest

    • https://www.pinterest.com/

Financial Information:

• If the organization is trading with Indian govt it will be registered and will be listed in ministry of corporate affairs

  • http://www.mca.gov.in/

• Other sites you can use to gather financial information about an organization are:

  • Company check

    • https://www.thecompanycheck.com/

  • Ace Analyser

    • https://www.aceanalyser.com/

Google:

• For a list of useful Google hacking search rules, visit the following link:

  • https://www.sans.org/security-resources/GoogleCheatSheet.pdf

Other Tools:

• Maltego:

  • Data analysis software used to examine the relationships between specified network nodes.

  • Maltego has the ability to examine social network links, DNS records, whois information, search results, web pages, domains, and the Internet infrastructure.

  • To download Maltego, visit this URL:

    • https://www.paterva.com/web7/downloads.php

• FOCA:

  • FOCA (Fingerprinting Organizations with Collected Archives) is a tool used mainly to find metadata and hidden information in the documents its scans.

  • To download FOCA, visit this URL:

    • https://github.com/ElevenPaths/FOCA

• Shodan:

  • A search engine that lets the user find specific types of computers (webcams, routers, servers, etc.) connected to the internet using a variety of filters.

  • Shodan is useful to hackers for finding unsecured targets, and useful to security professionals for identifying weaknesses in their own security policy.

  • To use Shodan, visit this URL:

    • https://www.shodanhq.com/