`Make Sure To Know The Methodologies`

                                                  TamiCTF - OSINT ESSENTIALS

Paul Jeremiah (30/01/2022)

`Make Sure To Know The Methodologies`

Websites & Resources :

1.Ultimate OSINT Collenction

2.aware-online

3.Belling-Cat-OSINT-collection

4.Ohshint Resources

5.OSINT-addons-Collection

6.Ohshint-Gitbook

7.Databases-INT

8.OSINT-collection-of-databases

9.OSINT-SearchEngine

10.HUNGARIA-OSINT-COLLECTION

11.Osint stash

12.OSINT.best

13.osint-pros

Legend sector035 and Week in OSINT Medium Edition

15.Hackers-arise

1. Sock Puppet

Sock puppets are nothing but detailed created fake social media accounts to research in OSINT, without giving up the true identity. Sock Puppets are basically aliases, fictitious persona profiles created by someone else with specific goals in mind and is part of an OSINT Social Engineering technique

                                        The art of anonymous Puppet show on the internet

1.https://hackernoon.com/how-to-make-sock-puppet-accounts-for-osint-in-2021-12r33gs

2.https://www.secjuice.com/the-art-of-the-sock-osint-humint/

3.https://www.reddit.com/r/OSINT/comments/dp70jr/my_process_for_setting_up_anonymous_sockpuppet/

1.2 Source for Sock Puppet

1.Generat Fake identity : https://www.fakenamegenerator.com/

2.Random Fake id Dcode-fr : https://www.dcode.fr/fake-id-generator

3.Fake ID Gen : https://www.elfqrin.com/fakeid.php

4.AI Generated Images :https://www.thispersondoesnotexist.com/

5.Virtual CC/DC :https://privacy.com/

6.Creating Secure Email : https://protonmail.com/

2. Search Engine For Intelligence :

1.https://www.google.com/

intext:tamilctf site:github.com

site:drive.google.com forensics

2.https://www.google.com/advanced_search (Google Dorks By GOOGLE :) )

3.https://www.bing.com/

4.https://yandex.com/

5.https://baidu.com

6.https://duckduckgo.com/

7.https://Shodan.io & https://natlas.io

8.https://vulners.com

9.https://www.zoomeye.org

10.https://publicwww.

11.https://www.mojeek.com/

12.https://www.startpage.com/sp/search

13.LinkedIN Search

14.https://gibiru.com/

15.https://t.co/Qr92lU6AgH

2.1 Tools

1.Goohak

2.GoogD0rker

3. IMINT ( Imagery intelligence)

1.https://images.google.com ( Reverse Image Search)

2.https://tineye.com/ (Best Reverse Image Search tool)

3.http://exif.regex.info/exif.cgi( Meta Data)

4.https://scanner.deepware.ai/ (Face Deepfake Recog)

5.https://pimeyes.com/en (Face recognition reverse image)

Reverse Image Search Add-ons:

6.https://addons.mozilla.org/en-US/firefox/addon/search_by_image/ ( Awesome RI Search Addon)

7.https://addons.mozilla.org/en-US/firefox/addon/yandex-image-search-romkaq/?utm_source=addons.mozilla.org&utm_medium=referral&utm_content=search (yandex Image Search)

8.https://www.invid-project.eu/tools-and-services/invid-verification-plugin/ ( Plugin for Image/ Video Duplicheck/Fake Image Analysis)

4. Email OSINT

1.https://hunter.io (Organisation email verify, gather)

2.https://phonebook.cz/

3.https://www.voilanorbert.com/

4.https://tools.verifyemailaddress.io/ (Email Verifier)

5.https://tools.epieos.com/email.php ( Gmail / Lookup )

6.https://www.aware-online.com/en/osint-tools/username-tools/

7.https://chrome.google.com/webstore/detail/clearbit-connect-supercha/pmnhcgfcafcnkbengdcanjablaabjplo?hl=en (extension )

8.https://www.mailshunt.com/

9.https://thatsthem.com

10.https://snov.io/email-finder

4.1 Email OSINT TOOLS

Ghunt (https://github.com/mxrch/GHunt)
H8mail (https://github.com/khast3x/h8mail)
Mosint (https://github.com/alpkeskin/mosint)
Protosint (https://github.com/pixelbubble/ProtOSINT)
Buster (https://github.com/sham00n/buster)
Reconspider (https://github.com/bhavsec/reconspider)
Infoga (https://github.com/m4ll0k/infoga)

5.Password OSINT

1.https://dehashed.com/

2.https://weleakinfo.to/v2/

3.https://leakcheck.io/

4.https://snusbase.com/

5.https://scylla.sh/

6.https://haveibeenpwned.com/

7.https://pastebin.com

8.https://intelx.io

Gather info from there first

API SUPPORT curl 'https://leak-lookup.com/api/search' -d 'key=368d539f319eaf5bfbe72356cf63636a&type=email_address&query=admin@gmail.com'

13. https://breachdirectory.org/

  **Extra one char showing :)**
![image](https://github.com/0xcyberpj/osint-essentials/assets/72292872/677c3de0-8192-41ef-8445-69b535b79139)