The OSINT Curious Project Resource List

Welcome to the OSINT Curious Project Resource List! Below you can find links to all the ​blog posts and ​10 Minute Tips ​that we’ve
created to help share knowledge and skills with the OSINT Community. The list is regularly updated as we create new content but
you can also find us at ​OSINTCurio.us​, on our ​YouTube Channel​, or on Twitter ​@OsintCurious​. To link to or share this document
click here: ​https://bit.ly/osintcuriousresources
 1. Intro to OSINT
2. OPSEC & Sock Puppets
3. Searching
4. Social Media OSINT
5. Websites & Networks
6. Usernames
7. Linux Basics & Command Line Tools
8. Mapping & Geolocation
9. Images & Video
10. Visualisation

2 Link to this document: ​https://bit.ly/osintcuriousresources


Introduction To OSINT
Five Things You Can Do To Stay OSINT
Curious
How To Land A Job In OSINT
Using OSINT For Your Personal Threat
Model
Basic OPSEC Tips & Tricks for OSINT
researchers
3 Link to this document: ​https://bit.ly/osintcuriousresources
Intro to OSINT
 An introduction to OSINT for those who are https://youtu.be/PNeCqw8OLeA
just getting started.
Lorand Bodo looks a different ways to https://osintcurio.us/2019/01/22/five-things-yo
develop and maintain your OSINT skills u-can-do-to-stay-osint-curious/
How do you find work in OSINT? https://osintcurio.us/2020/04/01/how-to-land-
an-osint-job/
This is a question The OSINT Curious
Project members get quite often. The answer
is yes we do! And in this blog we want to give
you some advice on where to look for those
type of jobs.
OPSEC & Sock Puppets
How to use OSINT to improve your personal https://osintcurio.us/2019/01/30/using-osint-f
security. or-your-personal-threat-model/
Practical tips on recognising your threat https://osintcurio.us/2019/04/18/basic-opsec-t
model and preparing accordingly. ips-and-tricks-for-osint-researchers/
  
Searching

Google Dorks A look at some Google Dorks that can be https://osintcurio.us/2019/12/20/google-dorks

used to extract useful OSINT information /
from the web.

 
Social Media OSINT

The New Facebook Graph Search pt 1 Performing advanced searches in Facebook https://osintcurio.us/2019/08/22/the-new-face
following the removal of the graph search in book-graph-search-part-1/
2019.

The New Facebook Graph Search pt 2 Performing advanced searches in Facebook https://osintcurio.us/2019/08/22/the-new-face
following the removal of the graph search in book-graph-search-part-2/
2019.

Facebook Tips How to find Facebook data once you have https://osintcurio.us/2020/04/02/facebook-tips
located your target’s profile. /

Searching Instagram Pt 1 Introduction To Searching Instagram https://osintcurio.us/2019/07/16/searching-ins

tagram/

Searching Instragram Pt 2 Searching Instragram for business accounts https://osintcurio.us/2019/10/01/searching-ins

and deleted posts tagram-part-2/

4 Link to this document: ​https://bit.ly/osintcuriousresources

Improving Twitter Searches For Better Muting the Twitter algorithm and using basic https://osintcurio.us/2019/08/01/muting-the-t
OSINT search operators to improve results. witter-algorithm-and-using-basic-search-oper
ators-for-better-osint-research/

OSINT For Good How to detect and report harmful content https://osintcurio.us/2019/03/27/osint-for-goo
quickly d-reporting-the-bad/

Facebook OSINT #1 Ritu shows how to perform several OSINT https://youtu.be/vJvXcJBZRmw

data gathering techniques on the Facebook
social media

This OSINT Curious 10 minute tip is from https://youtu.be/bIAdx3CAjtM

Viewing LinkedIn Profiles Anonymously Nico (Dutch_OSINTGuy).

How to view any LinkedIn Profile

anonymously without having to login or own
a LinkedIn profile

Nixintel,The OSINT Curious Project Advisory https://youtu.be/17yiLinMPpk

Snapchat #1 Board member, shows you how to use
Snapchat for OSINT purposes, use the
SnapMap, and download videos.

Rae Baker shows how to trace users across https://youtu.be/zo_geMvcOg8

Tracing Users Across Social Media multiple social media websites using a range
of tools.

5 Link to this document: ​https://bit.ly/osintcuriousresources

  
Websites & Networks

Sector035 shows how to use the built-in https://youtu.be/2xstVuTCCvg

Using Web Developer Tools with Instagram developer tools in modern browsers to view
and Pinterest for OSINT and modify web page contents. This allows
us to bypass the scroll limits enforced on
sites like Instagram and Pinterest.

This OSINT Curious 10 Minute Tip by Micah https://youtu.be/r9bMGKET8xg

Browser Developer Tools Hoffman shows how to use the built-in
developer tools in modern browsers to view
where web sites are retrieving resources
from. During an OSINT investigation, using
the developer tools can help with
understanding related web pages, other
locations to check for data, and the security
of a web site.

This OSINT Curious 10 Minute Tip by Micah https://youtu.be/ZmrFDD_61Uc

What is a User Agent string and why should I Hoffman shows how to view and alter your
care? device's/apps'/browser's User Agent string.
He also breaks down what they are and how
to change them.

This OSINT Curious 10 Minute Tip by Micah https://youtu.be/rJajsSgwqZI

Are Adblockers Equally Effective? Hoffman shows how you can use Google
Chrome's Developer Tools to view how
effective different adblocker extensions can
be. Using AdblockPlus, Ghostery, Privacy

6 Link to this document: ​https://bit.ly/osintcuriousresources


Discovering DNS Typosquatting Domains
Using EyeWitness to Surf Web Sites
Unhardened Web Servers in Tor Have No
Anonymity
7 Link to this document: ​https://bit.ly/osintcuriousresources
Badger, and uBlock Origin in their default
configurations, we examine how many
requests our browser made and how much
data was transferred when visiting the same
web site.
This OSINT Curious 10 Minute Tip by Micah https://youtu.be/ecbSsANsEto
Hoffman shows how to find domain names
that are similar to a target domain.
Typosquatting can be used by an attacker to
register a domain similar to a target and then
trick users into submitting credentials to it
instead of the live, target domain. Think
about logging into faceboook.com (extra "o")
instead of facebook.com.
This OSINT Curious 10 Minute Tip by Micah https://youtu.be/2zmBhHDKjpI
Hoffman shows how to use Chris Truncer's
EyeWitness tool to rapidly take "screenshots"
of multiple web sites. EyeWitness is a
Python-based tool, visits web sites like a web
browser would, takes pictures of what it
"sees", and displays it to you in an
easy-to-navigate HTML file.
https://youtu.be/71dSepA-gqc​ (video)
This OSINT Curious 10 Minute Tip by Micah
Hoffman shows how to unmask Tor https://osintcurio.us/2019/03/05/apache-mod
hidden/onion services using common Apache _status-in-tor-hidden-services-destroy-anony
mity/​ (blog)

Safely Using Google's Cached Content
Certificates: The OSINT Gift that Keeps on
Giving...
Searching Breach Data for OSINT
8 Link to this document: ​https://bit.ly/osintcuriousresources
server disclosure vulnerabilities.
https://youtu.be/OSmDloxBbVU
This OSINT Curious 10 Minute Tip by Micah
Hoffman shows how to check if Google's
cache content is pulling resources from your
target site.
Certificates: The OSINT Gift that Keeps on
This OSINT Curious 10 Minute Tip by Giving...
Sector035 shows how to use websites to
examine the HTTPS certificates of web sites
for OSINT purposes.
https://youtu.be/UeI7wEdLPn8
This OSINT Curious 10 Minute Tip by Micah
Hoffman shows how to use breach data for
OSINT purposes.

Watching You Drink Beer for OSINT
Using robots.txt Files for OSINT
10 Minute OSINT Tip: What Can We Learn
From XHR, and JSON During an OSINT
Investigation?
10 Minute OSINT Tip: How To Use APIs to
Reveal Hidden Open Source Information
9 Link to this document: ​https://bit.ly/osintcuriousresources
https://youtu.be/C9RRy1djA-Y
This OSINT Curious 10 Minute Tip by Micah
Hoffman shows how to use self-reported
beer-drinking activities from the Untappd.com
social web site for OSINT purposes. We
discover a user publicly sharing their
behaviors, download, analyze, and visualize
their activities.
https://youtu.be/aEGbPiliJpg
This OSINT Curious 10 Minute Tip by Micah
Hoffman shows how to use robots.txt files on
web sites for OSINT purposes.
https://youtu.be/68wWvuM_n7A
This OSINT Curious 10 Minute Tip by Micah
Hoffman Shows How to Use XMLHTTP
Requests (XHR) and JSON From Web
Pages for OSINT Purposes.
https://youtu.be/ITq73qASWRQ
In This OSINT-Curious 10 Minute Tip, Micah
Hoffman Shows How to Use APIs
(Application Programming Interfaces) and
JSON on a Web Page to Reveal Hidden
 Information.

https://youtu.be/cA35RGMhHNg
OSINT and Web Analytics Codes and Tags This OSINT Curious 10 Minute Tip by Micah
Hoffman shows how to use Google Analytics
and other trackers for OSINT purposes.

https://youtu.be/Qje6TyKtIKM
Certificates: OSINT and HTML Source Code This OSINT Curious 10 Minute Tip by Micah
Hoffman shows how to use website HTML
source code comments for OSINT purposes.

https://osintcurio.us/2019/01/15/tracking-all-t
Tracking All The WiFi Things Using Wigle to gather and map data from he-wifi-things/
personal WiFi hotspots.

https://osintcurio.us/2019/02/12/osint-on-dele
OSINT on Deleted Content How to access deleted web content with a ted-content/
variety of different methods.

https://osintcurio.us/2019/05/21/basics-of-bre
Basics of Breach Data Introduction to using data breaches for ach-data/
OSINT

10 Link to this document: ​https://bit.ly/osintcuriousresources

 https://osintcurio.us/2019/08/15/json-and-co
JSON and Common Web Encodings A guide to understanding how encoding and mmon-web-encodings-demystified/
Demystified JSONs work, and why understanding them
can help you to extract more from the web.

 
Usernames

This OSINT Curious 10 Minute Tip by Micah https://youtu.be/Bbrve9OppnM

Finding Usernames Fast! Hoffman shows how to rapidly find
usernames across many web sites.

Tracing users across multiple platforms with https://osintcurio.us/2020/03/02/how-to-trace-

How to trace social media users across tools like Sherlock and UserRecon social-media-users-across-multiple-platforms
multiple platforms /

 
Linux Basics & Command Line Tools

This OSINT Curious 10 Minute Tip by Micah https://youtu.be/QgLu-IF1XTA

Using git to Download and Sync Files Hoffman shows how to use "git" to clone and

11 Link to this document: ​https://bit.ly/osintcuriousresources

 update files. Many of the OSINT tools we
may need are housed on Github.com and
other repository sites. We can simply
download the ZIP file archives of the tools,
but it is more efficient to use git tools to clone
and pull new content.

Micah Hoffman shows how to use the built-in https://youtu.be/eItJq2PCRWc

Basic Linux Terminal Skills - 1 Linux terminal window to navigate and
interface with the Linux system. He covers
the following skills/commands:

- pwd
- ls (with the flags and switches)
- cd
- alias
- Using the up and down arrows to move
through your terminal history

This OSINT Curious 10 Minute Tip by Micah https://youtu.be/ey6NCG4sLEI

Basic Linux Terminal Skills - 2 Hoffman shows how to use the built-in Linux
terminal window to navigate and interface
with the Linux system. He covers the
following skills/commands:
- cd
- more
- less
- cat
- grep

12 Link to this document: ​https://bit.ly/osintcuriousresources


Basic Linux Terminal Skills - 3
Basic Linux Terminal Skills - 4
Basic Linux Terminal Skills - 5
Dial cURL for Content
13 Link to this document: ​https://bit.ly/osintcuriousresources
Micah Hoffman shows how to use the built-in https://youtu.be/V2U5WZcanQw
Linux terminal window to navigate and
interface with the Linux system. He covers
the following skills/commands:
- grep
- pipes (|)
- regex/regular expressions
Micah Hoffman shows how to use the built-in
Linux terminal window to navigate and https://youtu.be/vcr4rFLlXx0
interface with the Linux system. He covers
the following skills/commands:
- grep
- sort
- cut
- input/output redirectors
Micah Hoffman shows how to use the built-in https://youtu.be/K2B6iArOocc
Linux terminal window to navigate and
interface with the Linux system. He covers
the following skills/commands:
- grep
- pdfgrep
- curl
- apt
Curl is a powerful command line for https://osintcurio.us/2019/06/25/dial-curl-for-c
requesting data from a website or IP ontent/
address. This guide shows how you can use
it for OSINT.
  
Mapping & Geolocation

This OSINT Curious 10 minute tip is from https://youtu.be/n_kJJXoLo8I

Google Maps for OSINT Ritu Gill (OSINTTechniques).

Ritu shows how to use five features of

Google Maps in your OSINT investigations.

How to obtain cell site information for OSINT https://osintcurio.us/2019/08/19/making-sens

Making Sense of OSINT Cell Tower Data for and then use automation to map it. e-of-osint-cell-tower-data-for-dfir/​ (blog)
DFIR
https://youtu.be/oVgazTQp7nw​ (video)

 
Images & Video

Matthias Wilson (MWOSINT), The OSINT https://youtu.be/vEGSDuSbURw​ (video)

Reverse Image Searching #1 Curious Project Advisory Board member,
walks you through using Google, Bing, https://osintcurio.us/2020/04/12/tips-and-trick

14 Link to this document: ​https://bit.ly/osintcuriousresources


Geometry In Image Forensics
Combing Through Video Faster Using DFIR
and OSINT Skills
Data Scraping and Visualizing using Instant
Data Scraper, ViewDNS.info, and Maltego
15 Link to this document: ​https://bit.ly/osintcuriousresources
Yandex, Baidu, and TinEye for reverse s-on-reverse-image-searches/​ (blog article)
image searching. This OSINT technique is a
core skill.
Sector035 explains how to use geometry to https://osintcurio.us/2019/04/30/geometry-in-i
determine the distance and position of mage-forensics​/
objects in a photo.
Detailed guide on how to work through large https://osintcurio.us/2020/01/31/combing-thro
volumes of video material in OSINT ugh-video-faster-using-dfir-and-osint-skills/
investigations.
Visualisation
Micah Hoffman (WebBreacher), The OSINT https://youtu.be/mohq4enmVNE
Curious Project President, shows how to use
a combination of Google Chrome and Instant
Data Scraper to extract HTML table data
from the ViewDNS.info web site. Then, once
that is saved in a CSV on the local system,
Micah demonstrates how to import the CSV
into Maltego's Casefile product to visualize
and analyze the OSINT data.