Step-by-Step Guides

Comprehensive guides to help you master essential OSINT tools with detailed instructions, practical tips, and best practices.

Maltego Community Edition

Maltego's workflow revolves around Entities and Transforms. An Entity is a piece of information (domain, email, person). A Transform is code that take...

Due Diligence Tools

Intermediate

Nmap

Understanding Nmap requires familiarity with key networking ideas. The TCP 3-Way Handshake (SYN, SYN-ACK, ACK) is the process by which two computers e...

Asset Discovery & Identification

Intermediate

OWASP Amass

Amass operates through several subcommands. `amass intel` discovers root domains associated with an organization. `amass enum` is the core enumeration...

Asset Discovery & Identification

Advanced

QGIS

QGIS works with layers. Each layer represents a specific type of geographic data: points (cell towers), lines (roads), or polygons (borders). These la...

Geo-Intelligence (GEOINT)

Advanced

Shodan

Shodan works by continuously scanning the entire internet for devices with open ports. When it finds one, it performs a "banner grab" to collect infor...

Asset Discovery & Identification

Beginner

Social Searcher

Social Searcher aggregates publicly indexed data from major search engines and social platforms, presenting it in a unified interface. It supports bas...

Social Media Intelligence (SOCMINT)

Beginner