. It refers to the collection, analysis, and utilization of information from publicly available sources. These can include, for example:

Social media (Twitter/X, LinkedIn, Instagram)

Search engines and specialized search operators (Google Dorking)

The most important thing in OSINT is that all information is obtained legally – without intrusion or hacking.

The use cases of OSINT are broad. Here are some examples:

Security professionals utilize OSINT to identify potential threats, such as leaked credentials, vulnerabilities, or organization-related discussions online.

Criminal investigation and law enforcement

Police and investigators use OSINT to solve crimes – for example, they can locate individuals based on social media, identify networks, or gather evidence.

Companies monitor their competitors, market trends, and their reputation using OSINT. Similarly, in recruitment or due diligence processes, OSINT can reveal a lot.

Geopolitical analysis and humanitarian work

Journalists, researchers, and organizations monitor conflicts and crisis situations using OSINT – for example, satellite images can reveal troop movements or civilian needs.

 – Information is easily accessible to everyone, as long as you know where to look.

 – Compared to closed intelligence methods, OSINT is inexpensive or free.

 – Thanks to social media and other real-time sources, OSINT can be rapid.

 – Information can be used for many purposes – for good and for bad.

OSINT in practice - examples and downsides

 An employee's email address and password can be found on Pastebin from an old data breach.


A cybersecurity expert uses the Have I Been Pwned service and other breach databases to check if the company's email addresses are involved in known data leaks.

 An attacker can use this information to log into other services if passwords have not been changed – or if an employee uses the same password elsewhere.

 In the OSINT exercise, the target company's network and employees are mapped.

DNSdumpster and Shodan reveal active IP addresses and open ports.

LinkedIn provides job titles of employees and technologies used.

GitHub contains an old code snippet showing the address of an internal API.

 Sometimes employees inadvertently publish sensitive technical information – such as hard-coded passwords or infrastructure details.

 Searching for a person whose nickname is known, but the real identity is not.

Person has sent messages to various forums using the same nickname.

The image can be used for reverse image search (e.g., Google Lens or Yandex).

Name of a store is revealed in the background of the picture → Google Maps → location refinement.

Ultimately, the person's full name can be found in the user information of their Spotify playlist.

, which is illegal and ethically questionable as a way to disclose others' personal information.

 An employee of an organization shares a picture of their workspace on LinkedIn.

The software in use (visible on the screen).

Workstation layout (critical for security reasons).

ID badge, from which the name and identifier can be zoomed in.

 Information revealed from the image can assist in targeted attacks, such as spear-phishing or physical intrusion.

OSINT is like assembling a puzzle – each piece of publicly available information can be part of a bigger picture. Tools used in data gathering include:

- Collecting information from domain names, email addresses, IP addresses

- Searching for user accounts across various services

- Scanning of network devices and servers

- Refined search within indexed files and information

- A comprehensive collection of OSINT tools and search engines

OSINT is not just a technical skill, but also requires ethical judgment and knowledge of the law. Even if the information is public, its use is not always problem-free. Respect privacy, use information responsibly, and ensure your actions are lawful. With OSINT, we can counter threats, expose crimes, protect companies, and bring the truth to light.

Do not save data unnecessarily – especially personal information.

Practice ethical judgment at every stage.

Avoid automated search bots on sites where it is prohibited.

Remember source criticism – verify information from multiple sources.

Document sources – especially when information is used professionally or legally.

## What does OSINT mean?

OSINT is an abbreviation of the words *Open Source Intelligence*. It refers to the collection, analysis, and utilization of information from publicly available sources. These can include, for example:

- News websites, websites, blogs
- Social media (Twitter/X, LinkedIn, Instagram)
- Public registers and databases
- Forums and chat platforms
- Satellite images and map services
- Documents and file metadata
- Search engines and specialized search operators (Google Dorking)

The most important thing in OSINT is that all information is obtained legally – without intrusion or hacking.

---

## What is OSINT used for?

The use cases of OSINT are broad. Here are some examples:

#### 🔍 **Cybersecurity and threat detection**

Security professionals utilize OSINT to identify potential threats, such as leaked credentials, vulnerabilities, or organization-related discussions online.

#### 👮 **Criminal investigation and law enforcement**

Police and investigators use OSINT to solve crimes – for example, they can locate individuals based on social media, identify networks, or gather evidence.

#### 🏢 **Corporate intelligence**

Companies monitor their competitors, market trends, and their reputation using OSINT. Similarly, in recruitment or due diligence processes, OSINT can reveal a lot.

#### 🌍 **Geopolitical analysis and humanitarian work**

Journalists, researchers, and organizations monitor conflicts and crisis situations using OSINT – for example, satellite images can reveal troop movements or civilian needs.

---

## Why is OSINT so important?

- **Availability** – Information is easily accessible to everyone, as long as you know where to look.
- **Cost-effectiveness** – Compared to closed intelligence methods, OSINT is inexpensive or free.
- **Timeliness** – Thanks to social media and other real-time sources, OSINT can be rapid.
- **Versatility** – Information can be used for many purposes – for good and for bad.

---

## OSINT in practice - examples and downsides

#### 1. Leaked credentials and data breaches

**Situation:** An employee's email address and password can be found on Pastebin from an old data breach.

**How does OSINT help?**
A cybersecurity expert uses the Have I Been Pwned service and other breach databases to check if the company's email addresses are involved in known data leaks.

**Danger:** An attacker can use this information to log into other services if passwords have not been changed – or if an employee uses the same password elsewhere.

#### 2. Mapping the company's infrastructure

**Situation:** In the OSINT exercise, the target company's network and employees are mapped.

**How does OSINT help?**

- DNSdumpster and Shodan reveal active IP addresses and open ports.
- LinkedIn provides job titles of employees and technologies used.
- GitHub contains an old code snippet showing the address of an internal API.

**Danger:** Sometimes employees inadvertently publish sensitive technical information – such as hard-coded passwords or infrastructure details.

#### 3. Tracing a Person Online

**Situation:** Searching for a person whose nickname is known, but the real identity is not.

**How does OSINT help?**

- Person has sent messages to various forums using the same nickname.
- The user has linked an Instagram photo.
- The image can be used for reverse image search (e.g., Google Lens or Yandex).
- Name of a store is revealed in the background of the picture → Google Maps → location refinement.
- Ultimately, the person's full name can be found in the user information of their Spotify playlist.

**Danger:** This method can quickly slip into *doxxing*, which is illegal and ethically questionable as a way to disclose others' personal information.

#### 4. Utilizing social media for espionage

**Situation:** An employee of an organization shares a picture of their workspace on LinkedIn.

**How does OSINT help?**
The picture reveals:

- The software in use (visible on the screen).
- Workstation layout (critical for security reasons).
- ID badge, from which the name and identifier can be zoomed in.
- Location, if the image is geotagged.

**Danger:** Information revealed from the image can assist in targeted attacks, such as spear-phishing or physical intrusion.

---

## Information gathering is a skillset

OSINT is like assembling a puzzle – each piece of publicly available information can be part of a bigger picture. Tools used in data gathering include:

- **theHarvester **- Collecting information from domain names, email addresses, IP addresses
- **Sherlock **- Searching for user accounts across various services
- **Shodan **- Scanning of network devices and servers
- **Maltego **- Data visualization and link mapping
- **Google Dorks **- Refined search within indexed files and information
- **Spiderfoot **- Automated OSINT scanning
- **ExifTool **- Reading metadata from image files
- **Intel Techniques Tools **- A comprehensive collection of OSINT tools and search engines
- **Wayback Machine **- Archive of old websites

> But the most important thing is not *what you find*, but *how you use* it.

---

## But – responsibility above all

OSINT is not just a technical skill, but also requires ethical judgment and knowledge of the law. Even if the information is public, its use is not always problem-free. Respect privacy, use information responsibly, and ensure your actions are lawful. With OSINT, we can counter threats, expose crimes, protect companies, and bring the truth to light.

Tips for safe information gathering:

- Do not save data unnecessarily – especially personal information.
- Practice ethical judgment at every stage.
- Avoid automated search bots on sites where it is prohibited.
- Remember source criticism – verify information from multiple sources.
- Document sources – especially when information is used professionally or legally.


What is OSINT – and why is it important?

In today's world, the value of information has reached an all-time high. But did you know that a vast amount of useful – even critical – information is available completely openly? This is called OSINT, or Open Source Intelligence – intelligence gathered from publicly accessible sources.

In today's world, the value of information has reached an all-time high. But did you know that a vast amount of useful – even critical – information is available completely openly? This is called 

What is OSINT – and why is it important?

What does OSINT mean?

Learn to hack — start here