HackIndex.io
Language
Open Source Intelligence (OSINT) is the practice of collecting and analyzing publicly available information to support pentesting, red teaming, and social engineering engagements. OSINT is typically the first phase of any external assessment, building a target profile before any direct interaction with the target's infrastructure.
OSINT techniques cover a broad range of sources: domain and DNS records, certificate transparency logs, WHOIS data, social media profiles, employee directories, job postings (which reveal technology stacks), code repositories, leaked credentials in breach databases, document metadata, and geolocation from images. Passive reconnaissance through these sources reveals organizational structure, email formats, technology choices, and potential entry points without generating any traffic to the target.
This section covers OSINT methodologies: people and identity intelligence (email discovery, social media correlation, organizational mapping), infrastructure reconnaissance (subdomain enumeration, IP range identification, cloud asset discovery), technical intelligence (technology fingerprinting, exposed credentials, code leaks), and physical intelligence (geolocation, facility identification, badge and access system reconnaissance). Core tooling includes theHarvester, Amass, Maltego, SpiderFoot, and Shodan.
Trace individuals through usernames, emails, phone numbers, addresses, and relationship networks.
Techniques for harvesting and analysing email addresses to map identities, infer infrastructure, validate accounts, and uncover organisational relationships via OSINT methods.
Techniques for discovering and harvesting email addresses from public sources to map organisational attack surfaces and identify exposed personnel.
Maps email addresses to real identities using breach data, social platforms, username enumeration, and metadata analysis to build comprehensive target profiles.
Analyze email infrastructure using DNS records, MX configurations, SPF/DKIM/DMARC policies, and mail server fingerprinting to map organizational email systems.
Techniques for verifying email address validity, ownership, and breach exposure using OSINT tools, DNS analysis, and passive reconnaissance methods.
Tracks changes in online identities over time using OSINT techniques to detect alias shifts, profile updates, and behavioural pattern evolution across platforms.
Guides for locating images via EXIF, satellites, shadows, and maps
Techniques for determining when an image or video was captured using sun position, shadows, seasonal cues, and metadata analysis.
Leverage shadow length, angle, and solar position data to determine geographic location, time, and date from imagery using astronomical calculations.
Correlate weather patterns, lighting, shadows, and environmental cues in imagery to verify locations, timestamps, and authenticity of open-source intelligence.
Techniques for verifying geographic locations using satellite imagery, landmark analysis, shadow angles, and metadata to confirm or dispute claimed locations.
Cross-reference multiple geolocation data sources—satellite imagery, metadata, landmarks, and shadow analysis—to verify location accuracy and eliminate false positives.
Techniques for extracting geolocation data from images using metadata, visual landmarks, shadow analysis, and reverse image search to pinpoint locations.
We use cookies to improve your browsing experience, analyze site traffic, and personalize content. By clicking "Accept All", you consent to our use of cookies. Privacy Policy.