1. Let’s Hunt the
Target using
OSINT

2. Who am I ?
● Chandrapal
● Security Enthusiast
● Founder of Hack with GitHub
● Open Source Developer (@Chan9390)
● GSoC 2017 - Metasploitable 3

3. Session is targeted to
● Beginners who are interested in Open Source Intelligence.
● For people who want to know what information lies there open on internet.

4. Agenda
● What is intelligence ?
● What is Open Source Intelligence ?
● Recent trends in OSINT
● OSINT in real life with example (Twitter, Facebook)
● OSINT in pentests (offensive)
● Few Demos

5. What is Intelligence ?

6. What is Intelligence ?
Wikipedia defines Intelligence as:
One's capacity for logic, understanding, self-awareness, learning, emotional
knowledge, planning, creativity, and problem solving

7. What is Intelligence ?
Wikipedia defines Intelligence as:
One's capacity for logic, understanding, self-awareness, learning, emotional
knowledge, planning, creativity, and problem solving
In other words:
It is the ability to understand and draw a logical conclusion from the available
information

8. What is Intelligence ?
Wikipedia defines Intelligence as:
One's capacity for logic, understanding, self-awareness, learning, emotional
knowledge, planning, creativity, and problem solving
In other words:
It is the ability to understand and draw a logical conclusion from the available
information

9. Types of Intelligence
● Human Intelligence (HUMINT)
● Geospatial Intelligence (GEOINT)
● Signals Intelligence (SIGINT)
● Open-Source Intelligence (OSINT)

10. Open Source Intelligence
● Art of collecting information which is scattered on publicly available sources
● Open here refers to overt, publicly available sources
● Not completely legal, as it is against the privacy of a person
● Gathering bits to form the big picture
● Depends on sources. Continuously evolving.
● Information sources could be anything not limited to metadata, social media
and blogs

11. Traditional Methods
● Using search engines Eg: Google, Bing, etc
● News sites Eg: CNN, BBC, etc
● Corporate Websites
● Government Websites
● Blogs

12. Modern Resources
● Advanced Search Engines
● Social Media sites
● Deepweb/Darkweb
● Automated tools

13. Recent Trends in OSINT
https://trends.google.com

14. OSINT tools

15. OSINT in Real life
We use OSINT in everyday life
● Finding download links for Game of Thrones series
● Finding the best looking person
● Knowing about the company before applying for a position
● Knowing your ex’s latest crush :P

16. Why OSINT has become so important ?
● Humans by nature try to get others attention
● So many post (personal) information on online platforms thinking that only
intended members will look.
● New smartphones have geo-tagging feature enabled by default
● Metadata of those images can give a glimpse of your daily life

17. What can you figure out from this ?

18. Car License

19. Bank and Bank Account

20. Credit card and DOB

21. Mobile No, Phone Model, much more

22. tinfoleak Demo - Twitter

23. Inteltechniques.com Demo - Facebook
https://inteltechniques.com/menu.html

24. The problem I faced
Hack with GitHub - initiative to showcase open source security tools on GitHub
along with their Author’s twitter handle

25. How OSINT has helped me ?
80% - @xyz123 - @xyz123
6% - @xyz123 - @_xyz123, @xyz123_, @xyz_123 or @_xyz123_
4% - Check their websites for Twitter handles
2% - Impossible to find
What about the other 8% ?

26. How OSINT has helped me ?
3% - Check the links on Twitter. People generally brag about their tools.
2% - Same profile pictures. Use reverse image (https://tineye.com/)
3% - Git log - Email OSINT

27. OSINT in Pentest
● Webapp
○ Wappalyzer
○ RetireJS
● Domain-IP lookup
○ Whois lookup
○ Reverse IP Lookup
● Find if emails were previously pwned
○ HaveIBeenPwned lookup

28. OSINT in Pentest
● Advanced Search engine searches: site:*.example.org ext:php | ext:txt |
ext:log
● Checking robots.txt
● Advanced search: Wolfram Alpha
● Subdomain enumeration
○ Certificate transparency
○ Shodan
○ Censys

29. Examples

30. Intrigue - Demo
You can know more about Intrigue at:
https://www.youtube.com/watch?v=kWrdxuFaEVg

31. espi0n - Coming Soon !

32. Any Questions ?

33. References:
● https://github.com/jivoi/awesome-osint
● https://blog.appsecco.com/open-source-intelligence-gathering-101-
d2861d4429e3
● https://www.slideshare.net/SudhanshuChauhan
● http://www.automatingosint.com/blog/
● https://intrigue.io