OSINT

PRIMARY CATEGORY → PENTESTING ROOT

Components ⟡

• 
  • CERTIFICATE TRANSPARENCY
• 
  • SEARCH ENGINE DISCOVERY

Assets Enumeration

Amass

Reference

Organization

amass intel -org '<ORGANIZATION_NAME>' -ip

Reverse WHOIS

amass intel -whois -d <DOMAIN>

ASN

amass intel -asn <AUTONOMOUS_SYSTEM_NUMBER>

CIDR

amass intel -cidr <CIDR>

IP

amass intel -addr <IP_ADDRESS_OR_RANGE>

---

OSINT Platforms/Tools/Applications

Username Harvesting

Linkedin2Username

DNS

Domain Tools

ViewDNSInfo

ASN | CIDR | IP

BGP Toolkit

Leaked Credentials | Data Breach

TruffleHog

GreyHat Warfare

Databases

Dehashed.com

Checking for Data Breach Exposure

Have I been Pwned