Tagged osint

Trace company ownership and money flows through public records and sanctions lists

Run competitive intelligence, M&A due diligence and OSINT from the terminal

Enrich IOCs and threat actor leads from public OSINT sources with corroboration

Profile threat actors from OSINT with Maltego and SpiderFoot into structured dossiers

Gather OSINT on threat actors and malicious infrastructure with passive recon tools

Map external attack surface from DNS, certs and public sources without touching targets

Plan social engineering pentests with OSINT profiling, phishing, vishing and pretexting

Run spearphishing simulations with GoPhish, OSINT pretexts and tracked results

Correlate Sherlock, theHarvester and SpiderFoot findings into confidence-scored profiles

Gather public intelligence on a target organization for red team engagements

Automate OSINT scans with SpiderFoot to build a target intelligence profile

Collect intelligence with OSINT methods, entity extraction and change detection

Gather recon from domains, code leaks, Shodan and breach data for authorized tests

Read JS-rendered and blocked public pages and run allowlisted OSINT searches

Gather emails, employee lists, breach data and GitHub secrets for recon

Apply evidence-led methods for OSINT operator work and evidence review

Route passive OSINT work using Shodan, Censys, Maltego and breach lookups

Design phishing pretexts and target shortlists from OSINT for authorized tests

Run external recon with subdomain enumeration, cloud bucket and identity probes

Run a staged external OSINT pipeline from seed domains to exposure reporting

Collect open source intelligence on servers, sites, domains and people

Guide authorized recon for subdomains, port scanning, fingerprinting and OSINT

Gather open source intelligence for CTF tasks, from geolocation to username lookup

Run external recon with wordlists, port lists and vendor product fingerprints

Run a full external OSINT engagement from seed domain to report in one pass

Follow a six-stage OSINT pipeline from seed discovery to active validation

Trace identities, photos and archived pages for open-source intelligence CTF clues

Combine DNS brute force, OSINT and crawling to find more subdomains