🕵️ Module 1: OSINT & Passive Reconnaissance
Master Open Source Intelligence and passive information gathering without direct target interaction
📚 Module Overview
This module teaches you how to gather comprehensive intelligence about targets using publicly available information without directly interacting with their systems. You'll master OSINT fundamentals, advanced search techniques, social media intelligence, and passive DNS reconnaissance.
Learning Objectives
- Understand OSINT frameworks and methodologies
- Master advanced Google dorking and search operators
- Develop social media intelligence (SOCMINT) skills
- Perform passive DNS reconnaissance and subdomain discovery
- Analyze public data sources and threat intelligence
- Build comprehensive target profiles without detection
🎯 Module Lessons
Lesson 1: OSINT Fundamentals
60 minutes In DevelopmentIntroduction to Open Source Intelligence methodologies, frameworks, and ethical considerations.
- OSINT Definition and Scope
- OSINT Framework and Tools
- Legal and Ethical Considerations
- OSINT Workflow and Methodology
Lesson 2: Google Dorking & Advanced Search
75 minutes Coming SoonMaster advanced Google search operators and techniques for discovering sensitive information.
- Advanced Search Operators
- Google Dorking Techniques
- Search Engine Optimization
- Automated Search Tools
Lesson 3: Social Media Intelligence (SOCMINT)
90 minutes Coming SoonLearn to extract valuable intelligence from social media platforms and online communities.
- Social Media Analysis Techniques
- Profile Investigation Methods
- Relationship Mapping
- Online Community Intelligence
Lesson 4: Passive DNS Reconnaissance
75 minutes Coming SoonMaster passive DNS analysis, subdomain discovery, and infrastructure mapping techniques.
- DNS Record Analysis
- Subdomain Enumeration
- Certificate Transparency Logs
- Historical DNS Data
🛠️ Essential OSINT Tools
OSINT Frameworks
- OSINT Framework - Comprehensive tool directory
- SpiderFoot - Automated OSINT collection
- Maltego - Link analysis and visualization
Search & Discovery
- theHarvester - Email and subdomain discovery
- Shodan - Internet-connected device search
- Censys - Internet-wide scanning