About Training Blog Contact Login

OSINT For Dummies: What I would teach you if we had a spare 20 minutes..

Feb 11, 2025

 If you had just 20 minutes to learn Open Source Intelligence (OSINT), the focus should be on practical techniques you can use immediately. OSINT is not about hacking or spying - it’s the skill of gathering and analyzing publicly available information online.

Think of it as digital detective work. Whether verifying a social media profile, researching a company, or tracking the source of an image, OSINT helps you find accurate information quickly.

Key OSINT Techniques

  1. Google Dorking – Advanced search operators to find hidden information.

  2. Reverse Image Search – Identifying people, locations, and verifying images.

  3. Social Media Investigations – Tracking usernames, profiles, and digital footprints.

  4. Email & Phone Lookups – Finding linked online accounts.

  5. Ethical Considerations – Understanding what’s legal and responsible.

By the end of this guide, you’ll have a solid OSINT foundation and the tools professionals use in cybersecurity, journalism, and investigations.

What is OSINT?

OSINT is the collection and analysis of publicly available data. Unlike classified intelligence, OSINT is open to anyone with the skills to find and interpret it.

Common OSINT sources include social media profiles, news articles, government records, business directories, and academic research. It is widely used in cybersecurity, law enforcement, corporate investigations, and journalism.

Core OSINT Techniques

1. Google Dorking: Advanced Search Methods

Google Dorking, or Google Hacking, uses search operators to uncover hidden information.

Some useful search commands:

  • site:example.com – Search within a specific website.

  • filetype:pdf – Find specific file types.

  • intitle:"confidential report" – Search for specific words in a title.

  • inurl:admin – Find URLs containing certain words.

Example searches:

  • "John Doe" filetype:pdf

  • site:ox.ac.uk filetype:pdf

2. Reverse Image Search

Find the origin of an image, verify authenticity, or track related content.

To conduct a search:

  • Use Google Images and upload a picture.

  • Try TinEye for image tracking.

  • Use Yandex for advanced facial recognition.

This helps verify social media profiles and identify locations.

3. Email & Phone Number Investigations

Email addresses can reveal linked accounts and data breaches.

Some useful tools:

  • Have I Been Pwned? – Checks for email breaches.

  • That’sThem – Finds public details tied to an email.

  • OSINT Framework – A collection of OSINT tools.

If an email appears in a breach, it may link to accounts, passwords, or profiles.

4. Social Media Investigations

Social media offers valuable insights into individuals and organizations.

Research tools include:

  • SocialSearcher – Searches multiple platforms at once.

  • CheckUsernames – Finds username availability across sites.

  • IntelTechniques by Michael Bazzell – OSINT tools for social media.

Consistent usernames across platforms help track online activity.

Ethical and Legal Considerations

While OSINT uses public data, legal and ethical boundaries must be respected.

  • Accessing public data is legal, but impersonation or harassment is not.

  • Public information should not be misused.

  • OSINT should be used responsibly for cybersecurity and research.

Best practices include using legally accessible data, respecting privacy, and ensuring ethical application of findings.

Essential OSINT Resources

For further learning, explore resources like OSINT Framework, Google Hacking Database, Shodan for internet-connected devices, and Maltego for visual link analysis.

OSINT is a powerful method for gathering intelligence from public sources. It is useful in cybersecurity, journalism, and personal research. Key skills include search techniques, image verification, email lookups, and social media investigations.

Ethical considerations are critical to ensure responsible and legal use of OSINT. For further learning, explore advanced Google Dorking, data breach analysis, and digital footprint tracking.

Did you know we are operationally trained OSINT specialists? We are more than happy to deliver bespoke OSINT training to you - get in touch!

Back to Blog Posts