How to Gather Info on Someone through OSINT

Summary

This video script delves into the concept of Open Source Intelligence (OSINT), tracing its roots to WWII and emphasizing its modern applications. It explains OSINT as the collection of publicly available information from various sources, including social media and public records. The script introduces techniques like Google hacking, using search operators to uncover hidden data, and tools for facial recognition and reverse image searches. It also covers the use of reverse email searches and the exploration of social media profiles to gather insights into individuals' interests and activities, all while reminding viewers of the ethical implications of such practices.

Takeaways

• 🕵️ Open Source Intelligence (OSINT) is not a new technique; it dates back to the earliest intelligence efforts, including its significant use during World War II.
• 📚 Lieutenant General Samuel B. Wilson claimed that 90% of intelligence data was obtained through open sources during his leadership of the American defense intelligence agency in the 1970s.
• 🔍 OSINT refers to the collection of publicly available information about individuals, companies, or organizations from various accessible sources like social media, websites, public records, and news articles.
• 🔑 Google Hacking or Google Dorking is an OSINT technique that uses special search operators on Google to find information not easily accessible through regular searches.
• 🚫 A disclaimer is provided that while gathering public information is legal, using it for malicious intent can lead to trouble, and the video is for educational purposes only.
• 🔎 The script explains how to use search operators like 'site:' to narrow down search results to a specific website, enhancing the effectiveness of OSINT.
• 📄 The use of file type search operators can help find publicly available documents related to a person, which might include court records, resumes, or other official documents.
• 🖼️ Demise, an AI facial recognition tool, can search the internet for the same person based on facial features, providing additional information about their online presence.
• 🔍 Google's reverse image search can offer valuable information about the location or context of a photograph if details are not provided by the subject.
• 📧 Tools like fbos allow for reverse email searches to find social media accounts associated with an email address, revealing more about a person's online activities.
• 🌐 Websites like SocialSearcher.com and CheckUsernames.com are useful for finding social media accounts associated with a person's name or username across multiple platforms.

Q & A

What is the historical context of open source intelligence (OSINT) mentioned in the script?

The script mentions that open source intelligence has been around since the beginning, specifically highlighting its use during the Second World War. Lieutenant General Samuel B. Wilson, who headed the American defense intelligence agency in the 70s, claimed to have received 90% of intelligence data through open sources.

What does the term 'OSINT' stand for and what does it involve?

OSINT stands for Open Source Intelligence. It refers to the process of gathering publicly available information about a person, company, or organization from various sources that are accessible to anyone, such as social media platforms, websites, public records, and news articles.

How can one gather OSINT from a person's social media when certain information is hidden?

If a person's friend list or certain posts are hidden on social media, one can still gather OSINT by looking at the likes or comments on their public profile photo or other posts. This can provide clues such as the full names of their friends and the people they frequently interact with.

What is Google hacking or Google Dorking and how is it used in OSINT?

Google hacking or Google Dorking involves using Google's search engine with special search operators to find information that may not be easily found through regular searches. It can be used to search for specific file types containing a person's name or to refine search results to a particular website.

What is the ethical disclaimer provided in the script regarding the use of OSINT?

The script includes a disclaimer that while gathering publicly available information is legal, using it to compromise security or engaging in other activities with ill intent can still result in trouble. The video is for educational purposes only and strongly discourages unethical behavior.

How can one refine Google search results using special operators for OSINT purposes?

One can refine Google search results by using special search operators like 'site:' to limit results to a specific website, or by using 'filetype:' to search for specific types of documents, such as PDFs, Excel, or Word files, associated with a name.

What is the role of the Google Hacking Database in OSINT?

The Google Hacking Database is a resource where people have created and posted multiple search strings to find information that may not be readily available through regular searches. It can be used to enhance OSINT efforts by providing advanced search techniques.

How can AI facial recognition be utilized in OSINT to gather information about a person?

AI facial recognition, through tools like Demise, can be used to search for the same person across the internet based on their facial features. This can help gather additional information about a person's online presence.

What is a reverse image search and how can it be used in OSINT?

A reverse image search involves uploading a photograph to Google Images or a similar service to find other instances of the same image on the web. This can provide valuable information about where the photograph was taken or other related details.

How can one find social media accounts associated with an email address in OSINT?

Tools like FOBO or fbos can be used to conduct a reverse email search to find social media accounts associated with an email address. This can help explore the online activities and interests of the email address owner.

What are some additional tools and websites mentioned in the script for finding information on both email addresses and phone numbers?

The script mentions websites like SocialSearcher.com for comprehensive social media searches, CheckUsernames.com for finding a specific username across multiple platforms, and That's It for finding information on both email addresses and phone numbers.