Kullanıcı1233
Kıdemli Üye
- 19 Tem 2011
- 4,371
- 12
Hello dear THT members, today I will tell you about the OSINT Framework. Sometimes, when we want to scan open source, we are looking for resources. Here, OSINT Framework helps us. Many sites are offered to us to scan open sources on the site. There are many options for us to collect information such as ip address, email or username of the target person. Usually an alternative site recommendation is made to us. However, the tool was proposed, but less than others.
Site: click
Use of.:
After entering the site, it gives us different branches - options. When we press the round buttons in a color similar to blue, she asks what to scan about us and when it presses the button again she makes a site suggestion. As I said, there are many options here;
Training
Docume-ntation
OpSec
Threat Intelligence
Exploits & Advisories
Malicious File Analysis
Tools
Encoding / Decoding
Classifieds
Digital Currency
Dark Web
Terrorism
Mobile Emulation
met-a data
Language Translation
Archives
Forums / Blogs / IRC
Search Engines
Geolocat-ion Tools / Maps
Transportation
Business Records
Public Records
Telephone Numbers
Dating
People Search Engines
Instant Messaging
Social Networks
Images / Videos / Docs
IP Address
Domain Name
Email Address
Username
The nice part is that there are 3.4 more options for these options. So you can get many resources from here.
Here I will first look at the sites where I can browse about username. We click on the Username button and there are 2 options, "Username Search Engines" and "Specific Sites".
I skip the first site and enter "https://checkusernames.com/". The moment you enter the username here, it shows whether it is available on social media platforms. For example, if it is not suitable for twitter, know that the username is used here.
I scanned by entering the name "palamukan" and got a result.
Site: click
Use of.:
After entering the site, it gives us different branches - options. When we press the round buttons in a color similar to blue, she asks what to scan about us and when it presses the button again she makes a site suggestion. As I said, there are many options here;
Training
Docume-ntation
OpSec
Threat Intelligence
Exploits & Advisories
Malicious File Analysis
Tools
Encoding / Decoding
Classifieds
Digital Currency
Dark Web
Terrorism
Mobile Emulation
met-a data
Language Translation
Archives
Forums / Blogs / IRC
Search Engines
Geolocat-ion Tools / Maps
Transportation
Business Records
Public Records
Telephone Numbers
Dating
People Search Engines
Instant Messaging
Social Networks
Images / Videos / Docs
IP Address
Domain Name
Email Address
Username
The nice part is that there are 3.4 more options for these options. So you can get many resources from here.
Here I will first look at the sites where I can browse about username. We click on the Username button and there are 2 options, "Username Search Engines" and "Specific Sites".
Since I will scan normally, I chose the first option of this and I came across many other options. I will try 1.2 of the options here. I pressed "Namechk" and "Check Usernames" and it threw me directly on the sites.
I skip the first site and enter "https://checkusernames.com/". The moment you enter the username here, it shows whether it is available on social media platforms. For example, if it is not suitable for twitter, know that the username is used here.
I scanned by entering the name "palamukan" and got a result.
I also scanned "palamukan" on "https://usersearch.org/" and if i get results it gives me the right to see its profile on social media. We get such results after the scan. In this section there is always a result for the "videobam" site, this is unnecessary and there is a deletion section. If you want to delete your account from the site, it will direct you to the support line.
Now let's move on to the mail scan. After coming to the "Email Address" section, there are many options.
I want to try 2 options. "Mail scan" and "mail verification". Pressing the mail scanning button offers many alternatives. I enter the "https://thatsthem.com/reverse-email-lookup" site and write the e-mail address. It gives us a lot of information here, IP address, destination age, etc. informations.
I will go to "http://www.skymem.info/" site and write the e-mail address. When i write it, it lists hotmail in the database of this site. It finds 7,600,209 results. So here we can verify rather than scan.
Now we can proceed to mail verification. I enter "https://verify-email.org/" and write my e-mail address. I can get 2 results, either "ok" or "unknown". I got a positive result in the email address i scanned.
Now let me tell you about domain scanning. For the OSINT Framework domain, it offers us a lot of hopper. Shows whois and blacklist domains. Of course, it does this with the help of sites. I first click on "Subdomains" to detect subdomains, then I encounter a lot of alternatives. Since we want to scan online, i search for sites and find 2 sites for subdomain detection.
First enter this site "https://findsubdomains.com/". After entering the site, i type the domain into the search and the results appear. I see a few of the results are encrypted. We are asked to get membership for this, but this is not necessary. Instead, we can use the tool.
Our other site is "https://pentest-tools.com/information-gathering/find-subdomains-of-domain#". I scan again and the results come out.
Translator: Secret Person
Subject source: https://www.turkhackteam.org/sosyal-muhendislik/1819113-osint-framework-nedir-pala.html
Now we can proceed to mail verification. I enter "https://verify-email.org/" and write my e-mail address. I can get 2 results, either "ok" or "unknown". I got a positive result in the email address i scanned.
Now let me tell you about domain scanning. For the OSINT Framework domain, it offers us a lot of hopper. Shows whois and blacklist domains. Of course, it does this with the help of sites. I first click on "Subdomains" to detect subdomains, then I encounter a lot of alternatives. Since we want to scan online, i search for sites and find 2 sites for subdomain detection.
First enter this site "https://findsubdomains.com/". After entering the site, i type the domain into the search and the results appear. I see a few of the results are encrypted. We are asked to get membership for this, but this is not necessary. Instead, we can use the tool.
Our other site is "https://pentest-tools.com/information-gathering/find-subdomains-of-domain#". I scan again and the results come out.
Translator: Secret Person
Subject source: https://www.turkhackteam.org/sosyal-muhendislik/1819113-osint-framework-nedir-pala.html
