1. Conduid
  2. Documentation
  3. OSINT Cheat Sheet
MCP server · Documentation

OSINT Cheat Sheet

· github.com/Jieyab89/OSINT-Cheat-sheet

OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a research, science and technology, tutorial. Please use it wisely.

Unclaimed cheatsheetcybersecuritydatasetseducationhackingimintinformation-gatheringinformation-securityjournalismmasintosintosint-toolosintwikireconnaissancered-teamsciencescrapingsocminttoolswiki
InstallView source
64Good

Scored 6 months ago · breakdown

About OSINT Cheat Sheet

OSINT Cheat Sheet is an MCP server in the Documentation category: oSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a research, science and technology, tutorial. Please use it wisely.

Install

From source
git clone https://github.com/Jieyab89/OSINT-Cheat-sheet

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about OSINT Cheat Sheet

Powered by Claude · Grounded in docs

I know everything about OSINT Cheat Sheet. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

OSINT CHEAT SHEET - List OSINT Tools Github Badge

image

Contains a list of OSINT tools, OSINT tips, datasets, Maltego transform and others. There are free and paid tools you can use and owner is not responsible (take your own risks), only for knowledge or educational purposes. Apologies if some of the resources are no longer available or contain errors, as the owner does not regularly check the status of these resources, If there is new information, the owner will add it to this repo along with the category. If you want to read about techniques and intelligence some have already been added to the Wiki page Jieyaboo Wiki The owner will add them back. If there are any errors let us know thank you.

Tips & Trick Safe Guide Using Resources

Please take a notes. Due to the large number of supply chain attacks, refer to OWASP TOP 10 2025. My advice is to use a sandbox machine that does not contain your personal data and office. With the rise of malware stealers, crypto miners, and other threats, to reduce this risk, you can use fake accounts on social media, email, phone numbers, and your sandbox machine, as well as turn on your AV (Anti Virus) and firewall.

Tips:

  • Use virtual machine, fake host or docker machine, or cloud machine try on your vps
  • Use private network e.g vpn, tor, p2p
  • Use second account (not you real account)
  • Read ToS the resouces
  • Enable your firewall, AV and IDS on your host or machine
  • Strict your browser with the privacy extension disable js, ads and more
  • Dont upload your private files make sure you have clean personal file in folder
  • Scan the files will you download
  • Encrypt your network traffic, message and disk
  • Beware about attachments such as docx, xlsm or macro documents (Check macros don't immediately press enable, check properties file to do strict mode)
  • Beware about malicious script like programm lang always check will you run it e.g review, code and community usage (like plugin, library, github source code, extension browser, extension code editor or other things) beware with code with obfuscate (dont trust it)
  • Do a active on each platform example like post, follow, following to avoid bot detection or blocked by user (target)
  • If tools are paid try on with demo trial version with sock (fake) account, many on this resouces there is a paid so i suggest to try demo first. If there is a payment such as using crypto, try to track the transaction using Arkham or similar. If it is non-crypto, make sure there is a clear contact us, support, and email. Do not rush to pay. If you want to pay and are forced to, find the cheapest version and pay using a virtual account or third-party service to make the transaction

See Jieyab Wiki pages

Contains information about OSINT tips, OSINT branches and knowledge about intelligence

Wiki

See Jieyab Gitbook

Contains information about OSINT tips, write up usage resouces and more tips about OSINT and OSINT branch

These Resources Are Recommend For

  • IT Security
  • CTF Player
  • Journalist
  • Investigator
  • Cyber Crime
  • Researcher & Annalist
  • Law Enforcer
  • General

Legal Considerations and International Law for OSINT

Country / Region Legal Framework Key Legal Considerations OSINT / PII Implications
Indonesia 🇮🇩 Personal Data Protection Law (Law No. 27 of 2022) — UU PDPElectronic Information and Transactions Law (UU ITE) — Law Overview Requires a lawful basis for processing personal data (consent, contract, legal obligation, legitimate interest, etc.). Data subjects have rights. UU ITE prohibits unlawful access and misuse of electronic data. OSINT using publicly available data is generally permissible, but processing identifiable personal data must comply with PDP Law principles such as purpose limitation and data minimization.
European Union 🇪🇺 General Data Protection Regulation (GDPR) — Official EU Text Processing requires a lawful basis (consent, legitimate interest, etc.). Transparency, accountability, and data subject rights apply. High-risk processing may require a DPIA. Public availability does not remove GDPR obligations. OSINT involving EU residents’ personal data must meet GDPR compliance standards.
Spain 🇪🇸 LOPDGDD (Spain’s Organic Law on Data Protection) + GDPR — Official Text (BOE) Supplements GDPR with national rules. Legitimate interest may apply for research under strict necessity and proportionality tests. OSINT research must document lawful basis and balance privacy impact against legitimate interest.
Mexico 🇲🇽 Federal Law on Protection of Personal Data Held by Private Parties — Official Government Portal Requires privacy notice, lawful basis, and safeguards when processing personal data. Individuals have rights to access, rectify, cancel, or oppose data use. Collecting public data is allowed, but processing personal data still falls under legal protections.
United States 🇺🇸 Computer Fraud and Abuse Act (CFAA) — Cornell Law School ReferenceState Privacy Laws (e.g., CCPA/CPRA) — California DOJ Prohibits unauthorized access to computers and bypassing authentication. Privacy laws vary by state. OSINT is legal when using publicly accessible sources. Accessing restricted systems or circumventing security controls is illegal.
China 🇨🇳 Personal Information Protection Law (PIPL) — Official Text (NPC)Cybersecurity Law (CSL) — OverviewData Security Law (DSL) — Overview PIPL requires lawful basis and strict consent rules for personal data processing. Strong state controls on data handling, cross-border transfer restrictions, and broad definitions of sensitive personal information. Even publicly available personal data can be regulated under PIPL. Large-scale OSINT data aggregation, profiling, or export outside China may trigger compliance reviews or security assessments.
International (Human Rights) International Covenant on Civil and Political Rights (ICCPR), Article 17 — UN Text Recognizes the right to privacy and protection from arbitrary interference. Applies to digital environments. OSINT activities should respect fundamental privacy rights even when data is publicly accessible.
OSINT Ethical Principles (Non-Legal) Community-driven OSINT codes of conduct and research ethics Use only lawfully and publicly available sources. Avoid doxxing, stalking, harassment, or data resale. Minimize sensitive data collection. Ethical practice often goes beyond legal requirements and reduces risk of harm, misuse, or reputational damage.

Linux Distribution For OSINT

You can build it with VM or Live USB make sure you have sandbox machine

OSINT Academy

EXIF TOOL COMMAND

Exif tag name and data type

Artist string

Author string

Caption string

Categories string

Collections string

DateTime date

DPP lang-alt

EditStatus string

FixtureIdentifier string

Keywords string

Notes string

ObjectCycle string

OriginatingProgram string

Rating real

Rawrppused boolean

ReleaseDate string

ReleaseTime string

RPP lang-alt

Snapshots string

Tagged boolean

More : man exiftool (Run on your terminal)

Site :

Write metadata

  • exiftool -tagname="string" file

example : exiftool -Author="Bayu" test.txt

you can add multiple tag and multiple file

Delete metadata

  • exiftool -tagname="" file

example : exiftool -Author="" test.txt

Delete mass metadata

  • exiftool -all="" file

example : exiftool -all="" file

#Usage : man exiftool or read documentation exiftool.org

Not there are tag no writetable, make sure tagname can write

Automated tool by David Bombal

!Note

Use fresh file, if your file has been compressed or edit metadata you got a default metadata You can use xmp format for edit, write and delete metadata Check the documentation

SOCMINT

Collection Dataset

Forums & Sites

Site and forums OSINT community arround world

Meta Search

Code Search

*Pro Tips

Try search on forum like programmer forums, web framework forums, social media and other things. Use a google dork to easy way find information with site target

List endpoint Github for search code

Endpoint list Github (Better login with your account for best results)

Guide Github search code by Jieyab89 : https://github.com/Jieyab89/OSINT-Cheat-sheet/tree/main/Script/Github-Search

Competitive Programming

File & FTP

Social Media Search and Monitoring

Social Media Management and Content Discovery

Hastag & Keyword Analysis

Hastag and keyword analysis in search engine, social media or other platform (Text Intel)

Web Intelligence

*Tips web cache

Use this if google cache was gone (no index sites)

https[:]//www[.]google[.]com/search?q=cache:<url of interest>

Analysing URLs

There is a resouces to investigae malicious link and bypass url shortlink

Researching Cyber Threats

IoT Search Engines

IP Addresses

Wireless Network

SOC & Threat Hunting

Tips

You can find the file hash or other threat indicator

Automation Dorking

Github

Github Dork

Dorking

Dorking is a wonderful thing, you can use this technique to search for anything such as index of a website, looking for live online camera server and other specifics, as for dorking commands that you can do for example

  1. intitle: Search for specific titles
  2. inurl: Search for specific urls or paths
  3. intext: Search for specific words or contects
  4. filetype: Search for files
  5. site: Search from a specified target
  6. Wildcard or symbol * (star) Find all web pages, for example: seccodeid*
  7. Define:term Search for all things with specified terms, example define:seccodeid
  8. cache page Take a snapshot of an indexed page. Google uses this to find the right page for the query you're looking for. Website or target specifically
  9. allintext: Searches for specific text contained on a web page
  10. allinurl: Find various keywords in a URL
  11. allintitle: Restricts results to those containing all terms specified in a title
  12. link: List of web pages that have links to the specified URL
  13. (|) Pipe. This is a logical operator, | "tips" will show all the sites which contain either, or both words
  14. (+) Used to concatenate words, useful to detect pages that use more than one specific key
  15. (-) Minus operator avoids showing results that contain certain words, e.g. security -trails will show pages that use "security" in their text, but not those that have the word "trails"

Example

Dorking Other Search Engine

Bash Dorking Script

Example

Google Advanced Search Tools

Other Search Engines

Internet Archive

Web Defacement Archive

Politic and Geopolitic Archive

Data Breached OSINT

Crack Jurnals

Crack medium article

Search Jurnals

Blogs Search Engine

*You can also use Google dork to search blogger profile

Tracking Website Changes

Company Reconnaissance Sites (Passive)

People Searching

Family People Search

Phone Numbers

Pro Tips

If you has found the person phone number you can check at data breach, e wallet, social media, email address (via reset password), getcontact, truecaller, ipqs, fraud checker and last trying to dork or search any info into social media too

Public Records

Finding Usernames

Social Networks

Google Queries for Facebook

Group Search: site:facebook.com inurl:group

Group Wall Posts Search: site:facebook.com inurl:wall

Pages Search: site:facebook.com inurl:pages

Public Profiles: allinurl: people 'name' site:facebook.com

Facebook Query Language (FQL)

Photos By - https://www.facebook.com/search/taget_id/photos-by

Photos Liked - https://www.facebook.com/search/taget_id/photos-liked

Photos Of - https://www.facebook.com/search/taget_id/photos-of

Comments - https://www.facebook.com/search/taget_id/photos-commented

Friends - https://www.facebook.com/search/taget_id/friends

Videos Tagged - https://www.facebook.com/search/taget_id/videos

Videos By - https://www.facebook.com/search/taget_id/videos-by

Videos Liked - https://www.facebook.com/search/taget_id/videos-liked

Videos Commented - https://www.facebook.com/search/taget_id/videos-commented

Events Attended - https://www.facebook.com/search/taget_id/events-joined

Relatives - https://www.facebook.com/search/taget_id/relatives

or you can use dork for spesific example

id site:facebook.com

page site: facebook.com

id site:facebook.com *

page site: facebook.com *

The Ultimate Facebook Investigation Tool

OnlyFans

OSINT Adult or Porn (18+)

Pro Tips

Note is for investigator like search scandal, deepfake porn or blackmail, red distric review, women and porn actress. Searching for scandal or blackmail or deepfake porn doesn't have to be on the listed sites, there are many perpetrators uploading on several platforms You need to do massive scrapping to collect this information, but there are times when they do it on platforms such as telegram, X or adult sites, you can search using dork, regex and linguistic like slang, abbreviation of word and other things

Steam

Slack

Office365

Keybase

VK

Bluesky

Instagram

Threads

Microsoft OneDrive

Pinterest

Reddit

Youtube

Mastodon

Twitter

Twitter Search Engine

Snapchat

LinkedIn

Google queries for LinkedIn

Public Profiles: site:linkedin.com inurl:pub

Updated Profiles: site:linkedin.com inurl:updates

Company Profiles: site:linkedin.com inurl:companies

MySpace

Google queries for MySpace

Profiles: site: myspace.com inurl:profile

Blogs: site:myspace.com inurl:blogs

Videos: site:myspace.com inurl:vids

Jobs: site:myspace.com inurl:jobs

Videos: site:myspace.com 'TARGET NAME' 'videos'

Comments: site:myspace.com 'TARGET NAME' 'comments'

Friends: site:myspace.com 'TARGET NAME' 'friends'

Tiktok

4chan

Parler

Monitoring & Alerting

EXIF Analysis

Email Tracking

PGP or GPG Keybase

Shodan Query Options

Capturing Information

OSINT Online Tool

Mostly general for searching data like web enumerate, attack surface, email, person and etc with hosted and manual installation (local install)

Telegram Tool

Search channel, username, bot and anymore

Telegram Tips

View and parse the data like usernanme, private group, phone number and etc

Telegram tips. Change the hash value, username, phone number on the endpoint or url's

Telegra OSINT

Document and Slides Search OSINT

Scribd viewer

Real-Time Search, Social Media Search, and General Social Media Tools

Image Search

Image Analysis

Stock Images

Video Search and Other Video Tools

Geospatial Research and Mapping Tools

Conveter tool

*This for you have data like .shp and .kml or geojson and want to viewer or convert with the spesific tool for you analsis or sciene and other

Geojson viewer

3D Map & Building

List Country Code

Guides

Nearby Map From Geospatial

Fact Checking

Guide

Server Information Gathering Also Web

CTF Analysis & Exploit

  • Cybercheff The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
  • dcode Awesome site for decode, encode, detect cipher and anymore
  • Bettercap Framework to perform MITM (Man in the Middle) attacks.
  • Yersinia A framework for layer 2 attacks
  • FeatherDuster An automated, modular cryptanalysis tool
  • Hash Extender A utility tool for performing hash length extension attacks
  • Hashcat Password cracking
  • DLLInjector Inject dlls in processes
  • Metasploit Penetration testing software and exploit
  • Pwntools CTF framework and exploit development library
  • ROPgadget Framework for ROP exploitation
  • Exiftool Read, write and edit file metadata
  • Malzilla Malware hunting tool
  • Zmap An open-source network scanner.
  • Nmap Net mapping and port scanner
  • Wireshark Analyze the network dumps
  • Apktool Android Decompiler
  • Ninja Binary Binary analysis framework
  • Binwalk Analyze, reverse engineer, and extract firmware images
  • GDB The GNU project debugger
  • GEF Advanced debugging capabilities for exploit devs & reverse engineers on Linux
  • IDA Most used Reversing software
  • PEDA Python Exploit Development Assistance for GDB
  • Radare2 UNIX-like reverse engineering framework and command-line toolset
  • Windbg Windows debugger distributed by Microsoft
  • Boomerang Decompile x86 binaries to C
  • Detox A Javascript malware analysis tool
  • SmartDeblur Restoration of defocused and blurred photos/images
  • HitPaw Enhance image, video and media quality with AI is free and paid
  • ImageMagick Tool for manipulating images
  • Exiv2 Image metadata manipulation tool
  • Stegbreak Launches brute-force dictionary attacks on JPG image
  • Steghide Hide data in various kind of images
  • Stegsolve Apply various steganography techniques to images
  • SearchSploit Command line search tool for Exploit-DB
  • Exploitalert List exploiting and vuln
  • Lollabs Windows exploiting
  • GtfoBins Linux exploiting
  • Hacktricks List exploit and vuln cheat sheet walkthrough
  • Payload all the things Example and payload injection
  • All about bug bounty Bypasses, payloads, Reconnaissance and etc
  • Bug Bounty Tips bug bounty reconnaissance
  • DnsSpy Desktop NET debugger and assembly editor
  • regex101 Tips for Regex
  • Search CTF Writeups Find and explore CTF solutions and writeups 35,000+ writeups
  • ippsec - WU CTF List write up CTF mostly HTB
  • OSCP 2025 PG Practices & Play - Relevant Labs OSCP exam prep relevant labs

Zero Day

Cryptocurrency Investigation

Crypto Market & Analysis

Transaction Analysis

Guide

Cell Investigation

Pro Tips

If you has found the person phone number you can check at data breach, e wallet, social media, email address (via reset password), getcontact, truecaller, ipqs, fraud checker and last trying to dork or search any info into social media too

IMEI Investigation

Chat Apps Investigation

WhatsApp

Telegram

Build Sockpuppet Accounts

Build your sockpuppet account and proctect your privacy

Build your own deepfake

*Generate your deepfake (is taking longer time, need high gpu)

Virtual Camera or Camera Replacement

*Beware, make sure installed on not primary device use device for research

FakeGPS Location

Social Network and blogging

  • Wordpress
  • Blogger
  • Medium
  • Facebook
  • Instagram
  • Linkedin
  • Rocket Reach
  • Twitter
  • Discord
  • Quora
  • Reddit
  • Other community on internet

Enhance Image Quality

Locations Data Mapping

Discord Server Search

Darkweb Search Engines

Darkweb Intelligence

Guide

Digital Forensics

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About OSINT Cheat Sheet

How do I install OSINT Cheat Sheet?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is OSINT Cheat Sheet safe to use with an AI agent?

Its trust score is 64 out of 100 (good). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is OSINT Cheat Sheet still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.