------------------------------------------------------------------------------------- / _ \ \_\(_)/_/ _//"\\_ JOHLEM.net / \ https://johlem.net/V1/topics/cheatsheet.php ------------------------------------------------------------------------------------- Best command to know for OSINT: Google dorking: site: (to search for specific information on a website) Social media scraping: python3 -u (to gather information from social media) Reverse image search: googleimagesdownload -k -l (to find related images) Email enumeration: theHarvester -d -b (to gather email addresses associated with a domain) IP address lookup: whois (to gather information about the ownership and location of an IP address) DNS lookup: nslookup (to find the IP address associated with a domain name) Website reconnaissance: nikto -host (to scan for vulnerabilities on a website) Metadata extraction: exiftool (to extract metadata from files) Phone number reconnaissance: python3 (to gather information about a phone number) OSINT browser plugin: osint-browser-extension (to help finding information in the browser) Note: OSINT (Open-Source Intelligence) is the process of collecting, analyzing, and disseminating information that is freely available to the public. The commands listed above are just examples of what you can do with OSINT, but it has many more capabilities. It's recommended to check the official documentation and tutorials to learn more about its features and usage.