OSINT-Cheat-sheet - OSINT cheat sheet, list OSINT tools, wiki, dataset

项目说明

OSINT CHEAT SHEET - List OSINT Tools ![Github Badge]()

!image

Contains a list of OSINT tools, OSINT tips, datasets, Maltego transform and others. There are free and paid tools you can use and owner is not responsible (take your own risks), only for knowledge or educational purposes. Apologies if some of the resources are no longer a or contain errors, as the owner does not regularly check the status of these resources, If there is new information, the owner will add it to this repo along with the category. If you want to read about techniques and intelligence some ha been added to the Wiki page Jieyaboo Wiki The owner will add them back. If there are any errors let us know thank you.

Tips & Trick Safe Guide Using Resources

Please take a notes. Due to the large number of supply chain attacks, refer to OWASP TOP 10 2025 also the TA campaign like fake captcha, injected script, obfuscate script and other. My advice is to use a sandbox machine that does not contain your personal data and office. With the rise of malware stealers, crypto miners, and other threats, to reduce this risk, you can use fake accounts on social media, email, phone numbers, and your sandbox machine, as well as turn on your AV (Anti Virus) and firewall. For malicious activiy also untracked resouces Jieyab will remove it

Tips:

See Jieyab Wiki pages

Contains information about OSINT tips, OSINT branches and knowledge about intelligence

![Wiki]()

See Jieyab Gitbook

Contains information about OSINT tips, write up usage resouces, use case, my research also other Intelligence base

Info

| Date | Remarks |
|------------|---------|
| 8 Aug 2026 | Sorry. Update, all the Gitbook and Github Wiki are not public. This site has been made private. If want to read latest update and the change you can chat me in Email "julisandipratam<@_at>gmail.com" you can also using my pub GPG key to send a message Lang used is English and Bahasa Indonesia. Is free no payment and donation. If you want to read access access here : |
| 20 Aug 2026 | Update Jieyab exclusi Intelligence Base & Knowledge Base, Cell In, Talk About Data Breach, Signal Intel, all about open source data, all about darkweb |
| 21 Aug 2026 | Update Jieyab wiki Github content add article all about android pentest, all about programming, darkweb scrapping,

These Resources Are Recommend For

Legal Considerations and International Law for OSINT

| Country / Region | Legal Framework | Key Legal Considerations | OSINT / PII Implications |
|------------------|-----------------|--------------------------|---------------------------|
| Indonesia 🇮🇩 | Personal Data Protection Law (Law No. 27 of 2022) — UU PDP<br>Electronic Information and Transactions Law (UU ITE) — Law O | Requires a lawful basis for processing personal data (consent, contract, legal obligation, legitimate interest, etc.). Data subjects ha. UU ITE prohibits unlawful access and misuse of electronic data. | OSINT using publicly a data is generally permissible, but processing identifiable personal data must comply with PDP Law principles such as purpose limitation and data minimization. |
| European Union 🇪🇺 | General Data Protection Regulation (GDPR) — Official EU Text | Processing requires a lawful basis (consent, legitimate interest, etc.). Transparency, accountability, and data subject rights apply. High-risk processing may require a DPIA. | Public a does not remove GDPR obligations. OSINT in EU residents’ personal data must meet GDPR compliance standards. |
| Spain 🇪🇸 | LOPDGDD (Spain’s Organic Law on Data Protection) + GDPR — Official Text (BOE) | Supplements GDPR with national rules. Legitimate interest may apply for research under strict necessity and proportionality tests. | OSINT research must document lawful basis and balance privacy impact against legitimate interest. |
| Mexico 🇲🇽 | Federal Law on Protection of Personal Data Held by Private Parties — Official Go Portal | Requires privacy notice, lawful basis, and safeguards when processing personal data. Indi ha to access, rectify, cancel, or oppose data use. | Collecting public data is allowed, but processing personal data still falls under legal protections. |
| United States 🇺🇸 | Computer Fraud and Abuse Act (CFAA) — Cornell Law School Reference<br>State Privacy Laws (e.g., CCPA/CPRA) — California DOJ | Prohibits unauthorized access to computers and bypassing authentication. Privacy laws vary by state. | OSINT is legal when using publicly accessible sources. Accessing restricted systems or circum security controls is illegal. |
| China 🇨🇳 | Personal Information Protection Law (PIPL) — Official Text (NPC)<br>Cybersecurity Law (CSL) — O<br>Data Security Law (DSL) — O | PIPL requires lawful basis and strict consent rules for personal data processing. Strong state controls on data handling, cross-border transfer restrictions, and broad definitions of sensiti information. | E a personal data can be regulated under PIPL. Large-scale OSINT data aggregation, profiling, or export outside China may trigger compliance reviews or security assessments. |
| International (Human Rights) | International Co on Civil and Political Rights (ICCPR), Article 17 — UN Text | Recognizes the right to privacy and protection from arbitrary interference. Applies to digital en. | OSINT acti should respect fundamental privacy rights even when data is publicly accessible. |
| OSINT Ethical Principles (Non-Legal) | Community-dri codes of conduct and research ethics | Use only lawfully and publicly a sources. Avoid doxxing, stalking, harassment, or data resale. Minimize sensitive data collection. | Ethical practice often goes beyond legal requirements and reduces risk of harm, misuse, or reputational damage. |

Linux Distribution For OSINT

You can build it with VM or Live USB, Docker, Deploy on VPS make sure you ha machine!

OSINT Academy

EXIF TOOL COMMAND

Exif tag name and data type

> Artist string
>
> Author string
>
> Caption string
>
> Categories string
>
> Collections string
>
> DateTime date
>
> DPP lang-alt
>
> EditStatus string
>
> FixtureIdentifier string
>
> Keywords string
>
> Notes string
>
> ObjectCycle string
>
> OriginatingProgram string
>
> Rating real
>
> Rawrppused boolean
>
> ReleaseDate string
>
> ReleaseTime string
>
> RPP lang-alt
>
> Snapshots string
>
> Tagged boolean

More : man exiftool (Run on your terminal)

Site :

Write metadata

you can add multiple tag and multiple file

Delete metadata

Delete mass metadata

> Usage : man exiftool or read documentation exiftool.org
>

> Not there are tag no writetable, make sure tagname can write
>

Automated tool by Da

Note

> Use fresh file, if your file has been compressed or edit metadata you got a default metadata
> You can use xmp format for edit, write and delete metadata
> Check the documentation

SOCMINT

Collection Dataset

Forums & Sites

Site and forums OSINT community arround world

Meta Search

SIGINT

All demonstrations in this repository are performed in isolated, self-hosted lab en. Do not use any information here against real, third-party infrastructure, devices, or networks without explicit written authorization. The author are not responsible for misuse.

Legal Considerations

SIGINT work spans multiple signal domains (cellular, WiFi, RFID/NFC, Sub-GHz radio, etc.), each go by different areas of law depending on jurisdiction. Broadly:

Rule of thumb: if a tool or technique in this repo can transmit, intercept, or interact with real third-party infrastructure, it needs either (a) your own isolated lab en with no real target in, or (b) explicit written authorization from the owner/operator, or (c) a license from the relevant regulator.

| Jurisdiction | Regulator | Reference |
|---|---|---|
| 🇮🇩 Indonesia | Kominfo / Ditjen SDPPI | UU No. 36 Tahun 1999 tentang Telekomunikasi |
| 🇮🇩 Indonesia | — | UU ITE (unauthorized access / computer misuse) |
| 🇺🇸 United States | FCC | Communications Act of 1934, §301 (47 U.S.C. §301) |
| 🇺🇸 United States | — | Computer Fraud and Abuse Act (CFAA) — unauthorized access |
| 🇪🇺 European Union | ETSI / national NRAs | ETSI EN 301 893 (spectrum access rules; check indi member-state telecom & cybercrime law) |
| International | ITU-R | ITU Radio Regulations |

> Add your own country's regulator/law here as needed — this table is not exhaustive.

List for learn SIGINT. There is a hardware also the software

Hardware

Software

U can integrate with commercial satellite platform like Sentinel, Planet labs and etc

Simulation and Labs

Resources

Code Search

Pro Tips

Try search on forum like programmer forums, web framework forums, social media and other things. Use a google dork to easy way find information with site target

List endpoint Github for search code

Endpoint list Github (Better login with your account for best results)

Guide Github search code by Jieyab89 :

Competiti

Social Media Search and Monitoring

Social Media Management and Content Discovery

Hastag & Keyword Analysis

Hastag and keyword analysis in search engine, social media or other platform (Text Intel)

Web Intelligence

Notes this is for surface web or clearnet site

Use this if google cache was gone (no index sites)

Analysing URLs

There is a resouces to in malicious link and bypass url shortlink

Researching Cyber Threats

OSINT Browser Sandbox

IoT Search Engines

IP Addresses

Wireless Network

SOC & Threat Hunting

Tips

You can find the file hash or other threat indicator

Automation Dorking

Github

Github Dork

Dorking

Dorking is a wonderful thing, you can use this technique to search for anything such as index of a website, looking for li camera server and other specifics, as for dorking commands that you can do for example

1. intitle: Search for specific titles
2. inurl: Search for specific urls or paths
3. intext: Search for specific words or contects
4. filetype: Search for files
5. site: Search from a specified target
6. Wildcard or symbol * (star) Find all web pages, for example: seccodeid*
7. Define:term Search for all things with specified terms, example define:seccodeid
8. cache page Take a snapshot of an indexed page. Google uses this to find the right page for the query you're looking for. Website or target specifically
9. allintext: Searches for specific text contained on a web page
10. allinurl: Find keywords in a URL
11. allintitle: Restricts results to those containing all terms specified in a title
12. link: List of web pages that ha to the specified URL
13. (|) Pipe. This is a logical operator, | "tips" will show all the sites which contain either, or both words
14. (+) Used to concatenate words, useful to detect pages that use more than one specific key
15. (-) Minus operator avoids showing results that contain certain words, e.g. security -trails will show pages that use "security" in their text, but not those that have the word "trails"

Example

Dorking Other Search Engine

Bash Dorking Script

Example

Google Ad Search Tools

Other Search Engines

Internet Archive

Web Defacement Archive

Tips

You can use dork and cache for Google index search hacker nickname also try search into archiver data broker like wayback, archi and etc

Politic and Geopolitic Archive

Malware Database Archive

Data Breached OSINT

Crack Jurnals

Crack medium article

Search Jurnals

Blogs Search Engine

Pro Tips

You can also use Google dork to search blogger profile

Medium OSINT

Tracking Website Changes

Global Censorship

Company Reconnaissance Sites (Passive)

People Searching

Family People Search

Phone Numbers

Pro Tips

If you has found the person phone number you can check at data breach, e wallet, social media, email address ( password), getcontact, truecaller, ipqs, fraud checker and last trying to dork or search any info into social media too

Public Records

Finding Usernames

Google Queries for Facebook

> Group Search: site:facebook.com inurl:group
>
> Group Wall Posts Search: site:facebook.com inurl:wall
>
> Pages Search: site:facebook.com inurl:pages
>
> Public Profiles: allinurl: people 'name' site:facebook.com
>

Facebook Query Language (FQL)

> Photos By -
>
> Photos Liked -
>
> Photos Of -
>
> Comments -
>
> Friends -
>
> Tagged -
>
> By -
>
> Liked -
>
> Commented -
>
> Events Attended -
>
> Relatives -
>

or you can use dork for spesific example

> id <this id facebook> site:facebook.com
>
> page site: facebook.com
>
> id <this id facebook> site:facebook.com *
>
> page site: facebook.com *
>

The Ultimate Facebook In Tool

OnlyFans

OSINT Adult or Porn (18+)

For this case u must know the context also dorking for better results

Pro Tips

Note is for in like search scandal (Adult), deepfake porn or blackmail, red district review, night life and club, women, dating platform and porn actress. Searching for scandal or blackmail or deepfake porn doesn't have to be on the listed sites, there are many predators uploading on several platforms You need to do massi to collect this information, but there are times when they do it on platforms such as abbre of word and other things

Steam

Slack

Office365

Keybase

VK

Bluesky

Patreon

Instagram

Threads

Microsoft OneDrive

Pinterest

Reddit

Youtube

Mastodon

Twitter

Twitter Search Engine

Snapchat

LinkedIn

Google queries for LinkedIn
> Public Profiles: site:linkedin.com inurl:pub
>
> Updated Profiles: site:linkedin.com inurl:updates
>
> Company Profiles: site:linkedin.com inurl:companies
>

MySpace

Google queries for MySpace

> Profiles: site: myspace.com inurl:profile
>
> Blogs: site:myspace.com inurl:blogs
>
> : site:myspace.com inurl:vids
>
> Jobs: site:myspace.com inurl:jobs
>
> : site:myspace.com 'TARGET NAME' ''
>
> Comments: site:myspace.com 'TARGET NAME' 'comments'
>
> Friends: site:myspace.com 'TARGET NAME' 'friends'
>

Tiktok

4chan

Parler

Monitoring & Alerting

EXIF Analysis

Email Tracking

PGP or GPG Keybase

Shodan Query Options

Capturing Information

OSINT Online Tool

Mostly general for searching data like web enumerate, attack surface, email, person and etc with hosted and manual installation (local install) in your machine

Search channel, username, bot and anymore