# OSINT BIBLE

The image is an OSINT quick-reference cheat-sheet ('OSINT Bible') covering fundamentals, methodology, search engines, dorks, archives, social-media tooling and geolocation resources. It is a definitional/instructional artefact rather than assertive news claims, so most content is verifiable against tool documentation and standard tradecraft. High-priority checks confirm the core framework definitions (intelligence cycle) and the existence/function of headline tools (HIBP, Shodan, Censys, Maigret, Instaloader, Amass, URLhaus, GreyNoise, PublicWWW, Hunter). Two categories reduce the score: (1) minor imprecisions and possibly outdated operational details (the intelligence cycle is more commonly described as five or six stages depending on model; tools such as Twint have stalled after Twitter/X API changes; dork syntax and 'star tool' assignments are opinionated, not canonical), and (2) promotion of techniques (accessing exposed IP cameras/index-of password files, ToS-breaching scraping) that carry legal/ethical risk with insufficient caveats. No claim was marked False; unverifiable or opinion-based items are flagged Unverified. Trustworthy as educational orientation, not authoritative on legal boundaries or the current live status of individual tools.

What checked out (11)

• Have I Been Pwned (HIBP) is a data-breach search and notification service that lets users check whether an email/domain/password appears in known breaches.
• Shodan is a search engine that indexes internet-connected devices, including IoT and ICS/SCADA systems.
• The intelligence cycle is a structured, circular process spanning (planning/)direction, collection, processing, analysis (& production) and dissemination; the sheet's five-step listing is a valid common representation.
• Maigret is an open-source OSINT tool that searches a username across thousands of public sites and produces reports.
• Instaloader is a mature open-source utility for downloading Instagram photos/videos with captions and metadata.
• Amass (OWASP) is an open-source tool for subdomain enumeration, DNS reconnaissance and asset/infrastructure mapping.
• URLhaus is an abuse.ch project that collects and shares URLs used for malware distribution.
• GreyNoise characterises internet background 'noise', distinguishing benign mass scanners from targeted reconnaissance.
• PublicWWW is a source-code search engine indexing HTML/JS/CSS across a very large number of websites.
• Hunter.io's free tier provides a limited number of searches per month (commonly cited as ~25).
• Censys provides certificate and banner-based internet scanning intelligence.

• Twint's example command and its ongoing effectiveness: the GitHub project exists, but Twitter/X API and access changes have widely degraded such non-API scrapers; current reliability Unverified.
• SearchCode indexing exactly '75B lines of code': the tool exists, but the precise 75-billion figure was not confirmed from a primary source and may be outdated.
• Specific 'Star Tool' assignments (Infobel/phone, Snoop/username, BlockCypher/wallet) are curatorial opinion, not independently adjudicated as best-in-class.
• Exact Google Dork syntax/results (IP-camera and index-of-passwords strings): dorking is real, but specific strings' current effectiveness varies and was not verified live.
• Instagram/LinkedIn scraper Risk/Legal ratings (Low/Medium; 'Scrape = ToS') are simplifications; legality depends on jurisdiction and use.
• OSINT definition phrasing 'without violating logical or physical access' is a reasonable paraphrase but not a universally standardised definition.
• Yandex 'best results CIS' and Baidu 'Asia' are heuristic generalisations, plausible but not objectively established.
• Availability of niche listed services (FOFA free API, StoriesIG, Picuki 'world map', SOLG, Yark, CachedView) not individually verified.

Confidence

Medium-High — High confidence on core, checkable facts: headline tools exist and function as described, and the intelligence-cycle definition matches doctrinal sources. Confidence is tempered to Medium-High because a cheat-sheet's value hinges on currency and legal nuance: several operational details (Twint viability, SearchCode's line count, exact dork behaviour, free-tier limits) are time-sensitive and were not live-tested, and legal/ethical caveats are under-stated. No item warranted a False label under the guardrails, so uncertainty is expressed via Unverified flags rather than deductions for disproven claims.

Search journal

Have I Been Pwned breach notification service Troy Hunt

• https://haveibeenpwned.com/
• https://haveibeenpwned.com/FAQs
• https://tools.osintnewsletter.com/osint-tools/have-i-been-pwned

Shodan search engine internet-connected devices ICS SCADA

• https://espyerx.medium.com/shodan-for-ics-ot-cps-hacking-offensive-osint-b9f4dc6a1e4b

intelligence cycle stages direction collection processing analysis dissemination

• https://usnwc.libguides.com/c.php?g=494120&p=3381427
• https://www.silobreaker.com/glossary/intelligence-cycle/

Maigret OSINT username search tool

• https://mcpmarket.com/server/maigret
• https://apify.com/ntriqpro/maigret-actor

Twint Twitter scraping tool archived deprecated Twitter API

• https://github.com/twintproject/twint/tree/master/twint

Instaloader Instagram download tool

• https://sourceforge.net/projects/instaloader.mirror/

Amass OWASP subdomain enumeration DNS tool

• https://github.com/owasp-amass/amass/blob/master/doc/user_guide.md

URLhaus abuse.ch malware distribution URLs

• https://urlhaus.abuse.ch/browse/

GreyNoise internet background noise scanner benign

• https://www.greynoise.io/
• https://cyberinsider.com/free-scanner-reveals-if-your-ip-address-is-used-for-malicious-activity/

PublicWWW search source code website

• https://bellingcat.gitbook.io/toolkit/more/all-tools/publicwww
• https://github.com/hrbrmstr/publicwww

Hunter.io free searches per month plan

• https://www.uplead.com/hunter-io-pricing/

Censys internet scanning certificates banners

• https://support.recordedfuture.com/hc/en-us/articles/360037602874-Censys-io

Article metrics

Emotion 6% · Reading grade 15.8 · 467 words