OSINT stands for Open Source Intelligence. It can be defined as the methods and tools that use publicly available information to support intelligence analysis (investigation, reconnaissance).
Four other useful projects are: • Sherlock: Hunt down social media accounts by username across social networks • theHarvester: E-mails, subdomains and names Harvester • phoneinfoga: Information gathering & OSINT framework for phone numbers. It allows you to first gather standard information such as country, area, carrier and line type on any international phone number. • gitrob: Reconnaissance tool for GitHub organization
Dorks
Many search engine have crafted queries that can be used to find data that was inadvertently leaked to the public. Google dorks are specially crafted Google queries relying on operators to find vulnerable sites. Fore example intitle:"Index of" "DCIM/camera" to find private images. Simlarly, Github dorks such asfilename:.env can be found to identify committed secrets