OSINT Tools

Question 1

Whois (OSINT Tools)

Answer 1

*A protocol that queries databases that store registered users or assignees of an Internet resource, such as a domain name.

Question 2

Nslookup (OSINT Tools)

Answer 2

*A Windows command-line utility that queries DNS and displays domain names or IP address mappings, depending on the options used.

Question 3

Foca (OSINT Tools)

Answer 3

*(Fingerprinting and Organization with Collected Archives) A network infrastructure mapping tool that analyzes metadata from many file types to enumerate users, folders, software and OS information, and other information.

Question 4

The Harvester (OSINT Tools)

Answer 4

*A tool included with Kali Linux that gathers information such as email addresses, subdomains, host names, open ports, and banners from publicly available sources.

Question 5

Shodan (OSINT Tools)

Answer 5

*A search engine that returns information about the types of devices connected to the Internet by inspecting the metadata included in service banners.

Question 6

Maltego (OSINT Tools)

Answer 6

*A proprietary software tool that assists with gathering open source intelligence (OSINT) and with forensics by analyzing relationships between people, groups, websites, domains, networks, and applications. A community version named Maltego Teeth is included with Kali Linux.

Question 7

Recon-NG (OSINT Tools)

Answer 7

*A web reconnaissance tool that is written in Python and is included with Kali Linux. It uses over 80 “modules” to automate OSINT. Some of its features include: search for files, discover hosts/contacts/email addresses, snoop DNS caches, look for VPNs, look up password hashes, and perform geolocation.

Question 8

Censys (OSINT Tools)

Answer 8

*A search engine that returns information about the types of devices connected to the Internet.