> For the complete documentation index, see [llms.txt](https://gowthams.gitbook.io/bughunter-handbook/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/osint.md).

# OSINT

Search Engine For Hackers - <https://twitter.com/trimstray/status/1086705742793658369?lang=en>

OSINT - <https://twitter.com/BadassBowden/status/1132663671962972164>

\---<https://osint.link/>

{% embed url="<https://redhuntlabs.com/talks_and_presentations.html>" %}

{% embed url="<https://medium.com/@micallst/osint-resources-for-2019-b15d55187c3f>" %}

Shodan -&#x20;

Search Queries - <https://twitter.com/_harleo/status/1201513513929396225>

{% embed url="<https://medium.com/bugbountywriteup/using-shodan-better-way-b40f330e45f6>" %}

* <https://medium.com/@alyssa.o.herrera/reconnaissance-to-a-quick-p1-fc1085d0fb22>
* <https://medium.com/@malavsharma/magic-of-shodan-15dd17854099>
* shodan - hostname:company.com
* Shodan dorks
* <https://github.com/JavierOlmedo/shodan-filters>
* <https://medium.com/@shifacyclewala/the-complete-subdomain-enumeration-guide-b097796e0f3>
* <https://posts.specterops.io/gathering-open-source-intelligence-bee58de48e05>
* <https://twitter.com/Dinosn/status/1341846433968713728?s=20>

{% embed url="<https://twitter.com/Random_Robbie/status/1218187926380666881>" %}

![https://twitter.com/Dheerajmadhukar/status/1433369419372134400](/files/-Mj82YxSv7bwzANXpBmN)

Censys -&#x20;

* <https://github.com/censys/nmap-censys>

Tools -&#x20;

**Favicon search**

* <https://devanshbatham.github.io/osint/2021/09/11/weaponizing-favicon-ico.html>

Google Analytics bugbounty

\[[#OSINT](https://twitter.com/hashtag/OSINT?src=hashtag_click)] Find domains by registrant name or email [https://viewdns.info/reversewhois/](https://t.co/HfWPFdVy7P?amp=1)

{% embed url="<https://twitter.com/adrien_jeanneau/status/1250740511402532865>" %}

* Reverse Whois - <https://github.com/MilindPurswani/whoxyrm>

[Try ssl:target.\* 200 Try http://Ssl.cert.subject.CN:"target.\*" 200](https://twitter.com/GodfatherOrwa/status/1363803767016198146?s=20)

Google search - <https://github.com/deepseagirl/degoogle>

{% embed url="<https://twitter.com/Mik317_/status/1367811775341674497?s=20>" %}

{% embed url="<https://twitter.com/edu4rdshl/status/1396188826083774469?s=20>" %}

* <https://github.com/ninoseki/mitaka>