OSINT - Open Source Intelligence
Information gathering and enumeration techniques
Enumerate Horizontal Domains
type keywords to get horizontal or similar domains
https://dnslytics.com/domain-search https://whoisdomainlookup.info/_zone/ae
Bulk domain Availability Scan https://my.eurodns.com/das/search/
Enumerate Subdomains
Following Website consists of Collection of Different tools to enumerate subdomains
https://www.nmmapper.com/sys/tools/subdomainfinder/
https://www.virustotal.com/gui/home/search https://hackertarget.com/find-dns-host-records/ https://dnsdumpster.com/ https://subdomainfinder.c99.nl/ https://rapiddns.io/subdomain
Email ID's Enumeration
The following Website has Harvestor with Pre-Configured API's
https://www.nmmapper.com/kalitools/theharvester/email-harvester-tool/online/
Use following Google dorks
Domain to Ip Converter
All in one online tool for OSINT
Data Breaches and Leaks
Telegram, Discord, Keybase, Twitter
Last updated
Was this helpful?