Social Media OSINT: Timezones From Timestamps, Networks From Replies
when someone posts tells you where they wake up, who they reply to tells you who they are. public data, read patiently, no fake friend requests.
attack surface
Read Full News
Domain and Infra OSINT: WHOIS, Passive DNS, crt.sh, Shodan, Censys
certificate transparency leaks the subdomains dns hides, passive dns reverses an ip into everything it ever hosted, and shodan tells you which port someone forgot to close.
Username and Email OSINT: Sherlock, Holehe, and Breach Pivots
handle reuse is the gift that keeps giving. enumerate accounts with sherlock, check email existence with holehe without alerting anyone, and correlate breaches to connect the dots.