InfoSec Write-ups

A collection of write-ups from the best hackers in the world on topics ranging from bug bounties and CTFs to vulnhub machines, hardware challenges and real life encounters. Subscribe to our weekly newsletter for the coolest infosec updates: https://weekly.infosecwriteups.com/

Follow publication

What you can learn by solving OSINT challenges?

I have completed all the OSINT challenges on HTB, and here’s what I have learned.

Dhanush
InfoSec Write-ups
Published in
4 min readJul 2, 2021

--

Understanding OSINT

Open Source Intelligence (OSINT) is a collection of information that can be accessed from publicly available resources for our gain. If you use information that is publicly available such as Google search, news media, photos, maps, etc to make a decision, then you are following OSINT methodology.

OSINT is used by all, even by common people without their knowledge. Intelligence agencies use social media and other information to track a person or system. Security personnel use information available on the web to find vulnerabilities in a system. If you have ever Googled a person before you go on a date, then you have used OSINT.

Shodan

What can you learn from solving OSINT challenges?

Reconnaissance is everything

Reconnaissance is an important part of OSINT. You start approaching your target by doing manual reconnaissance work on it. You gather as much information about the target from the online and offline resources. Your search about the target on Google, Social media sites, News coverage, and Shodan among others.

As you do this work, you start to appreciate how much information you can find out about a target easily. You would also know the importance of reconnaissance work. If you do the reconnaissance work properly, half your problem will be solved automatically.

A Powerful OSINT tool

Everything is available online

You would be surprised to know how much information is available online with free access. You just have to know your way to get that information to your use. All the OSINT challenges that I completed on HTB required me to search for different sites effectively. It was a bit difficult at…

--

--

Published in InfoSec Write-ups

A collection of write-ups from the best hackers in the world on topics ranging from bug bounties and CTFs to vulnhub machines, hardware challenges and real life encounters. Subscribe to our weekly newsletter for the coolest infosec updates: https://weekly.infosecwriteups.com/

Written by Dhanush

Technology. Gaming. Cybersecurity.

No responses yet

Write a response