# Offensive Osint

Comprehensive OSINT methodology skill for offensive security, red team intelligence...

- Repository: https://github.com/SnailSploit/Claude-Red (10186 stars)
- Category: Security
- License: MIT
- Last updated: 2026-10-12
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add SnailSploit/Claude-Red --skill offensive-osint -g -a claude-code -y`
Codex: `npx skills add SnailSploit/Claude-Red --skill offensive-osint -g -a codex -y`
Cursor: `npx skills add SnailSploit/Claude-Red --skill offensive-osint -g -a cursor -y`
Gemini CLI: `npx skills add SnailSploit/Claude-Red --skill offensive-osint -g -a gemini-cli -y`

## Description

Comprehensive OSINT methodology skill for offensive security, red team intelligence gathering, and bug bounty reconnaissance. Covers domain recon, email harvesting, social media profiling, GitHub/code leaks, Shodan/Censys enumeration, breach data lookup, employee profiling, infrastructure mapping, cryptocurrency tracing, geospatial intelligence, and AI-assisted analysis workflows. Use when performing reconnaissance against a target domain or organization, investigating a person or entity, tracing cryptocurrency flows, geolocating images or events, or building an attack-surface map.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Offensive OSINT Methodology

## Workflow

1. Define target scope (domain, org, person, crypto address, or geo subject)
2. Select applicable categories below based on scope
3. Work top-down within each category; pivot on discovered artifacts
4. Archive every key artifact: URL + timestamp + screenshot (PNG) + hash (SHA-256)
5. Log findings in JSONL with a `run_id` and tool versions for reproducibility
6. Suggest next steps based on what each tool returns

---

## General OSINT

- [Bookmarks](https://tools.myosint.training/), Comprehensive OSINT bookmarks
- [OSINT Framework](https://osintframework.com/), Tool/resource directory
- [IntelTechniques Tools](https://inteltechniques.com/tools/), Suite of investigative tools
- [Bellingcat Toolkit](https://www.bellingcat.com/resources/2024/09/24/bellingcat-online-investigations-toolkit/), Investigative journalism tools
- [CyberSudo OSINT Toolkit](https://docs.google.com/spreadsheets/d/1EC0sKA_W9znzsxUt0wye9UYtyATXw5m8), OSINT websites list
- [Google Dorks](https://dorksearch.com/), Efficient Google searching
- [Distributed Denial of Secrets](https://ddosecrets.com/), Leaked data
- [Country-Specific Resources](https://digitaldigging.org/osint/), Country-targeted OSINT

### Search Engines

| Tool | Notes |
|------|-------|
| [Carrot2](https://search.carrot2.org/#/search/web) | Clusters results by topic |
| [etools](https://www.etools.ch/) | Metasearch engine |
| [Kagi](https://kagi.com/) | Privacy-first, non-personalized results |
| [Brave Search](https://search.brave.com/) | Independent index; Goggles for custom ranking |
| [PDF Search](https://www.pdfsearch.io/) | Search PDF files and view table of contents |
| [Google Fact Check Explorer](https://toolbox.google.com/factcheck/explorer) | Cross-site fact-check search |

---

## Username & Email Investigation

The rest: https://github.com/SnailSploit/Claude-Red/blob/HEAD/Skills/recon/offensive-osint/SKILL.md