H.I.N.T.S

Human Intelligence Narrowing Tool Set - An OSINT questionnaire and research structure meant to assist in organizing findings on high-level targets (Whales) scoped by clients.

Example Usage

This is a tool to narrow down information after it has been gathered.

Make sure notes are detailed before proceeding, otherwise it will likely end up getting re-created.

Create a folder in the program directory named "Images"

Store the cover image intended for the report in the ./Images folder.

python3 -n <Target_Name> -i <Cover_image.png>

Just follow along and answer as best you can. Blanks are fine. Just an HTML wrap that can/should be easily modified.

Example Output

Knowledge Base

The knowledge base folder contains myriad useful links from the work of Micheal Bassel. Thank you sir.

Useful Tools

Below is a list of useful tools that might assist in the information gathering similar to ^

• Amass: https://github.com/OWASP/Amass
• AquaTone: https://github.com/michenriksen/aquatone
• bfac: https://github.com/mazen160/bfac
• BirdWatcher: https://github.com/michenriksen/birdwatcher
• Bucket-stream: https://github.com/eth0izzle/bucket-stream
• Cewl: https://github.com/digininja/CeWL
• changeme: https://github.com/ztgrace/changeme
• CloudFlair: https://github.com/christophetd/CloudFlair
• CloudFlare_enum: https://github.com/mandatoryprogrammer/cloudflare_enum
• Cr3dOv3r: https://github.com/D4Vinci/Cr3dOv3r
• cupp: https://github.com/Mebus/cupp
• datasploit: https://github.com/DataSploit/datasploit
• Dehashed: https://www.dehashed.com/
• EagelEye: https://github.com/ThoughtfulDev/EagleEye
• Eyewitness: https://github.com/FortyNorthSecurity/EyeWitness
• faker: https://github.com/joke2k/faker
• h8mail: https://github.com/khast3x/h8mail
• Gitleaks: https://github.com/zricethezav/gitleaks
• gitrob: https://github.com/michenriksen/gitrob
• GoBuster: https://github.com/OJ/gobuster
• GoogleScraper: https://github.com/NikolaiT/GoogleScraper
• GoPhish: https://github.com/gophish/gophish
• InstaBrute: https://github.com/Ha3MrX/InstaBrute
• Just-Metadata: https://github.com/FortyNorthSecurity/Just-Metadata
• knock: https://github.com/guelfoweb/knock
• LinkedInt: https://github.com/vysecurity/LinkedInt
• MailSniper: https://github.com/dafthack/MailSniper
• MetaGooFil: https://github.com/opsdisk/metagoofil
• o365enum: https://github.com/gremwell/o365enum
• Photon: https://github.com/s0md3v/Photon
• PRET: https://github.com/RUB-NDS/PRET
• PwnedOrNot: https://github.com/thewhiteh4t/pwnedOrNot
• Raven: https://github.com/0x09AL/raven
• SCADAPASS: https://github.com/scadastrangelove/SCADAPASS
• SimplyEmail: https://github.com/SimplySecurity/SimplyEmail
• Sherlock: https://github.com/sherlock-project/sherlock
• Shodan: https://shodan.io
• Social_mapper: https://github.com/Greenwolf/social_mapper
• SpiderFoot: https://github.com/smicallef/spiderfoot
• SSLScan: https://github.com/rbsec/sslscan
• S3Scanner: https://github.com/sa7mon/S3Scanner
• subfinder: https://github.com/projectdiscovery/subfinder
• Trape: https://github.com/jofpin/trape
• TruffleHog: https://github.com/dxa4481/truffleHog
• Tweets_Analyzer: https://github.com/x0rz/tweets_analyzer
• twitter-scraper: https://github.com/bisguzar/twitter-scraper
• Twint: https://github.com/twintproject/twint
• userrecon: https://github.com/Linux4SA/userrecon
• WaybackPack: https://github.com/jsvine/waybackpack
• xray: https://github.com/evilsocket/xray

Coming Soon

• PDF Output
• Reading in from CSV to automate reporting.
• Better formatting