Sketchnote of "Dark OSINT: I know where you live" by Kristof Van Kriekingen at Agile Testing Days 2025
Sketch figure with speech bubble: "OSINT focuses on publicly available and legally obtainable information"
It takes no time to find information on someone
Insight, circled like a cloud: "Sock puppets are fake online profiles - for protection and to view more content"
Google dorks reveal a lot of information: backups, configs, logins, pen tests, salaries, secrets, ...
Face search engine e.g. PimEyes
Insight, circled like an explosion: Your life is online
Even if you're careful, others share information about you
Two photos were enough to get a musician found, robbed and killed
Username searches can reveal other accounts
Human recon, but also corporate recon
Don't use your business email for fun accounts
Breached data on dark web forums for sale
You can access the dark web using Tor - start with the hidden wiki
Caution: it's not a happy place
Insight, circled like a cloud: Dark web and OSINT? Hunt pedophiles, find missing people
We gather intelligence, not evidence and report to authorities: location, photo of hands to get fingerprints
Insight, framed: beware of what you share online
Sketchnote author: @lisihocke@mastodon.social