This channel does not promote any illegal activities; all content provided by this channel is for educational purposes only. Hello hackers! Welcome back to Cyber Mind Space. So, how are you all doing, friends? Have you ever wondered how much information you can find about someone if you have their phone number or email ID? Let's assume you don't have their phone number or email ID, but you know the person's name; can you extract all their details just by knowing their name? Have you ever thought about that? Or have you ever wondered if I have a website, can I look into it and find out who the owner is? Or if I have someone's username, like an Instagram username, how much information can we find using that? Let's put those aside; if I have someone's photo, can I extract all the details about that person from that photo? Have you ever thought about it? Or have you ever thought if there is any way I can see someone's live location to know where they are? If such questions have ever come to your mind, I will answer all of them today in this full OSINT course, and in today's video, I am going to provide you with a complete OSINT course. In which we will discuss how to use open-source intelligence to find sensitive information or collect data using publicly available information on the internet. As you know, whenever we do hacking in the world, the very first step of hacking is information gathering, which we call reconnaissance , and it becomes the most important step. So, mastering this is the most important thing because if you haven't done information gathering correctly or if you don't know reconnaissance, then you won't be able to perform the next steps easily; that's why in today's course, I will teach you how to perform OSINT up to a professional level. So, without wasting any time, let's start the complete OSINT course, and I hope you will like this video. If you like my video, please subscribe to this channel, like it, and share it. Let's start. So, first of all, you will see on the screen here, what makes this course unique? Why is our course unique ? As you know, I have already started a Practical Ethical Hacking course on my YouTube channel. Where I have explained many modules. And the special thing about our course is that we have practical labs after each module. I keep giving you homework plus assignments. Which is why we have a group on Telegram where we keep having discussions. We practice in real-time on TryHackMe, PortSwigger, and Hack The Box. There is a live weekly Q&A session . As many students do not know. Every Sunday at 7:00 PM, I go live and show you some kind of hacking or clear your doubts. I also help a lot with notes, cheat sheets, and resumes. You can go and contact me on Telegram. And doubt clearing via comments and Telegram and no fluff, only hacking, and many more. Let's go to the next topic. So, what are we going to learn in this complete course? We are going to learn all these topics. So, we will look at all these topics step by step. First of all, we will see what is OSINT and its real-life uses, what OSINT basically is . You must have watched many videos on YouTube. But we will talk about OSINT in complete depth. What OSINT is. Then we will look at image OSINT. Then geo-location OSINT. We will learn username and email OSINT, how we can find information about someone using their username or email. Along with this, we will also look at Facebook and social media OSINT and Instagram OSINT, which is your favorite part. We will also look at website and domain OSINT, and then we will look at dark web OSINT and pre-OSINT tools and automation. And finally, we will look at counter-OSINT and privacy protection. We will also talk about how you can protect your data before it gets into someone else's hands, so your data doesn't leak, and what you can do about it. So, let's start with the first module, titled ' What is OSINT and Real-Life Uses'. First, try to understand that OSINT basically stands for Open Source Intelligence, which means taking publicly available data, filtering it, and extracting sensitive information that is useful to you. That is called Open Source Intelligence, which we call OSINT for short. So, what is OSINT? Basically, extracting smart information from public sources. No hacking tools, no brute force; you extract information using only your brain and the internet. Anyone can do it. Whether you're a journalist or a hacker, anyone can extract it. Right? For example, if someone posts a photo of a Pepsi, in most cases, it’s possible that the person is from Delhi or Gurgaon, because they have a factory in Gurgaon. I will give you many examples now; this is just a basic one. So, who uses OSINT , and what are some real-life use cases ? So, who exactly uses OSINT? Like ethical hackers. Just like you, you all use OSINT. Along with them, the police use it for kidnapping cases, missing persons, or cybercrime, where OSINT plays a huge role. Because there are many such cases that the police are only able to solve with the help of OSINT. Along with that, you will see journalists using it to expose political scandals and fake news. You must have watched Harshad Mehta. In that, the character Suchita Dalal also does what? She does OSINT. She also collects information from many different sources. So you have seen in many web series and movies that doing OSINT and gathering information becomes the most important thing when we talk about finding information online; even CTF players use this. I will show you a Google activity to see how we find things out. Right? So I will show you one thing. Like if I come here and type "site: gov.in" and "filetype: pdf". I just did a simple search on Google. Have you ever done a search like this until today? If you haven't, look at it again. This is called Google Dorking. And this Google Dorking is what we call , in other words, Google Hacking. It means searching for things on Google that Google wouldn't give you in a normal search. As I have written here, site: gov.in, meaning all the websites that will appear in front of me will be gov.in, i.e., government websites, and I have written filetype: pdf on top of it. Whatever results I get, I want a PDF in all of them. And it is possible that some confidential information of yours might be stored in some PDFs on many websites. Sometimes sensitive things also come out. And that is called Google Dorking. Right? So this is how we do it. For now, let's move forward and try to understand things. So let's talk about legal versus illegal OSINT. First, what is legal versus illegal? One is legal OSINT. Legal OSINT means that you try to find information by using Google Dorking, public tools, or some scripts, Whois lookup, and social media. But what is called illegal OSINT? Illegal OSINT is when you have gained unauthorized access to someone. Then you found information, or hacking, password-protected data, you are going into many databases like the dark web to extract someone's information, searching, doxing, blackmailing someone , or installing a keylogger in someone's system, or installing a keylogger in someone's phone to try to find information; these are all illegal methods, and I never recommend that you do any of these things. In this entire course today, we will look at completely legal ways to find information, and I hope you will definitely get a chance to learn something. So watch this video until the very end. So Instagram is public, you can use it. If you go to extract passwords, then even the CBI will show up. Anyway, let's move on. Now let's look at the Bellingcat case study: catching spies. So basically, what is Bellingcat? If I tell you one thing, if you come to Google and simply write Bellingcat.com or just Bellingcat, you will see a Wikipedia website here. And now if you open it, I will show you a few things by reading them here. It is written here that Bellingcat is a Netherlands-based investigative journalism group that specializes in fact-checking and open-source intelligence. Basically, what is this? Bellingcat is, in a way, an investigative journalism group. There is a group where people use OSINT to work on solving many mysteries, various propaganda, various terrorists, and many secrets. Right? So, this was founded by Eliot Higgins. You can also see his photo right here. Right? This is the founder who started Bellingcat, and over many years, Bellingcat has achieved great expertise in OSINT. These are highly skilled people who, with the help of OSINT, have solved many things in various cities and countries around the world. Like you can see here, the Malaysia Airlines Flight 17 case is a very major one. I will tell you about all these cases now , why these people are so famous, and why it is very important for you to study them; because after seeing them, you will understand how excellent and powerful OSINT is. If you know how to do OSINT, then you can find anything on the internet. You can extract every single detail about any person. You can even solve a murder case. Any crime, you can solve that crime. You can even find a missing person. So, this OSINT puts power in your hands. Right? Let's go. So, I told you who its founder is and what they do. So, let's move forward to our PPT. Let's go. So, what actually happened in real OSINT? These people use plane tickets, car plates, phone data, match faces, locations, and voices, and what did they find out? There were Russian spies using fake identities that they were utilizing. All of that was revealed by pure OSINT. So, I have placed screenshots of some of Bellingcat's case studies in front of you here. Like the Skripal poisoning in 2018. What did they focus their investigation on? And which OSINT tools they used and what techniques they employed, I have provided information about that here. What are the learning outcomes? So, you can read them step-by-step. So, pause this video here , take a screenshot, and try to read all of these step-by-step for yourself for two minutes to see what is written here, because if I start teaching this, the video will become very long. Right? So, you can read them one by one here. Like when the MH17 plane crash happened in 2014. So, the Malaysia Airlines flight shot down over Ukraine. And through this, what did people do? They did. They used satellite images. By using social media videos and weapon tracking, they made a discovery. And what did they find? That the weapon's origin traced back to a Russian BUK missile launcher using geolocation. So, they have solved many cases in this exact same way. Like extracting data from videos, geolocation, and image forensics, they have solved quite a few case studies by using many OSINT techniques. Right? Let's move on. So look, I have shown even more. What happened with the Russian spy car registrations in 2018? In this way, when a vehicle database was leaked, by using address clustering, pattern matching, and many other techniques, they uncovered how one can expose entire spy networks; they found out exactly where all those people were hiding. So, there are many such case studies that, after reading and studying them deeply, will give you a lot of interest in OSINT. Right? So look at this, the Khashoggi murder forensic in 2018, where a Saudi journalist was killed in an embassy; this was also a case, and they solved it using various OSINT methods. So, it is extremely important to read Bellingcat's case studies. I have listed all the famous case studies here . You can all read them. And let's go to module number two. Module number two is our Image OSINT. And in this, we will see how to find specific information hidden inside a photo. As you might know, whenever we upload a photo to the internet or social media, we never think about how much of our data is hidden behind that photo before uploading. And the data that remains hidden inside photos, videos, and PDFs is what we call metadata. So, how can we find this metadata? So, the path from a photo to a person—is it magic or espionage? Let's see. Okay? So, what is Image OSINT (Image plus Intelligence )? Through this, we can find out the truth behind a photo. Hidden information in an image, like metadata, geo-tags, camera details—we can extract a lot of things. By using reverse image search, we can find the source of an image and where it was originally uploaded. By zooming in, enhancing, and checking the photo's background, we can uncover a lot of information. You would be shocked to see that for any photo you upload, there are so many ways to track you and find out about you that you can't even imagine. So, every image has a story, right? Let's take a look at how we can find out. I moved on to the next practical, extracting hidden information with ExifTool. As I moved forward, let's look at the first practical for ExifTool, right? Before using ExifTool, I want to show you one more practical. I want to show you another practical before using ExifTool , to give you a challenge and see if you really know about this. Now, take a close look at this photo. I am opening a photo in front of you. Take a careful look at this photo. You can see me in this photo. Because throughout this entire course, I have used my own photos as I don't want to violate anyone's privacy or reveal someone else's photo here. Neither anyone's phone number nor their email ID. Everything I use belongs to me. And I am responsible for it myself. Right? So , looking at this photo, can you tell me where it was taken? You might say, " Sir, where is it from?" It could be from anywhere. London, Europe, India, Delhi, Gurgaon, Indore, Tamil Nadu, Karnataka, Mumbai, it could be anywhere . How would you know? So, what did I tell you earlier when I opened my PPT, what did I say to you? In it, I asked you to read the third point. By zooming in, enhancing, and checking the background, you can figure out where a photo was taken. So, if you couldn't tell where this photo was taken after looking at it, let me show you how an OSINT investigator finds it. So if you zoom into this image a little bit. First of all, try to look closely at the side where a very large building is passing by. It is a very huge building. I feel like there are some people with me, I have a bag in my hand, and there is a pole in front of me that I am using for support while posing. How do I look? So if I zoom into this a little . Can you all look closely and tell me if, as I zoom in, you see something written behind me? It clearly says INOX in the background. And as many students would know, what exactly is INOX? It's a cinema hall where people go to watch movies. So, just a short distance from where I took this photo, there is an INOX cinema hall. And after zooming in a bit more, I saw something below— what did I see? It says McDonald's. It's a Mac D. Okay. So, is there any cinema hall in all of India that has a Mac D right underneath it? I just need to find that, and I will understand where that location is. So, I am trying to teach you that there is hidden information in some photos that normal people don't notice. To see those hidden images, to see that hidden data, you need a different perspective. A different point of view. So let's see exactly where this photo is from. Right ? So I'll go to Google and type something in here. Let's go. So I type INOX here. I wrote INOX in Delhi because many students know that... what's its name? I live in Delhi. So if I chose INOX here, the first result...I got three results in front of me. The first result is INOX Nehru Place and INOX Janak Palace West Mall. So right now what will I do? I will just simply click on this Nehru Place one. And after clicking, I can see that there are quite a few photos here as well. INOX, oh my god, very good. But we need an image of the outside, not the inside . So as soon as I clicked on it, you see, the exact same image is opening up there as the one where I posed for the photo. There's an INOX sign and look, a big building is passing by, and that is exactly the building. So, if I open the image in front of you. Let's go. If I open the image in front of you, what will you see? Alright, friends? Let me show you. So, if I open this image, you can see what's visible near this image. There's an INOX, and look at what's written below: Mc'D. That means exactly that I posed in front of this INOX cinema hall in Nehru Place. Now, to find out exactly where I posed, I can use Google Earth. Use what? Google Earth. For those who don't know what Google Earth basically is, I can try to explain that whenever you need to find a location or see a street view, Google Earth is very useful. So, it's confirmed for me that INOX is a cinema hall where I stood and posed in front of. Where did I pose? I can check that exactly as well. So, I typed Nehru Place here and hit enter. As soon as I pressed it, you can see such a nice animation appeared, and I'll just click here once I arrive. A person icon is shown, and after hovering over it, I will simply click where the blue lines are, because there is street view there . As soon as I clicked here, you can see quite a few things are coming up. Right? So now, try to look here. This is the entire tower. So I'll try to move forward a bit. I'll try to move a bit further. And let's go. Let me walk and see if it's there or not. So after coming here, I can notice one thing— see, there's an INOX above and a Mc'D below. And I took the photo right in front of this. So where could I have taken the photo in front of it? Okay. So, it means I took the photo somewhere here in front of the Nehru Place metro station. So, in this way, you can find out a lot of information. And this is the right way to find out the information about any target. So, what do you all use? Do you use maps in some way like this? You use Street View to find information about a target. And there are many other ways. So I will also show you many tools for how to find out. So, did you understand how I found it? Now let's move on to how we find things using ExifTool. What is metadata? It's like a lot of information hidden behind an image. So how do we find metadata? Let's talk about that. Right? So first, what do I do? I'll come into my Kali Linux. I'll open my Kali Linux. You all can see it. So I've opened my Kali Linux here, and I'll just type "kali," and try to look here. I have my terminal open. So first , you all need to use and download the ExifTool somehow. And let me show you that I have some photos saved in my system. I'll show them to you. So I opened the folder and came into the Downloads folder. Because I have downloaded some photos. I have quite a few photos, and let's suppose I have a photo like this one. Like, I have this photo here. This is it. I have this photo here. And I need to find out about these photos. So what can I do? Now, try to watch carefully. I will type "cd Downloads" here. So I will enter that folder. Change directory, and I have arrived inside Downloads. And I will type "exiftool" here. Exiftool. And after coming here, I will select the image I need. Right? I typed "exiftool" and then "img," and I have two images here. I'll choose this one from them. And as soon as I clicked on it, you can see it gave complete information about this image. Like, this photo was taken with an iPhone 14 camera, along with the modified date and when it was taken. All of the information has appeared in front of me . And the best part is that all the information inside it is useful to us. And it will even tell you the exact date this photo was taken. If I swipe up on the 30th, look at how much information there is, like what my iPhone software version was, what the resolution unit is at that time, and you can see all sorts of things here, including when this photo was taken, the file modification date and time; you can see the date, time, and when this photo was captured. So there are many ways to check, right? You have a lot of information that you can use to find it. Now, many people will think, " How can I find the location?" Now, many people might wonder, "Sir, how do we find the location?" Using some kind of image. Suppose someone took a photo, and while clicking the image, their GPS or location was turned on. Their location was turned on. If it was on while taking the photo, then what will happen is that the location coordinates will also appear in its metadata. What will appear? The location coordinates will also be visible. Suppose you took a selfie, and while taking the selfie, your GPS or your location was turned on . Then, as soon as I extract the metadata of that photo, your location coordinates will also be visible to me. So, I will show you how it's done. First of all, I'll come into Kali Linux , and after coming here, I will select another photo. I typed 'exiftool' and then I typed 'img' and selected that photo. And as soon as I pressed Enter, you can see that a lot of information has appeared in front of me. Like, it's the same phone. But the thing to note here is that it has also shown me the GPS altitude and date and time. And it is also showing me the GPS latitude and longitude here. Which is very accurate. You just need to convert them into decimals, and you can very easily find anyone's location. So, this is the completely real method. How you can find out so many things through a photo . There are also many tools available online that extract metadata for you. So, this is how you find someone's information using some kind of image. Right? I hope you have understood up to this point. So, let's move forward and try to understand more. Okay, so we have seen how we can find someone's location by extracting metadata. At the same time, we can also find out which Android version was used on the device they used to take the photo. What is the iPhone version? What is its registration? What is the phone's model number? We can find out all sorts of information. Right? So I hope you have understood. So what else can I tell you apart from this? Like, you can also see what the GPS coordinates are. Camera model, time, and owner details. Right? So let me show you practical number two : reverse image search. Now it is possible that for your image, your photo, I could click on reverse image search. Like we download some photos and search them. But here, what we are going to do is upload our photo to Google and ask Google if any image looking like this is available on the internet or not. Let's start. So how will we do it? There are many tools for this here. Google Images is number one, or Yandex, or TinEye. There are many different websites that you can go and try. The ones I have written down. I cannot show all the tools in this single course. There are at least more than 10,000 tools for OSINT. More than 10,000 tools, and I will send you the list of all the tools and everything in a PDF. You just have to go and try them . And today I am only telling you about those tools that are completely legal. Because if I start showing illegal tools, it will become a huge problem. Right? So look here at what is written on Google Images. So what are we going to do? We are going to upload some kind of image. You have to click on search by image here. And I will upload a photo of mine here. Let's go. So I have uploaded an image of mine on the desktop. So I will upload one of my images here. Here is an image of mine, and I just uploaded it. Right? Now I will select it. Let's see how much information it brings me. So I selected it. And sometimes it works in a very effective way. Google works incredibly well sometimes. And sometimes, it just won't work well at all. No matches for your search. So it can happen sometimes that it doesn't provide results for your search. Right? But sometimes it works extremely well. Right? If I write this and put it in. Now I will try to see if there are any other images regarding this or not. Look at how many people are here. It is providing some images related to it. But if I upload my real images, like ones where my face is clearly visible, I can upload those too. Right, let's go. So, I'll upload some of my photos, like these types of images. Okay? So, I can see where else these types of images are uploaded. So, if Google found it, look, it's showing it here. The same image I uploaded is exactly the same one on my LinkedIn account. I will simply click here and I can see that I uploaded it on LinkedIn, and it found it for me. So, that was the first method. Now many people will come and say, "Oh sir, why are you telling us this?""This is such a simple thing we have done." So brother, listen up. This course is for those who are absolute beginners and also for those who are very experienced. So that they can also have a revision. Just keep watching this course. See how I am going to level you up gradually. Okay? So, this is also a way by which you can find out. I posted this about two months ago. Okay? About how you all can do it; I told you about many websites. And that is my LinkedIn account, you all can go and follow it. Because yes, I keep uploading things there. So, this is a way by which you can easily find out the information. Apart from this, there are some other websites like Tineye. If you type tineye.com here, then you can also reverse image search. Read what is written here. Search over 76.6 billion images and find where images appear online. Right? So, there are 76.6 billion images uploaded here. So, through this, you guys can find out where your image is uploaded. Using TI is private, and we do not save your searched images. So, your photos will remain completely private here. They will remain anonymous, and nobody here even saves your photos. So, let's go. Let's go to the next topic, guys. Let's go. And here, from a profile picture, we extracted the real name, LinkedIn profile, and details from s.com. So, you guys can do it too. Okay? So, this is the way. And besides this, there is also a website through which you can find out information. Right? Smart image investigation tricks, pro tips for pro-OSINT. Let's see. You will also look at background signs like country or city. You will try to match the face . Search the name, search for the same face everywhere. Clothing, weather, sunlight—all these things matter. Suppose it is a very big case, then weather, lighting conditions, meaning at what time the sun was out? Suppose I am going to check when this person's photo was taken, at what time? And there is no information in the metadata . That person even removed the metadata . Then how will you find out? Then you apply many angles there, like what is the weather here? I am wearing a T-shirt, meaning it is summer. At what time in summer was this photo taken and at what time was this person available here? So, for that, we check there what the direction of the sunlight is, which way the sun would have been, and which way the shadow would be falling. We look at many such things. So, there are an infinite number of tools available on the internet by which you can easily find out the information. So, by doing a screenshot of maps or a reverse image search, you can find out. Right? What is the challenge for you? Try tracing an image with a tourist in front of a monument. You can do it. So, besides this, you have many tools. Like photo. com. It detects edited and fake images. So, this website named Photo Forensics, friends, if you come to this, it gives you a lot of information about your photo. I will show you. So, here you can put the URL of any image or you can upload someone's image. So, I will upload an image. Let's let me upload some kind of image to this. So I will upload it here. I uploaded some images here. And after uploading, I will take a look here. I clicked on upload file. This is a website called Photo Forensics, let's see what information it can provide next. So it has performed ELA here, and as you can see, it's showing some images here. It says Digest here. It says Games here. It says Hidden Pixels here. There is also information within some hidden pixels. Many people also provide information inside pieces. Those who study digital forensics will know what I am talking about. And if I look for information about JPEG plus metadata, I can get all that information here. Strings, source, and there are so many things that I can easily find out information about this photo. So for those who are doing digital forensics, this Photo Forensics is an excellent tool. Right? So I want to make sure I don't make the video too long. That's why I will quickly show you all the tools and how to use them. So I have already shown you the Exif tool. Mapery plus GeoGuessr, Social Mapper, FaceCheck ID. And FaceCheck ID is also a great website through which you can find out where your photo has been used. So now let me show you how to do it. So here you typed FaceCheck ID, and after coming to this website, you will simply click on browse here and upload any of your photos. Let's suppose I uploaded one of my photos here, and after uploading, I will click on search internet by face, and it has uploaded. After clicking here, I will solve this puzzle. I will try to solve this puzzle. I have solved it. And then it will start. It will try to search for it on the internet. Okay? So let's go and see, this is a bit of a paid tool because many tools are paid as they provide a lot of services and such information that is very useful. Right, okay, so let's go. So now let's see, it's scanning all of my photos and searching across the entire internet— Instagram, YouTube, Twitter, LinkedIn, and countless other websites—to check where faces that look like mine are available. It's a really excellent website. I mean, it can even tell you where other people who look like you are. It will let you know. So, let's see how many people look like me. Let's find out, it's 80%complete on Facebook IDs and finding people online by photo. This is a very good website through which you can find things out. And you know, shall I tell you something? Whenever I want to check for any fake IDs, to see if someone is using my name to create a fake account, I use this website to find out; I check if anyone else is using my photos. So you can see here that it has found my thumbnail on youtube.com. Apart from that, there is one of my photos uploaded on Instagram. So it has brought up two photos. It also brought up two or three YouTube video thumbnails. Look at how accurate it is. It went on YouTube and searched for that photo. Just think about it. How many videos are available on YouTube? There are millions and billions of videos. And out of those millions and billions of videos, it brought up the ones that have that specific thumbnail. It's something to think about. Right? So, this is also just a tool. You can also build tools like this. So, look, there are quite a few people who look like me. You can see them right here. Okay? Okay? Because I have a beard, it searched for things like that too and suggested that these photos might also be matches. So this is how you can find out, because I have never posted this specific photo on my Instagram. You all have seen it, so where is this photo uploaded? It could be that a friend of mine uploaded it there. So these are the things, friends, through which you can match them. Right? And besides this, I will show you many other tools as well on how you can find things out. And I've already told you about PhotoFace. So, real use case one: a missing person case solved by analyzing a selfie's reflected street sign, matching it on Street View, and getting their location . As simple as that, wrap up for the next tease. Now, take a photo. Right? I have already told you that you have done all of this. So now, let's move on to the next module. And in the next module, we look at module number three: Geolocation OSINT. There are many tools available on the internet that you can use to find someone's location. So, what are we going to use? Hey, the selfie is from the USA, but why is a rickshaw visible in the background? Right? Wherever you go, your picture has already revealed your address. So, what is Geolocation OSINT? Let's talk about that first. It's about finding a place using clues or GPS. Tracking a location using visuals only; no GPS, no problem. Use photos, landmarks, signboards, sunlight, etc., and you can even use the weather to figure it out. Like, for this, there's a great tool: Sherlock Holmes mode on! Get it? So, I will tell you which tools are used. You can easily read the examples as well. So, let me quickly take you to the tools and how we will do it. You can also find out where their location is by spotting clues, because many times it happens that on Instagram, or if you send me a photo on WhatsApp, or if you upload a photo on Instagram, these big giant software companies like Instagram , WhatsApp, and Facebook do what? They remove the metadata. There are many ways to extract it, but they remove it to a great extent. You won't see it through normal methods. So what will you do at such a time? When their location is hidden, what will you do at such a time? Like, you look at what the road signs are in the back of the photo . What are the hoardings? What is the language? And what is the architecture of the buildings? New York's building architecture is different. Mumbai's is different, including shadow and sun direction. Which way is the sunlight coming from? Where is the shadow? Where is the shadow being cast? What is the location at that time? You can find out everything, including the timing. Weather and surroundings, landmarks, and unique objects, just not train stations. Right? Let's check the timing . Zoom in 10x and check random corners of the image. That's where secrets hide . So, I even showed you by doing it with my own photo. So, right? You can also use a sun calculator to find out the location and how things are positioned. Look, if you type 'sun calculation' here, let me show you something. You typed it here, so you can find out where the sun was at that time and what the time was when that photo was taken. See here, at this time , what is the location and where exactly would the sunlight be hitting? You can find exactly everything here. Look here, sunrise calculations, everything is given on this website. Many people use this to find some kind of information during OSINT, but I will show you some great rules on how we do it. Like, we do it using Google Street View. I told you, we often use Google Street View as well. So, many advanced geolocation OSINT tools are available here. But I will tell you about more than just that. First of all, see that to find someone's location, you have to follow a few steps. The first step would be to try to get that person to perform some action. For example, let's say I have a guy named Rahul, and I need to find his location, and Rahul is somewhere in Mumbai. But I only have his WhatsApp number, or maybe an email, or suppose I have his username or Instagram ID, so through that, I will send him a link using some social engineering attack. I will try to share some kind of links to him. So that he somehow clicks on it. And as soon as he clicks the link, I can get his IP address. And if he accidentally allows a permission, then I can see his phone's complete details, like where he lives, his complete location coordinates, and everything. Right, how to do it? Let me tell you. Pro tools that hackers use, like Mapillary, GeoSpy, Exif tool, Twitter Advanced Search, Geo-GS; these are all the tools . You guys can go to Google and type it , and you can simply use it. But let me show you something important, how? Right? So, I will tell you about some important tools through which you can do it practically. Right? So, I simply wrote here. Okay? And after coming here , what do I do? I clear the terminal completely to show you which tools are there. The very first tool I am going to show you. The name of that tool is Seeker. What is the name? Seeker. Besides Seeker, you can also use others . Look, I will tell you about the tools . I go here to Seeker. Seeker is also a very good tool. You type 'ls' here and then you write Python. Right? I write Python and seeker.py, I pressed enter, and see, it has started. So, there are many templates available through which you can find out information. Like, suppose I want to tell someone that, hey, there is a Telegram group. Join this. Now, after joining this Telegram group, you will get a lot of study material. And I want to trick someone in this way. So, I clicked here for, and I give it a group title. Like, I write "Hackers Elite Group". I gave it the title "Hackers Elite Group". I pressed enter. So now it is saying, hey , give me its DP. Give what? DP. So, I will put some DP here. Like, I want to give this DP. So, let me give its path. I will come here and simply copy its path. And I paste it here. And I enter the name of that image. So, what is the name of this image? I come here to the properties. And then, copying this image, I paste its name here too. And pressed enter. Now it says, enter the group description. I wrote "Hackers Place" and pressed enter. I will enter the number of members here as 90,000 online or something. For example, this many people are online. I pressed enter and it started a server on port number 8080, and as soon as I come here and type something. Try to watch carefully. As soon as I come here and enter my IP address 192.168.26.130, how would you check your IP address? It's very simple . Just you have to press. Okay? Right? You have to type ifconfig. Press Enter after typing ifconfig and your IP address will be displayed. This is my IP address and I can simply search by putting it here. And by adding a colon and port number 88, you will see the hackers 'alert group. These many members, this many online, and this is how I can send it to someone. And as soon as they click on it, mostly on their phone, you will get their location here. So, this is also a very good method. Whenever they click, you will get their information to a large extent. Like here, as soon as I clicked , let me show you. I click somewhere. Let's suppose I clicked here on View on Telegram or Try It Now. As soon as I clicked on it, something official opened up in front of me. So as soon as I come here, you will see that it has told me which operating system I have. How many CPU cores? How much RAM, who is the GPU vendor, and what graphic card I have installed. It will give you all this information. So there are some kinds of tools that help you a lot. I am trying to bring mostly ethical things in this video because this is YouTube, and if I show an illegal tool here, my video could be deleted. So this video is just for educational purposes. I never tell you to do anything wrong. Listen to this too. So this is also a way to find out. Let's go for the next tool. Apart from this, there is another tool, like you can use R-For-Even. Right? You can also use R-For-Even. I did ls for R-For-U 1. So there are many things here. I will start it through Python. I started Python R-For-U 1. So now it is showing that it cannot start. Okay, so whenever you get an error like this, what do we do first? We create a virtual environment. So I type here pip install -r requirements.txt and let's see if it will install. No. It said that an external environment needs to be created. So I will create an external environment. So here I will type, " python 3-m venv" venv. In venv, I have given it the name "virtual environment. " What will you type to activate this? "source venv"(whatever your virtual environment name is) and "/bin/activate ". So, this virtual environment will be ready. Then you have to type, "pip install-r requirements" and then after that, you have to type "python" and then "main.py" and start it. As soon as you start it, it will ask you, "Hey, what do you want to track?" Track GPS location, capture target image, fetch IP address, or all of it. Whatever task you want to perform, you can simply go there and type it. I said, "Hey, select four," I want to do everything. So it will start checking "if server.net is working" or not. It said you can use Cloudflare because the first server is down. So I said okay, and I pressed enter for okay. So it has started here, but let me run it again. Sorry guys, so I will run it again. I entered the port number, said I want to do everything, but server.net won't start yet. So now I press number two because I need to use Cloudflare. So it is starting Cloudflare. And as soon as it starts Cloudflare, sometimes it might ask you for things like a webhook URL, for which you will need to use Discord. Right? So it has given me a link here, and if I copy this link and send it to someone, as soon as they open it, you will see they are shown something like a meeting page. Like you see, meet skip , and you can see their photo too; it's asking for my camera access here. After that, I clicked allow and clicked on "I confirm." So this is how it happens sometimes; when you visit a website, it asks for your permission. It will ask for permission before doing anything. So, it looks exactly like some kind of online random application to you. Like Omegle, which was a website that has now been banned. So, a website like Omegle has come before you, and here you can find out things. You can capture anyone's photo and such. Now, where will you see these photos and things? If you have captured them, you will come to Discord and create a channel of your own. How will you create it? I will show you. Right? So if you come here, you have to type "R for Van," and after typing "R for Van," you need to come here to "Get HP" to see everything step-by-step on how to use it. These are all the videos, and this is the tool I was talking about to you. Right? So, complete information about this tool can be found here. How to use it and many other things you will get to see. Right? So, IP versus GPS location, and there are so many things you will get to see here. How to use it. Right? So, "Webhook: Enter your Discord Webhook URL as you set up a channel." So, you can create your own webhook URL. How to create it? I have already created one of my own here. I will show you. Here it is, targeting the location. So, people get quite a lot of locations here. Right? Like information about any system. And look, I have created "Location Finder" here. So, what you just have to do is: Click here on "Create Channel" and create a channel. So, I will create one here, " Location Find Video" for your video. I clicked on "Create Channel," and this channel has been created. I will click on the settings for this. Click on " Edit Channel," then "Integrations." And then, "Create Webhook URL" or "Create Webhook," click on that, and copy this webhook URL. And then, simply come here and paste it. So, this is the work you have to do. Whenever you use the tool " R for Van" for the first time, it will ask you for the webhook URL. So, you have to give that same URL there. And whenever any person, anywhere in the world, clicks on that link and allows permission, their details will show up for me here. Do you understand what I am trying to say? I am not showing you this live because there is a very high chance that YouTube crawls our videos. When I uploaded my Instagram video earlier, it was deleted after at least 3 to 4 hours. YouTube gave me a strike. That is why there is always this tension whenever I show how to do certain things. Like showing how to capture a photo. But don't worry, I will show it in upcoming videos. However, I still try my best to demonstrate things as ethically as possible. So, this is how we will proceed. So, this is another tool we have in front of us. Apart from this, we have other tools as well. Like, if I want to exit this and go into another one, I will type "deactivate" here. I pressed enter and have come out of it. And here I will type "cd" followed by " how". So, there is also a tool that you can use to find out the information. I ran "ls". If I start this "bash hot sa" here, it asks if I need a Cloudflare tunnel. I said yes, and it has started the process. Okay, so look here, starting PHP server, starting Cloudflare tunnel; this is also a tool that is developed by Ankit Parashar sir , who is a great owner of Tech Tale. So , you can go and subscribe to his channel as well. He has a very good channel. But for now, look here, the direct link is right here. I right-clicked and copied it. After copying the link address, if I send this link to anyone, as soon as I press enter, you can see that a sort of ChatGPT interface has opened up in front of me. And here it is asking me to allow location access. So, as soon as I clicked "Allow" on it, you can see that no interface appeared. But if I chat with it, it will reply saying "I am powered by ChatGPT 4" and blah blah, it will give you many such responses. But the surprising part is that as soon as I come back to my terminal, I can see its latitude and longitude here. This means my address has been revealed here, do you understand what I am saying? So here, it will bring your coordinates and give you your exact location. So, this is the way by which you can easily find out the location of anyone. I’ve told you about the tool, I’ve told you about Refervan, and I’ve shown you how to use Seeker. But what do you have to do? Use it in such a way that you don't cause any harm to anyone. Just for educational purposes. Right? So, I have taught you so many things. Besides this, there are many other tools that we use to find out information about the target. Is that clear? So, let's move forward. I will provide a PDF regarding this to you on my Telegram channel. On which one? I will provide it to you on the Telegram channel. Let me tell you beforehand that I only have two channels on Telegram. One is my Telegram channel where I upload things, and the other is our discussion group. There is nothing else besides these. Listen carefully, because many people are making fake bots in my name and committing fraud these days. It often happens that as soon as you are on the path to success, many people use your name to scam others. So, never fall for anyone's trap. Whenever someone messages you to buy my course or offers things for free or at cheap rates, stay away from them because all my content is completely protected. It is secure, and if you want to contact me, I have already told you that you can message me on Instagram. If you want to reach out on Telegram, you can do that too. You can message on WhatsApp. You can send an email. The best way is to send me an email. If you want to talk to me, Instagram is the safest and most secure . Right? So, you can message me there. I will send all the PDFs to you on my Telegram channel. The PDFs that will prove most effective for your OSINT work, and we will talk about which PDFs those are later. For now, keep watching . Let's go to the next topic, and until then, we will move forward and see what we can do next. So, I am moving on. So, how can it be used in real life, like with a video leaked with no metadata? But what happened is, people trace buildings, trees, the sun, the sound of trains; everything is heard by everyone . For example, a video was released; you listened to that video at full volume to see what kind of sounds were in it. There’s a train nearby, or a house. You must have seen in many ways that they solve many mysteries. Right? Found city Aleppo, Syria; police took action in real life. What is the moral? Every photo and video has a place hidden in it, if you know how to look. Right? So, let's move forward now. Now you have become data, friends. Now you all can find out anyone's location. Use these tools and this is completely public. You all can easily use this. So , with photos, shadows, and boards, you found the location. Using the sun calculator, maps, and street view, what did you find? Their location. No GPS needed, pure Sherlock Holmes OSINT. So, besides this, there are many other tools too. I will tell you further. So now let's go to the next module, which is username and email OSINT. So, if you have just someone's username, how can you find information through it? Let's suppose I have someone's username and I just want to test where their username is being used. Then there are so many tools available on the internet where I can use just someone's username to find a lot of information, like which websites their username is registered on. So how to do it? Let's talk about it. So first, I come to my Kali Linux and here I come into my Kali directory and let's go and check it out, how I will do it. So for this, the very first tool, the best tool, is Sherlock. After Sherlock, I simply typed' CyberMindSpace '; I just wrote my username, CyberMindSpace, and I want to see what happens after typing Sherlock —okay, there's a spelling mistake guys, I typed Sherlock and I wrote CyberMindSpace and pressed enter. So try to see what happens here. It will just try to find out the information about me, checking the username' CyberMindSpace ', searching all my links: Twitter, Instagram, Discord, Telegram, and many other such websites where it will go and check. So when it checks everything, it will bring it all in front of you and tell you exactly where your information is available. Where things are being used under your name. Right? So these are the things I want to tell you. Apart from this, this is just one such website. Besides this, there are many other tools and techniques that we use. So, Sherlock is a very good tool, friends. Through which we find things out. A whole digital footprint opens up with just one name. Okay? What is the whole digital world behind a name? Why do usernames and email OSINT work, and how is it used? Most people use the same username and email across sites. It happens. Username is equal to a digital fingerprint. And emails are equal to unlocking social accounts, breaches, and job information. Everything you will be able to get. Suppose many people who apply for jobs, just think that they put their name there. They put their LinkedIn profile name. Along with that, they also put their email ID in that resume. So, even through a resume, I can see that I can extract many people's information. Many people's information, so combine this with earlier modules for real OSINT power. So if you have someone's username and their email ID, you can find out many things through that too. So you will do it with Sherlock. The first thing I cleared for you is just what I wrote here, nowadays people are not caught by Aadhaar card, but by email and username. That's the real truth, guys. So here you can see that there are so many links that you have received. Linktree is there. Okay. So there are quite a few things above. Now , if I simply click here, you can see that many things are working too. This is me, and this is my Linktree page. And apart from this, if you look, there is Snapchat, Telegram. I clicked on Telegram, and I was able to see my Telegram profile as well. Where it doesn't exist, you won't see anything. Like on Twitter, if you haven't followed me, you can follow me on Twitter, on X. And I have an ID here as well where I keep sharing a lot of things. Then you can also follow here. So you guys can see that this is my account, guys. Right? This is my account where there are currently 90 followers. You guys can also come here and follow. And it even went to YouTube to search and confirmed that, yes, something is available on the internet with this name. And you guys can also build your own tool. Building one is not that big of a deal. You can also make your own tool that will help you to find out the username on the internet. Right? So right now we have approximately 94,000 subscribers. So, let's go. So, now let's move forward. So, the search is completed with 25 results. That is also a very good tool that you can also use to find out the username. Apart from this, what other tools could you have? There is another tool. Let me give it to you. Its name is Mr. Holmes. What is the name? Mr. Holmes. Mr. Holmes is also a very good tool that is used to find out the username. So you will come here and you will see Mr. Holmes. Mr. Holmes is an information gathering tool. The main purpose is to gain information about domains, usernames, and phone numbers. And that is a complete package within which you can find out domains, IP addresses, and usernames across many websites. How will you do it? Just here you will also see a disclaimer that it is not 100%accurate. So no tool is 100% accurate. If a tool shows you some results, it is possible that 90%of the things are correct. 10%of the things are bad. So no tool can be 100%correct because you will always find some error or the other. But still, that 90% information is useful to us. Right? So here you can see the screenshot that there are many things here. Social account, social account OSINT, domain OSINT; you can easily use Mr. Holmes. To install it, just copy this command and go to the terminal and paste it. A very easy, very easy tool. So let me show you how to start it. I typed' cd mr-holmes 'here, and that is Mr. Holmes ; I did' ls 'and here is' install.sh ' and something else, and this is a Python file we have. We will start this . I typed' python mr-holmes/mr-holmes. py 'and pressed enter, so it is showing a module error. So what will we do then ? We will pip install it. Let's go. The same thing we always do. Pip install requirements shows that we need to create a virtual environment. So, let’s run python-m venv to create it. And after this, we will activate it. We’ll type source venv/bin/activate and then pip install-r requirements. txt so that we can install it. And then simply run the same command, python mr_homs.py, and hit enter to start the tool. Right now, it’s not starting because sometimes errors can occur while downloading files. So, right now I am just trying to teach you how to do it. So, when you install it—well, you have to install it as well. Look at what is written here. Use sudo to give it execute permissions. Run install.sh to start it. Okay, so you can start it from here as well. In case any error comes up. Right? So, I can do it in another folder. I deactivated it. Okay, I deactivated it. And I will go to another folder. Let’s go, mkdir, I’ll create an' osint 'directory, cd into' osint ', paste it here, and hit enter. There is—that is the way you easily use to install. That is a command. I simply pasted it, it will take some time to install, and it will start easily. Right? Some index files failed to download, they’ve been reloaded, and the installation has started, guys. Look at what it says: would you like to install managers or would you like to begin? I said yes, let's press one. Enter, would you like to set manual installation or auto installation? I said two, let's start the auto installation. It will automatically install git. Python3, pip , whois, traceroute, and it will install php and so many things. It will install automatically and once done, it will tell you that you are now ready to run it. So, let's see how we will do that. It is doing all these things by itself. And then it has started all those things. And this tool is also developed by. Okay. So let's take a look at the installation process. Okay. It is taking some time. And once it starts downloading, it will begin, and let's see what it shows us after starting. Okay. So let's wait for a few seconds and let's go, and see what comes up. So here it shows to press accept or no to decline. So I said yes and pressed enter. Now you can see the complete tool has arrived. Right? So who created this? You can also see their email ID, GitHub account, and other details. So one has to give credit, and you have created it. So that is also a good tool. Right? I have also created many tools, and in my videos, I will gradually show you such tools that are very useful. I am not going to build small, trivial tools. But I will build next-level tools that will be very useful to you. Very useful , somewhat advanced-level tools; I am working on them, and soon you will definitely see some videos on them. So let's go. So look here, there is social account OSINT. There is domain IP OSINT . Phone number OSINT, encoding, PDF, graph converter, configuration, update, email and port scanner, database, dork generator. There are so many things available. So if I click on social account OSINT. So here it is asking me to provide my name. So I entered Cyber Mind Space here and pressed enter. So it is asking, would you like to use a proxy? So I thought, let's say yes to it. Then I will say no, because it will take more time. I said no. It is asking for username profile or profile scraping. I said just search for the username online. So it is trying on Instagram, it is trying my username on Instagram and Facebook and everything, and wherever it finds me. It will highlight and show it to me there. And that is also a very good tool that you can also use to find out information. Hack The Box, Oracle, SoundCloud, and there are so many websites where it will go and find out. So Mr. Holmes has appeared before you. I have told you about another tool that you can use to find out the username. You can find out through Sherlock, and besides this, there are tons, thousands of tools. And the thousands of tools that are there, I will tell you about them in the future. Just keep watching, I'm just showing you that yes, look, these are also ways to find information through any username. Apart from this, you have Google dorking. So how will you do Google dorking? You simply went here and typed Instagram, Instagram.com and here you typed "intext" and inside that , after a colon, you put someone's name in double quotes. For example, I typed Cyber Mind Space, Cyber Mind Space, and pressed enter. So just look at the query I wrote above, that is called Google dorking. And with the help of Google dorking, I am telling Google that if exactly on Instagram.com there is a username by the name of Cyber Mind Space, then index it and bring it to me . Is this clear so far? So here you can see that I have quite a few followers too. So it's showing everything exactly , like which videos I have posted. Wherever Cyber Mind Space is being used . And apart from this, if I come here and put linkedin.com. After putting linkedin.com, you can see that a lot of things have appeared with my name, Al M Ali post. And wherever I have used it, you will see all those things. So did I search for Al M Ali here? No. I searched for Cyber Mind Space here, and I can see it, so just think how surprising that is, and if I type x.com ahead of this and press enter, look, I will see my Twitter account too. So that is the thing by which you can easily find out information. So that is called Google dorking and with its help , you can do it. So you should also know how to run this query. Is that clear? So I hope you have understood what I am talking about. So in this way also you can find out about someone, and if I put my name here, my name can also appear. Let's go. I will put my name, Al M and Ali. Many people don't even know my name. So I put it here and look, it is showing that this cannot be found. It is not on x.com. But yes, if I put it here on linkedin.com, then it might be found. You'll find the link on linkedin.com. So look, I’ve found it. Very easy. Right? And that is my LinkedIn account that you can easily go and follow. Okay, let's go guys. Let's go to the next module and check what other things we will get to learn. So I’ve shown you how we find images. How to find image metadata. How to find locations. How to find via username. But moving forward, I’ve shown you how to find via share. Practical number two: Email OSINT using tools. So here, I have listed quite a few tools. Hmm. Hunter.io, EmailHippo, binp.com, Holehe , Epieos, SocialScan, APhunter.com, and there are so many tools and websites available on the internet where you can go and search someone's email to see if it has ever been breached. If it was breached, what was their password? What is their name? And there are so many websites that provide this information for free. And there are many websites that charge for it. So, I will show you how we find it. So, there is a website that I have mentioned repeatedly in my videos. There are so many times I have also talked about this website in my videos. So, in short videos, I have told you about binp.com, and that is a website by which you can easily find out the information. So, how do you do it? You click here and I entered one of my email IDs. I just searched for my email ID, and here it shows that the data has been breached four times, and because of these four breaches, you can see where it happened. It happened in May 2025, Operation Endgame 2.0, and also here it leaked in the Alien Tax Database stealer logs. Apart from this, my data was breached in 2025 on cutout.pro, which is a website where you edit your photos, and I mistakenly gave my email ID there. I was working on something for a short time, and all my details started being sold on the dark web. Everything leaked across many Telegram channels. Here you can read that it has been leaked. Is that clear? Now the next process is where you can find out the data breach for this email ID, for which there is another website. I will tell you the name of the website and how to do it. Okay. So here is inelx.io, and that is also a very good website. Here you can see what all you can find out. Domain names, URLs, email addresses, IPs, CIDRs, Bitcoin addresses, and many more. So, I will simply come here and enter my email address that has been leaked repeatedly . I am entering my own email ID just to show you. Right? So, that is not an issue for me at all. As soon as I search, it will look into how many times data related to this has been leaked. Look, wow, how many times and in which files my email ID data has been breached. And what does a data breach mean? It means the password for my email ID, my name, my profile, and even my date of birth, etc., will all be in this file. So, this is how we find it out. And this is the way by which you can easily find out. So, it is written here as Pro Version. If you buy its Pro Version, you will be able to see everything. So, there are 22,000 results for email passwords where all my information is stored in part number 121. And there are so many files that have been leaked, and I can easily find them. And that is a legal way. I will not go towards the illegal way. That is searching on the dark web. Searching on Telegram channels, or buying a combo list from someone, or purchasing an entire database from someone. I am not heading in that direction. You can get a lot of information that way, but I will still try to show you guys how to do it via Telegram, but I am not going to show it here. I am really sorry for that, but here we are going to remain completely ethical, and I am trying to tell you as much as possible. Okay, so let's go. So, I told you there is a website called inelx.io. You can come here too and find out. You can find out not just someone's email address, but also their mail ID, IP address, Bitcoin address, and much more right here. You can even find out someone's domain name here. Like, if I type "cyber mind space " here, let's see if it finds anything because I haven't searched for "cyber mind space.com" before, and let's see if we get any results. Okay, Intellect. That is also a very good website. So, there are so many websites. See, Global Data. There is a website called CSV where some things are uploaded. So, something or other has definitely leaked here. Okay? Okay, so I will have to see what this is. So, what you saw here is checking an email present on 100+ websites, and finding out if an email has been leaked in a data breach —you can find that out too. Apart from this, cross-checking with Google Dorks; you can do that as well. Like, I wrote "intext: preetam123" here and " site: github.com" here, so I can find out through this too. I will write my own mail ID and put "site: linkedin.com " in front of it, just as I showed you how to find a username earlier. So, inside the double quotes where I wrote the username before. Now I will write my mail ID there. Now I am trying to search for my mail ID. So that is the way by which you can easily find out information about an email address. So, the method for finding an email and finding someone's username is quite similar. Right? So, if you want to try, try your own email or username; you will be shocked at what is public. Right? Mapping a person digitally. Let's move to the next topic. From one username to a full profile, how did we do it step-by-step? We used Sherlock to extract all their social links. And then, we extracted their photo. After extracting, we ran a reverse image search. We searched where else their image has been used. And we noted the patterns of their friends and who they follow. Who their friends are. Who they follow. Through this, we also get to see their behavior and patterns. And find locations, clues, hobbies, or profession. This is how we can map any person. Connect emails to account recovery, password hints, and there are so many things that we can find out. Like a pro tip is that an old GitHub account, like, there could be projects there. Old code, meaning email domains, could be full-time jobs, guys. So this is the way in a real-life case, like exposing a fake influencer. Right? That there is a fake influencer. We can find out about them. So, what is the case summary? The username found via a Telegram channel, that when that person is a fake influencer, could be anyone, XYZ (I don't want to name anyone because I want to stay away from controversy, right?). So, I found their username on a Telegram channel, for example, and the email attached to it was also attached to Instagram, so I found that they were buying fake followers, that they were using fake followers. An old Twitter revealed the original name and the brand deal was canceled, because OSINT saves money, so that also happens. Okay? So let's go and wrap up once. So I told you what we used so far, 100.io, holehe, free, we used SBI, Sherlock. These are all websites, tools. What did we see for email username discovery? Combined image, social, plus domain equals professional-level OSINT. You all can do it. And that is the way by which you can easily find out the information. Okay? So, let's go. So, now comes our module number five. Facebook OSINT stalking the right way, ethically. So, how do we do it? Let's talk further. So , they hid the friend list but who liked it? They couldn't hide that. So, how to do it? I will tell you about it, that there are so many tools, but they are mostly similar. If you have a Facebook account or an Instagram account, the way to find them on Google is quite similar. You do Google Dorking , checking on many such websites. There are many tools available for Facebook as well that you can use. Like, look here, every post, every public post is a clue. Like, if they have uploaded profile pictures, you can do a full background check. If they have uploaded a photo, you can see the time, location , and friends. Who all have liked it. Who all have commented. You can look at likes and comments to build a social graph. Through events, you can find out what their physical presence is. Whether the friend list is hidden or not. You can check this as well. So the bio said "traveler" but all posts were from the same street. What kind of examples do I even write, man. So what profile breakdown can we do? What to extract? So basically, what do we need to extract from the profile? Let’s find out. So what all do we need to see ? We need to see everything that is being shown. Like full name, username, profile link, education, job, hometown, current city. So the Facebook account I have right now belongs to someone else. I don’t want to tell, I don’t want to disclose that. But still, who even uses Facebook these days? If you have this question in your mind, get rid of it. A lot of people use it. There are billions of people who use Facebook on a daily basis and you can find their information from there too. So if you find a person missing, it is not necessary that they are on Instagram. It is possible that they are on Facebook. So you can also find out on Facebook by going and searching for their username. Through their full name , username, profile link, education, job, DP, and cover pic. Suppose there is a photo of mine that is uploaded to some Facebook account. So by downloading that photo from there, I can find out through a reverse image search where else this photo has been uploaded. Now suppose there is a girl and someone cheated on her and is misusing her photos. And she wants to see where that person has uploaded her photos. Then she can also upload—then she can also use a reverse image search . She can reverse image search her photo to see where it has been uploaded . She can create a complete map. Mutual friends, relationships, mapping, public posts, opinions, photos and tags, everything that you can also extract from a Facebook account. So let’s take a look at the tools for a Facebook account for doing OSINT. So what are the tools? Facebook Graph Search, Stock Scan, OSINT, Combine, Facebook Tools, Intelx.io, Multigo, and then there's Google D, which I already told you about. So, these are all the tools that you can use. Now you might say, "Sir, show us the practical of all these." So , listen to me carefully. I will try to explain that there is an OSINT framework available. You might be aware of it. There is a framework for OSINT where you can find things out. If you want to find someone's username, you can find it from here. If you click here, it will ask if you want to search for a username or a specific site. So, I said I want to search for a username. When I simply clicked here, look, so many things have come up. I hadn't even told you about the OSINT framework until now. So just imagine how many things we can actually access. It says "Social Networks" here. So, I clicked here. Now it's asking where you want to find information about someone. I said I want to find out about Facebook and I want to search on Facebook. So, to search on Facebook, these are the tools you can easily find. I clicked here on "Facebook Email Search." And I opened it in the next tab by clicking on it. And that is the way by which you can easily find out. Besides this, you can also do Facebook account recovery, Facebook photo by ID, Facebook graph ID , and Facebook identification. These are the tools that you can easily find. Just click and try using them. If you can't, then leave a comment. I will bring a detailed video on this as well. All the methods I have taught so far, there will be long videos on those too. Like, how I showed you how we find information using an email address. I will bring a 10-15 minute video on that in the future, where I will show you only how to find things through email. Right now, I have just given you an overview. I have explained the concepts to you. We have covered a lot of things even in this. But if you want to master it, then detailed videos on those specific topics will come gradually. But through this video and this entire OSINT course, I am just trying to explain that you can collect a lot of information using all these legal methods. And this is the very first method of hacking, and it is the most important method for us. Right? Now let's move forward. Here you saw that if you want to find out about Instagram , you can click here; there is an Osintgram tool. It's a very good Inflact Instagram viewer. To find out about Twitter. Reddit, LinkedIn, TikTok , BlueSky, Steam, Discord, and there are so many websites where you can go and find out. Other social networks, Tumblr, there are many such websites. Take a look at this. How many websites are there that tell you only and only about one thing? It tells you about social networks, regarding where your presence exists on social media. And this is the OSINT framework. Guys, believe me. This is a very good framework. And that is also a very good framework by which you can easily try to find out information using OSINT. So , this OSINT is a very great tool. Now, let's see what all you can find out. First, let's take a look at this. So, social networks, instant messaging, people search engines, dating, telephone numbers, public records, business records, transportation, geolocation, and there are N number of tools available. See, there are so many things. Threat intelligence, exploits, malicious file analysis, AI tools, tools, dark web, terrorism. There are so many tools available. Which we use to find things out. Right? Let's go. So , let's go. So, let's move ahead. What are the Facebook graph search tricks? You can use them. Photos liked by username, pages liked by name, people who live in the city. So what is the hack? The friend list was private, but from likes and comments, we got the whole network. So, who all are friends with this person? What kind of things do they do? And by asking that friend, we extracted all the information about them. So, we can also find out using Google Dorking. Like I mentioned, site: facebook.com and then I wrote their username after it. So, I wrote here site colon facebook.com, okay facebook.com, and then I wrote intext, and after the colon, inside double quotes, let's say Cyber Mind Space, for example, Cyber Mind Space, and after putting the double quotes, I pressed enter. Now it's saying that some unusual traffic is coming. Let's check it. So, try to look at it. I haven't posted anything on Facebook to this day . I do have an account, but I haven't posted anything where I’ve uploaded a vlog or anything like that. But when I went a few months ago to CIA (Camera In Action), which is a type of agency that does photoshoots, I went to get a photoshoot done, and I can also see where they have used my name. Are you seeing this here,' From Code to Camera '? They have praised me in this post, and look, my video is uploaded here. So , this is how I found out about myself, that my video is being used here, and I didn't even know it. Guys, while I was just making this video and practicing what I had to show you all. When I searched for this, I was shocked to see it. I said, the Camera In Action people only told me that they had uploaded my video to Instagram, not Facebook. And now when I checked, I saw that my video has been uploaded to Facebook as well. You guys can see it. And that’s me when I went there to get the photoshoot done. The camera people have uploaded it. So, that is also a way by which you can easily find out information about yourself, and you can also find out about others. I hope you are understanding these things. And if you have watched the video up to this point , then please like this video. Subscribe to the channel and share it. And I am saying this because we are very close to 100k subscribers. And if you are watching this video when we have already reached 100k subscribers, then brother, subscribe anyway. What's the harm in that? Okay, so let's go and let's try to find out other information . I showed you how we can use dorking to extract a lot of data lists from Facebook. And what is my tip? Use quotes wisely to match exact info. And that is a tip that I have written for you, that using double quotes is extremely important. And let's move forward. So, extracting data from photos and posts. How do we do that? Open any post and check the photo upload time. Who right-clicked it? You can read everything right here. So, how do we find things on Facebook? For example, a girl posted a photo of her pet, and the society name was in the background. That society name was there , and she uploaded another post where she had tagged a friend. She tagged the friend's location, and through the comments, it was revealed what the building's name was, and her entire address was found just through four posts. Someone's full home address was discovered. Just by looking at her four posts. When she posted a photo of her pet, a society nameplate was visible in the back. When she tagged a friend, their location was visible. By mapping it like this, you can see what the location is. Okay, so the moral is that Facebook showed the way to the house without having the address. Right? So, let's go. So thank you so much, guys. You watched this video until the end, and in the next part, we will talk about module number six, Instagram OSINT, and after that, we will discuss how to find websites. We will talk about website OSINT, domain names, and many other things. So, there are still many topics left, because this is a very big OSINT course, and I don't want to make this single video 6 to 7 hours long. That's why I thought, why not limit this video to this point, so that you can watch this video comfortably and practice after watching it. And after practicing, I will bring this topic for you, in which we will talk about Instagram OSINT and then we will talk about Web OSINT. So, if we go all the way back to the beginning, I will show you which topics we will study in the next part. Right? So, let's go. So, in the next part, we will study Instagram OSINT, website and domain OSINT, and we will also look at Dark Web OSINT. And we will look at Pro OSINT tools and encounter OSINT privacy and protection in the next part. I think that my videos shouldn't get too long because people won't watch them, as the generation you are living in, this genuine generation, your attention span has become very short. You scroll through Instagram all day. You need content every single minute, so you won't be able to watch such long videos . So, I think why not make shorter videos for you all. Videos of one to one and a half hours that you can actually watch. So I hope you watched this whole video until the end, and thank you very much, and thank you so much for watching this video. And if you liked this video, then please like, share, and subscribe. And we are going to hit 100,000 very soon. So I have already told you what we will be talking about in the next part. So, for now, what do you need to do? You need to go to TryHackMe and solve some labs on TryHackMe. Like, I will show you some of the labs that you need to solve . Look, these are all in a PDF that I will provide. There is Email OSINT, Phone Number OSINT, Website and Domain OSINT, Dark Web OSINT; I have many such PDFs available that I have designed just for you, which contain information about all the tools and websites. Where you can simply go and use them easily. Just go and use them, and you will find everything you need. But still, I will show you what you need to complete before the next video. So basically, what you have to do is, with the PDF I have given you—this TryHackMe PDF— what do you need to do? You need to come to the very top, and you will see it here. If you scroll down, you will see Recon here. So, all the reconnaissance labs here—Passive Reconnaissance, Active Reconnaissance, Content Discovery, OSINT.io, Google Dorking, Web OSINT, Sakra, Red Team, Searchlight Events—you need to complete all these labs. If you are a very good subscriber of this Cyber Mind Space and if you are loyal, then you will complete all these labs, okay? So I will see you all in the next video. Until then, take care of yourselves and keep studying. You will find all the links in the description. Join the Telegram group as well. We have a website too. The YouTube channel is also yours. See you comfortably in the next video. Until then, bye. Take care. Jai Hind.