OSINT

Motores de busqueda

Google Dorks

Shodan

Duck Duck Go

Bing

Postman Publicos

site:postman.com inurl:(workspace & overview) intext:"KEYWORD"

Way Back URLs

echo 'site.com' | waybackurls | tee site.urls

GitHub - tomnomnom/waybackurls: Fetch all the URLs that the Wayback Machine knows about for a domainGitHub

Gau

gau --o site.urls site.com

GitHub - lc/gau: Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.GitHub

Repositorios publicos de GitHub

./gitgot.py -q example.com

GitHub - BishopFox/GitGot: Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.GitHub

GitHub - techgaun/github-dorks: Find leaked secrets via github searchGitHub

AMASS

GitHub - owasp-amass/amass: In-depth attack surface mapping and asset discoveryGitHub