Ringkasan

Open Source Intelligence (OSINT) merupakan teknik pengumpulan informasi dari sumber publik untuk kebutuhan:

• cyber investigation
• reconnaissance
• threat intelligence
• digital profiling
• attack surface mapping
• social engineering analysis

OSINT digunakan oleh:

• penetration tester
• red team operator
• cyber investigator
• threat intelligence analyst
• law enforcement
• bug bounty hunter

---

Fundamental OSINT

Definisi

OSINT adalah proses pengumpulan dan analisis data dari:

• website publik
• social media
• metadata
• DNS records
• breach data
• search engine indexing
• public repository
• leaked information

---

Workflow OSINT

[1] Target Identification
[2] Passive Reconnaissance
[3] Data Collection
[4] Correlation
[5] Enumeration
[6] Metadata Extraction
[7] Infrastructure Mapping
[8] Intelligence Analysis
[9] Reporting

---

Instalasi Tools OSINT di Kali Linux

Update Repository

sudo apt update && sudo apt upgrade -y

---

Install Recon-ng

sudo apt install recon-ng -y

---

Install theHarvester

sudo apt install theharvester -y

---

Install Sherlock

git clone https://github.com/sherlock-project/sherlock.git

cd sherlock

pip3 install -r requirements.txt

---

Install Maltego

sudo apt install maltego -y

---

Install ExifTool

sudo apt install exiftool -y

---

Install Amass

sudo apt install amass -y

---

Domain Reconnaissance

Whois Enumeration

whois target.com

Informasi:

• registrant
• registrar
• nameserver
• expiration
• organization

---

DNS Enumeration

dig target.com

---

Subdomain Enumeration

amass enum -d target.com

---

Passive Subdomain Enumeration

subfinder -d target.com

---

Certificate Transparency Recon

curl -s https://crt.sh/?q=target.com

---

Email Intelligence

Menggunakan theHarvester

theHarvester -d target.com -b all

Fungsi:

• email enumeration
• employee discovery
• hostname discovery
• search engine scraping

---

Hunter.io Enumeration

Target Domain → Employee Emails

---

Breach Correlation

Platform:

• HaveIBeenPwned
• DeHashed
• Intelligence X

---

Username Enumeration

Sherlock

python3 sherlock username

Mendeteksi akun:

• GitHub
• Twitter/X
• Reddit
• TikTok
• Instagram
• Telegram
• forum underground

---

Metadata Extraction

ExifTool

exiftool image.jpg

Data:

• GPS location
• camera model
• timestamps
• author information
• editing software

---

PDF Metadata

exiftool document.pdf

Sering menemukan:

• internal username
• company workstation
• software version

---

Google Dorking

File Discovery

site:target.com filetype:pdf

---

Login Panel Discovery

site:target.com inurl:admin

---

Exposed Documents

site:target.com confidential

---

Backup File Discovery

site:target.com ext:sql

---

Social Media Intelligence

Investigasi Profil

Analisa:

• username reuse
• timeline activity
• geolocation
• mutual connection
• language pattern
• operational security weakness

---

Reverse Image Search

Platform:

• Google Lens
• Yandex
• TinEye

---

Facial Correlation

Gunakan:

• profile correlation
• avatar reuse
• AI image comparison

---

Infrastructure Intelligence

IP Lookup

whois 1.1.1.1

---

ASN Information

amass intel -ip 1.1.1.1

---

Reverse DNS

host 1.1.1.1

---

Shodan Recon

Search:
apache country:"ID"

---

Censys Enumeration

Mendeteksi:

• exposed services
• SSL certificate
• open ports
• infrastructure mapping

---

GitHub OSINT

Secret Discovery

Search:
API_KEY
password
SECRET_KEY

---

Developer Profiling

Analisa:

• commit email
• internal project
• infrastructure naming
• leaked credentials

---

Telegram & Messaging OSINT

Investigasi:

• public group
• alias reuse
• bio correlation
• linked identity

---

Geolocation Intelligence

Geo Metadata

exiftool photo.jpg | grep GPS

---

Mapping Location

Gunakan:

• Google Maps
• OpenStreetMap
• satellite imagery

---

Dark Web Intelligence

Platform:

• Ahmia
• Onion Search Engine
• Intelligence X

Fungsi:

• breach monitoring
• leaked data monitoring
• threat actor tracking

---

Recon-ng Framework

Menjalankan Recon-ng

recon-ng

---

Marketplace Module

marketplace search

---

Install Module

marketplace install

---

Workspace

workspaces create target

---

Domain Recon Module

modules load recon/domains-hosts/bing_domain_web

---

Maltego Intelligence Mapping

Fungsi Maltego

Visualisasi hubungan:

• domain
• email
• organization
• phone number
• infrastructure
• social media

---

Transform Engine

Maltego menggunakan:

• transform query
• graph correlation
• relationship mapping

---

Passive vs Active Recon

Passive Recon	Active Recon
Tidak menyentuh target langsung	Berinteraksi langsung ke target
Lebih stealth	Lebih detectable
Search engine & public data	Port scanning & probing

---

OPSEC dalam OSINT

[+] Gunakan VPN / Tor
[+] Hindari login akun pribadi
[+] Gunakan VM terisolasi
[+] Pisahkan identity investigation
[+] Jangan expose source IP
[+] Gunakan burner account

---

Automasi OSINT

SpiderFoot

sudo apt install spiderfoot -y

---

Menjalankan SpiderFoot

spiderfoot -l 127.0.0.1:5001

---

Fungsi

Automasi:

• domain intel
• breach correlation
• IP recon
• darknet correlation
• metadata extraction

---

Framework OSINT Populer

Tool	Fungsi
Recon-ng	Recon framework modular
Maltego	Visual intelligence mapping
Sherlock	Username enumeration
SpiderFoot	Automation OSINT
Amass	Infrastructure mapping
ExifTool	Metadata extraction

---

Vulnerability Exposure yang Sering Ditemukan

[+] Exposed Credentials
[+] Public Backup Files
[+] Employee Information Leakage
[+] Sensitive Metadata
[+] Infrastructure Exposure
[+] Public Admin Panel
[+] Cloud Bucket Exposure
[+] Git Repository Leakage

---

Integrasi Threat Intelligence

OSINT digunakan untuk:

• IOC enrichment
• threat actor profiling
• campaign tracking
• malware infrastructure mapping
• phishing investigation

---

Risiko Penggunaan

OSINT dapat:

• melanggar privacy policy
• memicu legal issue
• menyebabkan attribution error
• menghasilkan false correlation

Selalu:

• validasi data
• cross-check source
• dokumentasikan evidence

---

Workflow Investigasi Modern

[1] Domain Mapping
[2] Employee Enumeration
[3] Email Correlation
[4] Metadata Analysis
[5] Infrastructure Discovery
[6] Social Media Correlation
[7] Breach Correlation
[8] Threat Intelligence Enrichment
[9] Final Reporting

---

Status Analisis Tool

[+] Platform            : Kali Linux
[+] Tool Category       : Open Source Intelligence
[+] Recon Type          : Passive + Hybrid
[+] Automation Support  : Yes
[+] Threat Intel Ready  : Yes
[+] Skill Requirement   : Beginner → Advanced

---

Kesimpulan

OSINT merupakan fondasi utama dalam:

• cyber intelligence
• reconnaissance
• red teaming
• threat investigation
• attack surface analysis

Kombinasi:

• automation framework
• metadata extraction
• social correlation
• infrastructure intelligence
• passive reconnaissance

menjadikan OSINT sangat penting dalam operasi keamanan siber modern.

---