OSINT CHEAT SHEET - List OSINT Tools

Contains a list of OSINT tools, OSINT tips, datasets, Maltego transform and others. There are free and paid tools you can use and owner is not responsible (take your own risks), only for knowledge or educational purposes. Apologies if some of the resources are no longer available or contain errors, as the owner does not regularly check the status of these resources, If there is new information, the owner will add it to this repo along with the category. If you want to read about techniques and intelligence some have already been added to the Wiki page Jieyaboo Wiki The owner will add them back. If there are any errors let us know thank you.

Tips & Trick Safe Guide Using Resources

Please take a notes. Due to the large number of supply chain attacks, refer to OWASP TOP 10 2025 also the TA campaign like fake captcha, injected script, obfuscate script and other. My advice is to use a sandbox machine that does not contain your personal data and office. With the rise of malware stealers, crypto miners, and other threats, to reduce this risk, you can use fake accounts on social media, email, phone numbers, and your sandbox machine, as well as turn on your AV (Anti Virus) and firewall. For malicious activiy also untracked resouces Jieyab will remove it

Tips:

• Beware fake captcha, many site have fake captcha to run malicious script. If you found weird captcha just leave it and report in issue or discussion
• User your fake account or temp email, phone and other. You can bypass using temp email Gmail also dnmx email
• Use virtual machine, fake host or docker machine, or cloud machine try on your vps
• Use private network e.g vpn, tor, p2p
• Read ToS the resouces
• Enable your firewall, AV and IDS on your host or machine
• Strict your browser with the privacy extension disable js, ads and more
• Dont upload your private files make sure you have clean personal file in folder
• Scan the files will you download
• Encrypt your network traffic, message and disk
• Beware about attachments such as docx, xlsm or macro documents (Check macros don't immediately press enable, check properties file to do strict mode)
• Beware about malicious script like programm lang always check will you run it e.g review, code and community usage (like plugin, library, github source code, extension browser, extension code editor or other things) beware with code with obfuscate (dont trust it)
• Do a active on each platform example like post, follow, following to avoid bot account detection or blocked by user (target) presistence your OPSEC
• If tools are paid try on with demo trial version with sock (fake) account, many on this resouces there is a paid so i suggest to try demo first. If there is a payment such as using crypto, try to track the transaction using Arkham or similar. If it is non-crypto, make sure there is a clear contact us, support, and email. Do not rush to pay. If you want to pay and are forced to, find the cheapest version and pay using a virtual account or third-party service to make the transaction

See Jieyab Wiki pages

Contains information about OSINT tips, OSINT branches and knowledge about intelligence

See Jieyab Gitbook

Contains information about OSINT tips, write up usage resouces and more tips about OSINT and OSINT branch

Notes: "I recommend always using the hot reload function (CTRL + F5 OR Ctrl + Shift + R) to view updated content and clear the cache. I use DeepL to assist with creating articles in English also AI LLM, and my writing style tends to be a mix of informal and formal language, adhering to EYD (Enhanced Spelling) standards. Narrative"

Info

Date	Remarks
16 Jul 2026	Update the article about Intelligence Base & Knowledge Base at Gitbook and Wiki Github pages

• Intelligence Base & Knowledge Base
• All About Doxing
• All About OSINT Matters Things in OSINT
• All About SIGINT Signal Intelligence
• Cell Investigations
• Geospatial Intelligence
• What is Data Enrichment & Pivoting
• How to Spot a Deepfake
• OSINT ‐ Inside About Data Breach
• All About HUMINT
• All About Darkweb Tips Darkweb OSINT Assessments
• All About Stealer Log and Cyber Threat
• All About Penetration Testing
• All About Scammer

These Resources Are Recommend For

• IT Security
• CTF Player
• Journalist
• Investigator
• Cyber Crime
• Researcher & Annalist
• Law Enforcer
• General

Legal Considerations and International Law for OSINT

Country / Region	Legal Framework	Key Legal Considerations	OSINT / PII Implications
Indonesia 🇮🇩	Personal Data Protection Law (Law No. 27 of 2022) — UU PDPElectronic Information and Transactions Law (UU ITE) — Law Overview	Requires a lawful basis for processing personal data (consent, contract, legal obligation, legitimate interest, etc.). Data subjects have rights. UU ITE prohibits unlawful access and misuse of electronic data.	OSINT using publicly available data is generally permissible, but processing identifiable personal data must comply with PDP Law principles such as purpose limitation and data minimization.
European Union 🇪🇺	General Data Protection Regulation (GDPR) — Official EU Text	Processing requires a lawful basis (consent, legitimate interest, etc.). Transparency, accountability, and data subject rights apply. High-risk processing may require a DPIA.	Public availability does not remove GDPR obligations. OSINT involving EU residents’ personal data must meet GDPR compliance standards.
Spain 🇪🇸	LOPDGDD (Spain’s Organic Law on Data Protection) + GDPR — Official Text (BOE)	Supplements GDPR with national rules. Legitimate interest may apply for research under strict necessity and proportionality tests.	OSINT research must document lawful basis and balance privacy impact against legitimate interest.
Mexico 🇲🇽	Federal Law on Protection of Personal Data Held by Private Parties — Official Government Portal	Requires privacy notice, lawful basis, and safeguards when processing personal data. Individuals have rights to access, rectify, cancel, or oppose data use.	Collecting public data is allowed, but processing personal data still falls under legal protections.
United States 🇺🇸

Linux Distribution For OSINT

You can build it with VM or Live USB make sure you have sandbox machine

• tlosint-live
• tails & HiddenVM
• qubes
• parrot sec
• csi linux

OSINT Academy

• Jieyab89 Gitbook (free and no ads)
• Maltego academy
• Darkweb academy

EXIF TOOL COMMAND

Exif tag name and data type

Artist string

Author