nuclei-templates/osint

Description

OSINT templates are available for conducting user enumeration across many websites. By utilizing the flag to input a user, Nuclei can verify the user's existence across all websites listed in the templates and report any instances of success.

Usage

The templates within the osint directory are self-contained and do NOT require URLs as input because the OSINT templates have pre-defined static URLs. Each template in this directory expects the user(name), email, or phone number to be supplied as input using the V/var flag through the Nuclei engine.

# Running OSINT templates against a single user to test
nuclei -t osint/ -var user=some-user

Categories

The OSINT templates are classified into categories such as archived, art, blog, business, coding, dating, finance, gaming, health, hobby, images, misc, music, news, political, search, shopping, social, tech, video, porn.

To execute OSINT templates within a particular category, you can apply a filter using the tags flag and set the prefix value to osint-.

# Running OSINT templates against the social category
nuclei -t osint/ -tags osint-social -var user=some-user

# Running OSINT templates against the multiple categories
nuclei -t osint/ -tags osint-social,osint-finance -var user=some-user

Acknowledgment

These OSINT templates were inspired by the WebBreacher/WhatsMyName repository.