1.5 KiB
Description
OSINT templates are available for conducting user enumeration across many websites. By utilizing the flag to input a user, Nuclei can verify the user's existence across all websites listed in the templates and report any instances of success.
Usage
The templates within the osint directory are self-contained and do NOT require URLs as input because the OSINT templates have pre-defined static URLs. Each template in this directory expects the user(name), email, or phone number to be supplied as input using the V/var flag through the Nuclei engine.
# Running OSINT templates against a single user to test
nuclei -t osint/ -var user=some-user
Categories
The OSINT templates are classified into categories such as archived, art, blog, business, coding, dating, finance, gaming, health, hobby, images, misc, music, news, political, search, shopping, social, tech, video, porn.
To execute OSINT templates within a particular category, you can apply a filter using the tags flag and set the prefix value to osint-.
# Running OSINT templates against the social category
nuclei -t osint/ -tags osint-social -var user=some-user
# Running OSINT templates against the multiple categories
nuclei -t osint/ -tags osint-social,osint-finance -var user=some-user
Acknowledgment
These OSINT templates were inspired by the WebBreacher/WhatsMyName repository.