Cyberlium
Cyberlium
Cyberlium on Android·Google Play Store

Learn cybersecurity with hands-on labs and AI mentor support on your phone.

Mod 1 · Les 3/6
In progress
Module 1•Lesson 3 of 6•⏱️ 15 min read•Beginner+40 XP

Maps: OSINT Framework Bellingcat IntelTechniques

Indexes are not permission — then bookmark the three maps and stay on

Maps: OSINT Framework Bellingcat IntelTechniques
00:00/04:29

Visual · osint_three_maps

Maps list tools. RoE decides whether you may use them. http://192.168.0.1/ YOUR lab.

A tree of tools is a library catalog. It is not a hunting license.

OSINT Framework (osintframework.com) is a branching index of tool names. Bellingcat’s Online Investigation Toolkit (bellingcat.com/resources) is a practitioner shelf — methods, datasets, ethics culture. IntelTechniques (inteltechniques.com) maps where public records and username checks live. Used as bookmarks, they keep you from random GitHub zips. Used as a dare, they become a stalking shopping list. Original Cyberlium. GATE on http://192.168.0.1/: You will record the three URLs and one sentence each: what the map is for, and what you will not do with it. You will not scrape the Framework into a local “attack pack,” not clone random OSINT “all-in-one” malware magnets, not treat IntelTechniques as a classmate kit. Next: Lab — Write YOUR Self-OSINT Scope File.

1. Three shelves, three jobs, zero strangers

Framework: “what categories of public tools exist?” Bellingcat: “how do careful investigators verify and cite?” IntelTechniques: “where do username/email/domain lookups sit as public services?” Your job this lesson is to write those jobs down. Your job is not to run every leaf against a name.

If a leaf is Sherlock, you wait for Module 2 and you feed it YOUR handle from a scope file. If a leaf is a people-search broker, you do not buy reports on humans. ; do not confuse a home gateway with an “infrastructure OSINT” prize.

Command guide

Three shelves, three jobs, zero strangers

═══ INSTALL ═══

Linux (Debian/Ubuntu):

Command — copy this

sudo apt install curl

macOS: Built-in

Windows: Built-in (PowerShell: Invoke-WebRequest)

═══ COMMANDS ═══

Command — copy this

curl -sS -m 8 -I "https://osintframework.com/" | head -n 6
curl -sS -m 8 -I "https://www.bellingcat.com/resources/" | head -n 6
curl -sS -m 8 -I "https://inteltechniques.com/" | head -n 6

2. Official clone vs random zip: how you will install later

Later modules name Sherlock, Maigret, holehe, theHarvester. Install paths are pipx/pip from the project name or git clone of the official GitHub repo listed in this course. A Drive folder titled “OSINT 500 tools” is how people get stealers.

Framework leaves that say “breach search” do not override RoE. You will use Have I Been Pwned’s official site for YOUR email in Module 4 — not a random checker, not a torrent of hashes.

3. Write the refusal that keeps a map from becoming a kit

One paragraph in your note: I will not run username tools on anyone but aliases in my scope file. I will not harvest a company I do not own. I will not nmap the LAN because a map mentioned “network.” That paragraph is the product.

Lab next: turn RoE plus identifiers into scope.yaml and a tiny HANDLE= file. The maps stay bookmarks.

Command guide

Write the refusal that keeps a map from becoming a kit

═══ INSTALL ═══

Linux (Debian/Ubuntu):

Command — copy this

pipx install theHarvester
sudo apt install nmap

macOS:

Command — copy this

pipx install theHarvester
brew install nmap

Windows:

Command — copy this

pip install theHarvester
choco install nmap  # or download https://nmap.org/download.html

═══ COMMANDS ═══

Command — copy this

grep REFUSE "$HOME/cyberlium-lab/t12-m01-l03-maps.txt"

4. What you ship: three bookmarked maps and a written refusal

Headers-only curl to the three official URLs (or bookmark if offline). One-sentence job each. REFUSE lines for stranger collection and dump zips. DEMO GATE. Notes 600.

5. What you record before the next lesson

Date. osintframework.com / bellingcat.com/resources / inteltechniques.com. REFUSE tags. SAFE File t12-m01-l03-maps.txt chmod 600.

6. Wrong vs right: strangers vs identifiers YOU own

Worked failure — same OSINT word, opposite target. Right never needs a classmate or a dump site.

  • Wrong: wget -r the Framework. Clone a random “OSINT pack.” Run every username leaf on a teacher’s nickname.
  • Right: Bookmark three official pages. Write jobs + refusals. Next: Lab — Write YOUR Self-OSINT Scope File.
Hands-on Exercise

Mission: catalog the maps without collecting people

1) / STOP if router. 2) Bookmark OSINT Framework, Bellingcat resources, IntelTechniques. 3) Write REFUSE lines for stranger tools and dump zips. Do not scrape. Do not Sherlock anyone.

Pro Tip

Stuck? Ask Cyberlium AI Mentor

Ask Mentor which GitHubs are official for Sherlock/Maigret — not for a “full OSINT ISO.”

Practice QuizQuestion 1
Multiple choice
Q1

APPLY: IntelTechniques lists username checkers. You want practice. In-scope target?

Practice QuizQuestion 2
True or False
Q2

APPLY: True or False: Scraping osintframework.com into a local dump is the required lab.

Practice QuizQuestion 3
Multiple choice
Q3

APPLY: A zip titled “500 OSINT tools” is on a forum. You:

←Previous: Rules of Engagement and Written Scope
Answer 3 practice quiz questions to unlock XP reward. (0/3 answered)
Skip quiz & read next →