OSINT › Module 1 › Lesson 3
Maps: OSINT Framework Bellingcat IntelTechniques
Indexes are not permission — then bookmark the three maps and stay on
Visual · osint_three_maps
Maps list tools. RoE decides whether you may use them. http://192.168.0.1/ YOUR lab.
Opening
A tree of tools is a library catalog. It is not a hunting license.
OSINT Framework (osintframework.com) is a branching index of tool names. Bellingcat’s Online Investigation Toolkit (bellingcat.com/resources) is a practitioner shelf — methods, datasets, ethics culture. IntelTechniques (inteltechniques.com) maps where public records and username checks live. Used as bookmarks, they keep you from random GitHub zips. Used as a dare, they become a stalking shopping list. Original Cyberlium. GATE on http://192.168.0.1/: You will record the three URLs and one sentence each: what the map is for, and what you will not do with it. You will not scrape the Framework into a local “attack pack,” not clone random OSINT “all-in-one” malware magnets, not treat IntelTechniques as a classmate kit. Next: Lab — Write YOUR Self-OSINT Scope File.
1. Three shelves, three jobs, zero strangers
Framework: “what categories of public tools exist?” Bellingcat: “how do careful investigators verify and cite?” IntelTechniques: “where do username/email/domain lookups sit as public services?” Your job this lesson is to write those jobs down. Your job is not to run every leaf against a name.
If a leaf is Sherlock, you wait for Module 2 and you feed it YOUR handle from a scope file. If a leaf is a people-search broker, you do not buy reports on humans. ; do not confuse a home gateway with an “infrastructure OSINT” prize.
Command guide
Three shelves, three jobs, zero strangers
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl
macOS: Built-in
Windows: Built-in (PowerShell: Invoke-WebRequest)
═══ COMMANDS ═══
Command — copy this
curl -sS -m 8 -I "https://osintframework.com/" | head -n 6 curl -sS -m 8 -I "https://www.bellingcat.com/resources/" | head -n 6 curl -sS -m 8 -I "https://inteltechniques.com/" | head -n 6
2. Official clone vs random zip: how you will install later
Later modules name Sherlock, Maigret, holehe, theHarvester. Install paths are pipx/pip from the project name or git clone of the official GitHub repo listed in this course. A Drive folder titled “OSINT 500 tools” is how people get stealers.
Framework leaves that say “breach search” do not override RoE. You will use Have I Been Pwned’s official site for YOUR email in Module 4 — not a random checker, not a torrent of hashes.
3. Write the refusal that keeps a map from becoming a kit
One paragraph in your note: I will not run username tools on anyone but aliases in my scope file. I will not harvest a company I do not own. I will not nmap the LAN because a map mentioned “network.” That paragraph is the product.
Lab next: turn RoE plus identifiers into scope.yaml and a tiny HANDLE= file. The maps stay bookmarks.
Command guide
Write the refusal that keeps a map from becoming a kit
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
pipx install theHarvester sudo apt install nmap
macOS:
Command — copy this
pipx install theHarvester brew install nmap
Windows:
Command — copy this
pip install theHarvester choco install nmap # or download https://nmap.org/download.html
═══ COMMANDS ═══
Command — copy this
grep REFUSE "$HOME/cyberlium-lab/t12-m01-l03-maps.txt"
4. What you ship: three bookmarked maps and a written refusal
Headers-only curl to the three official URLs (or bookmark if offline). One-sentence job each. REFUSE lines for stranger collection and dump zips. DEMO GATE. Notes 600.
5. What you record before the next lesson
Date. osintframework.com / bellingcat.com/resources / inteltechniques.com. REFUSE tags. SAFE File t12-m01-l03-maps.txt chmod 600.
6. Wrong vs right: strangers vs identifiers YOU own
Worked failure — same OSINT word, opposite target. Right never needs a classmate or a dump site.
Wrong
wget -r the Framework. Clone a random “OSINT pack.” Run every username leaf on a teacher’s nickname.
Right
Bookmark three official pages. Write jobs + refusals. Next: Lab — Write YOUR Self-OSINT Scope File.
Mission: catalog the maps without collecting people
1) / STOP if router. 2) Bookmark OSINT Framework, Bellingcat resources, IntelTechniques. 3) Write REFUSE lines for stranger tools and dump zips. Do not scrape. Do not Sherlock anyone.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor which GitHubs are official for Sherlock/Maigret — not for a “full OSINT ISO.”
Knowledge Check
APPLY: IntelTechniques lists username checkers. You want practice. In-scope target?
Multiple choice
Knowledge Check
APPLY: True or False: Scraping osintframework.com into a local dump is the required lab.
True or False
Knowledge Check
APPLY: A zip titled “500 OSINT tools” is on a forum. You:
Multiple choice