Loading...
Loading...
Found 829 Skills
Workflow to build a sourced profile of a named individual from public sources, pivoting across identity, contact, social, and location selectors.
Investigate an email address — MX and syntactic validation, Gravatar lookup, corporate email-format inference, breach exposure, and full mail-header analysis (Received chain, Message-ID, SPF/DKIM/DMARC). Use for email OSINT, verifying whether an address exists, finding accounts registered to an address, guessing a company's email format, or tracing where a message actually came from.
Look up companies, officers, and ownership in official business registries and filings. Use when researching a company's legal entity, finding directors/shareholders/beneficial owners, checking incorporation records, or reading SEC/regulatory filings.
Find internet-exposed hosts, services, and devices from third-party scan data. Use when searching Shodan or Censys, finding open ports and banners, identifying an IP's tech stack, or discovering exposed databases, cameras, or industrial devices — without scanning the target yourself.
Search paste sites, forums, and text dumps for leaked or mentioned selectors. Use when searching Pastebin or paste sites, monitoring forums and Telegram for leaks, finding a name/email/domain in dumps, or tracking chatter about a target.
Find where an image appears online and its original source. Use when reverse image searching, identifying a photo, face, product, or logo, finding the earliest/original version of a picture, or verifying a profile avatar across engines.
Mine GitHub, GitLab, and git history for people, infrastructure, and leaked secrets. Use when investigating a developer or org on GitHub, finding leaked API keys or credentials in code, or pivoting from commits, emails, and repos.
Corporate due-diligence workflow — resolve a brand or website to its registered legal entity, map group structure and beneficial ownership, profile officers and directors, enumerate the digital estate, and screen litigation, insolvency, procurement, sanctions, PEP, and adverse media. Use for vendor and counterparty risk, KYC/KYB, M&A diligence, investor checks, or shell-company assessment.
Verify whether an image or video is authentic, original, and correctly described. Use when fact-checking a photo or video, detecting deepfakes or AI-generated media, spotting manipulation, or confirming when and where footage first appeared.
Discover subdomains and related domains from public TLS certificate logs. Use when enumerating subdomains, finding hidden or staging hosts, mapping an org's domains via crt.sh or Certificate Transparency, or spotting newly issued certificates.
Look up domain registration and DNS records. Use when running WHOIS/RDAP, querying DNS records (A, MX, TXT, NS, SPF, DKIM, DMARC), finding a domain's registrant, nameservers, or mail setup, or resolving IPs and ASNs.
Track aircraft and vessels from public ADS-B and AIS broadcasts using ADS-B Exchange, Flightradar24, FlightAware, MarineTraffic, VesselFinder and Equasis. Use when following a tail number or flight, looking up an ICAO 24-bit hex code, registration or callsign, tracing a ship by IMO number or MMSI, checking a flag of convenience or port-call history, investigating who owns a private jet or vessel, or analysing AIS gaps and dark-fleet behaviour.