Files
nuclei-templates/http/osint/README.md
Prince Chaddha e0af666e1c Refactoring the directory structure based on protocols (#7137)
* moving http templates

* updated cves.json

* moved network CVEs

* updated scripts

* updated workflows

* updated requests to http

* replaced network to tcp

---------

Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 09:58:59 +05:30

48 lines
1.7 KiB
Markdown

## Description
OSINT templates are available for conducting user enumeration across many websites. By utilizing the flag to input a user, Nuclei can verify the user's existence across all websites listed in the templates and report any instances of success.
## Usage
The templates within the `osint` directory are **self-contained** and do NOT require URLs as input because the OSINT templates have pre-defined static URLs. Each template in this directory expects the user(name), email, or phone number or list of it to be supplied as input using the `V`/`var` flag through the Nuclei engine.
```bash
# Running OSINT templates against a single user to test
nuclei -tags osint -var user=elon
```
**OSINT** templates can be also ran against list of usernames as well.
```console
$ cat user_names.txt
user_1
user_2
user_3
user_4
user_5
```
```bash
# Running OSINT templates against a list of users to test
nuclei -tags osint -var user=user_names.txt
```
### Categories
The OSINT templates are classified into categories such as `archived`, `art`, `blog`, `business`, `coding`, `dating`, `finance`, `gaming`, `health`, `hobby`, `images`, `misc`, `music`, `news`, `political`, `search`, `shopping`, `social`, `tech`, `video`, `porn`.
To execute OSINT templates within a particular category, you can apply a filter using the `tags` flag and set the prefix value to `osint-`.
```bash
# Running OSINT templates against the social category
nuclei -t osint/ -tags osint-social -var user=some-user
# Running OSINT templates against the multiple categories
nuclei -t osint/ -tags osint-social,osint-finance -var user=some-user
```
## Acknowledgment
These OSINT templates were inspired by the [WebBreacher/WhatsMyName](https://github.com/WebBreacher/WhatsMyName) repository.