# 🕵️ How to find everything public about any target (beginner OSINT + free loot) **URL:** \ **Category:** Tutorials & Methods\ **Tags:** learning, hacking, tips-tricks\ **Created:** [May 28, 2026, 4:18am UTC](https://onehack.st/t/how-to-find-everything-public-about-any-target-beginner-osint-free-loot/322416 "2026-05-28T04:18:38Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![KTYM](https://onehack.st/user_avatar/onehack.st/ktym/32/175646_2.png) [@KTYM](https://onehack.st/u/KTYM)\ **Post date:** [May 28, 2026, 4:18am UTC](https://onehack.st/t/how-to-find-everything-public-about-any-target-beginner-osint-free-loot/322416/1 "2026-05-28T04:18:38Z")
# 📦 elhacker.info: free courses, wordlists, cracked tools, books — plus OSINT 101 Welcome aboard 🌊 — solid first drop. And damn, what a first drop: a link to **elhacker.info** , basically a free warehouse of hacking courses, wordlists, cracked pro tools, OS ISOs, and a fat pile of cybersec books. People pay hundreds for half this shit. It’s just sitting there. 🎁 **The loot:** [https://elhacker.info/](https://elhacker.info/) — courses, MP4 tutorials, 46GB rockyou2024 wordlist, Burp/Metasploit/Cobalt Strike, ebooks, the works. Below: a dead-simple breakdown of **OSINT** (digging up info that’s already public — Google, but for finding everything about a target) and the tools that do it. No jargon left unexplained. 👇 ![image](https://onehack.st/uploads/default/original/3X/9/c/9ca55a61f9ae13687d2cd180f1043c551aa140ab.jpeg) > **🌐 what the hell is OSINT (2-line version)** > > **OSINT** = Open Source Intelligence = collecting info that’s already public and free to grab. Social media, websites, forums, leaked databases, public records — all of it. > > Why care? Because everything you’d ever want to know about a website, company, or person is _already out there_ scattered across the internet. OSINT is just the art of vacuuming it all up and connecting the dots. It’s 100% legal when you stick to public stuff, costs nothing, and it’s the first move in basically every hack, investigation, or background check. > > Think of it as being a detective who never leaves the couch. > **🛠️ the tools that do the digging (plain-English)** > > You don’t memorize these — you just need to know which one grabs what (all links go straight to the tool): > > - **[Shodan](https://www.shodan.io/)** → a search engine for _devices_, not websites. It finds webcams, servers, routers, smart fridges — anything plugged into the internet. Type a query, see what’s exposed. Scary how much is wide open. > - **[Maltego](https://www.maltego.com/)** → the connection-map drawer. Feed it a name/email/domain and it draws a spiderweb showing how everything links together. Great for “who’s connected to who.” > - **[theHarvester](https://github.com/laramies/theHarvester)** → the email & subdomain scraper. Point it at a company, it pulls every email address and hidden sub-page it can find from search engines. Phishers love this one. > - **[SpiderFoot](https://github.com/smicallef/spiderfoot)** → the auto-recon robot. You give it a target, it runs hundreds of checks on its own while you grab coffee. Lazy person’s best friend. > - **[Recon-ng](https://github.com/lanmaster53/recon-ng)** / **[Censys](https://search.censys.io/)** → bulk internet scanners. Find domains, IPs, and exposed assets in bulk. > - **[FOCA](https://github.com/ElevenPaths/FOCA)** → the metadata snitch. Drop in a PDF or Word doc and it reveals hidden junk inside — who made it, what software, sometimes internal usernames. People forget this stuff is baked into their files. > > > 💡 Start with **[Shodan](https://www.shodan.io/)** (free web version, no install). Search your own home IP and see what’s exposed. Instant “oh shit” moment, instant hooked. > **🤖 making it run on autopilot** > > The whole point is to stop doing this by hand. Two moves: > > - **Scripts** — a little **[Python](https://www.python.org/)** program (beginner-friendly coding language) can ask Shodan “show me every device running old, hackable software” and ping you when it finds one. Set it, forget it. > - **Scheduled scans** — tell SpiderFoot to re-scan your targets every night and flag anything new. You wake up to a report. > > That’s it. The fancy version plugs into a **SIEM** (a security dashboard that collects all your alerts in one place), but you don’t need that to start. A free tool + one script = you’re already ahead of most people. > **⚖️ don't be dumb about it** > > OSINT is legal _because_ it uses public info. The second you log into accounts that aren’t yours, brute-force a password, or grab private data — that’s a different crime entirely. Stay on the public side. > > Two habits worth having: > > - Use a **VPN** (hides your real location/identity) while poking around, so the target can’t see you sniffing. > - Don’t collect random people’s personal data for no reason — privacy laws (like GDPR in Europe) exist and bite. > > Basically: look, don’t touch. Public, not private. You’re a detective, not a burglar. * * * **simple-pimple:** - 🎁 Free loot: [elhacker.info](https://elhacker.info/) — courses, wordlists, tools, books - 🌐 OSINT = vacuuming up public info and connecting the dots - 🔌 Start free with **Shodan** , scan your own IP, get hooked - 🤖 Automate later with a tiny Python script - ⚖ Public = legal. Private = jail. Stay on the right side. Throw a target you’d OSINT first in the comments 👇 — your own domain is a good safe start.