elhacker.info: free courses, wordlists, cracked tools, books — plus OSINT 101
Welcome aboard 
— solid first drop. And damn, what a first drop: a link to elhacker.info, basically a free warehouse of hacking courses, wordlists, cracked pro tools, OS ISOs, and a fat pile of cybersec books. People pay hundreds for half this shit. It’s just sitting there.
The loot: https://elhacker.info/ — courses, MP4 tutorials, 46GB rockyou2024 wordlist, Burp/Metasploit/Cobalt Strike, ebooks, the works.
Below: a dead-simple breakdown of OSINT (digging up info that’s already public — Google, but for finding everything about a target) and the tools that do it. No jargon left unexplained. 
🌐 what the hell is OSINT (2-line version)
OSINT = Open Source Intelligence = collecting info that’s already public and free to grab. Social media, websites, forums, leaked databases, public records — all of it.
Why care? Because everything you’d ever want to know about a website, company, or person is already out there scattered across the internet. OSINT is just the art of vacuuming it all up and connecting the dots. It’s 100% legal when you stick to public stuff, costs nothing, and it’s the first move in basically every hack, investigation, or background check.
Think of it as being a detective who never leaves the couch.
🛠️ the tools that do the digging (plain-English)
You don’t memorize these — you just need to know which one grabs what (all links go straight to the tool):
- Shodan → a search engine for devices, not websites. It finds webcams, servers, routers, smart fridges — anything plugged into the internet. Type a query, see what’s exposed. Scary how much is wide open.
- Maltego → the connection-map drawer. Feed it a name/email/domain and it draws a spiderweb showing how everything links together. Great for “who’s connected to who.”
- theHarvester → the email & subdomain scraper. Point it at a company, it pulls every email address and hidden sub-page it can find from search engines. Phishers love this one.
- SpiderFoot → the auto-recon robot. You give it a target, it runs hundreds of checks on its own while you grab coffee. Lazy person’s best friend.
- Recon-ng / Censys → bulk internet scanners. Find domains, IPs, and exposed assets in bulk.
- FOCA → the metadata snitch. Drop in a PDF or Word doc and it reveals hidden junk inside — who made it, what software, sometimes internal usernames. People forget this stuff is baked into their files.
Start with Shodan (free web version, no install). Search your own home IP and see what’s exposed. Instant “oh shit” moment, instant hooked.
🤖 making it run on autopilot
The whole point is to stop doing this by hand. Two moves:
- Scripts — a little Python program (beginner-friendly coding language) can ask Shodan “show me every device running old, hackable software” and ping you when it finds one. Set it, forget it.
- Scheduled scans — tell SpiderFoot to re-scan your targets every night and flag anything new. You wake up to a report.
That’s it. The fancy version plugs into a SIEM (a security dashboard that collects all your alerts in one place), but you don’t need that to start. A free tool + one script = you’re already ahead of most people.
⚖️ don't be dumb about it
OSINT is legal because it uses public info. The second you log into accounts that aren’t yours, brute-force a password, or grab private data — that’s a different crime entirely. Stay on the public side.
Two habits worth having:
- Use a VPN (hides your real location/identity) while poking around, so the target can’t see you sniffing.
- Don’t collect random people’s personal data for no reason — privacy laws (like GDPR in Europe) exist and bite.
Basically: look, don’t touch. Public, not private. You’re a detective, not a burglar.
simple-pimple:
- Free loot: elhacker.info — courses, wordlists, tools, books
OSINT = vacuuming up public info and connecting the dots
Start free with Shodan, scan your own IP, get hooked
Automate later with a tiny Python script
Public = legal. Private = jail. Stay on the right side.
Throw a target you’d OSINT first in the comments — your own domain is a good safe start.
!