I’ve been familiar with Kali Linux and with many hacking tools for many years. Over the years, I’ve followed developments in the cybersecurity and ethical hacking space, particularly with a white-hat focus on penetration testing. However, I must admit I hadn’t fully explored the broader and more practical applications of cybersecurity tools beyond ethical hacking—especially in areas like intelligence gathering and digital forensics.

One area gaining traction globally is Open-Source Intelligence (OSINT). It’s a vital framework now used across various fields, especially in intelligence operations.

About three years ago, an intelligence officer from abroad introduced me to Maltego, a powerful OSINT tool used to track suspects and visualize relationships between people, organizations, and data sources. After seeing what it could do, I decided to give it a try myself.

Since then, I’ve learned that many digital platforms and agencies are integrating OSINT frameworks into their systems. These tools are not only used in cybersecurity but also in law enforcement, journalism, threat intelligence, and more.

15 Recommended OSINT Frameworks (2025)

Here are some of the top OSINT tools and frameworks used today:

1. Maltego – Relationship graphing and link analysis tool.
2. SpiderFoot – Automates OSINT collection for threat intelligence.
3. Recon-ng – Web reconnaissance framework with powerful modules.
4. TheHarvester – Gathers emails, subdomains, hosts, and more.
5. Shodan – Search engine for Internet-connected devices.
6. Amass – DNS enumeration and network mapping.
7. Censys – Discover and analyze devices on the internet.
8. Google Dorks – Advanced search queries to find hidden info.
9. HaveIBeenPwned – Checks if your email has been breached.
10. FOCA – Metadata extraction and footprinting tool.
11. OSINT Framework – Directory of categorized OSINT tools.
12. IntelTechniques Tools – OSINT tools curated by Michael Bazzell.
13. Creepy – Geolocation tool for social media data.
14. Metagoofil – Extracts metadata from public documents.
15. Social-Searcher – Monitors mentions across social media platforms.

Earlier today, I was browsing X (formerly Twitter) and saw a post by @DarkWebInformer, a prominent source for cyber threat intelligence. Interestingly, one of our respected local mentors in the ICT field—someone I’ve always looked up to—was engaging in the discussion, especially on OSINT. This reminded me of an overdue meeting I had planned with a police intelligence officer to introduce them to Maltego and OSINT methods. That conversation has now resumed and picked up fresh momentum.

Today I made some more cosmetic changes on the Subdomain Finder. The results should be easier to read. I am currently working on having the UI show a progress based estimate as to when a domain will finish its scan. pic.twitter.com/1OD1O9e2BM

— Dark Web Informer – Cyber Threat Intelligence (@DarkWebInformer) May 15, 2025

From our discussion, one common challenge is that while police and defence advisors may rotate in and out of the country, many of the local police aren’t trained to use advanced digital intelligence tools like Maltego or OSINT platforms effectively. What fascinates me the most is the AI integration—the potential to build suspect profiles and allow AI to analyze behavioural patterns, predict movements, and assist in investigations.

Looking ahead, I hope we can make meaningful progress in this area. This week is Digital Week (also known as ICT Day), and I’d love to see us prepare a proper presentation by 2026 to showcase what we’ve achieved—especially in training and adoption of digital intelligence tools within our law enforcement and national security sectors.

With that said, Happy Digital Week to all tech enthusiasts, cybersecurity learners, and digital advocates across Vanuatu and beyond. Let’s keep pushing forward.