osint

Gather open-source intelligence on target domains and organizations.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/overtimepog/greyhatcc --skill osint-overtimepog
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: osint
Source: https://github.com/overtimepog/greyhatcc/tree/main/skills/osint
Command: npx skills add https://github.com/overtimepog/greyhatcc --skill osint-overtimepog

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of gathering open-source intelligence on a target, helping to identify potential vulnerabilities and understand their digital footprint.

Core Features & Use Cases

  • Organizational Profiling: Gathers information about a company's structure, key personnel, and business model.
  • Infrastructure Mapping: Discovers external-facing assets, cloud resources, and network infrastructure.
  • Attack Surface Discovery: Identifies potential entry points and vulnerabilities through various intelligence layers.
  • Use Case: When investigating a new target for a penetration test, use this Skill to quickly build a comprehensive profile of their online presence, including their technology stack, employee information, and exposed infrastructure.

Quick Start

Run the osint skill with the target domain example.com to begin gathering intelligence.

Frequently Asked Questions about osint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map an organization's attack surface for vulnerability research?▼

Open-source intelligence gathering maps an attack surface by profiling organizational structures, enumerating employees, and discovering external-facing infrastructure to identify potential entry points and vulnerabilities.

Can I automate employee enumeration and GitHub intelligence for a target domain?▼

Yes, intelligence gathering automates employee enumeration and GitHub intelligence by leveraging multiple search queries across data sources to build a comprehensive organizational profile for a target domain.

What is included in infrastructure mapping and cloud asset discovery?▼

Infrastructure mapping and cloud asset discovery identify external-facing assets and network infrastructure. This process reveals exposed cloud resources and technology stacks to highlight potential vulnerabilities.

Does this OSINT skill require any external dependencies to run?▼

No, this intelligence gathering skill has zero dependencies. You can run it directly with a target domain like example.com to begin gathering intelligence without installing additional external packages.

How do I analyze breach intelligence and job postings during reconnaissance?▼

Reconnaissance analyzes breach intelligence and job postings by querying multiple data sources. This reveals exposed credentials and details about the target's technology stack and business model.