Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

osint

Étoiles6

Forks0

Mis à jour22 mai 2026 à 15:43

Open Source Intelligence techniques — social media investigation, geolocation from images, DNS/web reconnaissance. Use when gathering intelligence from publicly available sources, identifying a person/location/organization, or performing passive reconnaissance.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

JesusConwellpy

JesusConwellpy/ai-security-methodology

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

SKILL.md

readonly

name	osint
description	Open Source Intelligence techniques — social media investigation, geolocation from images, DNS/web reconnaissance. Use when gathering intelligence from publicly available sources, identifying a person/location/organization, or performing passive reconnaissance.
license	MIT
compatibility	Requires filesystem-based agent with bash, Python 3, curl, and internet access.
allowed-tools	Bash Read Write Edit Glob Grep WebSearch WebFetch
metadata	{"user-invocable":"true","argument-hint":"<target or image-path>"}

OSINT

Document Map

Target	Document
Social media accounts, usernames, profile analysis, Unicode steganography	Social Media
Image location, EXIF, reverse image search, satellite analysis, maps	Geolocation
DNS records, WHOIS, SSL certificates, Wayback Machine, Google dorks, Shodan	DNS & Web Recon

Image Geolocation Checklist

# EXIF data
exiftool image.jpg | grep -iE '(GPS|Location|Date|Camera|Make)'

# Reverse image search (describe approach, do not automate)
# - Google Lens: upload or search by URL
# - Yandex: better for CIS/Asia
# - TinEye: oldest index
# - Baidu: China-specific images

# What to look for in the image:
# - Road signs, license plates, business names, phone numbers
# - Architecture style, vegetation, climate indicators
# - Street markings, driving side, power outlets
# - Language on signs, advertisements, product labels

DNS Recon

# All records
dig ANY target.com
# Zone transfer (rare)
dig AXFR target.com @ns1.target.com
# Specific records
dig A target.com && dig AAAA target.com
dig MX target.com && dig TXT target.com
dig CNAME www.target.com
# Subdomain enumeration
for sub in $(cat subdomains.txt); do
    host "$sub.target.com" 2>/dev/null | grep -E "has (IPv6 )?address"
done

Google Dorks

site:target.com filetype:pdf confidential
site:target.com intitle:"index of"
site:target.com inurl:admin
site:target.com ext:sql | ext:bak | ext:old
site:github.com "target.com" password OR secret OR api_key

Plus depuis ce dépôt

même dépôt

security-methodology

JesusConwellpy/ai-security-methodology

Security research methodology — 5-phase workflow (intake → recon → enum → hunt → report). Routes to specialized technique modules. Use when the user asks to audit, penetration test, bug bounty, find vulnerabilities, exploit a target, or perform any security assessment.

2026-05-236

ai-ml-security

JesusConwellpy/ai-security-methodology

AI/ML attack techniques — prompt injection, indirect/RAG poisoning, tool-calling manipulation, adversarial examples, model extraction, membership inference, training data extraction. Use when the target involves LLM agents, chatbots, ML model APIs, image classifiers, or federated learning systems.

2026-05-226

binary-exploitation

JesusConwellpy/ai-security-methodology

Binary exploitation techniques — buffer overflow, format string, heap exploitation, ROP, kernel exploitation, sandbox escape, shellcode. Use when the target is a native binary (ELF/PE), remote service with memory corruption, or kernel module. Requires pwntools, GDB, and binary analysis tools.

2026-05-226

crypto-attacks

JesusConwellpy/ai-security-methodology

Cryptography attack techniques — RSA, ECC, symmetric ciphers, hash collisions, PRNG attacks, lattice/LWE. Use when the challenge involves encryption, decryption, key recovery, nonce reuse, padding oracles, or cryptanalysis of custom schemes.

2026-05-226

forensics

JesusConwellpy/ai-security-methodology

Forensic analysis techniques — disk, memory, network, steganography, side-channel analysis. Use when given a disk image (.dd, .E01, .raw), memory dump (.vmem, .raw), packet capture (.pcap, .pcapng), image/audio file with hidden data, or side-channel trace.

2026-05-226

malware-analysis

JesusConwellpy/ai-security-methodology

Malware analysis techniques — static triaging, dynamic sandboxing, PE/.NET analysis, C2 protocol identification. Use when analyzing a suspicious binary, script, document, or network capture from a potentially compromised system.

2026-05-226

name	osint
description	Open Source Intelligence techniques — social media investigation, geolocation from images, DNS/web reconnaissance. Use when gathering intelligence from publicly available sources, identifying a person/location/organization, or performing passive reconnaissance.
license	MIT
compatibility	Requires filesystem-based agent with bash, Python 3, curl, and internet access.
allowed-tools	Bash Read Write Edit Glob Grep WebSearch WebFetch
metadata	{"user-invocable":"true","argument-hint":"<target or image-path>"}

OSINT

Document Map

Target	Document
Social media accounts, usernames, profile analysis, Unicode steganography	Social Media
Image location, EXIF, reverse image search, satellite analysis, maps	Geolocation
DNS records, WHOIS, SSL certificates, Wayback Machine, Google dorks, Shodan	DNS & Web Recon

Image Geolocation Checklist

# EXIF data
exiftool image.jpg | grep -iE '(GPS|Location|Date|Camera|Make)'

# Reverse image search (describe approach, do not automate)
# - Google Lens: upload or search by URL
# - Yandex: better for CIS/Asia
# - TinEye: oldest index
# - Baidu: China-specific images

# What to look for in the image:
# - Road signs, license plates, business names, phone numbers
# - Architecture style, vegetation, climate indicators
# - Street markings, driving side, power outlets
# - Language on signs, advertisements, product labels

DNS Recon

# All records
dig ANY target.com
# Zone transfer (rare)
dig AXFR target.com @ns1.target.com
# Specific records
dig A target.com && dig AAAA target.com
dig MX target.com && dig TXT target.com
dig CNAME www.target.com
# Subdomain enumeration
for sub in $(cat subdomains.txt); do
    host "$sub.target.com" 2>/dev/null | grep -E "has (IPv6 )?address"
done

Google Dorks

site:target.com filetype:pdf confidential
site:target.com intitle:"index of"
site:target.com inurl:admin
site:target.com ext:sql | ext:bak | ext:old
site:github.com "target.com" password OR secret OR api_key