## What is OSINT?\n\n**Open Source Intelligence (OSINT)** is intelligence collected from publicly available sources. In cybersecurity, it's used to gather information about threats, adversaries, and attack infrastructure.\n\n### OSINT Sources\n\n| Category | Examples |\n|----------|----------|\n| **Web** | Websites, blogs, forums, paste sites |\n| **Social Media** | Twitter/X, LinkedIn, Telegram, Discord |\n| **Technical** | WHOIS, DNS records, SSL certificates |\n| **Dark Web** | Tor sites, markets, forums |\n| **Code Repos** | GitHub, GitLab, exposed credentials |\n| **Documents** | PDFs, Office docs (metadata) |\n\n### Legal Considerations\n\n✅ **Legal**: Viewing public websites, WHOIS lookups, search engines\n⚠️ **Gray Area**: Scraping (check ToS), creating fake profiles\n❌ **Illegal**: Unauthorized access, hacking, buying stolen data\n\n> 💡 **Golden Rule**: If you need authentication or bypass security controls, it's not OSINT.