## Essential OSINT Tools\n\n### Maltego\n\nGraph-based link analysis tool:\n- Visualize relationships between entities\n- Automated transforms for reconnaissance\n- Connect domains → IPs → organizations → people\n\n**Use cases**: Mapping threat actor infrastructure, phishing campaign analysis\n\n### theHarvester\n\n```bash\ntheHarvester -d target.com -b google,bing,linkedin\n```\n\nGathers:\n- Email addresses\n- Subdomains\n- Employee names\n- Open ports\n\n### SpiderFoot\n\nAutomated OSINT collection:\n- 200+ modules\n- Correlates data automatically\n- Web interface\n- Export to STIX/CSV\n\n### Recon-ng\n\nFramework for web reconnaissance:\n```\nrecon-ng\nworkspaces create target_company\nmodules search whois\nmodules load recon/domains-hosts/hackertarget\noptions set SOURCE target.com\nrun\n```\n\n### Other Useful Tools\n\n| Tool | Purpose |\n|------|--------|\n| **Amass** | Subdomain enumeration |\n| **Sherlock** | Username search across platforms |\n| **ExifTool** | Image/document metadata |\n| **Wayback Machine** | Historical website versions |\n| **Have I Been Pwned** | Breach exposure check |