## Breach Data & E-mail OSINT

### HaveIBeenPwned (HIBP)
Troy Hunt's database.
*   Enter an email. It tells you which breaches it was in (Adobe, LinkedIn, Canva).
*   It does **not** give you the password.

### DeHashed / IntelX
These are paid/grey-hat services that **do** show the password (hashed or cleartext).
*   **Use Case**: Red Teamers use this to credential stuff. "I see Bob's password in 2012 was `Mustang2012`. I bet his password today is `Mustang2025!`".

### IMINT (Image Intelligence)
*   **Geolocation**: Analyzing a photo to find where it was taken.
    *   *Shadows*: Time of day.
    *   *Power Plugs*: Country.
    *   *Signage*: Language/Street names.
*   **EXIF Data**: Metadata inside the JPG. (GPS coordinates, Camera Model). Most social media strips this, but direct uploads to blogs might not.