OSINT Sandbox
A safe, fake company profile — practise open-source recon technique without touching anything real.
Open-source intelligence is the reconnaissance phase done entirely with public information. This is a fabricated company profile, so you can practise the methodology — pivoting from one detail to the next — without touching a real organisation.
How to use it
- Start from the company name and find its public surface.
- Pivot from each detail to the next.
- Assemble what an attacker would know before sending a single packet.
What to take away
People are the largest surface
Job postings name internal technology. Conference talks name architecture. Employee profiles name tools and teams. None of it requires touching the target.
Passive means genuinely passive
Reading public records is passive. Port scanning is not, and the line matters legally as well as tactically.
Frequently asked questions
Is OSINT legal?
Gathering public information generally is. What you do with it is governed separately — and accessing a system without authorisation is not OSINT regardless of how you found it.
What do defenders do with OSINT?
Run it against themselves. Knowing what leaks about your own organisation is the only way to reduce it.
Where this fits in the course
This security lab pairs with Path 14 — Ethical Hacking — see all 26 learning paths.
It runs entirely in your browser: nothing is uploaded, no account is needed, and it is free.
Related
- DNS Recon Playground — A simulated dig. Query a target's likely subdomains and build a map of its real, sometimes-forgotten attack surface.
- Phishing Spotter — Real email or phish? Call each one, then see the exact red flags you spotted (or missed). Trains the instinct that stops most attacks.
- Subdomain Takeover Simulator — Five DNS records, one dangling CNAME pointing at a deleted third-party resource. Find it before someone else claims it.
- Leaked Secret Hunt — A public GitHub repo dump. Find the hardcoded API key an automated scanner would catch in minutes — before an attacker does.