Skip to content
Get packs

Offensive OSINT Methodology

Guides the agent through open-source intelligence recon on a target domain, person, or crypto address

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

This is a playbook that tells an AI agent how to gather publicly available information about a target, such as a company's domains, employees, email addresses, social media accounts, company records, or crypto wallet activity. It lists many existing OSINT websites and tools grouped by purpose, and a fixed workflow: define scope, work through categories, archive each finding with URL, timestamp, screenshot and SHA-256 hash, and log results in JSONL. The file itself contains only links and instructions; it does not run any scripts.

Great for

  • Security professionals doing authorized red team or penetration test reconnaissance
  • Bug bounty hunters mapping an in-scope attack surface
  • Investigators and researchers who need a structured checklist of OSINT resources

Skip it if

  • Profiling or locating private individuals without authorization, since people search, phone lookup and face search tools can enable stalking or harassment
  • Anyone without a clear legal scope or permission for the target, because active reconnaissance can be illegal or violate terms of service
  • Beginners expecting a self-contained tool: it is a methodology with links, and many listed services are paid, gated or may change

Try asking

  • “Run offensive OSINT recon on example-corp.com for an authorized bug bounty scope and list subdomains, exposed emails and GitHub leaks”
  • “Build an attack-surface map for our organization, archiving each finding with a SHA-256 hash and a JSONL log”
  • “Trace the flow of funds from a given cryptocurrency address using the listed tools”
  • “Suggest next OSINT pivots from a username I found on one platform”
Step-by-step guide: how to use Offensive OSINT MethodologyInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-osint.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-osint.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-osint.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Confirm written authorization and a defined scope before running any reconnaissance against a real target
  • Review each linked third-party service's terms and privacy policy before submitting target data to it
  • Ask the agent to explain why each category or tool is relevant so you can keep the search proportionate

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.