PNPT Notes

OSINT

Store recon notes, username formats, email patterns, metadata findings, and search methodology.

Notes

OSINT Working Notes

Import Notes

Checklist

OSINT Checklist

Identify root domains and subdomains Identify likely email format Gather usernames / employee naming patterns Review exposed documents / metadata Check breach / credential exposure sources Review social / public profiles Identify public infrastructure clues

Prompts

What to Capture

Company naming conventions
Likely usernames and email patterns
Document metadata
Public technologies in use
Login portals and subdomains
Recon that supports the attack path

Reminders

OSINT Focus

Keep the notes practical. Capture what helps you gain context, shape usernames, identify public services, and build a likely attack path.