Aside from routing and domain information, Kali Linux has other tools that can provide a great deal of OSINT to penetration testers. These tools act as search engines and have the ability to cull a variety of resources, such as Google or social networking sites, for email addresses, documents, and domain information. One of the advantages of using these tools is that they do not directly search websites, but rather use other search engines to provide OSINT. This limits the penetration tester's fingerprints on a target system.
Some of these tools are built into Kali Linux and others have to be installed. The following sections present a good subset of the tools that will aid you in the vast majority of information collection.
