Technical OSINT Fundamentals

Code Examples: Review Public Artifacts Safely

Connecting to LMS... Progress: in progress

Code Examples

Search a Local Public Repository Copy for Public Clues

repo="./public-repo-copy"

rg --line-number --ignore-case \
  "example\.org|api\.example|docker|terraform|helm|package" \
  "$repo" > public-artifact-clues.txt

Parse Package Metadata as a Lead, Not Deployment Proof

import json


with open("package-metadata.json", encoding="utf-8") as source:
    package = json.load(source)

finding = {
    "package": package.get("name"),
    "version": package.get("version"),
    "public_dependencies": sorted((package.get("dependencies") or {}).keys()),
    "limitation": "registry metadata does not prove this package is deployed in production",
    "next_step": "ask the software owner to reconcile with SBOM or inventory data",
}

print(json.dumps(finding, indent=2))