Course
TryHackMe OSINT rooms
TryHackMe and community authors
A dozen free, browser-based rooms that each teach one OSINT technique in under an hour. Hands-on from the first minute, and capped at beginner level.
TryHackMe groups its OSINT content under one topic with a set of free rooms tagged easy: digital footprints, Google dorking, Shodan, image intelligence, a missing-person scenario, and more. You answer questions and submit flags as you go, so you cannot drift through without doing the work.
Worth it if
- You want to try a technique today, not read about it
- You are working through OSINT Dojo and need pre-approved rooms
- You like checkpoints: each room tells you when you have it right
- You are new to Linux tools and want them set up for you in the browser
Skip it if
- You are past the basics; there is no advanced OSINT track
- You want method and judgement rather than flag-hunting
- You need a certificate an employer recognises
What is inside
- 01
Digital footprint and dorking
Rooms on what you leak online and on search operators that find it, including image-specific dorking.
- 02
Scenario rooms
OhSINT starts from an image's metadata; Sakura Room, written by OSINT Dojo, follows an attacker across platforms; Missing Person and Seven Minutes on the Seine run a short investigation.
- 03
Imagery
Searchlight IMINT covers geolocation basics, reverse image search, and pulling frames from video, in about nine tasks.
- 04
Infrastructure
A Shodan room on searching exposed devices and services.
What you will be able to do
- Use search operators to find specific file types, sites, and phrases
- Pull metadata from an image and pivot from it
- Run a short, scripted investigation from one seed to a profile
- Search Shodan for a service and read the result
How current it is
The topic page is maintained and the platform is very active. Individual rooms are community-authored and age at different rates; OhSINT was updated in 2024, others have not been touched in years. Room pages rate-limit aggressive fetching, so check a room's last-updated date inside the platform.
- Updated
- Topic page current in 2026; some rooms refreshed in 2024
- Maintained
- Actively maintained
How to get the most from it
- 01
Do the rooms in difficulty order
Start with Digital Footprint and Google Dorking, then OhSINT and Sakura, then Searchlight IMINT. Leave the scenario rooms until the techniques feel easy.
- 02
Write up each room
A short note on what the room taught and what you would do differently. Public write-ups of these rooms are plentiful; yours is for you.
- 03
Do not pay for OSINT alone
The subscription is worth it if you also want the wider security content. For OSINT, the free rooms plus the other free resources here cover the same ground.
Strengths
- Nothing to install; hands-on immediately
- Clear completion signals
- Several rooms count toward OSINT Dojo ranks
Limitations
- Beginner-only for OSINT
- Flag-hunting can reward guessing over method
- Room quality varies by author
Pair it with
FAQ
Questions, answered
Which rooms are free?
The OSINT topic page lists the free starter rooms, all tagged easy: Digital Footprint, Water Bottle, Google Dorking, Shodan.io, OhSINT, Sakura Room, Missing Person, Searchlight IMINT, Dev Diaries, Operation Slither, The Case: Seven Minutes on the Seine, and Letter.
Is there an OSINT learning path on TryHackMe?
No single official OSINT path exists. The topic page is the closest thing, which is why this entry points there rather than at individual rooms.
Learned the method? Practise it on real data
The resources above teach the craft. When you want to run real lookups across breach, people, domain, and crypto sources without opening a dozen vendor accounts, that is what SearchIn is for.
- Free account, no card
- Credits never expire
- Refund unused balance in 7 days