Updated: April 4, 2026
For use ONLY with a new Debian 13 install
These will assist with the creation of your custom machine and will be updated as things change
Full usage details are available in the book: https://inteltechniques.com/book1.html
Slight variations may be present for Windows/Mac users (such as 'Next' vs. 'Continue')
Please report any issues to errors@inteltechniques.com
Copyright 2026 Michael Bazzell
These instructions are provided 'as is' without warranty of any kind
In no event shall the copyright holder be liable for any claim, damages or other liability
Full license information and restrictions at https://inteltechniques.com/osintbook11/license.txt
Installation script at https://inteltechniques.com/osintbook11/linux.sh 
-------------------------------------------------------------------------------
macOS HOST CONFIGURATION
-------------------------------------------------------------------------------
softwareupdate --install-rosetta --agree-to-license
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
brew doctor
brew update
brew upgrade
brew analytics off
brew install --cask taskexplorer
brew install --cask knockknock
brew install clamav
sudo mkdir /usr/local/sbin
sudo chown -R `whoami`:admin /usr/local/sbin
brew link clamav
cd /opt/homebrew/etc/clamav/
cp freshclam.conf.sample freshclam.conf
sed -ie 's/^Example/#Example/g' freshclam.conf 
freshclam -v 
clamscan -r -i / 
clamscan -i -r --remove=yes /
brew install --cask protonvpn
brew install --cask keepassxc
brew install --cask utm
brew install --cask crystalfetch
-------------------------------------------------------------------------------
LINUX HOST CONFIGURATION 
-------------------------------------------------------------------------------
sudo apt update
sudo apt install -y clamav clamav-daemon
sudo systemctl stop clamav-freshclam
sudo freshclam
sudo systemctl start clamav-freshclam
clamscan -r -i /
clamscan -r -i --remove=yes /
sudo apt purge -y apport apport-symptoms popularity-contest ubuntu-report whoopsie
sudo apt autoremove -y
sudo apt install bleachbit
sudo add-apt-repository ppa:phoerious/keepassxc
sudo apt update && sudo apt install keepassxc 
wget -O- https://www.virtualbox.org/download/oracle_vbox_2016.asc | sudo gpg --dearmor --yes --output /usr/share/keyrings/oracle-virtualbox-2016.gpg
echo "deb [arch=amd64 signed-by=/usr/share/keyrings/oracle-virtualbox-2016.gpg] http://download.virtualbox.org/virtualbox/debian $(lsb_release -cs) contrib" | sudo tee /etc/apt/sources.list.d/virtualbox.list
sudo apt update
sudo apt install virtualbox-7.0
sudo apt upgrade
sudo apt update
sudo apt install -y build-essential dkms gcc make perl
sudo rcvboxadd setup
reboot
vmware-installer -u vmware-player
git clone https://github.com/mkubecek/vmware-host-modules
cd vmware-host-modules
git checkout workstation-17.5.1
sudo make ; sudo make install
-------------------------------------------------------------------------------
VM SOFTWARE
-------------------------------------------------------------------------------
sudo apt install spice-vdagent spice-webdavd -y
sudo groupadd vboxusers
sudo usermod -aG vboxusers osint
sudo groupadd vboxsf
sudo usermod -aG vboxsf osint
gsettings set org.gnome.desktop.background picture-uri '' 
gsettings set org.gnome.desktop.background picture-uri-dark ''
gsettings set org.gnome.desktop.background primary-color 'rgb(66, 81, 100)' 
gsettings set org.gnome.desktop.wm.preferences button-layout ":minimize,maximize,close"
sudo apt update && sudo apt upgrade -y
-------------------------------------------------------------------------------
BROWSER INSTALLATION
-------------------------------------------------------------------------------
Launch and then close Firefox, then execute the following:

sudo apt update
sudo apt install -y curl  
cd ~/Desktop 
curl -O https://inteltechniques.com/data/osintvm/ff-template.zip  
unzip ff-template.zip -d ~/.mozilla/firefox/
cd ~/.mozilla/firefox/ff-template/
cp -R * ~/.mozilla/firefox/*.default-esr*
cd ~/Desktop && rm ff-template.zip

sudo curl -fsSLo /usr/share/keyrings/brave-browser-archive-keyring.gpg https://brave-browser-apt-release.s3.brave.com/brave-browser-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg] https://brave-browser-apt-release.s3.brave.com/ stable main"|sudo tee /etc/apt/sources.list.d/brave-browser-release.list
sudo apt update && sudo apt install brave-browser -y

sudo apt update && sudo apt install flatpak -y
flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
flatpak install flathub org.torproject.torbrowser-launcher -y
flatpak run org.torproject.torbrowser-launcher
flatpak update
-------------------------------------------------------------------------------
OPTIONAL: BROWSER REBUILD
-------------------------------------------------------------------------------
cd ~/.mozilla/firefox/*.default-esr*
rm -r *
cd ~/Desktop 
curl -O https://inteltechniques.com/data/osintvm/ff-template.zip  
unzip ff-template.zip -d ~/.mozilla/firefox/
cd ~/.mozilla/firefox/ff-template/
cp -R * ~/.mozilla/firefox/*.default-esr*
cd ~/Desktop && rm ff-template.zip
-------------------------------------------------------------------------------
VM CONFIGURATION
-------------------------------------------------------------------------------
sudo apt update
sudo apt install python3-pip -y
sudo rm /usr/lib/python3.*/EXTERNALLY-MANAGED   
sudo apt install pipx -y
pipx install gnome-extensions-cli
tput reset && source ~/.profile
sudo apt install gettext -y
mkdir ~/Downloads/Programs
sudo apt install sassc -y
sudo apt install git -y   
git clone https://github.com/micheleg/dash-to-dock.git
make -C dash-to-dock install
gsettings --schemadir ~/.local/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com/schemas/ set org.gnome.shell.extensions.dash-to-dock autohide false
gsettings --schemadir ~/.local/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com/schemas/ set org.gnome.shell.extensions.dash-to-dock autohide-in-fullscreen false
gsettings --schemadir ~/.local/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com/schemas/ set org.gnome.shell.extensions.dash-to-dock intellihide false
gsettings --schemadir ~/.local/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com/schemas/ set org.gnome.shell.extensions.dash-to-dock dash-max-icon-size 32
gsettings --schemadir ~/.local/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com/schemas/ set org.gnome.shell.extensions.dash-to-dock dock-fixed true
gsettings --schemadir ~/.local/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com/schemas/ set org.gnome.shell.extensions.dash-to-dock dock-position 'LEFT'
gsettings --schemadir ~/.local/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com/schemas/ set org.gnome.shell.extensions.dash-to-dock extend-height true
gnome-extensions enable dash-to-dock@micxgx.gmail.com 
gnome-extensions-cli install 2087
gsettings set org.gnome.Terminal.Legacy.Settings theme-variant 'dark'
gsettings set org.gnome.desktop.wm.preferences button-layout ":minimize,maximize,close"
gsettings set org.gnome.desktop.background picture-uri '' 
gsettings set org.gnome.desktop.background picture-uri-dark ''
gsettings set org.gnome.desktop.background primary-color 'rgb(66, 81, 100)' 
gsettings set org.gnome.desktop.notifications show-banners false
gsettings set org.gnome.desktop.session idle-delay 0
sudo systemctl mask suspend.target
gsettings set org.gnome.desktop.screensaver lock-enabled false
gsettings set org.gnome.desktop.peripherals.touchpad natural-scroll true
gsettings set org.gnome.desktop.peripherals.mouse natural-scroll true
gsettings set org.gnome.mutter center-new-windows true
sudo apt install -y curl  
cd ~/Desktop 
firefox &
sleep 10
pkill -f firefox
curl -O https://inteltechniques.com/data/osintvm/ff-template.zip  
unzip ff-template.zip -d ~/.mozilla/firefox/
cd ~/.mozilla/firefox/ff-template/
cp -R * ~/.mozilla/firefox/*.default-esr*
cd ~/Desktop && rm ff-template.zip
sudo apt update
sudo apt install curl
sudo curl -fsSLo /usr/share/keyrings/brave-browser-archive-keyring.gpg https://brave-browser-apt-release.s3.brave.com/brave-browser-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg] https://brave-browser-apt-release.s3.brave.com/ stable main" | sudo tee /etc/apt/sources.list.d/brave-browser-release.list
sudo apt update
sudo apt install brave-browser -y 
sudo apt install flatpak -y
sudo flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
flatpak install flathub org.torproject.torbrowser-launcher -y
flatpak run org.torproject.torbrowser-launcher
sudo apt install vlc -y
sudo apt install ffmpeg -y
sudo apt install python3-venv -y
pipx install yt-dlp
pipx ensurepath
pipx install streamlink
tput reset && source ~/.profile
flatpak kill org.torproject.torbrowser-launcher
pipx install sherlock-project
pipx install socialscan
mkdir ~/Downloads/Programs
cd ~/Downloads/Programs
git clone https://github.com/p1ngul1n0/blackbird
cd blackbird
pip install -r requirements.txt
cd ~/Downloads/Programs
git clone https://github.com/soxoj/maigret.git Maigret
cd Maigret
pip install .
cd ~/Downloads/Programs
git clone https://github.com/C3n7ral051nt4g3ncy/WhatsMyName-Python.git
cd WhatsMyName-Python
pip install -r requirements.txt
pipx install bdfr
USER_NAME="$USER"
FILE="/home/$USER_NAME/.local/lib/python3.13/site-packages/bdfr/oauth2.py"
sed -i 's/OAuth2TokenManager(praw\.reddit\.BaseTokenManager):/OAuth2TokenManager:/' "$FILE"
pipx install holehe
mkdir ~/Downloads/Programs/eyes
cd ~/Downloads/Programs/eyes
git clone https://github.com/N0rz3/Eyes.git
cd Eyes
pip install -r requirements.txt
pipx install ghunt
pipx install h8mail
tput reset && source ~/.profile
cd ~/Downloads
pip install -U h8mail
h8mail -g
sed -i 's/\;leak\-lookup\_pub/leak\-lookup\_pub/g' h8mail_config.ini
pipx install search-that-hash
pipx install name-that-hash
pipx install gallery-dl
cd ~/Downloads
sudo apt install wget
sudo apt install default-jre -y
wget https://github.com/RipMeApp/ripme/releases/download/2.1.20-14-5a3070e4/ripme-2.1.20-14-5a3070e4.jar
chmod +x ripme-2.1.20-14-5a3070e4.jar
mv ripme-2.1.20-14-5a3070e4.jar ripme.jar
pipx install instaloader
pipx install toutatis
cd ~/Downloads/Programs
git clone https://github.com/Datalux/Osintgram.git
cd Osintgram
pip install -r requirements.txt
cd ~/Downloads/Programs
git clone https://github.com/ChrisTruncer/EyeWitness.git
cd EyeWitness/Python/setup
sudo ./setup.sh
wget https://github.com/mozilla/geckodriver/releases/download/v0.34.0/geckodriver-v0.34.0-linux-aarch64.tar.gz
tar -xvzf geckodriver*
chmod +x geckodriver
sudo mv geckodriver /usr/local/bin
sudo apt install httrack -y
sudo apt install webhttrack -y
pipx install waybackpy
pipx install waybackpack
cd ~/Downloads
ver=$(dpkg --print-architecture)
wget https://github.com/owasp-amass/amass/releases/download/v5.0.1/amass_Linux_"$ver".tar.gz
mkdir ~/Downloads/Programs/Amass
tar -xvf amass_Linux_"$ver".tar.gz -C ~/Downloads/Programs/Amass/
cd Programs/Amass/amass_linux_"$ver"/
mv * ~/Downloads/Programs/Amass
rm -r ~/Downloads/Programs/Amass/amass_linux_"$ver"/
cd ~/Downloads/Programs
git clone https://github.com/s0md3v/Photon.git
cd Photon
pip install -r requirements.txt
cd ~/Downloads/Programs
git clone https://github.com/aboul3la/Sublist3r.git
cd Sublist3r
pip install -r requirements.txt
cd ~/Downloads/Programs
git clone https://github.com/laramies/theHarvester.git
cd theHarvester
curl -LsSf https://astral.sh/uv/install.sh | sh
uv sync
cd ~/Downloads/Programs
git clone https://github.com/Lazza/Carbon14
cd Carbon14
pip install -r requirements.txt
pipx install changedetection.io
pipx install archivebox
sudo apt install libimage-exiftool-perl -y
cd ~/Downloads/Programs
git clone https://github.com/opsdisk/metagoofil.git
cd metagoofil
pip install -r requirements.txt
sudo apt install mediainfo-gui -y
sudo apt install mat2 -y
pipx install xeuledoc
sudo apt-get install libxml2-dev libxslt1-dev   
cd ~/Downloads/Programs
sudo apt install python3-testresources subversion -y
git clone https://github.com/GuidoBartoli/sherloq.git
pip install astor==0.8.*
pip install concurrent-iterator==0.2.*
pip install keras-applications==1.0.*
pip install lxml
pip install matplotlib==3.8.*
pip install opencv-contrib-python-headless==4.*
pip install pandas
pip install pyside6
pip install python-magic==0.4.*
pip install rawpy
pip install scikit-learn==1.5.*
pip install sewar==0.4.*
pip install tensorflow
pip install xgboost==1.6.*
pip install pillow
pip install PyWavelets==1.5.*
cd ~/Downloads/Programs
git clone https://github.com/smicallef/spiderfoot.git
cd spiderfoot
FILE="requirements.txt"
sed -i '/^lxml/d' "$FILE"
pip install -r requirements.txt
cd ~/Downloads/Programs
git clone https://github.com/lanmaster53/recon-ng.git
cd recon-ng
pip install -r REQUIREMENTS
cd ~/Downloads/Programs
git clone https://github.com/Lucksi/Mr.Holmes
cd ~/Downloads/Programs
sudo apt install curl sq -y
curl -fsSL https://apt.vulns.sexy/kpcyrd.pgp | gpg --dearmor | sudo tee /usr/share/keyrings/apt-vulns-sexy.gpg > /dev/null
echo "deb [signed-by=/usr/share/keyrings/apt-vulns-sexy.gpg] https://apt.vulns.sexy stable main" | sudo tee /etc/apt/sources.list.d/apt-vulns-sexy.list > /dev/null
sudo apt update
sudo apt install sn0int -y
pipx install internetarchive
sudo apt install kazam -y
sudo apt install bleachbit -y
curl -fsSL https://dl.google.com/linux/linux_signing_key.pub | gpg --dearmor | sudo tee /usr/share/keyrings/google-linux.gpg > /dev/null
echo "deb [signed-by=/usr/share/keyrings/google-linux.gpg] http://dl.google.com/linux/earth/deb stable main" | sudo tee /etc/apt/sources.list.d/google-earth.list > /dev/null
wget http://dl.google.com/dl/earth/client/current/google-earth-stable_current_amd64.deb
sudo apt install -y ./google-earth-stable_current_amd64.deb
sudo rm google-earth-stable_current_amd64.deb
sudo rm /etc/apt/sources.list.d/google-earth-pro.list
sudo apt update
sudo apt upgrade -y
sudo apt update --fix-missing
sudo apt --fix-broken install
sudo apt autoremove -y
mkdir ~/Documents/scripts
cd ~/Documents/scripts
curl -O https://tuvm:311@inteltechniques.com/osintvm/api.sh
curl -O https://tuvm:311@inteltechniques.com/osintvm/domain.sh
curl -O https://tuvm:311@inteltechniques.com/osintvm/framework.sh
curl -O https://tuvm:311@inteltechniques.com/osintvm/image.sh
curl -O https://tuvm:311@inteltechniques.com/osintvm/metadata.sh
curl -O https://tuvm:311@inteltechniques.com/osintvm/update.sh
curl -O https://tuvm:311@inteltechniques.com/osintvm/user.sh
curl -O https://tuvm:311@inteltechniques.com/osintvm/video.sh
chmod +x api.sh
chmod +x domain.sh
chmod +x framework.sh
chmod +x image.sh
chmod +x metadata.sh
chmod +x update.sh
chmod +x user.sh
chmod +x video.sh
curl -O https://tuvm:311@inteltechniques.com/osintvm/api.desktop
curl -O https://tuvm:311@inteltechniques.com/osintvm/domain.desktop
curl -O https://tuvm:311@inteltechniques.com/osintvm/framework.desktop
curl -O https://tuvm:311@inteltechniques.com/osintvm/image.desktop
curl -O https://tuvm:311@inteltechniques.com/osintvm/metadata.desktop
curl -O https://tuvm:311@inteltechniques.com/osintvm/search.desktop
curl -O https://tuvm:311@inteltechniques.com/osintvm/update.desktop
curl -O https://tuvm:311@inteltechniques.com/osintvm/user.desktop
curl -O https://tuvm:311@inteltechniques.com/osintvm/video.desktop
curl -O https://tuvm:311@inteltechniques.com/osintvm/api.png
curl -O https://tuvm:311@inteltechniques.com/osintvm/domain.png
curl -O https://tuvm:311@inteltechniques.com/osintvm/framework.png
curl -O https://tuvm:311@inteltechniques.com/osintvm/image.png
curl -O https://tuvm:311@inteltechniques.com/osintvm/metadata.png
curl -O https://tuvm:311@inteltechniques.com/osintvm/search.png
curl -O https://tuvm:311@inteltechniques.com/osintvm/update.png
curl -O https://tuvm:311@inteltechniques.com/osintvm/user.png
curl -O https://tuvm:311@inteltechniques.com/osintvm/video.png
sudo mv *.desktop /usr/share/applications/
gsettings set org.gnome.shell favorite-apps []
gsettings set org.gnome.shell favorite-apps "['firefox-esr.desktop', 'org.torproject.torbrowser-launcher.desktop', 'org.gnome.Nautilus.desktop', 'org.gnome.Terminal.desktop', 'update.desktop', 'search.desktop', 'video.desktop', 'user.desktop', 'image.desktop', 'domain.desktop', 'metadata.desktop', 'framework.desktop', 'api.desktop', 'google-earth-pro.desktop', 'kazam.desktop', 'org.gnome.Settings.desktop']"
gsettings --schemadir ~/.local/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com/schemas/ set org.gnome.shell.extensions.dash-to-dock dash-max-icon-size 32
echo
read -rsp $'Complete! Please reboot. \n'
echo
cd ~/Desktop
curl -O https://inteltechniques.com/data/osintbook11/tools.zip
unzip tools.zip -d ~/Desktop/
rm tools.zip
rm -rf __MACOSX
sudo apt install -y ripgrep
cd ~/Downloads/Programs
git clone https://github.com/AmIJesse/Elasticsearch-Crawler.git
pipx install nested-lookup   
sudo apt install -y jq