The talking points could be:
- Introduction searching information from multiples sources with OSINT tools.
- OSINT tools developed with python for extracting public information from servers and domains.
- Advantages and limitations these tools from the user point of view.
- Comment how these tools are developed and the main modules used in their development.
Some of the tools to comment are:
Shodan Python API as search engine server information. Tinfoleak and Tweepy as Python scripts for data extraction on twitter. SpiderFoot as a tool for extract information from multiple sources. the Harvester as Python script for extracting emails and hostnames in a particular domain.
This talk's resources available at https://github.com/jmortega/osint_tools_security_auditing