> OSINT (Open Source Intelligence)

Gathering information from publicly available sources - search engines, public records, social media, breach-notification services - rather than hacking or stealing anything. A breach checker like Have I Been Pwned is OSINT. A site that sells you the actual leaked passwords is not OSINT, it's trafficking in stolen data. A huge amount of "hacker tool" content online blurs "checks if you were exposed" together with "lets you access what was stolen." They're not the same thing legally or ethically, and knowing the difference is the whole skill.