Guide: Using Facebook in OSINT

Article by Nihad A. Hassan:

Facebook background information
Facebook profiles
Inspecting Facebook user's profiles
Practical techniques for inspecting Facebook profiles


https://www.authentic8.com/blog/guide-facebook-osint

#socmint #facebook

The channel of the OSINT Ambition community/OsintCon conference founder has not been restored yet (it was deleted together with other channels with the word "osint" in the name last week). Each of you can help him if you write to Telegram support (@PressBot @AmeliaTearheart @BotSupport
) with a request to restore the @osinambition channel

OSINT Link

Tools + Guides directory:

government records
people search
social media intelligence
grey literature
image search engines
files search engines

and more.

osint.link

Contributor x.com/DarknessGate x.com/onlineosint

ODCrawler

Open directory search engine.

Search videos, audio, images, archives and more.

https://odcrawler.xyz/

#searchengines #osint

Unmasking website ownership using OSINT

Guide by x.com/DarknessGate:

- Investigating website history
- How to perform WHOIS lookup
- Hosting company
- Reverse IP search
- Reverse Google analytics ID
- Website source code
- Inspect associated email addresses

https://authentic8.com/blog/unmasking-website-ownership-using-osint

Collecting OSINT on Discord: a guide

Detailed article by Nihad A. Hassan:

- Discord’s architecture
- Find unlisted Discord servers
- Using Google dorks
- Using the built-in search functionality of the Discord server
- Investigating Discord users profiles

https://authentic8.com/blog/author/nihad-hassan

IDCrawl

Search social media profiles by username:

Instagram, Twitter, Facebook, YouTube etc (results with profile pics and additional data) + email addresses

https://www.idcrawl.com/username-search

Partly free.

#socmint

Introduction to Mastodon for OSINT Practitioners

Detailed article by Nihad A. Hassan

- Mastodon servers
- Running a Mastodon instance
- Finding Mastodon instances

https://authentic8.com/blog/introduction-mastodon-osint-practitioners

#osint

The Time Machine 3.0

- fetch URLs from Archive org
- extract subdomains
- find backup files
- extract GET parameters from URLs

https://github.com/anmolksachan/TheTimeMachine

Extreme quickly. Fetch 100K+ urls in few seconds.

Creator x.com/FR13ND0x7F

VormWeb

Search engine for .onion domains. Not too many indexed sites, but there are Darkglossary definition hints.

https://vormweb.de/en/

#darknet #searchengines

Go for Dorks

Online generator of advanced search queries for Google, Bing, DuckDuckGo, LeaklX, Shodan, Refseek, Fofa, Yandex and other search engines.

Tool: https://dorks.xen00rw.me/
Github repo: https://github.com/xen00rw/GoForDorks

File Pursuit

Open Directory Search Engine. Search audio, video, archives, documents, mobile apps and other files.

Browse list of IPs/domains with open directories.

https://filepursuit.com/

http://Leakix.net

A search engine for web services where common types of vulnerabilities have been found.

(As well as a community of researchers and an online tool for analyzing domain links)

Details: https://leakix.net/about

Archive org does not yet have full text search of saved copies of pages, except for collections (Telegram, Pastebin etc).

But other web archives have such a feature. For example, Australian Troove (7,5B+ snapshots for .com domains + other domains).

https://trove.nla.gov.au/search/

Wayback Machine collection search

twitter.com/BanPangar shared a method for finding emails/nicknames mentions in the text of web pages/docs with archive.org collection search. Help find a lot of things that don't show up in Google results.

Don't forget the quotes.

#osint

reversely.ai

Reverse image and face search engine.

Searches not bad, but in the free version it shows only part of the text from the found page (but it can be useful too).

#osint

Hunchly

It's a good old tool that's worth reminding once again:

- save the pages you visit (text, screenshots, path to opening)
- extract "juicy info" (email, IPs, Tor links and MUCH more + use your own regex)
- make notes, to-do lists
- generate reports

hunch.ly

How to search by keywords in the title of only the main page of the domain? (Google ‘intitle’ operator searches all pages)

One option is to use the "title" operator: in CriminalIP asset search. There are similar features in other IP search engines

criminalip.io

Read more about using IP search engines in Awesome IP Search Engines Github repository https://github.com/cipher387/awesome-ip-search-engines and Netlas Cookbook https://github.com/netlas-io/netlas-cookbook

WebCapture

Simple #Python tool for extracting sensitive data from web pages:
- emails
- phones
- links
- subdomains
+ whois and ip info gathering

https://github.com/drackyjr/WEBCAPTURE

Detect AI

Deep AI image analysis:

- searching for copies of images on different websites
- detect visual anomalies and statistical improbabilities
- detect AI-generated content
- quick google images/google fact-check buttons

detectai.live

Creator x.com/henkvaness