#OSINT
Protip 9:
If you didn't know about this before, you should!
Simple way to bypass the login prompt when scrolling through an
#Instagram
profile.
This technique also works with
#Pinterest
.
#OSINTProtip
#OSINT
Protip 61:
Ship tracking via
#AIS
can give insight into vessel locations, routes, global trade, and even illicit trade.
-
-
-
-
-
#OSINTProtip
#VATINT
#OSINT
Protip 60:
Tracking aircraft is very important for all types of investigations and for research.
#ADSB
is also a lot of fun!
-
-
-
-
-
#OSINTProtip
#OSINT
Protip 8:
OSINT is essentially an umbrella term for intelligence work.
You should familiarize yourself with the common acronyms used in the in intelligence field, as you will likely encounter them in your journey.
Read more here:
-
#OSINTProtip
#OSINT
Protip 58:
The ability to recognize and identify firearms is essential when investigating images and footage coming out of combat zones and other conflict areas.
-
-
-
#OSINTProtip
Just gave the
#OSINT
resource lists a long overdue update. Will be updating these lists much more frequently going forward.
Don't forget to "git pull" every now and again!
-
#OSINT
Protip 10:
#Gmail
addresses ignore dots, but everything else usually does not. Potentially discover new information and additional leads!
Example:
johnathandoe
@gmail
.com and johnathan.doe
@gmail
.com is the same address, but they provide different results:
#OSINTProtip
#OSINT
Protip 38:
Public webcams and WAN facing surveillance cameras can be a great tool for monitoring situations, tracking POIs and more. Some useful tools.
-
-
-
-
#OSINTProtip
#OSINT
Protip 59:
The Internet is an interesting place.
Finding information on
#IoT
devices and networks is an essential skill for threat detection and OSINT.
-
-
-
-
#OSINTProtip
#OSINT
Protip 32:
#Reddit
can be an invaluable resource for any investigation. From deleted content, profiling a subject, or locating the source of content. Here are some tools.
-
-
-
#OSINTProtip
#OSINT
Protip 31
Locating geotagged posts is very useful when researching on-going events, protests and emergencies. Here are some great tools for this:
-
-
-
-
#OSINTProtip
#GEOINT
#OSINT
Protip 57:
Searching for data on the
#BitTorrent
network can help uncover some very useful things. Datasets, books, videos and pretty much anything else.
-
-
-
-
#OSINTProtip
#OSINT
Protip 34:
People tend to re-use the same usernames across multiple platforms. Use this to your advantage to find new pivot points.
-
-
-
-
#OSINTProtip
#OSINT
Protip 40:
Reverse image searching can uncover unexpected results. From locating original works, identifying objects, and locating POIs.
-
-
-
-
#OSINTProtip
#IMINT
#OSINT
Protip 28:
Drone footage can give you better angles and viewpoints during
#GEOINT
investigations.
Here's some great resources.
-
-
-
-
-
#OSINTProtip
#OSINT
Protip 44:
Landmark identification and pinpointing locations where an image or video was taken is a very good skill when investigating current and past events.
-
-
-
#OSINTProtip
#GEOINT
#OSINT
Protip 6:
Flowcharts, use them.
These will ensure that you don't potentially miss anything while investigating different platforms and subjects. Extremely useful!
Created by
@sinwindie
, so go give him a follow and star his GitHub:
#OSINTProtip
#OSINT
Protip 22:
[1/2]
Email addresses are a very powerful piece of information to have.
Discover email addresses via domain:
-
Comfirm that it belongs to your target and see what services they use:
-
#OSINTProtip
#OSINT
Protip 13:
Is
#Instagram
banning your sockpuppets? Use this simple trick to bypass their new "video verification" data collection scheme.
Step 1: Go to
Step 2: Use your phones camera and follow Instagram's instructions.
#OSINTProtip
#Metaverse
#OSINT
Protip 18:
Online maps exist for just about anything. Locations of military bases to Orthodox churches, and everything in between.
Here's a few:
-
-
-
-
#OSINTProtip
#GEOINT
#OSINT
Protip 14:
Books. They contain lots of information, so you should read some!
Here is a list of great OSINT books:
- Open Source Intelligence Techniques 8th Edition by Bazzell, M.
- US Army ATP 2-22.9.
- The Psychology of Intelligence Analysis by Heuer, R.
#OSINTProtip
#OSINT
Protip 27:
When working with onion sites, they may have been archived using clearnet proxies.
Adding .pet to an onion URL and searching it on and/or Wayback sometimes can provide archived copies.
Example:
-
#OSINTProtip
#OSINT
Protip 54:
Searching through
#YouTube
subititles via specific keywords or phrases is excellent for finding videos of interest and/or locating additional information on an event.
-
-
-
#OSINTProtip
#OSINT
Protip 11:
IP addresses can sometimes be useful. Other than geo-location, you can also check to see if and what torrents have been downloaded by searching a specific IP:
-
#OSINTProtip
#OSINT
Protip 30:
WiFi BSSIDs can be very useful during an investigation. Can provide addresses, or even track a targets movements.
-
-
-
-
-
#OSINTProtip
#OSINT
Protip 21:
When searching for a person, username, email or phone number. Sometimes you can discover additional information by searching with emojis.
📧 = Email Addresses.
🌐 = Websites.
👻 = Snapchat.
☎️ or 📞 = Phone Numbers.
💰 or 💸 = PayPal/CashApp/etc.
#OSINTProtip
#OSINT
Protip 35:
Searching for specific strings across paste and code repo sites can sometimes reveal a wealth of interesting data. Here are some useful tools.
- pastebin [dot] ga/
- psbdmp [dot] ws/
- redhuntlabs [dot] com/online-ide-search/
- grep [dot] app/
#OSINTProtip
#OSINT
Protip 33:
Passports and other identification documents are important in daily life and in any investigation. Being able to identify them and verify legitimacy is essential.
-
-
-
#OSINTProtip
#OSINT
Protip 46:
Identifying and monitoring
#blockchain
transactions is essential when working on any crypto case. From ransomware to typical scams.
-
-
-
-
#OSINTProtip
#FININT
#OSINT
Protip 43:
Being able to search through public AWS buckets and open
#Google
drives can help you locate some very interesting things.
-
-
-
#OSINTProtip
#OSINT
Protip 49:
There are so many social media platforms out there. It's important to check these "lesser known" platforms during investigations.
-
-
-
Thanks
@osintcombine
!
#OSINTProtip
#SOCMINT
#OSINT
Protip 47:
Property and real estate records can reveal loads of information like 360° tours, floor plans, construction details, owners and more.
-
-
-
-
#OSINTProtip
#OSINT
Protip 23:
[1/3]
Twitter lists are a great source of information about all kinds of different subjects bundled into one.
Here are a few that I've made:
- [OSINT]
- [GEOINT]
- [ORBINT]
#OSINTProtip
#OSINT
Protip 37:
Stolen property databases are a great resource during loss prevention/asset recovery cases. From vehicles to firearms, here are a few resources.
-
-
-
#OSINTProtip
#OSINT
Protip 45:
Historical WHOIS and DNS records can reveal ownership details or locate other important details via past SOA records.
-
-
-
#OSINTProtip
#DNINT
I just added a bunch of new
#GEOINT
stuff to the
#OSINT
resource list!
All of these lists are available on both GitBook and GitHub as markdown and PDF files:
-
-
If you are one of the cool people, just run a quick "git pull".
#OSINT
Protip 51:
#ShadowLibraries
Essential for the freeflow of information. Whether you are pro or anti-piracy, these libraries are important! Find information on almost any subject.
-
-
-
#OSINTProtip
#OSINT
Protip 39:
Uncovering a targets older and/or alternate usernames can provide additional leads and much more information. Be sure to check for them!
-
-
-
#OSINTProtip
This tool is extremely handy.
It is now part of my initial enumeration workflow during
#OSINT
investigations, I recommend giving it a go!
Great work as always
@SEINT_pl
NAMINT tool updated. New features:
- Google and Yandex name search with face filter,
- search links for name patterns for Google maps, Tiktok, Flickr, vkontakte, and pastebin,
- login search for Twitch
#OSINT
#SOCMINT
#OSINT
Protip 15:
There are many datasets, maps and more online for many different, and very specific things.
Everything from public toilets to license plates.
Here are a few examples:
-
-
-
#OSINTProtip
#OSINT
Protip 48:
Industry and infrastructure maps are essential when doing
#GEOINT
, enviromental monitoring, threat assessments, etc.
-
-
-
-
#OSINTProtip
#OSINT
Protip 66:
Sometimes its necessary to crack/decode various hashes and encoded strings during investigations.
-
-
-
For everything else, use hashcat and wordlists.
#OSINTProtip
#OSINT
Protip 17:
When investigating footage coming out of conflict areas, it's important to identify the types of ordnance used and where it came from.
Here are a few great resources:
-
-
-
#OSINTProtip
#OSINT
Protip 56:
#Breach
data can uncover all kinds of information about a target. Emails, usernames, IPs, etc.
This new service from
@cybersecuwu
will assist you with most investigations.
-
#OSINTProtip
#OSINT
Protip 41:
Whether you are a drug user or investigator (or both). Being able to identify
#drugs
and research chemicals is essential for both harm-reduction and investigations.
-
-
-
#OSINTProtip
I have been AFK for the past week or so, I have been working on a list of various
#OSINT
resources and tools regarding the current conflict in
#Ukraine
.
So far there are over 100 URLs, should be published within the next few days!
In the meantime, stay safe out there.
I apologize for not updating my
#OSINT
resource lists recently and taking forever to release new articles.
Life is getting in the way recently, but I hereby promise to have an onion mirror of my blog, and a new article released by the end of the year.
Hold me to it, friends!
#OSINT
Protip 20:
There are a few databases of scammers available online. Search by email, crypto, name, etc.
Some of these sites are crowd-sourced. So there is risk of false positives.
-
-
-
#OSINTProtip
From carding to conspiracies, Discord has in recent years become massively popular platform
That’s why myself and
@jakecreps
have built Serverse, which gives you the ability to search some of the most popular servers using keywords 🤖
#OSINT
#infosec
#OSINT
Protip 55:
Image boards like 4chan can reveal a ton of information on just about anything. Searching archives can help locate posts, comments, images, etc.
Beware, lots of NSFW.
-
-
-
#OSINTProtip
Decided to scrap my newest
#OSINT
article about Instagram. Was just about finished it when Instagram decided to change all their API endpoints and UI. So typical right? lol.
Anyways, decided to write an article about
#GitHub
OSINT instead.
Stay tuned!
There is a new research database on the block, and you will want to check them out!
@scamsearch_real
Search scam reports via username, email, crypto address and even by image. Also allows you to download a nice PDF of the reports:
-
#Scams
#OSINT
Sad day for the freedon of information.
#ZLibrary
has been taken down.
Whether you are pro-piracy or anti-piracy, this should still matter to you!
Save, copy, mirror, archive and share everything. This is how we will continue to evolve.
#OSINT
Protip 24:
Newspapers, both current and historic, are very valuable sources. Marriages, events, obituaries and more can be found.
Here's a few useful sites.
-
-
-
- Your local library.
#OSINTProtip
#OSINT
Protip 4:
Get yourself a library card (Register with fake information, if possible).
Many times local libraries offer free access to large datasets such as immigration records, ancestry data, newspaper archives, current and historical maps, and much more.
#OSINTProtip
There are already as many as 436 links on my OSINT Tools world map. Many thanks to the members of my Discord server, who share links to services for their countries.
#osint
#geoint
#OSINT
Protip 7:
Federal and local governments often offer GIS data and other data sets for free.
Including interactive maps, property, environmental and infrastructure information for specific areas.
Many of them can be found here:
-
#OSINTProtip
#SurveillanceProtip
2:
Situational awareness is important.
Always practice proper OODA loops and awareness when working in the field.
Read more in US Army - TC 3-22.69:
- [PDF]
This will help you "get off the X" and avoid getting burned.
If you want to read more, check out these great lists of
#OSINT
related books and research papers.
-
-
These are all certainly worth downloading and reading.
Go get learn't!
#OSINTProtip
@kirbstr
- Check and see if and what kind of material they are torrenting:
- Check
for the IPs in any leaked datasets, may discover additional details.
- Shodan, Maltego, DomainTools, Blacklist/Spamlists, MXtoolbox, ThreatCrowd, dig, etc.
Agreed! I personally archive about 10 things daily. Also, dont forget about archiving things on as well!
This goes for anything. Blogs, research, interesting files, open directories, social media profiles, etc.
#SharingIsCaring
#OSINT
#ArchiveEverything
@kirbstr
Reddit tools thread??
Here is a massive interactive map of subreddits:
Here is a tool that helps analyze a Reddit user's account:
A neat tool to search for all comments made by a particular Reddit user:
This is brilliant & extremely useful for
#OSINT
.
Ever wanted to remove an object, person or any defects from a picture to have better reverse image results?
Then TRY this one: it's free!
#SurveillanceProtip
:
When conducting foot surveillance. Many times operators will change their shirt, put on a different coat or put on a hat.
But they wont ever change their shoes once.
People notice seemingly small details like this, so counter it by changing your shoes!
Another great
#OSINT
article by
@dutch_osintguy
! Audio intelligence can be extremely useful, but sadly, it's often overlooked.
Always happy to see articles about the less talked about OSINT topics. ツ
@AaronCTI
Currently, the tool I've seen myself using constantly is the NAMINT tool made by
@SEINT_pl
!
Its an awesome tool that generates possible usernames and email patterns, then gives you links to check for potential target matches.
-
#OSINT
#SOCMINT
#OSINT
Protip 3:
There are archives of Chrome, Firefox and Edge browser extentions that allow you to download older versions, view history, see developer information and other metadata.
-
-
-
#OSINTProtip
Here are some other Tor2Web gateways to check the archives for.
Some of these gateways still work, and some do not.
Just add to the end of any onion URL:
- .sh
- .ly
- .ws
- .to
- .cab
- .city
- .direct
- .top
- .rip
- .plus
- .link
#OSINTProtip
#OSINT
#OSINT
Protip 2:
You can view and download an
#Instagram
post in full resolution by simply adding "/media/?size=l" to the post URL.
Example:
You can also use "?size=m", if you want a smaller resolution.
#OSINTProtip
#OSINT
Protip 19:
S P A C E
The last frontier is certainly an interesting one to research! Earths orbit is a fun thing to investigate, see how polluted our orbit actually is.
Check these tools out:
-
-
#OSINTProtip
#ORBINT
Today I started collecting a list of Twitter accounts that belong to authors of books about
#osint
:
In this thread I will explain which books are behind each account on the list
🧵🧵🧵⤵️⤵️⤵️
#OSINT
Protip:
You can easily download any Google document for offline use by simply editing its URL.
Example (Using
@bellingcat
's Online Investigation Toolkit):
#OSINTProtip
Being able to identify other things like firearms, ordnance, vehicles, aircraft, boats, uniforms and more is also important.
I have a large list of resources to help identify these different types of military equipment, find it here:
-
#OSINTProtip
Finally, my wish for a Skypli alternative has been granted!
This tool is very effective, it doesn't show as much information as Skypli once did as of right now.
However, they are working on adding more functionality. So stay tuned!
Thank you for filling the Skype void
@epieos
!
🎅 Santa Claus arrives a few days late.
You can now use our new
#OSINT
tool to search for
#Skype
accounts with email addresses, phone numbers and nicknames and still without notifying the target!
Try it now here: ⬇️
@OsintJobs
The internet is just one giant book that is written in real-time, about all of us.
You just have to know how to read it, thats where
#OSINT
comes in.
Go beyond Google, go down those rabbit holes and you will find whatever you're looking for!
Always stay ethical, and have fun!
Disclaimer:
As breach data is technically open-source. The malicious use of it can have heavy legal implications.
Using this data for credential-stuffing, phishing, blackmail or any other malicious purpose is against the law.
In other words, don't be shitty.
#OSINTProtip
#OSINT
Protip 16:
You can search for amateur radio operators by callsign, name or FRN.
Results can provide a persons full name, callsign, addresses and in some cases, felony records.
-
-
-
#OSINTProtip
@kirbstr
I find the "Stream Recorder" browser addon for Chrome works quite well for this:
Also "The Stream Detector" addon for Firefox is another great tool for capturing stuff:
@kirbstr
Finding connections on LinkedIn is a pain, but this is what I always try:
- Check endorsements and likes on target posts.
- Using tools like LinkedIn Scraper, linkedin2username, revealin, tarantula, etc.
- Searching through leaked/scraped datasets.
- Use a sock-puppet account.