20618
Every day I write about #osint (Open Source Intelligence) tools and techniques. Also little bit about forensics and cybersecurity in general. Work in https://t.me/netlas
Search engines for finding pictures of people by face:
Bing Images
Yandex Images
Baidu Images
search4faces.com
faceagle.com
Facecheck.id
Usearsearch.ai (Facecheck integration)
Copyseeker.net (search exact copies of images)
Today I added a new section to my "Dorks collections list" Github repo https://github.com/cipher387/Dorks-collections-list:
Sensitive data dorks
It contains links to articles with sample queries to find erroneously discovered documents with important information on company websites.
#osint
Imagery #OSINT Tools
- general search
- reverse search
- generation
- enhancement
- editing and manipulation
- metadata and forensic
https://ohshint.gitbook.io/oh-shint-its-a-blog/osint-web-resources/imagery-intelligence-imint
Contributor twitter.com/ohshint_
Don't forget to subscribe my Substack Newsletter https://open.substack.com/pub/cybdetective/p/6-2024-search-by-photo-on-google
Читать полностью…
For other free video transcription tools, check out my old mates' Linkedin group (OSINT Experts & Resources, by UserSearch) https://linkedin.com/groups/13047129/
Читать полностью…
Google Street View alternatives:
- Yandex Panoramas
- Bing Streetside
- Apple Look Around
- Baidu Total View
- Mapillary
- KartaView
Exploring the area in Google Street View is most convenient using Google Earth Pro (it's free).
Everything that you can see in Street View + The space between roads in ground-level view + upper floors/roofs on VERY high quality satellite images (history since 1985)
#geoint
Mapping and Geospatial Intelligence Tools #geoint
- General Mapping Tools
- Political, History, Weather, Natural Disaster, Street View, Cellular coverage and other Maps
- Drone Footage
- Landmark Recognition
and more.
https://ohshint.gitbook.io/oh-shint-its-a-blog/osint-web-resources/mapping-and-geospatial-intelligence-geoint
Contributor twitter.com/ohshint_
FININT tools by twitter.com/ohshint_
- cryptocurrency and blockchain
- investments and stocks
- banking
- BINs and card information
and more.
https://ohshint.gitbook.io/oh-shint-its-a-blog/osint-web-resources/financial-intelligence-finint
#osint #finint
60 High-Demand Jobs in Open Source Intelligence
This list (made by Alex Lozano aka cibergy) will be useful for those who want to study a speciality where #OSINT will be useful, but don't know which direction to choose.
Browser Autofill Phishing
A very, very old trick, but still relevant.
Live demo https://anttiviljami.github.io/browser-autofill-phishing/ - see the data you can pass to sites during form autocompletion via the developer console)
Github repo https://github.com/anttiviljami/browser-autofill-phishing
#cybersecurity
Online tools to identify a location from an uploaded photo using AI:
geospy.web.app
earthkit.app
usersearch.org (GeoSpy integration)
picarta.ai
labs.tib.eu/geoestimation/
GeoGuessr GPT https://chatgpt.com/g/g-brlHi7t2R-geoguessr-gpt
Wayback Machine cheat sheet
- quick Archive org viewer
- Wayback Machine CDX API queries
- command line tools
- alternatives
- search Pastebin via Archive org
Text version https://github.com/cipher387/cheatsheets
How to use robots.txt for #OSINT
(article by twitter.com/Altio10076080)
- What is a robots.txt File
- Importance of robots.txt for OSINT & Cybersecurity Professionals
- How to find a Robot.txt file on a website
- How to Find Hidden Information in robots.txt
https://osintteam.blog/robots-txt-a-file-we-all-better-know-a-bit-about-218794b6c1c7
10 Free OSINT tools for Beginners and Pros by twitter.com/wondersmith_rae
An overview of 10 widely known and very useful tools that everyone involved in OSINT should know about (but I'm sure you already know at least 7-8 of them).
https://www.raebaker.net/blog/10-free-osint-tools-for-beginners-and-pros
FACEAGLE
Search by uploaded photo among 4,190,655 face images.
https://faceagle.com/
#osint #socmint
Tip by twitter.com/HolismVision
(for some images may unexpectedly fail to produce results, in this case try a different image)
DPULSE
#Python tool to collect domain information and generate a pdf/xlsx report with the following sections:
- general info
- whois
- social media links
- subdomains
- dns scan
- ssl certificates
- Internet DB API search results
- website technologies
https://github.com/OSINT-TECHNOLOGIES/dpulse
Open Source Web Scanners
- general purpose scanners
- infrastructure scanners
- fuzzers/brute forcers
- CMS scanners
- API scanners
https://github.com/psiinon/open-source-web-scanners
Contributor twitter.com/psiinon
Open Perplex
New free AI search engine and chat assistant.
Based on Meta LLama 3 70B.
Can be used as an alternative to ChatGPT, Perplexity, You etc.
openperplex.com
https://github.com/YassKhazzan/openperplex_backend_os
Creator twitter.com/KhazzanYassine
Whisper TIMESTAMPED
1. Transcript video text (in 100+ languages).
2. When you click on each word, it switches to the corresponding timestamp of the video.
https://huggingface.co/spaces/Xenova/whisper-word-level-timestamps
Free.
May run a little slow (depending on your computer and browser)
PANORAMAX
Google Street View alternative based on Open Street Maps.
panoramax.openstreetmap.fr
* Images for France and few EU countries only.
#geoint
Phone Numbers #OSINT Tools
- general tools
- yellow/white pages worldwide directories
- country specific yellow pages
- country specific white pages
Contributor twitter.com/ohshint_
https://ohshint.gitbook.io/oh-shint-its-a-blog/osint-web-resources/phone-numbers
You've probably seen Gralhix (twitter.com/sofia_santos) #OSINT exercise on Twitter.
This Github repository contains detailed solution descriptions for 14 of these exercises.
https://github.com/Ragmthy/gralhix_osint_exercises/
Contributor Raghmthy
Company registries by country
A list of links to resources (mostly governmental) for collecting information on legal business entities in over 60 different countries.
https://www.disputesregister.org/advice/company-registries-by-country
SquatSquasher
A tool to find domains (by primary domain name) that can be used for type squatting and other #phishing attacks.
https://github.com/Stuub/SquatSquasher
Creator twitter.com/StuartBeck11
#python
You can try this with https://sketch.io/sketchpad/
Читать полностью…
Geospy AI (geospy.ai) can find the approximate location of not only street photos, flat photos, satellite images and photos of people...
Sometimes a very simple drawing is enough.
Searching archive.org by domain using different filters can yield interesting results.
For example, a URL filter containing %40 may show passwords and logins for some accounts for some domains.
Tip by twitter.com/Sayed_v2, twitter.com/RootMoksha
Bitcoin Tracking for Law Enforcement - A Guide to Crypto Investigations by twitter.com/ervin_zubic
- Bitcoin Addresses Explained
- How Bitcoin Transactions Work
- Following Bitcoin on the Blockchain
- Identifying Change Addresses
- Visualization Tools
and more.
https://www.acfcs.org/acfcs-contributor-report-bitcoin-tracking-for-law-enforcement
Overture Maps Explorer (Beta)
Large database of building information: category, name, website, social media, phone, etc. You can view on the map or download data of objects in a certain area in GeoJSON format.
explore.overturemaps.org
Tip by twitter.com/osintcombine