20618
Every day I write about #osint (Open Source Intelligence) tools and techniques. Also little bit about forensics and cybersecurity in general. Work in https://t.me/netlas
WhereIsThisPhoto
Another online service for approximate geolocation of photos using AI. Partly free.
https://www.whereisthisphoto.com/
#osint #geoint
OSINTCon by OsintAmbition has already begun. You can listen to presentations about #OSINT right now, free of charge and online.
https://streamyard.com/watch/Q5NyxSj43HAb
Today talks - Chris Young, Petr Vancl Hochberger and Roelof Temmingh.
https://osintconference.com/agenda
SPOTTR
An online tool for finding specific objects in videos. Simply describe what you want to find in words and receive timecodes where it appears.
https://usespottr.com/
Free trial credits
#osint #geoint #ai
The Digital Blueprint: Mapping Your Attack Surface with #OSINT Before the Adversary Does
The OSINT Mindset: Thinking Like an Adversary
The Methodology: A Phased Approach to Attack Surface Mapping
The Toolkit: Your OSINT Arsenal
https://preciousvincentct.medium.com/article-title-the-digital-blueprint-mapping-your-attack-surface-with-osint-before-the-adversary-ed8cde55cb7c
By d4rk_intel
Open Source Intelligence: Free Satellite Services for Investigations
Detailed article with technical specifications and limitations by _aircorridor for Hackers Arise.
NASA Earth, EOSDA, Copernicus and Google Earth.
https://hackers-arise.com/open-source-intelligence-free-satellite-services-for-investigations/
#geoint #osint
The Linkedin OSINT Investigation Guide
LinkedIn OSINT Collection Techniques
Analyzing Individual Profiles
Analyzing Posts & Engagement
Analyzing Company Pages
Defensible Evidence Collection
WebPreserver for LinkedIn
https://blog.pagefreezer.com/linkedin-osint-investigation-guide
By Nihad A. Hassan
The Ultimate Guide to Launching a Career in Open-Source Intelligence (OSINT): From Beginner to Professional by d4rk_Intel
What is OSINT and Why Does It Matter?
Strategic OSINT Job Hunting on LinkedIn
Resource Index: URLs & Organizations
and more.
https://preciousvincentct.medium.com/the-ultimate-guide-to-launching-a-career-in-open-source-intelligence-osint-from-beginner-to-0b3dd09ec88f
Legendary OSINT by K2OSINT
Github repo with with hundreds of #osint tools in different categories: people search, aviation, reverse image search, dark web etc
https://github.com/K2SOsint/Legendary_OSINT
#socmint #geoint
Crypto & Blockchain Investigation Resources
👀Blockchain Explorers
🧐OSINT & Visualization Tools
😡Abuse & Scam Databases
👮Compliance, Risk & AML
👩💼Analytic Services
💰Exchanges & Wallets
🕵️Investigation Workflows
https://github.com/K2SOsint/Legendary_Crypto
#osint #crypto
I've already written about noticing that GitHub deletes certain repositories containing collections of links related to hacking, darknet research, etc. (along with accounts and without explanations)
My account is fine for now, but just in case:
https://gitlab.com/cyb_detective/osint_stuff_tool_collection
Obsidian OSINT Templates & Plugins
- Sample Obsidian Graph
- Entities
- Properties
- Learn Obsidian for OSINT
- Best Practices
- Recommended Plugins
- Obsidian Basics
https://github.com/resistec/obsidian-osint-templates
#osint #obsidian
OSINTMAILER
Email information gathering #Python tool:
- search avatar in Gravatar
- check email reputation
- check Github account registration
- quick links to google dorks for email info/social media accounts/search
https://github.com/techenthusiast167/OSINTMAILER-
Creator x.com/CtPrecious
#socmint
Wayback Machine collection search
twitter.com/BanPangar shared a method for finding emails/nicknames mentions in the text of web pages/docs with archive.org collection search. Help find a lot of things that don't show up in Google results.
Don't forget the quotes.
#osint
Guide: Using Facebook in OSINT
Article by Nihad A. Hassan:
Facebook background information
Facebook profiles
Inspecting Facebook user's profiles
Practical techniques for inspecting Facebook profiles
https://www.authentic8.com/blog/guide-facebook-osint
#socmint #facebook
You can also subscribe to Substack (https://cybdetective.substack.com/) so I don't lose you (just enter any email address). I send emails very rarely (only two since the beginning of the year).
Читать полностью…
The Pika OSINT Toolbox
I already wrote about it a few months ago, but since then a lot of new stuff has been added to the list, and it now has not only a repository but also a website https://pikaosint.pages.dev/
#osint #socmint #geoint
Digital Profiler's Toolkit
List of tools and resources by @pavelbannikov:
Research
Target Identification
Arrange Your Findings
Some Thoughts About OSINT Design and OPSEC
Professional Standards for Work and reports
https://github.com/paulpogoda/Digital-Profiler-s-Toolkit
#osint #socmint
Free Top Ten Threat Intelligence Platforms
List by d4rk_intel:
ThreatBook CTI
VirusTotal
MISP Threat Sharing
Threat Fox
IOC Rader
AbuseIPDB
AlienVault Open Threat Intelligence Platform
Threat Miner
GreyNoise
PulseDive
https://preciousvincentct.medium.com/
Xplore
A tool for generating Twitter search queries to find tweets in a specific location (like BirdHunt).
You can select the search radius and content type (images, videos).
https://xplore-x.vercel.app
The tool is good, but it missed filter:native_video.
#socmint
A simple trick for finding Obsidian users' public notes (including those that have become public due to carelessness)
inurl:publish.obsidian.md + keyword (full name, company name etc)
https://hackers-arise.com/google-dorking-discovering-exposed-obsidian-vaults/
By aircorridor for Hackers Arise
Awesome OSINT Chrome Extensions
A small list of Chrome/Brave extensions for various #OSINT related tasks:
Chrome extensions analysis
Content analysis
#socmint
Website analysis
#Geoint
Web archives
Screenshots
and more.
https://github.com/ubikron/awesome-osint-chrome-extensions
A July, I tweeted about a series of posts on OSINT in different countries (dozens of tools for each) by UNISHKAResearch. But since then, the series has been actively expanded. Added:
Israel
Mongolia
Indonesia
Philippines
Nepal
El Salvador
unishkaresearchservice" rel="nofollow">https://substack.com/@unishkaresearchservice
Step-by-Step OSINT Roadmap for Investigating Videos
1 Downloading the Video
2 Extracting Metadata
3 Analyzing Video Content
4 Geolocating the Scene
5 Verifying Authenticity
6 Advanced Scene Analysis
Detecting Deepfakes
https://medium.com/the-first-digit/step-by-step-osint-roadmap-for-investigating-videos-6faea52d2e12
By Nina Maelainine
GitMind
Cool online tool for creating mind maps and flowcharts:
- a lot of templates
- lots of editing tools
- AI content generation
gitmind.com
If you are passionate about OSINT and have something to say about it, you can become a speaker at OSINTcon by @osintambition in November
This is a free online conference (1st OSINTcon in May - 4,000+ participants)
You can submit your application here:
https://osintconference.com/speaker-registration
Reverse Image Searching Related Sites & Links
List by UKOSINT :
- Reverse Image Searching
- Using AI To Identify A Location Shown In An Image
- Facial Reverse Image Searching On Social Media
- Remove Image Background
and more.
https://www.uk-osint.net/reverseimagesearching.html
GeoMastr
Huge database of unique objects for different countries on road photos:
- Bollards
- Fuel Stations
- License Plate
- Post Company
- Road Lines
- Street Signs
- alphabet
and more.
https://geomastr.com/
#geoint
Go for Dorks
Online generator of advanced search queries for Google, Bing, DuckDuckGo, LeaklX, Shodan, Refseek, Fofa, Yandex and other search engines.
Tool: https://dorks.xen00rw.me/
Github repo: https://github.com/xen00rw/GoForDorks
FREE SHODAN TOOLS
cvedb.shodan.io
internetdb.shodan.io
geonet.shodan.io
entitydb.shodan.io
shdn.io
Browser Plugins
https://blog.shodan.io/5-free-things-for-everybody/
#cybersecurity
BadDNS
#Python #cli tool for detecting domain/subdomain takeovers (all kinds).
- check for dangling CNAME records, NS records, MX records
- enumerate subdomains by NSEC-walking
- check HTML content + TXT record content
https://github.com/blacklanternsecurity/baddns