15 steps to gather information about a company.

Suitable for Fortune 500 corporations as well as the restaurant down the street.

Thread 🧵🧵🧵

#osint #corpint Image
Step 1

Gathering basic information (adress of registration, number of employes, market capitalization etc) in global business registries

opencorporates.com
craft.co

@opencorporates @Craftdotco Image
Step 2

Check the details of the company in the official registry of the country in which it is registered (it can often be found on the website of the federal tax inspectorate)

cipher387.github.io/corporative_re… (63 countries) Image
Step 3

Look for references to the company in court decisions and court documents databases.

cipher387.github.io/osint_stuff_to… (62 sites for search court decisions in different countries) Image
Step 4

Search company name or company owner name in OffshoreLeaks database (@ICIJorg)

offshoreleaks.icij.org/search Image
Step 5

Searh company's Legal Entity Identifier, to find other companies with which it is associated.

search.gleif.org/#/search/ Image
Step 6

Check the validity of the IBAN (International Bank Account Number) of the company and see the information about the bank where it is serviced.

iban.com/iban-checker Image
Step 7

Looking for information about deliveries of goods in which the company was involved.

panjiva.com
en.52wmb.com Image
Step 8

Let's go down to Darknet. We use the RelatedList service to find company-related contacts and confidential documents leaked online.

…zaeax3hwhidbqkjzva3223jpxqd.onion.pet

Thanks @akaclandestine Image
Step 9

Looking for brands and logos that are registered to the company.

www3.wipo.int/branddb/en/ Image
Step 10

Looking for recent mentions of the company in online media around the world.

emm.newsbrief.eu Image
Step 11

View a detailed investment profile of the company.

investing.com Image
Step 12

We get a list of patents registered to the company.

patents.google.com Image
Step 13

It is also worth collecting as much information as possible about the company's website. There is a separate thread on this topic (pay special attention to the analysis of metadata of documents with metagoofil)

Image
Step 14

Look at the photos on the company website and identify employees (there's a separate thread about that, too)

Image
Step 15

Collect data on the physical address of the company (view separate thread)

Image
This little thread is end.

But a great deal on the subject was left unsaid. For example, finding information in leak databases and working with social networks.

You can find tools for these and other OSINT purposes in my collection cipher387.github.io/osint_stuff_to… (505 items)
@readwiseio save thread

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Cyber Detective

Cyber Detective Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @cyb_detective

16 Sep
Tools for gathering information about YOUTUBE videos and channels.

Thread 🧵🧵🧵 12 tweets

#osint #socmint #youtube Image
(1/12)🧵

mattw.io/youtube-metada…

Submint a link to video and get it metada:
Snippet (the exact date and time of publication, description, thumbnails links)
Statistics
Geolocation
Status
Content details

(also it's possible to get channel and playlist metadata) ImageImageImageImage
(2/12)🧵

tools.digitalmethods.net/netvizz/youtub…

Submit a video id (you can find it here commentpicker.com/youtube-video-…) and download comments to it as a table (html file). Image
Read 14 tweets
13 Sep
SQL dumps (database dumps) for #OSINT

Super short practical course.

Thread🧵🧵🧵

(12 tweets)

#sql #mysql #phpmyadmin
(1/12)

In @GoogleHacking (exploit-db.com/google-hacking…) there are 176 dorks for searching SQL dumps, which may contain any confidential information.

Simple ex (pic 2):

ivanov ext:sql site:github.com

This query search all sql-files, which contain "ivanov" in #Github
(2/12)

Sometimes in this way it's possible find databases with information about orders, customers or employees. Inattentively, site owners forget to close them from indexing in robot.txt.

Such SQL-dumps may contain names, surnames, dates of birth, addresses, phone numbers.
Read 14 tweets
10 Sep
Today I began assembling a list that will include single programmers and small teams that develop tools for #OSINT

twitter.com/i/lists/143622…

In this thread I will tell you which of these people are working on which project (please subscribe to them and put stars on #Github) 🧵
Read 8 tweets
9 Sep
Trying to identify a country from a photo

Part 1. 12 basic tricks for outdoor photos

Thread 🧵
Step 1

The first thing to do is to break the photo up into fragments so that you can examine each one individually.

The fastest way to do this is to use online tools. For example:

iloveimg.com/crop-image

(If you have a Mac, just press Command+Shift+4)
Step 2

Now look for interesting fragments in Google or Yandex

(by the way, Yandex has a built-in cropping)

It happens that the country can be identified by the model of public transport. If the photo shows "PAZ 4234", it is most likely Russia (but maybe other CIS countries).
Read 15 tweets
7 Sep
In this thread you will learn about 9 key services for FACE identification by photo.

I will show them using a photo of Pamela Anderson (@pamfoundation) taken in the early 90s as an example.

#osint #socmint
№1

yandex.ru/images/

The first thing you should do is just try searching for the file in the Yandex.Images service. In my opinion, this is the best service in the world for reverse image search.
Sometimes it is quite enough to answer the question, "Who is this?
#yandex
№2

search4faces.com/vk01/index.html

Now it's possible to try to search for a person's profile in the Russian social network VK ( 1,109,563,766 faces in database).

But this method doesn't work very well with known personalities...

#VK
Read 12 tweets
6 Sep
From this thread thread you will learn about 12 key #OSINT-services for gathering information about a website.

I'll show them with an example of most famous russian search engine "yandex.ru" and it's subdomains.
Step #1

Collect basic information about domain

IP address lookup, whois records, dns records, ping, traceroute, NSlookup.

centralops.net
Step 2

Find out what technology was used to create the site: frameworks, #javascript libraries, analytics and tracking tools, widgets, payment systems, content delivery networks etc.

builtwith.com
Read 14 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!

:(