Let's start with the easiest and fastest option. Use NAMINT from @seint_pl.
It will generate possible name variants and links to search for them in various search engines (+ possible emails and document search + social media accounts)
If the options suggested by NAMINT do not bring results (or your goal is to collect the MAXIMUM info), then you need a list of all possible nicknames based on the first and last name.
Here's a guide on how to do it from @Sox0j:
When compiling a list of possible name variants do not forget that any, even the simplest name (eg John) can be derived from dozens of different names and have a dozen more diminutive variants
If you've done well in the past stages, you have a long list of nickname variations based on first/last names.
github.com/soxoj/marple automate the search (it automatically prepends the inurl: operator to the query and collects links to the results in a text file)
🧵(6/15)
You can also use the above list together with tools to verify the existence of accounts with a certain nickname in social networks.
There are many of them: Sherlock, Maigret, BlackBird, Nexfil... Take your pick.
Once you have a list of emails, you need to sort out the non-existent ones. To do this, there are dozens of online services to check one by one and dozens of APIs to automate this process.
It is also worth looking at accounts in various social networks, which are registered to email addresses from the list. You can do this with the well-known tool Holehe from @palenath.
Keep in mind that almost any command line tool can be run automatically many times in a row for a whole list of arguments (in our case name variants) using the XARGS utility.
If you are looking for a person from Russia, Ukraine and other former Soviet countries, try Telegram #osint bots (based on data from leaks)
This is not exactly a legal method and these bots are blocked all the time. Up-to-date links can be found at @HowToFind_bot
🧵(14/15)
Using the methods described above, you are sure to find social media accounts belonging to the target person.
The tools for collecting account data for each specific social network can be found in my collection of tools for #osint:
Also, when searching for information about a person by first and last name, you may have to deal with Google. Read this thread about how to automate and make working with this search engine more efficient:
- reverse images search engines and advanced search operators;
- photo processing tools for a more successful search;
- face photo search;
- automation.
(1/16) 🧵🧵🧵
The tool I recommend you start your search with is Yandex Images.
Not only does it search very well for similar images, but it also recognizes the text on them and identifies the location if it is an image of a famous landmark.
(2/16)🧵
Until recently, Yandex Images allowed you to enter search operators directly, but now this no longer works. But you can add them to the URL parameters.
For example, to search only on facebook, add &text=site%3Afacebook.com to the link
- how to search for cameras (including vulnerable cameras)
- how to save streams from cameras
- how to analyze video
🧵🧵🧵(1/15)
You can search for cameras using Google Custom Search Engine, which brings together the ten largest aggregators of camera streams (Webcamtaxi, Insecam, Geocam etc).
New search engine from @dancho_danchev developed especially for #osint specialists!
It has many filters and advanced search operators that can help you analyse the information you find more quickly and effectively.
I will talk more about them in this🧵
It's possible to filter results by filetype, language, domain, author, keywords and protocol (https or http) and also sort by date.
🧵
All the filters mentioned in the previous tweet are available not only for searching web pages, but also for searching pictures.