I just realized I hit 20,000 followers on Twitter. That's really incredible. I wanted to say thanks to everyone who has stuck with me over the years.
🧵To celebrate this milestone, I've compiled some of the top #OSINT content I've posted over the last year in this thread.
Finding creative loopholes in the Discord signup page to confirm email address registration.
🧵👇
🧵I was looking for some more general #OSINT resources that were open source and highlight valuable. I used this Reddit dork to filter down to find this:
Another week, another set of OSINT tools. This week we'll be looking at tools for OSINT investigations including effective screenshots for evidence capture, scraping pages with HAR files, and collecting OSINT from Google links.
(1/5)
The first #OSINT tool is called Flameshot and was introduced to me by @beige_hat. It's an advanced screenshot tool that allows you to edit captures on the fly, including my personal favorite - depixel.
Another week, another workflow. This week we’re going to look at how to make images for your sock puppet accounts that can beat deep fake and face swap checks as well as some bonus tips.
Let’s go!
(1/9)
Step 1: Download a GAN Images
We’re going to need a convincing GAN to get started. You can go to generated.photos or you can go to thispersondoesnotexist.com. Try to find a GAN that has a portrait view and doesn’t have glasses or a lot of facial hair (male).
Another week, another set of tools. This week we’ll discuss deep fakes, YouTube geolocation search, and data extraction. This will be a good prep for the sock puppet edition of #OSINT Workflow Wednesday tomorrow.
Let’s go!
(1/5)
The first #OSINT tool is called Sensity. I heard about this through a tweet from @JaneLytv. This is a great tool for testing your sock puppet accounts to see if you can beat autodetection. More on that tomorrow for OSINT Workflow Wednesday.
Another week, another workflow. This week we’ll take a look at how to build a basic bookmarklet to automate OSINT searches using #javascript. This will be ground floor level stuff, don’t worry!
Let’s go!
(1/9)
Step 1: Create an option for input
Start a new #javascript file and create a variable to accept input for usernames. This will create a prompt when you click the bookmarklet which we'll use to automate our process.
Another week, another set of tools. This week is a low tech week but we'll look at data set search engines and what to look for, tools for identifying scams and typosquatting, and finally, #OSINT for Github.
Let's go!
(1/6)
The first #OSINT tool is Dataset Search by Google. I've been working with datasets a lot lately and stumbled across this. Try searching for things like "webcams" or "cctv" to see the depth of what types of data you can work with.
Another week, another workflow. This week we’re going to look at YouTube and how to deconstruct videos, analyze the outputs, and apply automation and AI-lite to the results at scale.
Let’s go!
(1/10)
Step 1: Select a Video of Interest
Go to YouTube and find any video. Don’t pick anything too long for this workflow because it’ll be difficult to work with. Keep it under 15 minutes or 200 mb if you can. Great use cases are wartime videos, human rights violations, etc.
Another week, another set of tools. This week let's look at Snapchat, Google Earth, and YouTube today. This will include 2 #python tools and 1 web app. Shall we?
(1/5)
The first #OSINT tool is made by @djnemec and it's a #python tool called Snapchat Story Downloader. It allows you to create a db of locations of interest then extract Snapchat stories from those locations indefinitely. Classifier too. Great!
This week we’ll discuss how to find date/time information of web content even if it’s not obvious. This will help you establish a timeline of content or determine if an article has been altered since the original publication.
Let’s get started.
(1/8)
Step 1: Check the URL
This is a no brainer, but a lot of web content will include the original date it was published in the URL. Keep in mind that this could be an updated URL. We’ll look at other data to determine that next.
It’s time for another round of OSINT tools to help you improve your efficiency and uncover new information. A quick overview:
[+] Reversing Information
[+] Automating Searches with #Python
[+] Testing/Using APIs
RT for Reach! 🙏
(1/5) 👇
The first #OSINT tool is called Mitaka. It’s a browser extension that will reverse multiple data points right from your browser. Right-click what you want to reverse and Mitaka will show you what sources are available. Improve your efficiency!
👇(1/5)
The first #OSINT tool is a bookmarklet I built called Forage and is meant to expand your search across popular social media sites. It takes the username from FB/IG, Twitter, and LinkedIn and expands your search across the web. Expect updates!
I think I'm going to stick with 2 tools a week. One web-based, the other script-based. This week it's about archives and scaling your work in search engines.
👇 (1/4)
The first tool is from @ODU and it's a web-based tool that will tell you the date a website started and show the earliest archive from multiple sources.
In addition to OSINT Tool Tuesday, I'm going to start doing Workflow Wednesday where I unpack a process, instead of a tool, for open source intelligence. This week I'm going to talk about how to deconstruct a new social media platform.
👇 (1/9)
Step 1: Map the platform without an account.
You want to see what you can access without registering. Explore the platform from the website but also check out what's indexed by Google and other search engines using site:, -site:, inurl:, intext:, and other operators.
👇 (2/9)
Apr 10, 2020 • 4 tweets • 2 min read
If you are looking for an tool to help in #OSINT investigations on Twitter..👇🏻
And you find yourself running into a long threat of information that’s difficult to read....👇🏻
Mar 9, 2019 • 5 tweets • 2 min read
[#OSINT] You can use Twint to find indirect relationships between users. By matching the “conversation_id” to multiple queries, you can discover more insight.
For example, let’s say you’re trying to find violent users on Twitter that are threatening an influencer. Twitter only limits you to search for “influencer name” + “violent keyword”. Using Twint, you can search for all “violent keywords” and then match it to influencer mentions
Feb 11, 2019 • 4 tweets • 2 min read
[#OSINT] Want to pull construction data for any US city?
Introducing Platypus- Leverage @MapQuest API to collect OSINT for travel awareness. There’s a free API key, too!