/r/OSINT

Photograph via snooOG

Welcome to the Open Source Intelligence (OSINT) Community on Reddit. This is a platform for members and visitors to explore and learn about OSINT, including various tactics and tools. We encourage discussions on all aspects of OSINT, but we must emphasize an important rule: do not use this community to "investigate or target" individuals.

News and resources on open source intelligence.

RULES

  • Do not attempt to Dox other users, this is a place for sharing knowledge not other people's personal lives. This includes posts asking to identify users on other social media platforms. THERE WILL NOT BE A SECOND WARNING.
  • This sub-reddit is for techniques and sharing information, it is not your personal army for trying to find your "friend"/"ex"/etc on reddit or any other social media site. (This includes missing persons) No-one is able to verify you're doing this for benevolent reasons.
  • Read the "Getting Started" entry on the wiki before you post asking where to start with OSINT.
  • This subreddit is dedicated to collecting articles, research, and Open Source Intelligence related sources.
  • Posts must be made by an account with at least 20 post karma and is at least 3 months old
  • Tag your submissions properly, this helps people sort through old posts.
  • Jokes, pun threads, any comment that is off topic and adds nothing to the discussion, or general debauchery that degrades user experience and the quality of this subreddit will not be tolerated.
  • No Meme submissions.
  • Do not editorialize titles.
  • Check the new queue for duplicates.
  • Do not submit content that is behind a paywall or registration wall. If necessary use freezepage.com
  • Follow all reddit rules and obey reddiquette.
  • The Wiki can be found here. Please reach out if you wish to help contributing.

/r/OSINT

144,306 Subscribers

9

Can any useful information be attained about an old company using their fax or telephone number?

‎ Trying to know who was affiliated with this small company. Can their fax or telephone numbers (which obviously do not work now) be of any help?

5 Comments
2024/11/03
17:27 UTC

7

How to find profile on a website associated with your email (and unknown phone number login)

same as title. say your email is associated with several large websites you have never attended and in languages you don't speak. login requires a phone number that is not yours. is there a way to obtain associated information of the associated profile, the one linked to your email?

website owners are unresponsive to date. i understand account may be closed however, I am looking for possibility to find additional information. thanks!

5 Comments
2024/11/02
23:04 UTC

29

How would you track a ship?

What would your game plan be if you had to find what country a ship was bound for with and what cargo it was carrying? Say you wanted to track the movement of stolen cars from Canada to Africa and only knew of 3 ports they could be shipping from.

18 Comments
2024/11/02
00:40 UTC

7

Tool for Truth Social

Hi all! Looking for an easy way to scan through a bunch of Truth Social posts. The hope is to pull several months worth of posts from a single user and then make the text searchable. I've poked around, and I've tried the Stanford Internet Observatory's truthbrush, but the issue is that the user posts images I would like to preserve as well.

Is there an easy way to go about this? Literally, ideally it would be a long PDF that looks exactly like the feed, which I'd then run through some OCR software to make it easier to search.

3 Comments
2024/11/01
21:45 UTC

10

October roundup: tradecraft tips and industry news

Here’s our tenth edition of our monthly round up. It’s a selection of top tips and industry news from last month.

https://open.substack.com/pub/osintjobs/p/monthly-osint-round-up-october-2024

0 Comments
2024/11/01
05:20 UTC

11

How to find an account on LinkedIn with email?

I recently tried to sign up to LinkedIn for the first time with my personal email but it said my email was already in use. I'm tryna figure out who signed up to LinkedIn with my email, but I'm struggling to figure out how exactly I'm meant to go about that.

edit: I tried resetting the password, which resulted in it disabling my account. I have since appealed using ID

8 Comments
2024/11/01
00:47 UTC

15

Searching for tool that saves Instagram follower list

Hello OSINT professionals,

As the title states I'm looking for a tool that is able to take a username as input and return all the followers of the inputted account to a txt or excel file. I've found a couple tools on github but I keep getting a 429 to many request error. I'm wondering if there is a better tool available, or if there is a work around I can implement. Any input is helpful!

Thank you in advance.

5 Comments
2024/10/31
05:09 UTC

41

Social Media Archiving

Hello, Private Investigator here. Does anyone have a good solution for archiving/preserving social media profiles. I have used Hunchly and Skopenow in the past with varying results. I just want a simple, easily digestible product. Something that will be useful to my attorney clients and hold up in court. Any input greatly appreciated.

27 Comments
2024/10/31
01:50 UTC

17

Obtaining Facebook user profile emails?

Outside of any paid services, like SkopeNow, is there a way to obtain user information including emails used for Facebook profiles? I understand that Meta ONLY cooperates with law enforcement entities, but I’m curious if there is a way to find out what email a profile uses. Sorry if this is a double post - I searched and couldn’t find any similar posts and/or responses. Thanks in advance.

12 Comments
2024/10/30
18:17 UTC

29

Tools for investigating and tracking a targeted astroturfing campaign

I'm trying to investigate what I believe to be a targeted disinformation operation connected to a reputation management campaign involving a pretty big ongoing police investigation within the UK. As I'm not an OSINT expert, just someone who works in a similar field and has picked this up as a sort of "passion project" I'm not really familiar with the exact tools I could utilise to plot my findings and connections so that it's easily explained to anyone who may come across it. I've managed to identify a network of bot/troll farming accounts being utilised in a way that's similar to those seen in the Depp v Heard trial. Any recommendations for how best to go about an investigation like this? How to connect accounts? Analyse data from social media to show evidence and proof of this etc?

How I've done it so far is without any type of tools. Just screenshots and making notes of accounts/tweets/posts and following the trail back to a couple of accounts I believe are ring leaders. It's something I think needs to be reported to some type of authority but without having the investigation and evidence in a format that's easy to understand, it just looks like paranoid ramblings. Any help, resources, or guidance in any way is appreciated! Thanks!

(please ignore my username, I did not realise that when I created an account, it couldn't be changed)

3 Comments
2024/10/29
14:07 UTC

84

"Strava Leaks" (video)

Hello everyone, just sharing another juicy OSINT investigation video by French newspaper Le Monde called the "Strava Leaks"

Thanks to OSINT, 2 of their journalists were able to know the exact location of the US President (and other key political personalities) a few days in advance.

Enjoy :-)

16 Comments
2024/10/29
12:27 UTC

29

Alternative Tools to Skopenow for Social Media Investigations

Does anyone have any alternatives to Skopenow that they can vouch for? I have mixed feelings about it given the cost per search/report and the trial run I did revealed some missing or mixed up information. I know with OSINT that's bound to happen, and it still found a lot that I didn't, but I've read mixed things about the company and their product recently. If anyone has anything that I can look into, please let me know! My primary use would be for social media investigations. Looking for something that can automate the process of social investigations/streamline it for my team, but also with accurate information. Cost isn't a massive concern so long as the information is solid and the company is reputable/ethical.

21 Comments
2024/10/28
16:11 UTC

37

How to Create a Simple Discord Bot to collect open source information

3 Comments
2024/10/27
22:58 UTC

12

Looking for a Tool [SEON]

I'm looking for the tool behind https://spoofwave.com/seon I know it's similar to holehe but seems to give more results.

If you can please help It would be appreciated

4 Comments
2024/10/26
23:30 UTC

24

Reverse Video Search if Composite

Is there a way to reverse search a video from an instagram post that is just a creative composite of various other sources? when you do, it just brings up each subcomposite like a decentrallized markerless object. No idea if there is a way to do a cryptic set of a series of specific frames to then search for. would love some help to find who made this poetry. I've tried a handful of reverse image methods, but they're all too hyperspecific to give individualized results.

3 Comments
2024/10/26
04:32 UTC

4

Internet cables and digital public infrastructure.

Can anyone advise me on what tools and approaches one could use to locate material internet infrastructure sites in a town in Saudi Arabia for an academic research project? Im interested in mapping cables, locating cable centres, exchange points and data centres. Any help would be greatly appreciated.

5 Comments
2024/10/25
12:29 UTC

12

Is there a way to find additional court documents from Louisiana

I found a court document in regard to a former co worker’s denied appeal hearing back in 2022, but I can’t find any documents about previous court appearances or anything since then. Is there any means to find that information without visiting the clerk of court (I now live outside the state)

4 Comments
2024/10/25
11:05 UTC

33

What social media apps allow you to search user by email or phone number?

I know Yelp allows search by email and WeChat and Line allows search by phone number. What other apps will allow you to search a user either by their email or their phone number?

20 Comments
2024/10/25
07:50 UTC

20

Instagram changes

In the last couple of days, when I Google a username with Instagram, I see a lot of posts pop up with the username in it, but when I go to the post, I cannot see the username on the profile. It's not the user's profile either, it's someone who "tagged" them but it doesn't seem to be there. Anyone else experience this?

3 Comments
2024/10/25
01:55 UTC

262

Finding social media accounts

  1. I use idcrawl.com/u/ to run the same username across different platforms. This covers major platforms like Instagram/Threads, YouTube, TikTok, Facebook, Snapchat, Twitter (I refuse to call it X), Reddit, Pinterest, Poshmark, Tumblr, etc.

  2. I use wayback machine for Twitter archives, and pullpush.io for Reddit archives.

  3. I don’t use lampyre.io or osint.industries because it costs money. I use epieos.com, which is limited but still helpful.

  4. I’ll Google the username with quotation marks surrounding it.

  5. I sync contacts on apps like Vsco, BeReal, Snapchat, TikTok, Venmo, Telegram, AirBuds Widget, Duolingo, etc.

  6. I use email addresses as usernames, and Vice versa.

  7. You can search for accounts on Yelp, Skype, Microsoft Teams etc. by email, in addition to syncing contacts.

Anything I’m missing?

Edit: I thought this post might get taken down for discussing what some mods might see as surface-level stuff, but I’m glad to see people benefiting from discussion (including me) and exchanging ideas! ❤️

37 Comments
2024/10/23
02:05 UTC

12

Any recommended steps for vetting potential employees?

Hi everyone!

I’m going to start managing hiring processes for a company and looking for new, non traditional ways I can learn about the people we’re hiring, other than pulling criminal records and the usual social media background checks I can get through Sherlock.

I know it might sound jarring but the new hires are going to be interacting with children and you can never be too safe with those kinds of positions.

We’re on a really tight budget so Open Source is preferred due to costs and privacy concerns for our potential hires.

13 Comments
2024/10/22
12:40 UTC

16

Tracking interactions

Hello, I am trying to track down a ring of scammers that are currently engaged in review exchanges on Yelp and Google reviews and other review sites. Fake company 1 has reviews a b c and d Reviewer c reviews company 2, 11 and 37 (but on Google not Yelp) Reviewer b has his brother review company c, his wife to review them on Houzz and reviewer b likes them on Facebook. And on and on. It’s getting very complicated to track on a spreadsheet, particularly as it isn’t straightforward a reviews b and b reviews a (I think Yelp has caught on to this)

Is there a way to scrape data from Yelp and have the data be checked against itself (ie person a reviewed company 1, 2, 3, person b reviewed company 2, 3 and 4 person c reviews company 2, 3 and 4) and spit out a spreadsheet?

Is this something that Maltego would be good for? Or another tool that could do this short of a corkboard with strings and and push pins?

5 Comments
2024/10/21
14:54 UTC

59

Self-Hosted Alternative to Shodan: Introducing Rigour – Looking for Feedback and Contributors

Over the weekend I’ve created an open-source project called Rigour — a self-hosted alternative to Shodan.io that is designed for scanning hundreds of thousands of hosts, built on top of existing tools like Zmap and Zgrab, but with a strong focus on modularity and data enrichment. The goal is to provide a flexible framework that can be easily extended, such as scanning specific protocols or using data enrichment techniques to provide an open-source alternative with "pro" features.

What Rigour can do right now:

  • Scan the entire internet: Thanks to Zmap, Rigour can perform large-scale network scanning
  • Banner grabbing: Capture banners from services running on discovered hosts
  • Extract exposed credentials: Extract sensitive information, like API keys, from HTTP responses
  • Vulnerability detection: Identify hosts with known vulnerabilities based on banner info and other metadata
  • Data enrichment: Augment scan data with information like geolocation (i.e., country based on IP)
  • API Access: Expose scan results and host details via a REST API for further use
  • UI Dashboard: A web-based interface for visualizing scan results (screenshot)

I'm looking for feedback from developers. If you’re interested, you can check out the GitHub repo here. Feel free to open issues, submit pull requests, or just reach out for more info.

Cheers.

17 Comments
2024/10/20
22:36 UTC

27

Confirm this as legitimate database?

https://www.studentclearinghouse.org/verify/

Investigating someone likely to be committing tuition fraud. Don't have a lot of social engineering motivation this morning; found this website through AI search engine, which claims it is "a reputable source."

Can anyone verify their experience with services on this site?

8 Comments
2024/10/20
18:43 UTC

25

Any lawyers here? I am trying to see if any found use of getting certified.

I’m a solo practitioner. I opened my own firm out of school which wasn’t the best idea but I have made a decent amount of money and don’t regret that aspect.

I just want to know if there are any other lawyers that are in this community. I’m in personal injury and real estate found myself using a lot of OSINT to locate information on parties.

I’ve honestly gone into a weird stage of realizing I want to explore other areas that actually may be interesting to me (looking at IP). I’m not looking to fully switch out of the areas I’m in as I am making a living, but I do want to genuinely like doing my job.

If any of you are lawyers here, I’d love to know if you have experience and can give some insight/tips.

I’m right now just trying to get an ISC2 certificate to try to get myself motivated with something I enjoy learning. Thanks.

18 Comments
2024/10/20
01:41 UTC

5

Land ownership information [California]

I'm looking for a map of California which has outlines of land parcels and ownership information. I do a lot of hiking and I would like to know how to get in contact with local landowners to explore more of my hometown and county.

6 Comments
2024/10/19
19:32 UTC

Back To Top