/r/OSINT
Welcome to the Open Source Intelligence (OSINT) Community on Reddit. This is a platform for members and visitors to explore and learn about OSINT, including various tactics and tools. We encourage discussions on all aspects of OSINT, but we must emphasize an important rule: do not use this community to "investigate or target" individuals.
News and resources on open source intelligence.
RULES
/r/OSINT
Trying to know who was affiliated with this small company. Can their fax or telephone numbers (which obviously do not work now) be of any help?
same as title. say your email is associated with several large websites you have never attended and in languages you don't speak. login requires a phone number that is not yours. is there a way to obtain associated information of the associated profile, the one linked to your email?
website owners are unresponsive to date. i understand account may be closed however, I am looking for possibility to find additional information. thanks!
What would your game plan be if you had to find what country a ship was bound for with and what cargo it was carrying? Say you wanted to track the movement of stolen cars from Canada to Africa and only knew of 3 ports they could be shipping from.
Hi all! Looking for an easy way to scan through a bunch of Truth Social posts. The hope is to pull several months worth of posts from a single user and then make the text searchable. I've poked around, and I've tried the Stanford Internet Observatory's truthbrush, but the issue is that the user posts images I would like to preserve as well.
Is there an easy way to go about this? Literally, ideally it would be a long PDF that looks exactly like the feed, which I'd then run through some OCR software to make it easier to search.
Here’s our tenth edition of our monthly round up. It’s a selection of top tips and industry news from last month.
https://open.substack.com/pub/osintjobs/p/monthly-osint-round-up-october-2024
I recently tried to sign up to LinkedIn for the first time with my personal email but it said my email was already in use. I'm tryna figure out who signed up to LinkedIn with my email, but I'm struggling to figure out how exactly I'm meant to go about that.
edit: I tried resetting the password, which resulted in it disabling my account. I have since appealed using ID
Hello OSINT professionals,
As the title states I'm looking for a tool that is able to take a username as input and return all the followers of the inputted account to a txt or excel file. I've found a couple tools on github but I keep getting a 429 to many request error. I'm wondering if there is a better tool available, or if there is a work around I can implement. Any input is helpful!
Thank you in advance.
Hello, Private Investigator here. Does anyone have a good solution for archiving/preserving social media profiles. I have used Hunchly and Skopenow in the past with varying results. I just want a simple, easily digestible product. Something that will be useful to my attorney clients and hold up in court. Any input greatly appreciated.
Outside of any paid services, like SkopeNow, is there a way to obtain user information including emails used for Facebook profiles? I understand that Meta ONLY cooperates with law enforcement entities, but I’m curious if there is a way to find out what email a profile uses. Sorry if this is a double post - I searched and couldn’t find any similar posts and/or responses. Thanks in advance.
I'm trying to investigate what I believe to be a targeted disinformation operation connected to a reputation management campaign involving a pretty big ongoing police investigation within the UK. As I'm not an OSINT expert, just someone who works in a similar field and has picked this up as a sort of "passion project" I'm not really familiar with the exact tools I could utilise to plot my findings and connections so that it's easily explained to anyone who may come across it. I've managed to identify a network of bot/troll farming accounts being utilised in a way that's similar to those seen in the Depp v Heard trial. Any recommendations for how best to go about an investigation like this? How to connect accounts? Analyse data from social media to show evidence and proof of this etc?
How I've done it so far is without any type of tools. Just screenshots and making notes of accounts/tweets/posts and following the trail back to a couple of accounts I believe are ring leaders. It's something I think needs to be reported to some type of authority but without having the investigation and evidence in a format that's easy to understand, it just looks like paranoid ramblings. Any help, resources, or guidance in any way is appreciated! Thanks!
(please ignore my username, I did not realise that when I created an account, it couldn't be changed)
Hello everyone, just sharing another juicy OSINT investigation video by French newspaper Le Monde called the "Strava Leaks"
Thanks to OSINT, 2 of their journalists were able to know the exact location of the US President (and other key political personalities) a few days in advance.
Enjoy :-)
Does anyone have any alternatives to Skopenow that they can vouch for? I have mixed feelings about it given the cost per search/report and the trial run I did revealed some missing or mixed up information. I know with OSINT that's bound to happen, and it still found a lot that I didn't, but I've read mixed things about the company and their product recently. If anyone has anything that I can look into, please let me know! My primary use would be for social media investigations. Looking for something that can automate the process of social investigations/streamline it for my team, but also with accurate information. Cost isn't a massive concern so long as the information is solid and the company is reputable/ethical.
I'm looking for the tool behind https://spoofwave.com/seon I know it's similar to holehe but seems to give more results.
If you can please help It would be appreciated
Is there a way to reverse search a video from an instagram post that is just a creative composite of various other sources? when you do, it just brings up each subcomposite like a decentrallized markerless object. No idea if there is a way to do a cryptic set of a series of specific frames to then search for. would love some help to find who made this poetry. I've tried a handful of reverse image methods, but they're all too hyperspecific to give individualized results.
Can anyone advise me on what tools and approaches one could use to locate material internet infrastructure sites in a town in Saudi Arabia for an academic research project? Im interested in mapping cables, locating cable centres, exchange points and data centres. Any help would be greatly appreciated.
I found a court document in regard to a former co worker’s denied appeal hearing back in 2022, but I can’t find any documents about previous court appearances or anything since then. Is there any means to find that information without visiting the clerk of court (I now live outside the state)
I know Yelp allows search by email and WeChat and Line allows search by phone number. What other apps will allow you to search a user either by their email or their phone number?
In the last couple of days, when I Google a username with Instagram, I see a lot of posts pop up with the username in it, but when I go to the post, I cannot see the username on the profile. It's not the user's profile either, it's someone who "tagged" them but it doesn't seem to be there. Anyone else experience this?
I use idcrawl.com/u/ to run the same username across different platforms. This covers major platforms like Instagram/Threads, YouTube, TikTok, Facebook, Snapchat, Twitter (I refuse to call it X), Reddit, Pinterest, Poshmark, Tumblr, etc.
I use wayback machine for Twitter archives, and pullpush.io for Reddit archives.
I don’t use lampyre.io or osint.industries because it costs money. I use epieos.com, which is limited but still helpful.
I’ll Google the username with quotation marks surrounding it.
I sync contacts on apps like Vsco, BeReal, Snapchat, TikTok, Venmo, Telegram, AirBuds Widget, Duolingo, etc.
I use email addresses as usernames, and Vice versa.
You can search for accounts on Yelp, Skype, Microsoft Teams etc. by email, in addition to syncing contacts.
Anything I’m missing?
Edit: I thought this post might get taken down for discussing what some mods might see as surface-level stuff, but I’m glad to see people benefiting from discussion (including me) and exchanging ideas! ❤️
Hi everyone!
I’m going to start managing hiring processes for a company and looking for new, non traditional ways I can learn about the people we’re hiring, other than pulling criminal records and the usual social media background checks I can get through Sherlock.
I know it might sound jarring but the new hires are going to be interacting with children and you can never be too safe with those kinds of positions.
We’re on a really tight budget so Open Source is preferred due to costs and privacy concerns for our potential hires.
Hello, I am trying to track down a ring of scammers that are currently engaged in review exchanges on Yelp and Google reviews and other review sites. Fake company 1 has reviews a b c and d Reviewer c reviews company 2, 11 and 37 (but on Google not Yelp) Reviewer b has his brother review company c, his wife to review them on Houzz and reviewer b likes them on Facebook. And on and on. It’s getting very complicated to track on a spreadsheet, particularly as it isn’t straightforward a reviews b and b reviews a (I think Yelp has caught on to this)
Is there a way to scrape data from Yelp and have the data be checked against itself (ie person a reviewed company 1, 2, 3, person b reviewed company 2, 3 and 4 person c reviews company 2, 3 and 4) and spit out a spreadsheet?
Is this something that Maltego would be good for? Or another tool that could do this short of a corkboard with strings and and push pins?
Over the weekend I’ve created an open-source project called Rigour — a self-hosted alternative to Shodan.io that is designed for scanning hundreds of thousands of hosts, built on top of existing tools like Zmap and Zgrab, but with a strong focus on modularity and data enrichment. The goal is to provide a flexible framework that can be easily extended, such as scanning specific protocols or using data enrichment techniques to provide an open-source alternative with "pro" features.
What Rigour can do right now:
I'm looking for feedback from developers. If you’re interested, you can check out the GitHub repo here. Feel free to open issues, submit pull requests, or just reach out for more info.
Cheers.
https://www.studentclearinghouse.org/verify/
Investigating someone likely to be committing tuition fraud. Don't have a lot of social engineering motivation this morning; found this website through AI search engine, which claims it is "a reputable source."
Can anyone verify their experience with services on this site?
I’m a solo practitioner. I opened my own firm out of school which wasn’t the best idea but I have made a decent amount of money and don’t regret that aspect.
I just want to know if there are any other lawyers that are in this community. I’m in personal injury and real estate found myself using a lot of OSINT to locate information on parties.
I’ve honestly gone into a weird stage of realizing I want to explore other areas that actually may be interesting to me (looking at IP). I’m not looking to fully switch out of the areas I’m in as I am making a living, but I do want to genuinely like doing my job.
If any of you are lawyers here, I’d love to know if you have experience and can give some insight/tips.
I’m right now just trying to get an ISC2 certificate to try to get myself motivated with something I enjoy learning. Thanks.
I'm looking for a map of California which has outlines of land parcels and ownership information. I do a lot of hiking and I would like to know how to get in contact with local landowners to explore more of my hometown and county.