OSINT / Cyberstalking General

working on any investigations? Anyone had any jobs in osint or working in osint. Any good stories to tell? Share TTP >2019 guide to osint https://www.randhome.io/blog/2019/01/05/2019-osint-guide/ >inteltechniques cheatsheet https://inteltechniques.com/JE/OSINT_Packet_2019.pdf >bellingcat guides https://www.bellingcat.com/category/resources/how-tos/ >bellingcat toolkit https://docs.google.com/document/d/1BfLPJpRtyq4RFtHJoNpvWQjmGnyVkfE2HYoICKOGguA/edit >Week in osint weekly updates in osint TTP

>>12162 who are you trying to catch?

this seems like stuff that people here try to avoid

Well, I don't know... It isn't just OSINT but it does start as OSINT. One time a guy did something bad to me and well, lets just say I put his house up for sale after learning his address, phone number, SSN, etc. Weirdly enough there are people who put their password as the website and add a single number to it. HOW WEIRD IS THAT? Anyways, this fuarrrking idiot didn't have his house sold under him, but they did have a lot of soykaf to deal with when people started showing up wanting to buy the house. Especially because it was listed as a "open house" between some specific time and that everything inside was merely to represent what you home could look like! It was fantastic, especially considering the area was the kind where people left their doors unlocked. Hah, mess with the best die like the rest. to be honest

>>12164 that's what opsec is for and we do try to avoid that, but osint is a very important step in the recon process. some more free resources https://www.sans.org/blog/-must-have-free-resources-for-open-source-intelligence-osint-/

>>12162 Those are some nice resources, I've always been curious about dabbling in some osint stuff. Although it often seems like a first step in hacking rather than something for its own good,

>>12162 I work as a private investigator in meatspace. I mainly specialize with OSINT investigations regarding many different types of cases. Mainly mising persons, skiptracing, fraud and counterfeiting cases. Here is a great startpage with many very good OSINT tools and resources to help with your investigations; https://start.me/p/b5Aow7/asint_collection

Anyone tried inteltechniques.net video training? It's ran by some Michael Bazzells friend who is updating bazzells old training videos to newer, up to date methods. 450$/year is quite disappointing though.

>>12320 Any good ways of getting a job in the field?

>>12320 Your diagram is nice but flawed You get way better results if you interrogate social media sites using their own search engines than using 3rd parties in my experience. I lot of time if they set their privacy settings right they just won't show up on Google, but they always show up on Facebook search/advanced search

I don't know who needs to hear this, but yandex is really good for finding people

>>12342 It really depends on where you work geographically. Every country/state/province has a different licensing process and pre-requisites. >>12371 These flowcharts are from Michael Bazzell. And yes I agree, they are a bit outdated.

there is a convention going on about OSINT if anyone is interested https://conint.io/

>>12533 >>12533 If you see Michael Bazzell post his photo

If anyone is interested, I found this website some months ago while I was studying hacker in general. I guess it's a good way to learn tools and search about them. I'm not sure if it's updated though. Also, the github page: https://github.com/lockfale/osint-framework

>>12534 >If you see Michael Bazzell post his photo Why though? His free podcast (inteltechniques.com) is great, and doxong him would probably make him go away. Also, he probably will not introduce himself as michael bazzle - You will probably never know you saw him.

>>12537 I have a fan theory that he's more than one person

>>12538 Ha! You know, now that you say it, I could see that being true.

>>12321 He used to offer free training a few years ago occasionally that I attended. It was excellent training because it was hacks and work arounds for sites that contained alot of not easily accessible OSINT like Facebook. But the information became irrelevant quickly as these website put in countermeasures to stop people from freely scraping their site.

>>12533 Is it welcoming for beginners? It caught my attention, but I'm not even sure I'll be able to understand stuff or do the workshops.

The newest handbook for 2020 osint from i-intellegence came out https://i-intelligence.eu/uploads/public-documents/OSINT_Handbook_2020.pdf

>>12647 Nice as fuarrrk, thanks lainon.

>>12533 >conint Just watched it, pretty nice overall. Loved the closing note.

>>12647 Thank you!

They posted all the talks from conint on youtube, if you didn't get the chance to see https://www.youtube.com/watch?v=BixDUq__R1E&list=PLv4tW3O0XKAa_1rFMPFhFcq3fXkQEeNvr

>>12162 The main problem I have is that most OSINT resources are only US based and sometimes CA, any Lainons know about international resources? Or I guess it's just a matter of the US having a proper public record that most countries don't offer...

haha this guy

>bored >visit a 8kun qresearch board >people unironically using the email field picrel i know some are obvious fakes but you'd be surprised how many arent. or not. its fun to claim to the others they are fbi agents.

>>12884 That's hilarious. I'm going to have to fuarrrk with some sc​hizo boo​mers some time.

>>12884 >people actually use the email outside of saging has anyone on qanonresearch actually know how to use an imageboard

>>12862 you might need to do some googlefu for that, US is pretty open about public records (in regards citizens) and they're sites dedicated on mass files on people to sell to people (think background check websites). I don't know the laws about it but you would need to see the laws and how to request papers on people via government agency's.

>>12888 No, those threads are just flypaper for idiots

>>12884 I've geo located a few which surprised them. >>12886 >I'm going to have to fuarrrk with some sc​hizo boo​mers some time. Be aware Qlarp is run by comped intelligence agencies. They don't take kindly to lainons pi$$ing in their pool. >>12888 >has anyone on qanonresearch actually know how to use an imageboard Generally no. They are edgelords from facebook

Is there any good source for free/open daily satellite footage?>>12162

>>12884 Just reported some particularly annoying ones who failed to anonymize the false COVID negative test they made and allegedly used for international travel.

>>12888 It's forever that summer "fan service" episode with Anon and Corona-chan.

If you want more osint resources and info starters this is a good starting point. https://www.osintdojo.com/resources/

>>12162 I help moderate an imageboard with a cyberpunk theme. Occasionally, people seemingly new to it use what seem to be their real email addresses, although I've yet to give anyone any grief over it, and mostly just find this amusing. While plenty of people use Tor, myself included, a surprising amount of people don't think to do this, although there's not much of an issue with people pretending to be multiple people anyway. It's leisurely, and occasionally I'll laugh at other posters with the other staff. It's easy enough, and I can recommend it.

I got bored, tried to surf every OSINT resources that I could find on the Clearnet.

>>12883 Link? What did he do? >>13313 Would you mind sharing the link? >>12884 Nice, good job. I think I will try some social engineering practicing on them

>>13664 quality post. thanks

Michael Bazzell books are very good resources to any OSINT investigator. Most of them have been uploaded to Library Genesis. http://libgen.rs/search.php?req=bazzell&lg_topic=libgen&open=0&view=simple&res=25&phrase=1&column=def

>>13313 wait, who actually puts down their email when posting? Or is there some other type of association to their email? Asking this because I don't use Tor, and am now worried that I'm on someone's list.

Are there any tools out there that serve the same or similar purpose as maltego? It's a tool I've used a lot in the past, but it's never quite fit the bill for what i was after.

Anybody know some software like this as alternative? pimeyes dot com I don't care if it's FOSS or Paid Proprietary I just need something that could reverse image search faces very well. Also use this if you want to obscure pictures of yourself. sandlab dot cs dot uchicago dot edu slash fawkes

How common are OSINT jobs and how do I get one?

>>15002 The best one I know is yandex

>>15081 Not sure if Yandex would work great with U.S social media platforms.

>>15106 it's not as bad as you might think, I found more than a few people it scrapes all data it can grab.

How hard would it be to find an anonymous internet friend based on city, employment history, criminal record, and ethnicity? I have not heard from a FB friend in 2 years and I am worried he offed himself or something. Maybe it is selfish, but he was one of my best friends and have not heard hide nor hair from him.

How can I stalk normal people on instagram? To see who they are subscribed to you need an account, to create an account you need a phone number. Is there any workaround?

A lot can be done with search engine operators, I think a good start is learning them https://ahrefs.com/blog/google-advanced-search-operators/

>>15120 Instagram requires a phone number now? I remember signing up without one. Try a VOIP number first.

>>15120 here is a good recon-ng script that pulls all the images and videos for a user. throw them through a metadata search, you might find something.

>>15254 It also appears to shadowban tor exit nodes. The confirmation code I got sent doesn't work at all. >>15255 Thanks, but what I'm mostly interested in are connections between users. I want to see who follows whom to find new people in a circle of friends / colleagues etc.

>>12320 How has work been? I don't do much OSINT on individuals for my job aside from occasionally looking up a name on LinkedIn to find out an employee's job role.

Like Bazell says it was easy back in the day doxxing people and making cases but harder these days. Here's my list of links: https://www.hashatit.com/hashtags/osint https://haveibeenpwned.com/ https://www.osintme.com/index.php/page/2/ https://www.osintme.com/index.php/2021/01/16/ultimate-osint-with-shodan-100-great-shodan-queries/ https://www.osintme.com/index.php/2021/04/18/20-osint-resources-for-breach-data-research/ http://www.osinttechniques.com/ https://www.cqcore.uk/email-to-username/ https://codeofaninja.com/tools/ https://keyfindings.blog https://www.blackarch.org/tools.html https://aur.archlinux.org/packages/?K=OSINT&SB=p http://wiki.kenburbary.com/social-meda-monitoring-wiki

I remember Bazell also saying that the best way to practice OSINT is to just practice it on your friends and family, like make it a routine that you just stalk everyone. I wish I could stomach that but rather I'm the type of person with a reflexive avoidance of other people and their lives, looking deeper into persons even just a bit makes hair rise up on my skin. Being a bit more of a stalker is good defense against for example online scams.

honestly all the OSINT soykaf ive done has been for hackthebox challenges but i seem to be good enough at it to apply it in the real world either that or these "hard" challenges suck ass

On the topic of osint, anyone anons know how to, if possible, remove data from Yasni? Its the only result across multiple websites I've been able to find of myself. It links to a dead linkedin, but the result seems to be cached. I deleted the account itself over a year ago, but the result is still appearing :(

>>15120 Buy a prepaid SIM card, burner phone and a prepaid credit card with cash. Register the SIM card with false information, but keep the fake address in your area code. https://fakenamegenerator.com is perfect for this. Make a burner email address, make an Instagram account and goto work. There are plenty of OSINT tools for Instagram. Heres a list of a few good ones: instalooter instaloader toutatis Osintgram (Careful, sometimes they will ban your account if you use this tool a lot) Also, there are many sites that "archive" public instagram profiles, simply just search their usename.

>>15729 Anything for private accounts?

>>12535 >studying hacker in general nice

bellingcat is unironically a cia front btw

>>15664 the way i learn is creeping on girls irl and then being able to find out everything about them with literally nothing but their face and location, got pretty good at it now

Is it me or this social media doxing is a "rich west" problem? Where I live people share nothing more than a phone number to contact them over whatsapp or viber. Or telegram which albeit asking phone number at registration, does not provide it to your contact if you don't want to, unless they already have your phone number in phone book, which was the base for many de-anonymization exploits, usually involving governments with big resources in China and Russia. People use these instant messengers as forums, ad marketplaces, blogs and chatrooms, but from any given starting point you can not just siphon all their precisely geotagged pictures taken with HQ cameras of a latest smartphone from publicly-accessible webpage, feed into facial recognition search engine and get their home address from that, because they simply don't post on instagram of facebook, even if they have a profile, it's nominative, used mostly as IM. Of course there are ways of getting person's private data and even location history from cell network moles on darknet markets, but this literally requires you to pull a few grand with no guarantee that the person who pissed you off is not using a virtual number or bought a sim in a street kiosk for one-time use.

>>16146 I see you've never been on VK. The security of messaging through those services in public groups of overstated. Assume it, at best, to be as safe as discussion on public irc channels.

>>16146 not at all, I think it's more of a problem only for peopl who put their whole lives online. Also people who use pseudonyms but have soykafty opsec. Happens everywhere, I'm sure, just don't hear about it in my anglosphere because... you know... anglosphere. Also I don't think I've ever seen that gif, feels weird to see all the faces moving.

>>16146 Osint is a broad field that means anything that's publicly available. Nowadays it's more common to use internet sources, but it can also include public records, geoint via google/online maps to pinpoint locations using photo's (bellingcat).

So I would like to explain this image for people who don't know. This image has 8 thousand Portland ANTIFA on it. This is the cyberstalking general correct? I Would like for these people to feel pressure because of this event https://twitter.com/MrAndyNgo/status/1411383565170790402 and all the other soykaf they do. I don't approve of violence, I approve of being a complete fuarrrking dick on the internet because I can. I've already gone through and done a fair amount of work myself and so have others on the /mlp/ politics board. There is pretty much no place mainstream that's got the balls to allow the blown up image I have here also the file size is fuarrrking dick huge.

>>16391 Like I don't want to spam this thread with ANTIFA dox, but they have a lot of soykafty websites and blogs that could easily go poof

>>16391 I'm antifa but if these dumbasses are putting their info online like that then they have nobody but themselves to blame when they get doxxed

>>16391 how did u make that image and what are the lines drawn between nodes representing?

>>16393 Based indifferent cyberstalker

>>16394 I didn't make the image but it was created with the pro version of Maltago, it was a war drive that took place. A lot of the big dots have been researched and already harassed a little bit but I'm sure they could use more. I wish I had the ability to manipulate it. I believe the lines represent major connections between the large correlated dots. The major pings have connections to the webs they represent. You'll find tons of activists some people in politics right now. I doxxed a lot and did archive.is on a lot but it's tiring work.

>>16396 Some of the /mlp/ Anons were a lot of help and the guy that war drove some of them was there too but I mean the ponytards were fuarrrking retarded but I love em. I'm just picking soykaf at random

The 1776ers put in hard work, I was mostly looking at websites and soykaf. There's kids in there so I mean, it is what it is.

The problem is, getting traction with harassment and defacement of websites. If someone was mad enough, they could go offensive on just my first post alone.

Do you guys want to play the game with me?

>>16400 >>16399 >>16398 >>16397 >>16396 >>16391 Jesus Christ, it's no wonder nazi's keep getting hacked, Bit of advice, your getting con'd by Andy, and your "proud boy's" ran like bitches >I made a graph with twint are you impressed? not even a little, try harder.

>>16401 it didn't come from andy and stay fuarrrking nervous bitch.

>>16403 Some of my text work. olivia katbi smith https://archive.is/xGz6v https://www.pdxmonthly.com/news-and-city-life/2018/10/portlander-olivia-katbi-smith-fights-for-justice https://keywiki.org/Olivia_Katbi_Smith Olivia Katbi Smith is co-chair of the Democratic Socialists of America (DSA) of Portland, Oregon, and a member of DSA’s national Boycott, Divestment and Sanctions, and Palestine solidarity working group. https://keywiki.org/Anthony_Teso DSA https://www.keywiki.org/Portland_Democratic_Socialists_of_America Oliva Smith 2717 SE 18th Ave, Portland, OR 97202 (740) 341-1214Wireless (419) 692-4898Landline NameAgeBirth Year Anna M Usselman701950 Betty J Bruce831937 Brandon C Deagle1977 Brandon C Deagle431977 Brenda S Harmon751945 Carl Edward Skelly821938 Carol Lindsay Clark401979 Eric E Ekstrand691951 Jacqueline E Richards431977 Jeremy Steven Davis501970 Jodi Denise Skelly531967 Linda Kay Skelly791940 Lisa D Marlis401980 Marcia L Kilpatrick551965 Richard D Bruce841936 Sandra R Ekstrand1951 Smith Rd Fletcher1980 NameAgeBirth Year Andrew T Katbi321988 Andrew T Katbi871933 Cheryl B Smith601959 Ghonia A Katbi761944 Kevin B Smith1957 Leslie K Katbi581961 Tarek N Katbi531967 Tracey Rae Smith461974 Alison J Smith511969 Andrew T Smith481972 Connor R Smith1992 Curtis J Smith741946 Eileen M Smith561964 Eugene Kevin Smith621958 Fletcher L Smith871933 James David Smith Jr501970 Jenna N Smith1994 Joan S Smith1923 Juliet R Smith621958 Katherine A Smith271993 Kevin E Smith Jr251995 Kevin B Smith681952 Kristine T Smith1989 Liane Teel Smith471973 Roberta Jean Smith1943 Stan Smith Full NameOlivia K Smith Birth Year1992 Age28 Some more of my text work

>I am a 1337 haxxor yet I do not understand how to create a .txt file

>>16405 https://archive.is/Qt3Bk https://archive.is/IyCj1 https://archive.vn/hPDGo https://archive.is/Yshlc https://archive.is/0xBmA https://archive.is/lHyEO https://archive.is/4pwk0 https://archive.is/8hrjq https://archive.is/G56u5 https://archive.vn/PlhQd https://archive.is/sxdoA https://archive.is/XHCtB https://archive.is/GUeRa https://archive.is/Pa2zu https://archive.is/XEOsF https://archive.is/YXjpZ https://archive.is/NFpdI https://archive.is/d2Fzp https://archive.is/qG5vm https://archive.is/cw2dD https://archive.is/stGso https://archive.is/4VF4q https://archive.is/3hyU1 https://archive.is/kgSat https://archive.is/KWRAw

https://archive.is/LGNwR https://archive.is/D5rnE https://archive.is/xd1aM https://archive.is/Crkef https://archive.is/SwsgD https://archive.is/Cg4Xw https://archive.is/0Hu5s https://archive.is/pTCCP https://archive.is/X0IVm https://archive.is/2bmX8 https://archive.is/Q9iIu https://archive.is/kEx6g https://archive.is/5rPNQ https://archive.is/Tm6xv https://archive.is/93GIB https://archive.is/gjEML https://archive.is/nChRC https://archive.is/g3AI6 https://archive.is/rucP2 https://archive.is/Yqakf https://archive.is/nKLFf https://archive.is/DHpT0 https://archive.is/mpnAc

https://archive.is/QXhYF https://archive.is/7WBd7 https://archive.is/CNeGW https://archive.is/ESyIk https://archive.is/oDbpd https://archive.is/j9Oh5 https://archive.is/0MrWT https://archive.is/GmqA0 https://archive.is/YooQ9 https://archive.is/MjFAO https://archive.is/2gjPz https://archive.is/9yWUq https://archive.is/eMfXT https://archive.is/xLvwf https://archive.is/EQNfe https://archive.is/zDubL https://archive.is/8NfuZ https://archive.is/qPdK8 https://archive.is/zUrM1 https://archive.is/2m196 https://archive.is/ozEs1 https://archive.is/TqhVQ https://archive.is/ozEs1 https://archive.is/JqSGT https://archive.is/9vpYe https://archive.is/shkaI https://archive.is/zzXfz https://archive.is/HCwgL https://archive.is/B6t8W https://archive.is/rOlPD https://archive.is/jBxxI https://archive.is/3YWI8 https://archive.is/QFYPy https://archive.is/EJJmQ https://archive.is/MUMbF

http://lfbg75wjgi4nzdio.onion/f/Illegalism. Someone said this onion address is an ANTIFA website haven't had time to check yet tho

so you just want us to be your personal army?

>>16410 Nope, you decide your own level of involvement. I'm tired of sitting on the sidelines though

I haven't been derezzed yet, this is fantastic, I'm loving this site more and more. Sweet PDF support

The word filters are fun, my hats off to the admins here. You guys are cool for not banning me too.

Since this thread is about educating I'll also leave this before I take my leave for the day

Any tips on working with groups instead of individuals? I feel like resuming a project where I was mapping out different internet communities, mainly to see where they originated from (i.e. where they got their initial userbase). The whole idea was that I'd eventually create a giant family tree of websites, cliques, etc. But the only detailed parts of it are on imageboards and Something Awful, the former because I've been on them so long and the latter because of some goon lore that I picked up while lurking imageboards. Pic related is all I have so far. A secondary goal would be to see who knows who among certain groups, especially creative groups related to gaming (e.g. indie devs, fan artists/musicians). I have some creative hobbies that I'd like to get back into, and I'd like as many people as possible to see what I've made. The more people that see them, the more motivation I'd have to continue these hobbies and take on bigger projects. But making myself known involves making contacts with the right people, sharing my work on the right forums, stuff like that. So I would need to know the most optimal way to do that.

>>16415 I can tell you I hate Aubrey Cottle and if you're looking to hurt 420chan I might be inclined to contribute towards those ends

>>16415 You could use Matrix via the Element client to organize and maintain group communications. IRC is another option but is quite limited in what it can do while Element is versatile and "modern". You can think of it as a free, open-source, better version of Discord. I have a lot of knowledge related to imageboard history and would love to help you draft some charts on it. I'll be watching this thread if you've got some ideas. >>16416 420 has some faults but the spam imageboards made by "Space_" are something worth striking down.

>>16414 Just looking at those images makes me wanna vomit and the text is unreadable. >>16416 Why you hate him, he seems like a cool dude who done lots of damage? Even though i dont like the 420chan userbase, the chan itself can be fun sometimes. I go politics out the way, i can see why some people might have a heavy dislike for 420chan, on the other hand im glad theres people like kirt who go around cause trouble, even if it creates soykaf pr.

>>16418 Anonymous has no leader number 1. Number two he personally sent me a malicious redirect to child porn search on google. And he's a fuarrrking glitterboy, and full of himself. He needs to be put in his fuarrrking place.

>>16419 Well, if that is true i can sure see why you hate him so much, personally i dont endorse inter chan wars, particularly not 420chan. Also you may or may not have heard that he is fighting a custody battle over his son with his psycho ex wife that uses the kid as leverage. Probably you wont feel sympathy, but then maybe you can take some comfort in that and leave off the internet war ideas, atleast vs channers. He talks about this things a lot on his live stream, he seems fairly likeable, but then again i never met him. Well that being said, its none of my business what went on between you, if you chose to go down that road however i dont think it will end well. Also he never proclaimed himself leader, others did it for him, and no anon has no leader.

>>16420 My advice is to never visit 420chan if you're going to challenge him in anyway, he is a fuarrrking child. He got me because I was IP hopping and I posted twice from one IP to the site. I wouldn't have a problem with him if he didn't act like a fuarrrking child and send malicious redirects from 420chan at people he doesn't like. I reported it, it pissed me off so bad. He is a fuarrrking child. Maybe revenge isn't the right path but seeing that cunt suffer makes me happy. He is a terrible person.

>>16421 Thanks for the advice, i dont particularly engage in the community there, i just brows it sometimes for info and maybe post advice or questions. I can tell theres some nasty stuff going on between members there, besides im too old to get involved in anything.

>>16418 Kirt, is that you? Don't lie...

>>16420 >Also you may or may not have heard that he is fighting a custody battle over his son with his psycho ex wife that uses the kid as leverage. Like he even cares about his overgrown sperm cell. The dude sits on twitch doing opioids while screeching like a constipated baboon begging for e-donations. Hacktivism is very reptilian behavior

>>16437 He's a fuarrrking idiot. What's his claim to fame aside from 420chan? Redirects, oh boy. What has Kirt actually done that his hacker tier? It makes me laugh everything surrounding him, he literally did nothing. It was everyone in those IRC channels, even if he was apart of it he's a glitterboy for claiming himself leader. And he CAUSES interchan wars. He is not good for the movement and he's not a good person period. He will betray you the first chance he gets.

Total newbie here, I've just started with computer related things last year so please bear with my post Some people have been tracking my messages on Discord for god knows what reason and I have absolutely no idea how are they doing this, I've tried to reinstall the app, change my accounts and use VPN but they are still able to detect the messages It's highly likely that they have my IP address, does anyone know of any methods that they can use to do this? I know that Discord is not end to end encrypted but how can you actually do this? I didn't remember clicking anything that would add a malware to the phone itself. Thank you

>>16445 Did you accept any files from any of those servers? It's possible you're being MITM (Man In The Middle). It's hard to know without more details. You need to be careful with discord. You could always ditch the account.

>>16447 >Did you accept any files from any of those servers? It's hard to pinpoint which server was it exactly but I've only downloaded images and videos so far >MITM (Man In The Middle) Thank you, this makes more sense Does this mean that they can access anything other than Discord messages? >You could always ditch the account. I have reinstalled the app and changed accounts for more than 6 times but they can always detect my messages, even when I am messaging things on my own server with myself in it They can also detect things when I am messaging from my laptop

>>16423 Not him nor do i know him personally or even heard before a few months. I dont really care all that much, i was just curious why someone would want to wage a hacker war against 420chan. Dont even really like the board or the users much, but it has some nice content every once a while and/or if you take the time to browse trough history. And i think you should use sage since this is offtopic, i didnt mean to derail, but i dont know soykaf about opsec since i basically live almost sheltered neet (no)life. I do know youre not supposed to release information that can be used against you to untrusted persons and/or use compromised channels.

>>16450 >Thank you, this makes more sense Does this mean that they can access anything other than Discord messages? Yes and it's possible that one of the images you accepted was steg'd or something and it was actually malicious. You could try uploading the images you've gotten to virustotal and see what it says. >I have reinstalled the app and changed accounts for more than 6 times but they can always detect my messages, even when I am messaging things on my own server with myself in it They can also detect things when I am messaging from my laptop Sounds like you're getting MITM'd. if you think they got your IP you can call your ISP and tell them you suspect your getting MITM'd and you want a new IP.

My advice is don't be dump and save images from channels you don't trust. Hanging out in public discords isn't a joke I don't know why people do it.

>>16445 How do you know you're being tracked? If youre using a VPN it doesnt matter if they have your IP address >but I've only downloaded images and videos so far for most attacks thatll keep you safe, but, filetype doesnt really matter too much to be honest

>>16454 He says they are getting his laptop messages too which makes me suspect they are sniffing his traffic

>>16456 sure, but he has to be getting notified of these messages getting stolen right? how...

and furthermore if he was on a VPN his traffic would be encrypted even if it is being sniffed, right? im more confused how they know theyre being monitored than i am of the fact that theyre being monitored

>>14656 has anybody a better scan of Michael Bazzell - Open Source Intelligence Techniques?

spiderfoot is pretty good right?

>>16468 theres a perfect copy on libgen, its the 51ish mb one not the 24ish mb one

>>16487 It's a decent tool still used pretty often.

Bumping the thread. Thanx to the OP and Posters for this contend and the resources. May all you all find neat junk in the damnedest places.

>>16396 Hory shet, magapedes are negative IQ autistics. Instead of deanonymizing the jew and corporations, they stalk pink-hair literally whos on twitter.

>>12164 how can you build a body armor if you don't know how guns work?

1)where to start? 2)is there osint communities where people work on investigations together or blogposts on investigations? I want to learn with the bests, but skids are ok.

>>16740 1)where to start? CyberMentors osint course, youtube courses, one of the many osint books in this thread. 2)is there osint communities where people work on investigations together or blogposts on investigations? I want to learn with the bests, but skids are ok. Any group that does crowdsource intellegence. this can include bellingcat, searchlight, totally legal activist groups. >>12164 This board isn't just for defense.

I do not know who needs to know this but i have foud a site that analyzes a twitter account. https://en.whotwi.com/ Tor users have to solve a craptcha.

Do holehe send false positives or my 2 victims have accounts on the same 10 sites?

>>16835 Yeah, it does. Any alternatives?

>>16835 Try to make an account in every site it detected. Yeah sounds tiring but it is the only solution i thought.

>>16836 No, it does not.

>>16415 Ooh I wanna do this how do I join. Practicing on random online communities seems like a good opportunity to learn about network-centric warfare.

>inteltechniques cheatsheet anyone have this now its gone?

Should i learn any other programming language for osint besides python and bash?

>>16892 python and bash get the job done, you probably don't need anything else.

I do not get this part. https://www.bellingcat.com/resources/2021/05/18/unsure-when-a-video-or-photo-was-taken-how-to-tell-by-measuring-the-length-of-shadows/ Am i supposed to use rule of 3 with the pixels to determine the size of the shadow or something? And why 2.33cm?

>>16931 >rule of 3 I mean cross multiplication. Sorry, i am retarded.

I also do not get this part. https://www.bellingcat.com/resources/2020/12/03/using-the-sun-and-the-shadows-for-geolocation/ The sea is not visible only in lisbon. How he decided that the video was recorded in this part, specifically?

>>16931 >Am i supposed to use rule of 3 with the pixels to determine the size of the shadow or something? And why 2.33cm? In an image editor, you could rectangle-select the guy and get his height in inches or cm or whatever. Same with the shadow. You don't have to, though. As the bellingcat guy says in the article, what's important is the ratio of the height of the man to the length of the shadow. You could choose the height of the man as an arbitrary unit of 1 and express the length of the shadow in terms of that unit. You use high-school trigonometry to find the angle you need, which is the angle of the sun in the sky. In this case, tan theta = opposite divided by adjacent. 2.33cm in this case because that happens to be the height of the guy as represented in the image. >>16938 He didn't say it was definitely filmed in Lisbon, just that it was a plausible assumption. After establishing that the filming location was Portugal, he said it looked like a medium-sized city or larger. Lisbon is the largest city in the country, and Portugal doesn't have that many medium-large cities. On the coast, Lisbon and Porto are the biggest, I think. He does go on to identify further Lisbon landmarks, however, including what is apparently a well-known tree-lined avenue.

>>16938 Reminds me a bit of this: https://www.youtube.com/watch?v=vw9zyxm860Q

>>16949 >You could choose the height of the man as an arbitrary unit of 1 and express the length of the shadow in terms of that unit. But how to find the lenght or ratio without any reference?

>>16961 If you don't want to rectangle-select the man and use whatever units the image editor provides, you can put a piece of paper up to the screen and mark his height. Or put a ruler up to the screen. Kinda pointless, since even GIMP will give you the size of selections in inches, cm, pixels, and several other units.

Is buying social media accounts for OSINT purposes a decent idea? Also how would one go about finding this? Thanks.

>>16986 for osint not really, the only time it would be good is if your trying to bot likes or shares to push stuff to the trending page.

What is a person supposed to do if he’s socially pressured to make a social media account like Instagram but doesn’t want to because he hates the concept of posting anything online? The fact I’m into this field makes it even worse; like what am I supposed to do without making myself a target?

>>17200 You should do what you want to do. If you don't want an account, don't make one. If your friends invest serious value in social media, that's their life, not yours. They'll deal.

>>17200 what is the social pressure, work or friends?

Sexual predator brought to my attention

>>17232 Got the image before the thread was gone

>>17200 post generic crap that doesn't identify anything like tv shows, music. The same way you should use your sock account.

https://github.com/sinwindie/OSINT

>>16663 This.

>>17232 Funny thing is there's no exploitation there. Sounds like they're getting a pretty good deal. > How can this be allowed to go on? Simple, do nothing about it because there's no victim. >>17233 I fail to see the problem. Is this more of this puritanical anti-sex thing?

I'm am currently contemplating dropping ANTIFAs entire network here to be analyzed with everything that is going on in portland

https://pastebin.com/YvEeFPsN Recent ANTIFA dox effort with chat logs and users names from telegram channels in multiple states.

>>17259 Since when did ANTIFA turn into some sort of monolithic org?

>>17260 it's not, and I'm sure the people who work on these dox efforts are aware of this. But, like the left does with the term 'alt-right', it is convenient for propagandists to portray their bogeyman as unified and organized

>>17258 >ANTIFAs entire network IM GOING TO DOX THE HACKERS NAMED 4CHAN! yeah, >>17260 & >>17261

>>17264 >>17261 >>17260 They are some how able to be both monolithic and yet not. He likely means the American "branch" which is centralized, with "lone wolf" sub groups that aren't usually very "lone wolf". It is not complicated, but Antifa is like those "decentralized" social media alternatives. >99% of everyone is on the same server Despite that, the semantics do not matter. It is not hard to gain access to any and all of these channels and just use a bot to scrape everything. What matters is that, for some reason, being that "antifa" is socially acceptable. As a result, they tend to be really sloppy with their opsec. >Yeah what are you gonna do? dox us? lmao we won't lose our jobs. There are few jobs to lose.

Sharing my work from the previous effort

If you guys check out the chat logs you'll find out they are militarized too, this is no joke. These people are the attack arm of the biggest cult in the world, Freemasonary

Gonna throw this in here too

>>16415 After hanging out for awhile, I decided 420chan is pretty cool and doesn't afraid of anything and should at least be added to this image. If you wanted to map an enemy network I'd suggest stalking facebook and twitter as well as making searches for every person you can find who might be a Satanist. Also agree that motivation is a big factor. If you are wanting to know more about social engineering I'd be happy to talk about it. Post your questions and I'll try my best to answer what I can.

>>17271 my bad didn't check all the way to the bottom of the image, image is fine. regardless. >>16884 If you want to learn how to do this it's a lot of API pulls, I suggest you make throwaways for open source sites, who knows when one might get hacked. Pretty much you're looking to harvest as much information as you can if you want to do this.

I've got some google earth caps that some madlad was posting, does anyone want them? It might be too late for them

>>17270 any more info on this? It's barely legible- but even if I squint I seem to lack some background on what is going on there.

>>17279 It's from Dr Sheva, I hope you blew the full image up before making this post, I'm tired of this meme. That's from symposium, that was Dr Sheva's presentation of how the US government has silenced him

Where can I find specific tools for Snapchat? IG has plenty

Is there a good way to scrape LinkedIn profiles over Tor? >inb4 just access them No can do, they shadowban Tor users (and at least require them to sign in).

>>17304 you need a sock account to scrape data, you can use google dorks to see if you can grab a active api key and throw that into recon-ng over proxychains(over tor) and use that to scrape pages.

How do some anons decipher where a picture is just by the environment in the pic? I’ve seen some next level soykaf done by either geniuses or autists (or both) on other image boards like that actor who put up a flag and people figured it out by the fuarrrking shadows and clouds or something.

>>17334 This is called IMINT [Imagery Intelligence] and/or GEOINT [Geospacial Intelligence]. These type of investigations can get very complex very quickly. Anyways, here is a great startpage that has a soykaf ton of resources and tools for OSINT/GEOINT/IMINT/SOCMINT ect. Check the different tabs. Cartainly worth bookmarking; https://start.me/p/BnrMKd/01-osint-hub

>>17334 if you want to dip your toes into imint THM has a good free intro rooms https://www.tryhackme.com/room/searchlightosint or just search osint in the search bar.

>>17282 >I hope you blew the full image up before making this post Why don't you try looking at the full image yourself? It's unreadable. Thanks anyway.

The hacker known as 4chan says these people targeted me

>>17268 what did you use to generate this?

>>17579 I think it's Maltego The Proprietary Open Source Intelligence App?

discord.gg/cyclepath This server has been phishing

>>17535 Why are they targeting you?

This is likely a C&C discord, very small and they kick you fast. https://discord.gg/YfsjTERM7f >>17689 They are currently under control at the moment, I'll come back and let you know if things change and escalate.

>someone does C2 over discvck rip IRC

>>17720 anything that will give you a free service and has a api will most likely get made as a c2 channel honestly. Discord has been used as a malware host by malicious actors for a long time now.

https://graphcommons.com/graphs/d208e5f8-aa2a-429b-b576-63e676d9f3e3/selection/d6d0c09e-a7e9-68e7-d632-9baaf5375783 https://graphcommons.com/graphs/0a79deca-46a2-48e9-9d90-326b20aa6e9e?auto=true Here's some datasets that came my way others might enjoy

discord.gg/kekking Another very large phishing discord, almost 600 inactive accounts on this one they've been doing it for awhile.

>>17720 i've seen twitter too

>>17763 Hammertoss was one of the coolest uses of social media as C2, IMHO.

https://graphcommons.com/graphs/4369213b-9573-4062-815e-ee056f4e7783?show=info Blackmail dataset & a fun image I've had for years in case someone wants to get creative

>>17770 Le, does any of those retarded tricks even work outside of Booma-ville, LARPistan in Anno Domini 2021? Nobody's gonna send you free stuff today until you verify your phone number, install an app, send anus scan and tie your payment card credentials to be charged.

What are the most common ways people expose themselves on anonymous message boards? You sometimes hear about people posting anonymously sometimes getting exposed. Is it a simple combination of stenography, analytics based on repeat file/image usage? This is something I'm particularly interested in, as I often question whether or not image files I'm uploading to boards have their EXIF data properly removed, and these days you often have people uploading files to external websites like streamable to work around board upload restrictions, especially on 4chan.

>>17798 Don't the chans wipe your EXIF?

>>17802 They generally do. At least 4chan does. So I'm trying to figure out if the exposure happens via mediums outside the chans or if there is something about the chans I don't know about. I see with the archive sites you can search by both image md5 and filenames, so I wonder if that is one of the avenues people sometimes forget to cover. If a user is posting the same image across multiple boards it should be possible to theoretically track them down via the archives to piece together their identities.

>>17771 Nah it's old. It was the early days of imageboard raids, with the /i/nvasion boards. I'm pretty sure the partyvan wiki was hosted by 420chan admin Kirtaner but I can be wrong. He hosted the first /i/ board tho. Idk why >>17770 post this in 2021, it's archives at best.

any tips on how to OSINT brazilians? i have the name, RG and CPF. i know about jusbrasil and escavador, but i do not know if it have interesting information. i am not a serasa user.

>>17831 Everyone saves and posts same frog picture across all boards, is that a crime? Would be suspicious to see same frog picture with flipped pixels which changed it's hash. Perceptive hashing and pattern recognition software can compare similar images regardless of what low-effect metadata changes have been applied to them. A specific image is specific, and you can pull all similar images from archives if you wanted. Lainchan does not erase EXIF portions of a file.

>>17864 Perdi tudo no "I am not a Serasa user". Houve um vazamento de muitos dados de todos os brasileiros recentemente, não tenho o arquivo mas tu deve achar se procurar o bastante. Tem o bot do Skynet pro Telegram também, se você entrar no grupo dá pra dumpar uma quantidade boa de dados.

It's probably worth this thread. I want to learn how to crawl | scrape | spider websites and download files from them efficiently. It's always easy with old-style directories, but not with Web2.5 - I can download a directory with wget, but no matter what arguments I throw, it never crawls up or sideways if a link points to a file there. Imagine downloading a thread on lainchan, how do I get all images which are are at /sec/src/, if they are not visible thumbnails, they are not captured by the wget command. I have to manually grep their links from thread 's html and only then download as list of links. I've read somewhere on stackoverflow that using regular expressions on html is bad. - I think I need to upgrade to something better, python maybe, but it has 3 libraries for crawling web, so confusing. - Is there a way to record simple human navigation pattern in a web browser GUI, then produce a program from this course of actions? I need to click certain link on page, most likely the "next" button, then grab text of certain page element, then proceed. - I have an archive of certain forum saved and want to visualize posting frequency across time on graph, what tools should I use and where do I even start? - Is there a command line tool or bulk downloader for google docs and "cloud", also yandex? Like gallery-dl or yourube-dl, but for these two specifically. It's really tedious to click through and download zips for every folder. Maybe there's an auto clicking script for these at least? - Last question, is there a way to save cropped portion of webpage either as html or pdf file so that all text in frame remains searchable? Yes, I'm talking about those enormous 4chan screencaps, would be better to distribute them in searchable form. I know there is OCR, but it seems counterintuitive: take source with perfectly searchable text, make a bitmap out of it, recognize it back and deal with errors, ugh.

>>18668 Solid list. I initially found it alongside some "OSINT CTF" on github. Too bad a lot of the stuff seems to work on and off. For instance, the reddit archive and the Whatsapp tool on that list went down a few times when I tried to use them.

>>16443 >kirt He was jerking himself off over the Epik leaks in 2021. I found a thread on some domain auctioning forum where all he did was make an account to insult people and the staff let him off with it because he's a super cool haxx0r I have to wonder what happened to these guys that they think leaking some magaboomers' information is in any way significant

>>18670 Yeah, he does try to keep the list updated as much as possible. But I can understand how much work it would take to constantly be checking every URL in that list. There is over 1000+ links in there, all with descriptions too which is great imo. Dont see that very often to be honest. Just be sure to `git pull` his github every week or so. He always adding more interesting resources, also this guy posts lots of useful stuff on his (((twitter))). I really like his writing style too, its less "professional" and more 1337, makes for a fun read. Just read this pdf and you'll see what I mean.

>>18212 luasocket with lua-gumbo have always cut it for me so far.

>>18715 >I can understand how much work it would take to constantly be checking every URL in that list. A single curl script that feeds off the list and updates a file with site uptime perhaps?

>>18720 True, perhaps suggest that on his github. This guys profile pic is fuarrrking awesome too lmao. RIP Don Vito

>>18720 Not necessarily a foolproof method, as the frontend of a site can still be up but the actual functionality (checking twitter profiles, whatsapp or whatever) won't work.

>>18726 Is his list supposed to be up-to-date one? After skimming through the PDF posted above I already notice lot of gaps I personally know about and I'm nowhere near all your skiddie PI LARP, just tools for everyday struggle against the webshit. What's the difference between this particular list and whatever awesome-osint lists exist on gayhub already, can't they fuarrrking pool their data or something, make a wiki? You can't shove entities into one hierarchical category inside a paper-esque medium, not if there are so many of them.

>>18739 I believe so yeah. What gaps have you noticed that are in there? Im sure there are a few dead links/defunct tools, but other than that this list seems pretty solid. Has way more resources than any other lists ive seen out there to be honest. The osintframework and awesome-osint lists are wildly outdated compared to this one,

>>16420 420 chan staff have come forward mentioning that he's literally hit her on stream. dude is a piece of soykaf, liar, not to be believed. his imageboard isn't that bad tho

>>18766 >his imageboard isn't that bad tho Like most something awful spinoffs, they ban you over the stupidest 'kaf. Kirtaner's a deadbeat asshole and a showoff; srsly, try being in a chat with this guy, he never shuts up about how "in 07 I did this psyop and that psyop". He literally said the Naruto fandom was an Anonymous Legion psyop in a chat once.

Any Russia-specific OSINT resources, lainons?

>>19210 Here is a large collection of non-US OSINT resources; https://start.me/p/jj2XEr/osint-global-non-us

I have this POS aussie fuarrrker, a real motherfucker who I'm trying to do OSINT on. He's grooming underaged girls on /soc/ using discord, cyberstalking, blackmailing them to do what he wants, and doxxing them when they don't comply. He's stalking a friend of mine obsessively and blasting her with constant messages on social media with links to her instagram account on Twitter and chan websites and devulging her name and city information. I recently found out that he's been spamming her with about 30+ messages using alt accounts trying to gaslight her and bait her into self harm and depression, I suspect all in an attempt to groom her into complying with his demands. How the fuarrrk do I make this guy stop? Is that something the police should be looking into? I know one other person who has apparently seen their face that I was thinking about getting into contact with to get more information. All I know about him is his time zone, and probably approximate city. He's active on imageboards, and uses discord (mostly alt accounts from what I can tell). Any advice you can give will help immensely. I want this fuarrrker to burn for the soykaf he's doing to people, the worst psychotic scum of the earth.

>>19391 What's his approximate city. That matters a ton because if you want to get him arrested or jailed you need to see if the police department of the city will respond to you well. There are many pigs who'll hear a call about child grooming and not consider it a problem. Hell, even if he gets arrested, his case could be completely ignored. Do research on the reliability of the legal system where he lives first. If that doesn't work, it's best to publish the information about him yourself, and spread it around to those who are most likely to be affected. This will help steer many people who might fall into his clutches away from him. I've dealt with people grooming my friends before too, I'm sorry to hear about your situation. Godspeed Lain.

>>19391 If he is Australian all you need to do is dox him and share what he has done among members of his community. Guaranteed he will get beaten in the streets.

>>19934 god you nazis are mentally ill and beyond saving

>>17232 >>18715 can't /g/ just create some kind of This Thot does Not Exist lifelike AI that doesn't require heavy datacenters to run i guarantee you mindgeek would go broke overnight without harming us gamers hell even fur users made their own instance to cheat on commissions like the greedy patreon jew they are >>17802 now the real question is? how do you insert fake exif in the photos to incriminate someone if i were the bad guy

**fuarrrk this language enhancer** >>16402 jfc why is everybody there white? i have never seen a single hispanic/asian guy fighting for social causes glad im not american >>16397 >>16391 i thought pony users enjoyed working on FAGMAN and government why are they suddenly backstabbing them? though jokes aside i heard one day there will be a massive civil war between leftists and the establishment soon the very corporations that once pandered to them will dispose of antifa once they are finished ruining the economy

>>20256 The exiv2 tool can edit exif metadata. >>20257 Its really sad that so many leftists got taken by corplord pandering and internal agitation (e.g. you CANNOT form a labor union these days without pushback from someone who wants you to check your privilege or something). Plus very sad to see how many are really just hipsters with no understanding of security culture. Some types of socialist or syndicalist anarchism have not succumbed to brain rot. But not enough.

>>15116 I too would like resources on looking up criminal records. This feels like it should be a lot easier than it is.

I think OSINT is irrationally treated as unhoaxable far too often. A guy on the internet gave you a pinky promise that he saw such and such devices at this and that event composed of your enemies? Oh, the [site] account had HIS name? Oh, it used one of his old emails as a recovery email? His phone number? Damn, must be him- no other way to set that up. Segment evidence into tiers by orthogonal dimensions: -hoaxable by anyone -hoaxable only by an authority -unhoaxable -unvalidatable -personally validatable, with resources expended (e.g. research/zogmedia paywalls, running your own cryptocurrency/protocol node) -personally validatable (even from a tor exit node. IP reputation is a subscription.) -characteristic hidden by default, requires target to shoot themselves in the foot to reveal. Is the guy posting "Wow! what a rainstorm going on right now!" legit or geo-misdirecting? -characterisic hidden at no cost substantially greater than mere awareness. Flipping a setting, maybe changing which app you use. -characteristic can only be hidden by limiting operational capacity or scaling resources. (Want your server downtime to be uncorrelated with power/internet outages in your neighborhood? Are you going to reduce the lifetime of the service, spuriously correlate the downtime with outages in other locations, or set up alternate location backups to pick up the slack?) -same as previous, but it is profoundly unscalable to hide

Where do I find a copy of this 200 million user twitter database dump I keep reading about?

>>14657 this lists blogs on page 506

what does doxxing people even do? i know a schizo groomer 30 something year old dude who groomed a minor (who is now an adult), when she broke it off with him he lost his soykaf and started harrassing her and doxxing her, and now he's trying to weasel his way back into her good graces like nothing has happened and is blackmailing her, the guy has almost all of his info on the net, but afaik hasn't broken any of his states laws, but is a real peace of soykaf

>>21096 Psychological and Emotional distress, also allowing that information easily accessible when before you'd have to dig for it allows other people to jump into the harassment with little work. This makes it easier for more people. That's not including what information is included in the dox just address and phone number can grab more info like a SSN. Then it goes to credit theft and loan fraud all in your name. Once that soykaf is out there. They're is no going back only way to change your SSN is witness protection.

>>19210 Mostly there are tg channels like Mycroft, BeholderIsHere, Канал Кибердеда

>>12321 Because it teaches OSINT techniques, almost all the tools it talks about are public and easy to pick up on your own. It also contains some analysis training which I would say is more worth it, but you can train yourself by going through pic related on your own with a few friends. Its a CASE BOOK so you will need to go through the activities it talks about. Don't go googling things about the cases, you are supposed to have limited information. Get the red second edition version, this is the same casebook the CIA glowies use to train analysts. Another useful book is Structured Analytic Techniques for Intelligence Analysis which you can get for free off of libgen. http://libgen.rs/book/index.php?md5=4B471D4010A7E04BEA7616D0CC25455D

I 100% agree with this opinion, and advocate that people use it in reverse. I have actually been slowly seeding the internet with fake people sharing the same name and general location as me. Whenever someone tries to dox me, they inevitably fall upon one of these people and believe that it is me for real. You can get names into marketing databases really easily by purchasing products from websites such as sephora using a prepaid visa gift card under whatever you may like. Expect 6 months for it to end up in a website like spokeo.

>>21165 this post is meant as a reply to: >>20785

>>21165 >You can get names into marketing databases really easily by purchasing products from websites such as sephora using a prepaid visa gift card under whatever you may like. for what purpose? I get the point of attaching fake info to your real name but what's the purpose of this?

>>21169 So that when/if someone does have my name, or an alias and attempts to dox me, they will likely get a fake address instead of my real one.

Maybe someone know any good place to practise? I mean where ppl can give me some target and say collect information

>>21820 >Maybe someone know any good place to practise? I mean where ppl can give me some target and say collect information https://www.osint.games/

Hello Lains, How would you go about running a one to two person psyop against an individual or small private sector organization? The only resources are the internet, a few addresses and a bit of intel on the family background.

Osint seems like fun and the knowledge required to pull it off seems to be worth learning, but I don't have any 'target' in mind. Any fun ideas to motivate me into getting started?

tor users are blocked from accessing shodan via cloudfare. Are there any other options?

Bumping, I don't want this thread to die. It has been here too long and is too useful

bumping so i can return at a later date to practice

>>21869 give them what they want as an associate and eventually they will do your will. pretty simple, eh?

I recently read an article about deanonymizing tor hidden services by match it's tls serial number with one on the surface web. Does anyone know of a place to search for a site by tls sn?

>>22765 certificate transparency logs https://crt.sh/

>>12505 This, I found someone who had stolen someone I knows phone in like 10 seconds because the stupid junkie bitch who nicked it posted selfies on the owners whatsapp and had just started using their account. Identity in approx 10 seconds and their address took a few mins. People really are very stupid

>>21886 >Osint seems like fun and the knowledge required to pull it off seems to be worth learning, but I don't have any 'target' in mind. Any fun ideas to motivate me into getting started? Here are some suggestions: - Celebrities , this is interesting because it will give you a peek into how people go about obscuring their identity. It works best to start with a low-tier celebrity and work your way up. If you get to an A-list celebrity or their family you can see how they use agents, lawyers, and privately held corporations as the mailing addresses for absolutely everything they do. - Lunatics , You know someone who talks about jewish lizard people and has an internet footprint a mile wide. These are usually really easy. - Influencers , These people always have massive internet footprints and it's fun to see their supposedly jetset beach and first class flight photos knowing they actually live in a beat down shack in the middle of nowhere. - Scammers , These guys have usually put a little bit of effort into hiding. It might be tempting to do something with this information but please don't bother your targets in any way.

>>21164 Reading this. I'm sure the content will be interesting and useful but absolutely fuarrrking lol @ the consistent soykaftiness of military and intelligence types. The made the margins thick and set the font as big as possible like a college freshman with nothing to say. Gotta publish a big book so people think I'm a smartie pants.

>>21821 Why don't you pick your own targets? I pick people on social media who brag about harming other people either physically or financially. I have folders full of doxx on different influencers and known trip users/anons. They are easy targets, and they are terrible people like pedos who brag about fuarrrking kids on chans etc. Every now and again one of them says something to piss me off so I drop an anonymous tip with the authorities for the lulz along with all the data I collect. Usually the stuff that they brag about is only the surface of their degeneracy. Lurk long enough and trip users end up giving enough information to start figuring out who their irl identities are. >>21925 VM running Psiphon or spoofing ip adresses with a VPN might work fine. I remember a presentation about a guy who got caught by forensics not because the mad man opened up remote sessions over 20 computers (essentially 20 ip chain), but because he printed something and the printer used the origination data from the computer he was using. I'm not a network specialist, so I really don't know a lot about that.

>>18715 One of the more interesting PDFs shared in this thread. I took a look at many of the books shared here, and they're all extremely boring, with little to no insightful information. For example, documenting OSINT is not something anyone should need to be taught. Actually, there's probably very few things people need to be taught in this field. It's more like they just need to be introduced to tools and websites.

Not quite osint but it feels most at home ITT: >admin with a new website invites people in, there's a meta discussion about the configuration and people chilling >strange poster starts telling the admin their config is alright but they should do it more like [site] who are security experts and really care about protecting their user's privacy from da feds (or something) >mfw despite [site] taking a few decent steps, they send their user data straight to PRISM, through two different services, on the first visit >mfw they're spending hundreds of dollars on a reverse proxy to 'protect against DDoS attacks' but it takes one minute to find their origin IP, and they unwittingly encourage a method which bypasses that reverse-proxy, and anyone can single-handedly DoS them through layer 7 anyway >mfw its admin [REDACTED] so the server host is going to deplatform them if they ever get popular, which is their goal >mfw its admin [REDACTED] so the server can be legally raided by feds at any time >mffw after I point out that the new website's admin did a solid job and explain how [site] has some pretty obvious and serious flaws introduced through negligence, the poster doubles down and says they're ackchually super secure security theatre - not even once

>>12163 I use OSINT to test my own anonymity.

>>22907 how'd you exactly do this, with OSINT?

>>22907 do you by any chance have any secured messenger/mailing service for contact? i severely need to learn to do this, because i have a lot of connections from both low and extremely high places and some of the people are straight up abhorrent

i personally took courses from an ex-KGB hacker who made an OSINT-facilitating specialized browser "Venator" drop more sources from the CIA and ill drop more sources

>>23475 Not >>23471, but I have an idea as to what they mean. Look up your full legal name, phone number, email addresses, address, etc. on a variety of search engines. Use different browsers, incognito and normal browsing mode, etc. If you find something that you would like removed, submit takedown requests and request for it to be removed from the search results. The exact process varies between search engines and services, so look it up. More information on searching here: https://ohshint.gitbook.io/oh-shint-its-a-blog/ Check the information on various data broker websites and request for it to be removed. More information on this here: https://inteltechniques.com/requests.html Check your information on various data breach search engines. You can't remove data breaches themselves from the internet, but you can remove yourself from these search engines. More information on this here: https://inteltechniques.com/exposure.html Finally, you can begin spreading misinformation on yourself. Create fake profiles under your real name and fill them with false information about yourself, your interests, profession, etc. More information on this (as well as topics mentioned above) here: https://www.youtube.com/watch?v=tJEGBmQjh-8 Further reading: Books: OSINT Techniques - Resources for Uncovering Online Information by Michael Bazzell https://inteltechniques.com/book1.html https://annas-archive.gs/md5/14597c8090f6d0eed2f9d8d2480f0b24 One of the few books I recommend buying, as it receives rolling updates to content. Deep Dive by Rae Baker https://www.raebaker.net/ https://annas-archive.gs/md5/624f353f1f13a2574b52b1563af2acc8 Blogs: https://ohshint.gitbook.io/

>>22907 I will make it easier: Anon, could you please explain to us all how to doxx pedophiles?

What are we using now that search.0t.rocks is down? Between that and breachdirectory I was able to get by without having do download db dumps, which I can't at the moment or any time soon. Is there another similar tool on the clearweb?

>>23616 yeah but all the ones I have found cost money, snusbase, wealeakinfo, dehashed etc

>>12162 Spent a little while and curated a list of bookmarks/ Bookmarklets If anyone's interested, here is the link to the pre-made bookmark folders from OSINT combine. https://web.archive.org/web/20240326184524/https://www.osintcombine.com/osint-bookmarks (Original site removed this page) I added the self-hosted tools from Michael Bazzell's book OSINT Techniques as a bookmark I can access from my browser (Changed them a little but mostly the same as the ones you download from his site or use at his site if interested https://inteltechniques.com/tools/) here are a few links to some bookmarklets I stole https://one-plus.github.io/Bookmarks https://github.com/C3n7ral051nt4g3ncy/OSINT-Bookmarklets https://github.com/B0sintBlanc/Osint-Bookmarklets I didn't steal all of them, just took whatever I thought was useful and had chatGPT help me craft some bookmarklets I found useful.

If i were to start as a complete beginner retard, how would i get into this?

>>24160 Resources Provided by OP Michael Bazzels OSINT Techniques What in specific do you want to learn Video material > TCM sec OSINT course or yt series

>>24183 Thanks nemissa i appreciate your guidance

>>23898 Is anyone updating Michael Bazzell's books now that he's vanished?

>>24220 No, but it doesn't really need to be updated unless some insane shift happens with the internet The best part about how he displays information is the frameworks of what he introduces you to. Sure, it's nice to be handheld when walking through this, but he teaches you how to go about improving your tool set and updating them yourself. It's current and up to date as far as I'm concerned, sure there are things that aren't mentioned in his book that he really can't mention that the avg skidforum kid knows about like TLOP lookups and other methods of getting SSN's but the general goal of the book can be continued and updated by yourself in the future without needing input from him.

So idk if this deserves its own thread, but i recently found that apparently Amazon can see your location through a VPN? I'm connected to Brave via VPN on this device, and I went to amazon (simply to compare items, I've never signed into anything on Brave), and in the top left corner it said "Deliver to [my city]", even though I wasn't signed in. My VPN is set in another state. I did an IP checker and a dns leak and both came back with my VPN address. Not only that, I opened up a VM running Kali Linux, got on Firefox, went to amazon, and it STILL knew my location (again, never signed into anything on this VM ever, and still connected to VPN). I inspected the page and saw something called IP2LOCATION, which I guess it uses to see if users are connected to a VPN, but I can't find anything that says it can break a VPN and track your location. Any ideas on how to beat this?

>>24220 it's ether your vpn is leaking/setup wrong, what vpn service are you running?

>>24236 I assume this was meant for me, I'm using Express. All tests show it working fine, It's only amazon that seems to know. Idk how it could be set up wrong, I don't use it on the browser level, I use it on the device itself

>>24235 Did you try rotating location ? By the way, Express VPN is one of the soykaftiest vpn provider ever seen. Think about moving to another.

>>24238 Yeah I picked a different state but it still knows. I opened a VM with VPN and then downloaded tor and that seemed to work, but I'm still not sure what's up with the vpn and yeah I saw more info about them after I had already got it. I tried finding court cases of them storing logs but I couldnt find anything, but other anons said they used to be a different company, so maybe thats why I couldnt find anything on em, but yeah

>>24238 What vpn would you recommend which supports port forwarding ?

>>24238 interesting, So I noticed that anytime I pick a different country on my vpn, amazon thinks im in that country, but if I pick a different US state, amazon still knows my city

>>24245 What "device" are you using? It could also be that. I'm using Mullvad on my PC and Amazon definitely isn't able to track my real location. If you want one that supports port forwarding try either IVPN or Njalla. Why do you want port forwarding anyway?

>>24246 It's just my PC. I'm not the anon who asked about port forwarding. So if you just go to amazon.com (without being signed in), it doesn't know your real location? I don't understand how every other metric shows My vpn location, but amazon shows my real one. Even google doesn't seem to know

>>24247 Yes, I went to Amazon to see if there really was some crazy chance of that happening, and no, they don't report my real location, just my VPN's. Are you clearing cookies before trying again? Is there a firewall you can check to make sure your browser is going through the VPN interface? Do you have WiFi and ethernet on at the same time? In case you don't know, you can open your command line/terminal and type either "ifconfig", "ipconfig", or "ip a" to get a list of the interfaces.

>>24248 All of these are good suggestions could also just be you allowing location access from your device and having a leaking browser or something along those lines

>>24250 Lainon already said they're using their PC. I don't think desktop computers usually have geolocation services, unless they really meant a laptop.

>>24247 Are you sure there is not some cookie or MAC address that still associates you with that device? I don't know the back end of amazon, but I would imagine it correlates things like system clock along with other information it can access to identify you as a user within a location. EU data protection etc. also puts a wrench in a lot of advertisers algorithms. Being in the United States, it probably knows your device because most devices have a hidden advertiser ID that is assigned to the device that in theory is not assigned to your identity, but let's be honest here, they know more about you than you know about yourself.

>>24251 >desktop computers usually have geolocation services they do.

>>24223 >doesn't really need to be updated I don't really agree with this - the osint landscape is changing all the time, which is why Bazzell had a weekly podcast and updated his books every year as resources appeared, disappeared or moved behind paywalls.

>>21164 Are the instructor materials as good as the full book?

>>24260 Yes I guess you are right, thinking about it a little deeper now it was somewhat shortsighted to say it did not need to be updated. I actively keep up with OSINT as a hobby, so there would be a gap between when the book was written and the knowledge you or me would accumulate by keeping up with the information passed around in this corner of the internet that would leave someone in the future without the same starting point due to broken tools, old methods etc. and would create a hard time closing the gap. That being said, I was a "com" skid in high school and a lot of the information and techniques hasn't really changed, and It's easy to find replacements for old tools I used or just self-hosting them ex. weleakinfo vs just downloading and parsing DB's myself or outsourcing it to a new site like snusbase > Reverse Image Search got better if you want to elaborate on more for me and the community if you could about what you think has changed massively since the book was written and things that could affect the current knowledge in the book in the future. > post quantum computing > more and more people taking privacy seriously and needing to use linguistics or something like that to link peoples alias' and identities I'm mostly referring to the OSINT book and not so much extreme privacy that's a different animal

>>16415 I'd like to add some more sites to the chart, specifically the Kiwi Farms section: -exodus-> Cwcki Club Kiwi Farms -exodus-> Onion Farms -inspired-> TheVirtualAsylum

>>24235 >brave Disable non-proxide UDP or else you prob have DNS leaks. There may be other things: https://github.com/brave/brave-browser/wiki/Deviations-from-Chromium-(features-we-disable-or-remove)#services--features-we-disable-entirely You can create a group policy for Brave or any chrome based browser { "DefaultGeolocationSetting": 2, "WebRtcIPHandling": "disable_non_proxied_udp" } >firefox https://github.com/arkenfox/user.js/blob/master/user.js#L104 >>24256 yes its called geoclue-2.0

>>24807 >https://github.com/arkenfox/user.js/blob/master/user.js#L104 lol the dev trannypants of the arkenfox project is a real gatekeeper user_pref("geo.enabled", false); should be set amoung others Look at how they treated the main dev of Whonix. https://github.com/arkenfox/user.js/issues/1807 https://github.com/arkenfox/user.js/issues/1809 >I could go on, and I've just had someone who seems to think ZERO connections is fine preach at me (and spam the same soykaf everywhere except at Tor Browser, and if I see it there I'll going to also shut it down, yup, I can do things at Tor Project) in #1807 . When this sort of black vs white and no grey comes up, I shut it down as it is a red flag and I do not want to become the nazi bar >and spam the same soykaf everywhere They opened and issue on Librewolf and got no reply cause its a dead project that even trannypants acknowledges lol >LW's issues tracker is currently 230 open issues, 150 of which were opened in the last 3 months - that's almost 2/3rds. Think about that. This is a sign of a leaderless and dysfunctional project. Seriously, LW is returning to soykafe and has had limitations for a long time. They have a track record of bad mouthing people in issues and then hiding comments (requiring you to log in to read anything that they feel atacked their ego). It's beyond me why we have these types of gatekeepers in the privacy community.

>>24813 Yeah arkenfox doesn't fully disable Firefox telemetry The only Browsers that have radio silence are Mullvad and Tor Browser

>>24253 Could be timezone detection cause sites will try to get location based on system timezone. You could set your timezone in browser to use UTC or just do that in general. My guess is wither that or what >>24807 said with DNS leaks and geolocation settings in the browser. If only OP could get back to us on this.

>>24816 This whole thread gave me soykaf with about 5% of it being usefull or on topic. Good username lookup sites are: https://whatsmyname.app/ https://instantusername.com/ Tools: https://github.com/sherlock-project/sherlock https://github.com/soxoj/maigret https://github.com/worldofcyberskills/Blackbird

https://inteltechniques.com/blog/2024/11/10/osint-techniques-11th-edition-now-available/ Michael Bazzell's osint book is getting updated for 2024, anyone looked at it yet?

Hey Lainchan, are there workarounds to getting Whois info that's blocked by GDPR regulations?

>>17770 Glorious haydukery. I miss Paladin Press.

>>17260 Sure it works in a cell structure, but cells communicate. Al-Quaeda operates in a cell structure but they're still one organization.

>>12162 Would being a pro at Geoguessr help with a OSINT proficiency? Serious question.

>>25796 No, I don't see how being able to quickly recognise regions of the world would help with OSINT proficiency at all.

>>25802 “At all”? I could see cases where it can be useful, if you have to identify locations (like whatever interpol puts out for the public to help)

enjoy this chummers, don't say i never do anything for you

>>26054 is this ideal if I want to make a psychological profile of the girls I'm interested in through their internet activity?

>>26061 the only way you'll know is to download and start learning...

are any people search websites legit? all of them shake me down for money and lead to nothing. so far every website i've used does this, email and phone search sites too.

>>26090 i am a PI in meatspace and I can tell you. Good info is neither cheap nor easy to come by. The OSINT landscape has changed considerably past few years, social networks have made it harder to scrape info from profiles.... it takes A LOT of patience, strategy and sheer dumb luck

>>12162 Been doing OSINT for a couple of clients over the years. Most interesting case I had was determining the identity of an individual who was inciting terroristic threats against law enforcement. Ended up finding out that the individual was already in prison for possession of CSAM and human trafficking. Was able to determine his identity based on the fact that his social media was following the same child he victimized and that he was posting in the language of his country of origin.

i'm working on getting a sociopath (or at the very least, someone with such tendencies) out of the picture since they're affecting my friend group. currently in this phase but at a complete dead end. we have his main socials but i'm almost certain he's got another set of socials that's completely disjoint. even non-open-source info hasn't been able to generate a lead on it yet. nothing here has, either. i'm at a loss. i'd prefer not to get my hands dirty if i can help it. you guys up to anything? also, any ideas on my situation?

Hello I have managed to track down several addresses and phone numbers related to the family of someone I'm collecting some OSINT on. I've got a burner and I'm planning on calling them to fish for some information. Do any kind Lains have social engineering tips for me? The mark is a fake ragebait journalist poisoning discourse in my country.

>>26107 Hi lainon. Just curious, and maybe you know: Does publicdata ever actually audit the info access justifications provided by the user or do they mainly rely on scaring people away from abusing it?

>>27951 >The mark is a fake ragebait journalist poisoning discourse in my country. What country and what is with the reddit spacing?

>>27953 North America. I don't know what reddit spacing means.