Satellite Image & #OSINT
(Hunting from Space - #GEOINT — 2)

The article is about why satellite images are needed in OSINT and what services can be used to work with them.

https://snoop-ghost.medium.com/satellite-image-osint-%EF%B8%8F-54a78a267ff5

APK Url Grep

When gathering information about a company, it is worth researching not only its website, but also its mobile apps (to find subdomains of the main website and potentially related websites).

https://github.com/ndelphit/apkurlgrep

Creator twitter.com/gattardi

#go

A List of Hacker News's Undocumented Features and Behaviors

- filter posts below X points
- wayback (view the home page for a specific date)
- real-time full-text search
- topic lists

and more.

https://github.com/minimaxir/hacker-news-undocumented

Contributor twitter.com/minimaxir

Trace Labs OSINT Field Manual

- ethics
- safety
- planning and preparation
- techniques
- resources

https://github.com/tracelabs/tofm/blob/main/tofm.md

Contributor twitter.com/TraceLabs

MY OCEAN PRO

One of the most informative online map tool for exploring the seas and oceans. More than 277 datasets are available. For example:

- temperature
- salinity
- wave height
- sea ice
- acidity
- oxygen concentration

https://data.marine.copernicus.eu/viewer/expert

Creator twitter.com/CopernicusECMWF

LAZYEGG

Tool for extracting different data from web pages:

- cookies
- leaked credentials
- domains
- ips
- images
- links

and more.

https://github.com/schooldropout1337/nuclei-templates/blob/main/lazyegg.py

Creator twitter.com/gudetama_bf

#python #osint

Python for AWAE (Advanced Web Attacks and Exploitation)

Quick notes about:

- os module
- urllib/urlib2
- requests
- lxml
- BeautifulSoup

and other #python packages.

https://github.com/shreyaschavhan/python-for-awae

Contributor twitter.com/shreyas_chavhan

Shreays Chavhan (twitter.com/shreyas_chavhan) Bug Bounty Roadmap

A detailed article in which a college graduate (computer science) tells what results ($15000) he achieved in 8 months and 600+ hours of hunting and self-study using only free educational materials.

https://shreyaschavhan.notion.site/Roadmap-I-followed-to-make-15-000-Bounties-in-my-first-8-months-of-starting-out-and-my-journey-98b1b9ff621645c0b97d1e774992f300

ExportGram

A quick online tool that saves Instagram post's comments (+ usernames and number of likes) to CSV, Excel or JSON.

100 comments free.

https://exportgram.net/

#socmint

How to Market your OSINT Tool the Right Way

A detailed article on what methods (mostly free) it's can use to promote #osint tools.

https://www.osintteam.com/how-to-market-your-osint-tool/

by twitter.com/notjasonhowarth for twitter.com/OsintTeamBlog

browser.lol

A virtual browser inside your browser.

Useful for browsing suspicious websites or websites blocked in your country.

So far you can only run Chrome and Firefox, but other browsers (Tor etc) will be available soon.

Phone Number Business Registries

48 links to phone business directories for different countries (mainly Europe), where you can find a variety of information about companies (and sometimes their owners).

https://starwww.tg-me.com/p/2p1x6J/15-phone-number-business-register

Tip by twitter.com/OSINTech_

#osint #corpint

When you do a search using the site: operator in Google or other search engines, don't forget that you can use it to search by part of an IP address or an exact IP address.

You can read more about how this can be useful in this article from twitter.com/wh1te_h0le:

https://medium.com/@cuncis/how-searching-by-ip-addresses-can-reveal-hidden-gems-e58b46e6fdc8

Four ways to search Google for sites in a particular country (!all work roughly!):

1. Search by domain:

site:.gu

2. Change language settings:

Add to &hl=fr to URL

3. Search by IP range:

site:101.99.*.*

4. Use isearchfrom.com.

Business Registries around the world

Click on a country on the interactive map to get a link to the official government website where you can find out information about business entities in that country.

https://ebra.be/worldwide-registers/

#osint

Cloudflare Resolver

Free online tool. Enter the name of the domain protected by CloudFlare and the service will find subdomains that are not protected by CloudFlare.

http://www.skypeipresolver.net/cloudflare.php

HASHMOB

Multifunctional online tool to search password hashes.

Search for hashes (copy the text or load the list from a file, 500 hashes per hour for free), verify hashes against a certain algorithm, check password strength, download hashes lists.

hashmob.net

🤖 Botnadzor.com - a platform to detect bots in VK.com by account, post, or group. API and browser extensions are available.

❓ The project is designed to disclose the scale of hidden propaganda, misinformation publicly, and lies coming from seemingly real profiles of existing people. The photos on these profiles are stolen from dating sites or other social networks.

👉 Link: https://botnadzor.org/

👉 How to detect botnets and artificial content: https://sowel.soxoj.com/artificial-content-botnets

#botnet #sowel

The Man in Seat 61.

Mark Smith's (twitter.com/seatsixtyone) train seat maps collection

A website with a huge variety of information about European trains. Its creator has been working on the project for over 17 years.

seat61.com

#osint #geoint

Partly free online tool for Instagram profile analyze.

- profile growth
- posts interactions
- hashtags

and more.

app.notjustanalytics.com

#osint #socmint