social-media.md

Social Media and Related Public Platforms

Contents

1. [[#Operation Security]]
2. [[#Cross-Media OSINT]]
3. [[#Social Media OSINT]]
4. [[#Chats]]
5. [[#Messengers]]
6. [[#Other]]

Operation Security

Signal

• Freedom.press: Locking Down Signal

Cross-Media OSINT

• Xadhrit/terra: OSINT for INSTAGRAM and TWITTER
• Intelligence X social media tools for FACEBOOK, LINKEDIN, TELEGRAM, TWITTER, AND YOUTUBE
• Intelligence X dorks for GOOGLE HANGOUTS, SKYPE, TELEGRAM, WHATSAPP, and ZOOM invite URLS
• MobileFirstLLC/social-media-hacker-list
• ThoughtfulDev/EagleEye: Find social media profiles by image reverse search.
• Skylens.io: location-based social media intelligence
• MrTuxx/SocialPwned
• Travisbrown/memory.lol: a web service that provides historical information about social media accounts. Look up 542 million historical screen names for 443 million TWITTER accounts.
• OSINT Combine: Alt-Tech Social Search, a custom Google search-engine for non-mainstream social media platforms and several paste sites
• Alfredredbird: alfred: A tool which finds social media accounts

Handbooks

• Maltego Handbook for Social Media Investigations, stored here: [[maltego-handbook-for-social-media-investigations.pdf]].

Also see [[identification]].

![[SOCMINT-Cheatsheet-IntelTechniques.jpg]]

Username Enumeration

• https://userhunt.co/
• https://one-plus.github.io/
• Usersearch.org social network search engine
• Iojw/socialscan: Python lib and CLI for querying username and email usage on online platforms
• Sherlock-project/sherlock: Cross-network username-based discovery

![[Username-Workflow.png]]

Comments

• Export FACEBOOK, INSTAGRAM, TIKTOK, TWITTER, VIMEO, and YOUTUBE comments

Browser Extensions

• Firefox webextension for FACEBOOK and INSTAGRAM OSINT

Hashtags

• Trending Hashtags on FACEBOOK, INSTAGRAM, TWITTER, and PINTEREST in real time
• https://cipher387.github.io/hashtags_and_keywords_social_media_quick_search/

Articles

• https://www.cqcore.uk/email-to-username/

Social Media OSINT

![[Social-Media-What-Can-We-Find.jpg]]

1. [[#Facebook]]
2. [[#Instagram]]
3. [[#LinkedIn]]
4. [[#Mastodon]]
5. [[#Parler]]
6. [[#Reddit]]
7. [[#Snapchat]]
8. [[#Steam]]
9. [[#Strava]]
10. [[#TikTok]]
11. [[#Tumblr]]
12. [[#Twitch]]
13. [[#Twitter]]
14. [[#VK]]
15. [[#Yandex]]
16. [[#YouTube]]

Facebook

• FacebookToolkit: Get Facebook data
• OSINT.rest: Paid Facebook analysis tool

Articles

• Revealed: Facebook's Secret Blacklist of "Dangerous Individuals and Organizations"
• Osintcurio.us: Saving Facebook: tips and tricks on how to document Facebook-related evidence

Research

• The Intercept: Facebook Praise, Support, and Representation Moderation Guidelines (reproduced snapshot), stored here: [[psr.pdf]].
• The Intercept: Facebook Dangerous Individuals and Organizations List (reproduced snapshot), stored here: [[facebook-dangerous-individuals-and-organizations-list-reproduced-snapshot.pdf]].

Search

• Formulas for searching Facebook
• https://sowdust.github.io/fb-search/

Scraper

• Facebook profile data scraping

Videos

• OSINT Curious: How to find Facebook data when a profile is private

Instagram

• https://i.instagram.com/api/v1/users/lookup/id/info
• https://osintcurio.us/2019/07/16/searching-instagram/
• Search Instagram user bios
• Find Instagram user IDs
• https://github.com/megadose/toutatis
• https://github.com/Datalux/Osintgram
• https://github.com/th3unkn0n/osi.ig
• Aware online: List of Instagram Tools
• Instagram search and download
• OSI.IG Instagram OSINT tool
• Datalux/Osintgram: Interactive shell for analysis on an Instagram account
• Novitae/sterraxcyl: Export Instragram followers and details to xls or csv
• Bellingcat/instagram-location-search: Finds Instagram location IDs near a specific latitude and longitude
• Blackeki/yesitsme: Simple OSINT script to find Instagram profiles by name and email / phone
• Novitae/Tenai: Partly reveals mutual followers of private Instagram accounts

![[instagram-login-bypass.png]]

Videos

• Richie Rich: Instagram Video Selfie Verification Bypass Method

LinkedIn

• Haax.fr: LinkedIn cheatsheet
• Mxrch: Revealin: uncover full name of people on LinkedIn
• Gosecure.net: Step-by-step Guide to Deanonymise Emails on LinkedIn
• M8sec: CrossLinked: LinkedIn enumeration tool to extract valid employee names from an organisation

Articles

• Hidden LinkedIn Search Operators
• https://www.cqcore.uk/are-you-linked-in/

Mastodon

![[Mastodon-OSINT-Attack-Surface.jpg]]

Parler

• Parler.adatascienti.st: a searchable copy of the Parler breach

Reddit

* https://www.redditinvestigator.com/ * Reddit-search: Find deleted posts and comments on Reddit

• Yasiv.com: Find Subreddits by keyword
• Camas.unddit.com: Search reddit using the pushshift.io API.
• Bmai.dev: Reddit search for posts and comments
• Betterredditsearch.web.app: Reddit search tool

Data Visualisation

• Anvaka.github.io/map-of-reddit

Snapchat

![[Snapchat_OSINT_Attack_Surface.jpg]]

• Searchable Database of Snapchat Profiles
• Rhematt/Snap-Scraper: Download media uploaded to Snapchat' Snap Map

Steam

• https://www.steamidfinder.com/
• Steamid.uk: Historic steam profile information
• Steamrep: Steam account search tool

Strava

• Osintcurio.us: You Can Run, But You Can't Hide
• Aware-online.com: Finding witnesses via Strava

TikTok

• https://www.skopenow.com/news/tiktok-investigations-and-osint-tips
• Pablouser1/ProxiTok/wiki/Public-instances: a ist with all the known public instances of ProxiTok
• Dfreelon/pyktok: a module to collect video, text, and metadata from Tiktok

Search

• Search4faces.com/tt00: Search from 55 million TikTok avatars
• https://www.osintcombine.com/tiktok-quick-search

Scraper

• [https://github.com/drawrowfly/tiktok-scraper](https://github.com/drawrowfly/tiktok-scraper

Tumblr

• Tumblr original post search by Tumblr user

Twitch

• Twitch earnings lookup
• Twitch-tools: Search streams, filter results by title, game, language, viewer count

Twitter

• All My Tweets: View all your tweets, likes, followers, or timeline on one page
• Foller.me: Twitter analytics
• Followerwonk: Search Twitter bios, compare Twitter accounts, get activity analytics
• Social Bearing: Insights and analytics for tweets and timelines
• SpoonBill: a tool for finding Twitter account change history
• Twitter account analysis
• TweetBeaver: Twitter analytics, search / download timelines, account data, etc
• Tweeterid: Twitter ID and username converter
• Trendsmap: Trending Hashtags and Topics on Twitter
• Davidkowalk: twitter_geolocate: Find tweets near an address
• Sleeping Time: find a Twitter user's potential sleeping schedule. Requires logging in.
• Observatory on Social Media: Network Tool: interactive visualisation to explore how information spreads across Twitter

Search

• Igorbrigadir: twitter-advanced-search

Data Visualisation

• Hoaxy: Visualise the spread of information on Twitter
• https://www.omnisci.com/demos/tweetmap
• Onemilliontweetmap: Visualise the last 24 hours of geolocalised tweets
• TwitWork: Monitor Twitter stream

VK

• Spevktator.io: OSINT analysis tool for VK

Yandex

• YaSeeker: Get information on any Yandex account using email or login

YouTube

https://www.youtube.com/feeds/videos.xml?channel_id=Channel_ID -> Search a YouTuber's video descriptions

• https://www.osintessentials.com/youtube
• Extract comments or subtitles from YouTube videos
• Location search / find GEO tags
• YouTube geo-search tool

Search

• Explore AI AI-based, searches across YouTube videos
• ycs-youtube-comment-searc

Chats

Clubhouse

Databases

• https://clubhousedb.com/

Discord

Articles

• https://osintcurio.us/2021/05/06/investigating-discord-a-primer/

Collections

• Dutchosintguy/OSINT-Discord-resources
• Atoncehussein/DiscordOSINT

Tools

• Serverse: Search for Discord servers by keyword
• V3ntus/darvester: PoC OSINT Discord user and guild information harvester

Messengers

• Securemessagingapps.com: Messager feature comparison table

1. [[#Kik]]
2. [[#Skype]]
3. [[#Telegram]]
4. [[#WhatsApp]]

Kik

• https://github.com/netkas-zz/KikToolset

Skype

• Henkvaness Twitter thread describing a technique for getting the best possible picture of any Skype account
• https://whitehatinspector.blogspot.com/2021/03/skype-hidden-osint-goldmine.html
• Epieos: Skype Lookup of Skype users

Telegram

• ItIsMeCall911/Awesome-Telegram-OSINT: a curated list of Telegram OSINT resources
• Tejado/telegram-nearby-map: discover the location of nearby Telegram users
• Jordanwildon/Telepathy: an OSINT toolkit for investigating Telegram chats
• Alb-310/Geogramint: an OSINT geolocalization tool for Telegram to find nearby users and groups

Articles

• jakecreps.com: Telegram photo extraction
• owlspace.xyz: Modifying Telegram's "People Nearby" Feature to Pinpoint People's Homes
• OS2INT: Creating visual intelligence from Telegram user group data
• Te.legra.ph: How to find the owner and administrator of a Telegram channel
• Cqcore: Telegram Fundamentals
• Medium: Telegram OSINT: Generating a Data "Backbone" for Investigation
• Hatless1der: Telegram OSINT Basics: 5 Tips Anyone Can Do Right Now

Tools

• Telegram social network scanner
• Search public messages, channel info, and author info
• Telescan
• TgScanRobot: A bot that shows which Telegram groups a person is a member of

WhatsApp

• Download anyone's WhatsApp profile picture
• Jasperan: Whatsapp OSINT: logs online/offline events from WhatsApp users

Scraper

• WhatsApp group link scraper and checker

Other

1. [[#4Chan]]
2. [[#Dating Apps and Hookup Sites]]
3. [[#Google]]
4. [[#GitHub and GitLab]]
5. [[#Gravatar]]
6. [[#Minecraft]]
7. [[#Spotify]]
8. [[#Wikipedia]]

4Chan

Archives

• https://4chanarchives.com/
• https://4chansearch.com/
• https://4plebs.org/
• https://archived.moe/
• https://archiveofsins.com/
• https://desuarchive.org/
• https://boards.fireden.net/
• https://archive.nyafuu.org/
• https://randomarchive.com/
• https://search4chan.org/
• http://swfchan.com/
• https://thebarchive.com/
• http://www.trapthread.com/
• https://archive.wakarimasen.moe/
• https://warosu.org/

Dating Apps and Hookup Sites

• https://start.me/p/VRxaj5/dating-apps-and-hook-up-sites-for-investigators

Google

• Epieos: Online tool to retrieve sensitive Google account information

GitHub and GitLab

• Gitrecon: Get information from user profiles and find users' email addresses

GitHub

![[GitHub-OSINT-Attack-Surface-v2.jpg]] ![[GitHub-Dorks.png]]

• Thedatapack: find-github-user-email
• Grep.app: Find code snippets across GitHub
• Techgaun: GitHub Dorks: Find leaked secrets using GitHub search
• Obheda12: GitDorker: Scrape secrets from GitHub through usage of a large repository of dorks
• Dxy4481: truffleHug: Find high-entropy strings in Git repositories
• H51un6: email2github: identify GitHub accounts associated with email address
• Rly0nheart: octosuite: a GitHub OSINT framework
• OSS Insight: GitHub Data Explorer, AI-based, searches GitHub event data
• S0md3v: Zen: Find GitHub user email addresses
• Mxrch: GitFive: a tool to help tracking down GitHub users

Gravatar

• Gravatar OSINT twitter thread

Minecraft

• Minecraft statistics: Search for past server activity of players

Spotify

• laptrinhx.com: OSINT Investigations on Spotify

Wikipedia

• Altilunium: Wistalk: Analyse Wikipedia user activity