πŸŸ₯
LSWSec - Offensive
  • Introduction
  • File transfer
    • Transferring Files
      • Transferring Files - Linux
      • Transferring Files - Windows
  • Recon
    • Passive information Gathering
      • Website
      • Finding SubDomains
        • DNS
        • DNS Zone Transfer
    • Subdomain Enumeration
    • OSINT
      • Email
      • People
      • Social Media
      • Username and Accounts
      • Passwords
      • Business
      • Image and Location
    • Active Information Gathering
      • Nmap
      • Netcat
      • ss
      • Unknown Port Scanning
      • Footprinting
        • FTP
        • SMB
        • NFS
        • DNS
    • Vulnerability Searching
  • Ports
    • 21 - FTP
    • 22 - SSH
    • 23 - Telnet
    • 25 - SMTP
    • 69 - TFTP
    • 80 - HTTP
    • 88 - Kerberos
    • 110 - Pop3
    • 111 - RPCBind
    • 119 - NNTP
    • 135 - MSRPC
    • 139/445 - SMB
      • PSExec
      • Nmap
      • Other tools
    • 143/993 - IMAP
    • 161/162 - SNMP
    • 389/636 - LDAP
    • 443 - HTTPS
    • 554 - RTSP
    • 587 - Submission
    • 631 - Cups
    • 1433 - MsSQL
    • 2049 - NFS
    • 3306 - MySQL
    • 3389 - RDP
  • Web
    • useful information
    • Web Proxy
      • Burp
    • Web Content Discovery
    • SQL
    • Web Fuzzing with FFUF
      • Directory Fuzzing
      • Domain Fuzzing
      • Paramater fuzzing
    • Local File Inclusion
      • LFI
      • Basic Bypass
    • Authentication Bypass
    • IDOR
  • Priv-esc
    • Windows
      • mimikatz
  • Pivoting
    • Info
    • Locating other machines
    • proxy
    • SSH tunneling/port forwarding
    • plink
    • socat
    • chisel
    • sshuttle
    • connecting to windows environments with a user account
  • Command and Control
    • powershell empire
    • Armitage
  • Active Directory
    • Debugging DNS
    • NTLM Authenticated Services
    • LDAP Bind Credentials
Powered by GitBook
On this page
  • Twitter OSINT
  • Facebook OSINT
  • Instagram OSINT
  • Snapchat OSINT
  • Reddit OSINT
  • Linkedin OSINT
  • TikTok OSINT
  1. Recon
  2. OSINT

Social Media

Twitter OSINT

  • Twitter Advanced Search – https://twitter.com/search-advanced

  • Social Bearing – https://socialbearing.com/

  • Twitonomy – https://www.twitonomy.com/

  • Sleeping Time – http://sleepingtime.org/

  • Mentionmapp – https://mentionmapp.com/

  • Tweetbeaver – https://tweetbeaver.com/

  • Spoonbill.io – http://spoonbill.io/

  • Tinfoleak – https://tinfoleak.com/

  • TweetDeck – https://tweetdeck.com/

Search for information

  • Search for #

  • β€œβ€ look for specific string

  • From:username

  • To:any posts that tag a certain person

  • @ usernames

  • Geocode:search coordinates

  • Use advanced search feature

  • Social bearing can categorise tweets on their mood

  • Can find out who a user is socialising with

  • Can find sources of tweets like devices or websites

  • Mention map maps out who a user talks to

  • Tweet beaver – convert username to twitter ID (can find users with twitter id if their username changes)

  • Just looking for details to get more of an idea and make trends

  • Spoonbill can list every time a change is made to someones data

  • Tinfoleak look for leak information

Twitter tools

  • Twint – https://github.com/twintproject/twint

  • pip3 install –upgrade -e git+https://github.com/twintproject/twint.git@origin/master#egg=twint pip3 install –upgrade aiohttp_socks

Facebook OSINT

  • Sowdust Github – https://sowdust.github.io/fb-search/

  • IntelligenceX Facebook Search – https://intelx.io/tools?tab=facebook

  • Difficult to keep up with

  • Search for user

  • Look under category of what your searching for

  • If you search β€˜photos of name’ then you can look at all the photos that others tag them in.

  • Facebook is a lot more limited

  • Get id, right click and view page source, search ID and get user ID

Instagram OSINT

  • Wopita – https://wopita.com/

  • Code of a Ninja – https://codeofaninja.com/tools/find-instagram-user-id/

  • InstaDP – https://www.instadp.com/

  • ImgInn – https://imginn.com/

  • Look at user: instagram.com/user

  • Look at images which have been posted and what they have been tagged in

  • Instagram tools

  • sc1341/instagramOSINT – github

Snapchat OSINT

  • Snapchat Maps – https://map.snapchat.com

  • ues username search feature

  • Public photos are posted on snap maps

  • Can go to a location and look for nearby photos

Reddit OSINT

  • Can search in reddit

  • Sort by to narrow down

  • Can also search in google with site:reddit.com

  • Can also search for comments in reddit, look for little details they put in comments

Linkedin OSINT

  • Look on profile

  • Look at username in URL

  • Look at contact info

  • Can see all past posts

TikTok OSINT

  • tiktok.com/@username to see user

  • Can look at all their videos

  • Can right click on picture and open in new tab to get large image

PreviousPeopleNextUsername and Accounts

Last updated 5 months ago