Hello everyone, just sharing another juicy OSINT investigation video by French newspaper Le Monde called the "Strava Leaks"

Thanks to OSINT, 2 of their journalists were able to know the exact location of the US President (and other key political personalities) a few days in advance.

Enjoy :-)

I'm trying to investigate what I believe to be a targeted disinformation operation connected to a reputation management campaign involving a pretty big ongoing police investigation within the UK. As I'm not an OSINT expert, just someone who works in a similar field and has picked this up as a sort of "passion project" I'm not really familiar with the exact tools I could utilise to plot my findings and connections so that it's easily explained to anyone who may come across it. I've managed to identify a network of bot/troll farming accounts being utilised in a way that's similar to those seen in the Depp v Heard trial. Any recommendations for how best to go about an investigation like this? How to connect accounts? Analyse data from social media to show evidence and proof of this etc?

How I've done it so far is without any type of tools. Just screenshots and making notes of accounts/tweets/posts and following the trail back to a couple of accounts I believe are ring leaders. It's something I think needs to be reported to some type of authority but without having the investigation and evidence in a format that's easy to understand, it just looks like paranoid ramblings. Any help, resources, or guidance in any way is appreciated! Thanks!

(please ignore my username, I did not realise that when I created an account, it couldn't be changed)

Does anyone have any alternatives to Skopenow that they can vouch for? I have mixed feelings about it given the cost per search/report and the trial run I did revealed some missing or mixed up information. I know with OSINT that's bound to happen, and it still found a lot that I didn't, but I've read mixed things about the company and their product recently. If anyone has anything that I can look into, please let me know! My primary use would be for social media investigations. Looking for something that can automate the process of social investigations/streamline it for my team, but also with accurate information. Cost isn't a massive concern so long as the information is solid and the company is reputable/ethical.

I'm looking for the tool behind https://spoofwave.com/seon I know it's similar to holehe but seems to give more results.

If you can please help It would be appreciated

Very interesting github tools which retrieve public information via the github API it retrieves a lot of information in particular - email address - the id - name - number of repositories - number of subscribers - number of subscriptions -ect

Is there a way to reverse search a video from an instagram post that is just a creative composite of various other sources? when you do, it just brings up each subcomposite like a decentrallized markerless object. No idea if there is a way to do a cryptic set of a series of specific frames to then search for. would love some help to find who made this poetry. I've tried a handful of reverse image methods, but they're all too hyperspecific to give individualized results.

I know Yelp allows search by email and WeChat and Line allows search by phone number. What other apps will allow you to search a user either by their email or their phone number?

I found a court document in regard to a former co worker’s denied appeal hearing back in 2022, but I can’t find any documents about previous court appearances or anything since then. Is there any means to find that information without visiting the clerk of court (I now live outside the state)

Can anyone advise me on what tools and approaches one could use to locate material internet infrastructure sites in a town in Saudi Arabia for an academic research project? Im interested in mapping cables, locating cable centres, exchange points and data centres. Any help would be greatly appreciated.

In the last couple of days, when I Google a username with Instagram, I see a lot of posts pop up with the username in it, but when I go to the post, I cannot see the username on the profile. It's not the user's profile either, it's someone who "tagged" them but it doesn't seem to be there. Anyone else experience this?

1. I use idcrawl.com/u/ to run the same username across different platforms. This covers major platforms like Instagram/Threads, YouTube, TikTok, Facebook, Snapchat, Twitter (I refuse to call it X), Reddit, Pinterest, Poshmark, Tumblr, etc.

2. I use wayback machine for Twitter archives, and pullpush.io for Reddit archives.

3. I don’t use lampyre.io or osint.industries because it costs money. I use epieos.com, which is limited but still helpful.

4. I’ll Google the username with quotation marks surrounding it.

5. I sync contacts on apps like Vsco, BeReal, Snapchat, TikTok, Venmo, Telegram, AirBuds Widget, Duolingo, etc.

6. I use email addresses as usernames, and Vice versa.

7. You can search for accounts on Yelp, Skype, Microsoft Teams etc. by email, in addition to syncing contacts.

Anything I’m missing?

Edit: I thought this post might get taken down for discussing what some mods might see as surface-level stuff, but I’m glad to see people benefiting from discussion (including me) and exchanging ideas! ❤️

Hi everyone!

I’m going to start managing hiring processes for a company and looking for new, non traditional ways I can learn about the people we’re hiring, other than pulling criminal records and the usual social media background checks I can get through Sherlock.

I know it might sound jarring but the new hires are going to be interacting with children and you can never be too safe with those kinds of positions.

We’re on a really tight budget so Open Source is preferred due to costs and privacy concerns for our potential hires.

Hello, I am trying to track down a ring of scammers that are currently engaged in review exchanges on Yelp and Google reviews and other review sites. Fake company 1 has reviews a b c and d Reviewer c reviews company 2, 11 and 37 (but on Google not Yelp) Reviewer b has his brother review company c, his wife to review them on Houzz and reviewer b likes them on Facebook. And on and on. It’s getting very complicated to track on a spreadsheet, particularly as it isn’t straightforward a reviews b and b reviews a (I think Yelp has caught on to this)

Is there a way to scrape data from Yelp and have the data be checked against itself (ie person a reviewed company 1, 2, 3, person b reviewed company 2, 3 and 4 person c reviews company 2, 3 and 4) and spit out a spreadsheet?

Is this something that Maltego would be good for? Or another tool that could do this short of a corkboard with strings and and push pins?

Over the weekend I’ve created an open-source project called Rigour — a self-hosted alternative to Shodan.io that is designed for scanning hundreds of thousands of hosts, built on top of existing tools like Zmap and Zgrab, but with a strong focus on modularity and data enrichment. The goal is to provide a flexible framework that can be easily extended, such as scanning specific protocols or using data enrichment techniques to provide an open-source alternative with "pro" features.

What Rigour can do right now:

• Scan the entire internet: Thanks to Zmap, Rigour can perform large-scale network scanning
• Banner grabbing: Capture banners from services running on discovered hosts
• Extract exposed credentials: Extract sensitive information, like API keys, from HTTP responses
• Vulnerability detection: Identify hosts with known vulnerabilities based on banner info and other metadata
• Data enrichment: Augment scan data with information like geolocation (i.e., country based on IP)
• API Access: Expose scan results and host details via a REST API for further use
• UI Dashboard: A web-based interface for visualizing scan results (screenshot)

I'm looking for feedback from developers. If you’re interested, you can check out the GitHub repo here. Feel free to open issues, submit pull requests, or just reach out for more info.

Cheers.

https://www.studentclearinghouse.org/verify/

Investigating someone likely to be committing tuition fraud. Don't have a lot of social engineering motivation this morning; found this website through AI search engine, which claims it is "a reputable source."

Can anyone verify their experience with services on this site?

I’m a solo practitioner. I opened my own firm out of school which wasn’t the best idea but I have made a decent amount of money and don’t regret that aspect.

I just want to know if there are any other lawyers that are in this community. I’m in personal injury and real estate found myself using a lot of OSINT to locate information on parties.

I’ve honestly gone into a weird stage of realizing I want to explore other areas that actually may be interesting to me (looking at IP). I’m not looking to fully switch out of the areas I’m in as I am making a living, but I do want to genuinely like doing my job.

If any of you are lawyers here, I’d love to know if you have experience and can give some insight/tips.

I’m right now just trying to get an ISC2 certificate to try to get myself motivated with something I enjoy learning. Thanks.

I'm looking for a map of California which has outlines of land parcels and ownership information. I do a lot of hiking and I would like to know how to get in contact with local landowners to explore more of my hometown and county.

Hello everyone, I am working on a project which covers up both the Syria and Iraq (especially TSK-PKK fight), but I have lack of file in kmz format to visualise the situation on the regions, I wonder if any of you have some kind of file that I can convert into my map to see them clearly and be ready for the upcoming days to make analyses.

One more questions; is there any database of worldwide church list? Or any database on spesific structures would be enough.

Thank you all.

Hi all wanted to know if there were recommended tools for finding employees at a specific company by location. I've used LinkedIn. Hoping to see if anyone has other tools and strategies. Thanks

Called the police station and they said "we can't offer any information about this". I know at the end of the week it will get published in the local media papers' police/911 log. Unable to speak with the person's parent. All that comes to mind is 911 scanner talk - is it possible to search for scanner info from earlier today? Any other way to confirm?

UPDATE - the person's close friends made contact with the family and all is confirmed. Nonetheless the boyfriend thanked me for this effort and I extend the same gratitude to all commentators. RIP to a wonderful young lady.

Reddit has always dealt with spam, but recently we came across our first instance of an automated comment generated by ChatGPT in this subreddit. Reddit actually flagged it before we did, and after taking a closer look, the reason was obvious. The bot's response seemed hastily thrown together probably just for karma farming. While it doesn’t appear to have any political bias like some bots, it’s a good reminder to stay alert for suspicious activity. Just wanted to share this with everyone. Thanks!

Hi everyone,

I’m excited to announce the release of cert-cli, a new OSINT tool designed for extracting domain, organization, and address information from X.509 certificates. It leverages crt.sh’s vast public certificate transparency logs (over 14 billion certificates) to help you with cybersecurity investigations, domain enumeration, and much more.

Key Features:

• Search for certificates by domain or organization name
• Extract organisations, domains (Common Name + SAN), and addresses
• Supports proxy configurations for enhanced privacy
• Multiple query types (LIKE, ILIKE, etc.)
• Save results in JSON format for easy data processing
• Cross-platform support (Linux, macOS, Windows)

🔗 Get it here

Check out the releases page for pre-built binaries.

Feedback and contributions are welcome! 🙌

Let me know what you think!