Social Media OSINT Tools

[Stuart Peck 38]

What tools are best for Social Media recon and why? 

[Alan O. 11]

Sherlock is a brilliant tool written in python, queries multiple sights with only one false positive, wattpad.

[Dec 22]

Google away and get digging 🙂

[Stuart Peck 38]

Google
Instaloader
Linkedin2username
Twint
Tinfoleak
SearchBook
Holaconnect 
Recon-NG

[John King 3]

https://osintframework.com/

https://osintcurio.us/

https://osint.link/

https://inteltechniques.com > now under paid subscription

maltego

google, duckduckgo, bing if you know how to DORK them. 

hunch.ly

 

[Dec 22]

Buscador - https://inteltechniques.com/buscador/

[james mckinlay 110]

 

https://github.com/nettitude/Prowl

https://github.com/laramies/theHarvester

https://github.com/TheHive-Project/Cortex

https://vincentyiu.co.uk/red-team/reconaissance

http://patrowl.io/

https://www.spiderfoot.net/

 

 

 

[Megan Roddie 3]

Any recommendations specifically for Facebook?

[Stuart Peck 38]

3 minutes ago, Megan Roddie said:

Any recommendations specifically for Facebook?

Searchbook works pretty well.

[Alan O. 11]

3 minutes ago, Megan Roddie said:

Any recommendations specifically for Facebook?

Besides google facebook has killed a lot of the tools that existed

[Stuart Peck 38]

This might help a good write up. https://jakecreps.com/2019/06/24/searchbook/

[Dean O'Neill 5]

Use ad-block - http://www.breacher.tk/ 😉

[Nick Leicht 0]

Censys.io

ThreatConnectOpen

Recorded Future

[james mckinlay 110]

https://github.com/Greenwolf/social_mapper

 

https://github.com/Greenwolf/social_attacker

Edited August 13 by james mckinlay

[Salaheldin A. 1]

> Check the #resources channel @ osint.team for online data sources or #OSINT   tools.

 

> Ph055a's OSINT Collection :  https://github.com/Ph055a/OSINT-Collection

Edited August 13 by Salaheldin A.

[Sune J 2]

+1 for hunch.ly. Not only for SoMe, but all webinvestigations.

Nice product, annd great support from the devs.

[Ryan Dowd 1]

Took the words right out of my mouth, Sune. Hunch.ly should be the prereq for any OSINT investigations. The amount of time you try to either a) track back to a site where you found a critical piece of info to pivot from, or b) the source has been poisoned and the data you were served was opportunistic / random at the time (i.e. a "friend suggestion" on a sock puppet account relating to your target, and based on Facebook's suggestion algo). Also, Justin provides amazing and quick support.

[Lawrence Munro 2]

Good tool by @superhedgy and @greenwolf from SpiderLabs: https://github.com/superhedgy/AttackSurfaceMapper

Goes with the other two tools @james mckinlay mentioned above. 

[Joshua Huff 2]

For (getting around the recent changes on) Facebook I highly recommend reading through the long but comprehensive post on Osintcurio.us about the changes and techniques behind the tools.  Facebook is going to continue disrupting the easiest and most popular tools in the name if their new 'Privacy' campaign.  But with an understanding of the searches we should be able to keep rebuilding our techniques after they make these annoying changes:

https://osintcurio.us/2019/08/22/the-new-facebook-graph-search-part-1/

https://osintcurio.us/2019/08/22/the-new-facebook-graph-search-part-2/

 

Since Inteltechniques search tools went behind the paywall I updated my own go-to collection of resources on my blog (has a little bit of everything):

https://www.learnallthethings.net/osint-resources

-J

[james mckinlay 110]

these popped up in my LI feed today - looked interesting

 

https://start.me/p/ZME8nR/osint

https://start.me/p/8yN1wM/cyber-investigations-research

 

[Stacy Lawrence 0]

Mike Bazzell is working on a new OSINT packet. It's pretty great already but is a work in progress.

 

https://inteltechniques.com/JE/OSINT_Packet_2019.pdf

[Matthew Broke 6]

Personally, I believe that marketing platforms are great for social media intelligence (SOCMINT) operations.

I've used Mention.com and Brand24.com, and while they may require some paid subscriptions for good features, they are fantastic for monitoring social media mentions.

To compare the options available, view this community spreadsheet: https://docs.google.com/spreadsheets/d/1Jb47lzecX0D-ZCs5oh-9SqClFOjme1g9tjiCHpPO7BY/edit#gid=0

Edited August 28 by Matthew Broke

[Matthew Broke 6]

On 8/27/2019 at 8:19 PM, Stacy Lawrence said:

Mike Bazzell is working on a new OSINT packet. It's pretty great already but is a work in progress.

 

https://inteltechniques.com/JE/OSINT_Packet_2019.pdf

You say that this is only a work in progress? This is incredible!

This looks pretty complete to me, but if it is not, then that is even better since it is an indication of there being more to come!

[Kyle Christensen 0]

Hunter.io is a decent resource to find email addresses associated to businesses.  I have only used the free searches and can't vouch for paid services.

[Stacy Lawrence 0]

On 8/29/2019 at 6:28 AM, Matthew Broke said:

You say that this is only a work in progress? This is incredible!

This looks pretty complete to me, but if it is not, then that is even better since it is an indication of there being more to come!

The man will not be silenced! It IS a thing of beauty already, isn't it.