“Once you eliminate the impossible, whatever remains, no matter how improbable, must be the truth.” Sherlock Holmes I’m not usually a big fan of Sherlock Holmes. Like many other fictional detectives, I don’t think he’s a particularly effective investigator.…
Instagram OSINT – A Promising New Python Tool
I came across a new Instragram scraping tool InstagramOSINT after DutchOsintGuy and Hwosint pointed it out on Twitter. I’ve stopped using InstaLooter since it kept causing dependency issues, and I started using InstaScraper as a photo grabbing tool. InstagramOSINT is…
Opsec for OSINT – Why You Need To Deal With Browser Fingerprinting
Remaining anonymous is often an important concern for OSINT practitioners. There are many types of OSINT, and many different reasons why we do not necessarily want our subjects to know we are trying to find out about them. A recruiter…
Quiztime 5th July – Lifeboats and Fast Reverse Image Searching
Rescue boats are a common theme in this week’s Quiztime. On Tuesday Lars Wienand asked us to locate a rescue boat and today Philipp Dudek asks another Lifeboat related question. This was quite a fun quiz to solve but after…
Website Attribution Without WhoIs – Reverse IP Lookups (Part 2)
In my last post on Reverse IP Lookups I wrote about the challenges OSINT investigators face when it comes to attributing a website to someone. Reverse IP lookups show which other domains are hosted at the same IP address, which…
Quiztime 28th June 2019 – Planespotting On The Heide
When I was a child I spent a lot of time living around various military establishments in Germany. In the 1980s the north German plain was packed with NATO soldiers ready to fight the Russians in case they ever rolled…
Tell, Explain, Describe… Asking The Right Questions To Get The Right Answers – Quiztime 25th June 2019
In the short time that I have been blogging, many of the OSINT tools I’ve referred to have already become obsolete or no longer exist. Facebook removed Graph Search, Twitter removed geotagged Tweets, IntelTechniques lost its tools, and Pipl went…
Website Attribution Without WhoIs – Reverse IP Lookup
How do you identify the people or group who run a website? Knowing who really owns or controls a domain is an important part of many online investigations, but it can be very hard to do in cases where people…
True, False, Or Cannot Say? Asking The Right Questions In OSINT Investigations
With the loss of a lot of well-used OSINT tools recently, it’s time to be reminded about what really makes for an effective OSINT investigation and that although tools come and go, the principles of good investigation don’t change. Good…
Build Your Own Custom OSINT Machine – Part 5
The first four parts of this series of posts looked at how to build your own custom Buscador-style OSINT virtual machine. Part One showed how to install Ubuntu, Part Two looked at installing programs from the Ubuntu software, Part Three…