What’s the most boring part of Open Source Intelligence? Most OSINT practitioners (including me) usually enjoy the research phase of an assignment the most. Collecting data and finding new lines of enquiry is fun, but writing it all up at the end is usually dull. Well-written reports are a vital part of the OSINT process, …
One of the biggest challenges of internet investigation is preserving data once you’ve found it. We have access to more information than ever before, but so much of it can be easily lost if we don’t take steps to archive it. If you’ve ever bookmarked an important resource only to come back later and see …
In my last Spiderfoot tutorial I wrote about how Spiderfoot HX could be used to gather information about a suspicious IP address and then analyse and visualise the data. In this guide I’m going to show how Spiderfoot HX can be used to investigate a domain linked to phishing. Despite a lot of high-profile …
Spiderfoot HX: Investigating A Domain Used For Phishing Read More »
Using OSINT to identify and investigate sources of malicious internet activity is a key part of cyber security. There’s a huge range of open source information out there to help with this, and Spiderfoot HX gathers it very quickly. This allows more time to spend on analysis of the data to help assess the nature …
Using Spiderfoot HX To Investigate A Malicious IP Address Read More »
Carbon14 is a really useful Python tool for website investigations and verification. It allows investigators to work out when a webpage was created, and if it has potentially been altered since it was first published. Carbon14 checks the data attached to the images embedded in a webpage to be able to tell when they were …
Spiderfoot is one of my favourite OSINT gathering tools. It automates a huge number of queries that would take a long time to do manually. It comes with a wide range of modules that will conduct automated searches for e-mail addresses, IP addresses, domains, phone numbers, usernames, and other types of data. This post will …
Getting Started With Spiderfoot – A Beginner’s Guide Read More »
I came across a new Instragram scraping tool InstagramOSINT after DutchOsintGuy and Hwosint pointed it out on Twitter. I’ve stopped using InstaLooter since it kept causing dependency issues, and I started using InstaScraper as a photo grabbing tool. InstagramOSINT is more than a photo-scraping tool. It’s very new but it gets additional information via the …
In my last post on Reverse IP Lookups I wrote about the challenges OSINT investigators face when it comes to attributing a website to someone. Reverse IP lookups show which other domains are hosted at the same IP address, which is often (but not always) an indicator of what other websites your subject controls. This …
Website Attribution Without WhoIs – Reverse IP Lookups (Part 2) Read More »
Identifying and tracing a person’s footprints across the internet usually involves researching usernames across a wide variety of different platforms. There are many tools available to do this, but I’m a big fan of Sherlock for conducting quick and accurate username searches. Compared to some of the web-based alternatives like KnowEm and Namechk it …