WordPress is the base that 35% of the world’s websites are built on. If you’re ever going to investigate a website, then it’s really important to be able to know your way around a WordPress setup. In this tutorial I’m…
Tag: Tools
Crypto Scam Investigation: Using Spiderfoot HX For OSINT Automation
Automation or Augmentation? Automation is an increasingly important part of OSINT. Even the simplest of investigations can require large amounts of different data types to be gathered and analysed quickly. Yet it is not accurate to suggest that all…
Using Spiderfoot HX To Investigate A Malicious IP Address
Using OSINT to identify and investigate sources of malicious internet activity is a key part of cyber security. There’s a huge range of open source information out there to help with this, and Spiderfoot HX gathers it very quickly. This…
Using FFMPEG To Grab Stills and Audio For OSINT
Many internet investigations feature video at some point. Being able to capture and analyse video content is an important skill, particularly if your task involves identifying people or places. You can always pause a video to try and view the…
Getting Started With Spiderfoot – A Beginner’s Guide
Spiderfoot is one of my favourite OSINT gathering tools. It automates a huge number of queries that would take a long time to do manually. It comes with a wide range of modules that will conduct automated searches for e-mail…
12 OSINT Resources For E-mail Addresses
Most OSINT investigations involve an e-mail address at some point. Some start with an e-mail and nothing else. E-mail addresses can sometimes be a bit of a challenge but they can also provide a wealth of information about a subject.…
Website Investigation – Where Did 8Chan Move To?
After the El Paso shooting this past weekend, it quickly emerged that the shooter had apparently posted his manifesto on 8Chan prior to carrying out the killings. As a result Cloudflare announced that they would no longer permit 8Chan to…
Instagram OSINT – A Promising New Python Tool
I came across a new Instragram scraping tool InstagramOSINT after DutchOsintGuy and Hwosint pointed it out on Twitter. I’ve stopped using InstaLooter since it kept causing dependency issues, and I started using InstaScraper as a photo grabbing tool. InstagramOSINT is…
Website Attribution Without WhoIs – Reverse IP Lookups (Part 2)
In my last post on Reverse IP Lookups I wrote about the challenges OSINT investigators face when it comes to attributing a website to someone. Reverse IP lookups show which other domains are hosted at the same IP address, which…
Build Your Own Custom OSINT Machine – Part 5
The first four parts of this series of posts looked at how to build your own custom Buscador-style OSINT virtual machine. Part One showed how to install Ubuntu, Part Two looked at installing programs from the Ubuntu software, Part Three…