mirror of
https://github.com/OhShINT/ohshint.gitbook.io.git
synced 2025-02-14 14:01:58 -05:00
200 lines
7.9 KiB
Markdown
200 lines
7.9 KiB
Markdown
![]() |
# **OSINT Protips**
|
||
|
|
||
|
If you follow my Twitter ([@ohshint_](https://twitter.com/ohshint_)), you may have noticed that recently have been going on a tweeting spree providing useful OSINT tips and tricks using the hashtag [#OSINTProtip](https://twitter.com/hashtag/OSINTProtip).
|
||
|
|
||
|
For those who don't use and/or don't care about Twitter, you can view all of these pro tips on this page. I will be updating this page whenever I post a new OSINT protip.
|
||
|
|
||
|
|
||
|
|
||
|
## **OSINT Protip 1**
|
||
|
|
||
|
> Posted on *4/11/2021* at *11:17 PM*.
|
||
|
> URL: [https://twitter.com/ohshint_/status/1456505851020070913](https://twitter.com/ohshint_/status/1456505851020070913)
|
||
|
|
||
|
[#OSINT](https://twitter.com/hashtag/OSINT?src=hashtag_click) Protip:
|
||
|
|
||
|
You can easily download any Google document for offline use by simply editing its URL. Example (Using [@bellingcat](https://twitter.com/bellingcat)'s Online Investigation Toolkit):
|
||
|
[https://docs.google.com/spreadsheets/d/18rtqh8EG2q1xBo2cLNyhIDuK9jrPGwYr9DI2UncoqJQ/export?format=xlsx](https://t.co/TUGT965czi?amp=1)
|
||
|
|
||
|
[#OSINTProtip](https://twitter.com/hashtag/OSINTProtip?src=hashtag_click)
|
||
|
|
||
|
Just add "/export?format=<file type>" to the documents URL!
|
||
|
|
||
|
"/spreadsheets/d/<document ID>/export?format=<file type>"
|
||
|
and/or
|
||
|
"/document/d/<document ID>/export?format=<file type>"
|
||
|
|
||
|
Export spreadsheets in pdf or xlsx format. Export documents in pdf, docx, epub, txt, md, and more!
|
||
|
|
||
|
|
||
|
|
||
|
## **OSINT Protip 2**
|
||
|
|
||
|
> Posted on *6/11/2021* at *3:42 PM*.
|
||
|
> URL: [https://twitter.com/ohshint_/status/1457116170432118784](https://twitter.com/ohshint_/status/1457116170432118784)
|
||
|
|
||
|
[#OSINT](https://twitter.com/hashtag/OSINT?src=hashtag_click) Protip 2:
|
||
|
|
||
|
You can view and download an #Instagram post in full resolution by simply adding "/media/?size=l" to the post URL.
|
||
|
|
||
|
Example:
|
||
|
[https://instagram.com/p/CMdB2v8liSf/media/?size=l](https://instagram.com/p/CMdB2v8liSf/media/?size=l)
|
||
|
|
||
|
You can also use "?size=m", if you want a smaller resolution.
|
||
|
|
||
|
[#OSINTProtip](https://twitter.com/hashtag/OSINTProtip?src=hashtag_click)
|
||
|
|
||
|
|
||
|
|
||
|
## **OSINT Protip 3**
|
||
|
|
||
|
> Posted on *8/11/2021* at *3:18 AM*.
|
||
|
> URL: [https://twitter.com/ohshint_/status/1457668968571834371](https://twitter.com/ohshint_/status/1457668968571834371)
|
||
|
|
||
|
[#OSINT](https://twitter.com/hashtag/OSINT?src=hashtag_click) Protip 3:
|
||
|
|
||
|
There are archives of Chrome, Firefox and Edge browser extensions that allow you to download older versions, view history, see developer information and other metadata.
|
||
|
|
||
|
- http://crxcavator.io
|
||
|
- http://crx4chrome.com
|
||
|
- https://archive.org/details/Firefox_Legacy_Collector_Dump
|
||
|
|
||
|
[#OSINTProtip](https://twitter.com/hashtag/OSINTProtip?src=hashtag_click)
|
||
|
|
||
|
Here is another useful archive of #Firefox add-ons:
|
||
|
|
||
|
- http://github.com/JustOff/ca-archive
|
||
|
|
||
|
This is a tool for downloading and extracting the source code from a .crx file:
|
||
|
|
||
|
- http://crxextractor.com
|
||
|
|
||
|
These archives can be very useful when researching and discovering malicious activity!
|
||
|
|
||
|
|
||
|
|
||
|
## OSINT Protip 4
|
||
|
|
||
|
> Posted on *8/11/2021* at *10:59 PM*.
|
||
|
> URL: [https://twitter.com/ohshint_/status/1457966143721730052](https://twitter.com/ohshint_/status/1457966143721730052)
|
||
|
|
||
|
[#OSINT](https://twitter.com/hashtag/OSINT?src=hashtag_click) Protip 4:
|
||
|
|
||
|
Get yourself a library card (Register with fake information, if possible).
|
||
|
|
||
|
Many times local libraries offer free access to large datasets such as immigration records, ancestry data, newspaper archives, current and historical maps, and much more.
|
||
|
|
||
|
[#OSINTProtip](https://twitter.com/hashtag/OSINTProtip?src=hashtag_click)
|
||
|
|
||
|
|
||
|
|
||
|
## OSINT Protip 5
|
||
|
|
||
|
> Posted on *10/11/2021* at *12:29 PM*.
|
||
|
> URL: [https://twitter.com/ohshint_/status/1458532227743027202](https://twitter.com/ohshint_/status/1458532227743027202)
|
||
|
|
||
|
[#OSINT](https://twitter.com/hashtag/OSINT?src=hashtag_click) Protip 5:
|
||
|
|
||
|
Use 3rd party viewers to browse Instagram profiles without having to use a sock-puppet account.
|
||
|
|
||
|
- http://picuki.com
|
||
|
- http://dumpor.com
|
||
|
- http://pixwox.com
|
||
|
- http://gramhir.com
|
||
|
|
||
|
[#OSINTProtip](https://twitter.com/hashtag/OSINTProtip?src=hashtag_click)
|
||
|
|
||
|
Also, it's worth noting that sometimes these pages have been archived on the Wayback Machine and archive.today.
|
||
|
|
||
|
So it's worth checking in case you encounter a private account or to see if an Instagram account has deleted some of their posts!
|
||
|
|
||
|
[#OSINT](https://twitter.com/hashtag/OSINT?src=hashtag_click) [#OSINTProtip](https://twitter.com/hashtag/OSINTProtip?src=hashtag_click)
|
||
|
|
||
|
|
||
|
|
||
|
## OSINT Protip 6
|
||
|
|
||
|
> Posted on *11/10/2021* at *6:41 PM*.
|
||
|
> URL: [https://twitter.com/ohshint_/status/1458988232373198853](https://twitter.com/ohshint_/status/1458988232373198853)
|
||
|
|
||
|
[#OSINT](https://twitter.com/hashtag/OSINT?src=hashtag_click) Protip 6:
|
||
|
|
||
|
Flowcharts, use them.
|
||
|
|
||
|
These will ensure that you don't potentially miss anything while investigating different platforms and subjects. Extremely useful!
|
||
|
|
||
|
Created by [@sinwindie](https://twitter.com/sinwindie), so go give him a follow and star his GitHub: https://github.com/sinwindie/OSINT
|
||
|
|
||
|
[#OSINTProtip](https://twitter.com/hashtag/OSINTProtip?src=hashtag_click)
|
||
|
|
||
|
Attached images:
|
||
|
|
||
|
<img src="G:\Blog\GitBook\Articles\Twitter-Attack-Surface-for-OSINT-Investigations.jpg" style="zoom: 25%;" /> <img src="G:\Blog\GitBook\Articles\Person-Attack-Surface-for-OSINT-Investigations.jpg" style="zoom:25%;" /> <img src="G:\Blog\GitBook\Articles\Instagram-Attack-Surface-for-OSINT-Investigations.jpg" style="zoom:25%;" /> <img src="G:\Blog\GitBook\Articles\DWM-Attack-Surface-for-OSINT-Investigations.jpg" style="zoom:25%;" />
|
||
|
|
||
|
|
||
|
|
||
|
## OSINT Protip 7
|
||
|
|
||
|
> Posted on *12/11/2021* at *7:16 PM*.
|
||
|
> URL: [https://twitter.com/ohshint_/status/1459359586989740034](https://twitter.com/ohshint_/status/1459359586989740034)
|
||
|
|
||
|
[#OSINT](https://twitter.com/hashtag/OSINT?src=hashtag_click) Protip 7:
|
||
|
|
||
|
Federal and local governments often offer GIS data and other data sets for free.
|
||
|
Including interactive maps, property, environmental and infrastructure information for specific areas.
|
||
|
|
||
|
Many of them can be found here:
|
||
|
|
||
|
- https://dataportals.org/search
|
||
|
|
||
|
[#OSINTProtip](https://twitter.com/hashtag/OSINTProtip?src=hashtag_click)
|
||
|
|
||
|
Here is another example of what I'm talking about here.
|
||
|
|
||
|
This is a great collection of Canadian open data portals, both federal and provincial. This site also provides some other useful non-Canadian data sets.
|
||
|
|
||
|
- http://davidmckie.com/open-data-portals/
|
||
|
|
||
|
[#OSINTProtip](https://twitter.com/hashtag/OSINTProtip?src=hashtag_click)
|
||
|
|
||
|
|
||
|
|
||
|
## OSINT Protip 8
|
||
|
|
||
|
> Posted on *13/11/2021* at *6:27 PM*.
|
||
|
> URL: [https://twitter.com/ohshint_/status/1459709465859481603](https://twitter.com/ohshint_/status/1459709465859481603)
|
||
|
|
||
|
[#OSINT](https://twitter.com/hashtag/OSINT?src=hashtag_click) Protip 8:
|
||
|
|
||
|
OSINT is essentially an umbrella term for intelligence work.
|
||
|
You should familiarize yourself with the common acronyms used in the in intelligence field, as you will likely encounter them in your journey.
|
||
|
Read more here:
|
||
|
|
||
|
- https://ohshint.gitbook.io/oh-shint-its-a-blog/osint/osint-wtf
|
||
|
|
||
|
[#OSINTProtip](https://twitter.com/hashtag/OSINTProtip?src=hashtag_click)
|
||
|
|
||
|
Attached image:
|
||
|
|
||
|
<img src="G:\Blog\GitBook\Articles\Common-Intelligence-Acronyms-and-Their-Meanings.png" style="zoom: 80%;" />
|
||
|
|
||
|
|
||
|
|
||
|
## OSINT Protip 9
|
||
|
|
||
|
> Posted on *13/11/2021* at *8:19 PM*.
|
||
|
> URL: [https://twitter.com/ohshint_/status/1459737802296348673](https://twitter.com/ohshint_/status/1459737802296348673)
|
||
|
|
||
|
[#OSINT](https://twitter.com/hashtag/OSINT?src=hashtag_click) Protip 9:
|
||
|
|
||
|
If you didn't know about this before, you should!
|
||
|
|
||
|
Simple way to bypass the login prompt when scrolling through an [#Instagram](https://twitter.com/hashtag/Instagram?src=hashtag_click) profile.
|
||
|
|
||
|
This technique also works with [#Pinterest](https://twitter.com/hashtag/Pinterest?src=hashtag_click).
|
||
|
|
||
|
[#OSINTProtip](https://twitter.com/hashtag/OSINTProtip?src=hashtag_click)
|
||
|
|
||
|
Attached image:
|
||
|
|
||
|
![](G:\Blog\GitBook\Articles\Instagram-Login-Bypass.png)
|