Misc OSINT

Bot Hunting

Bot Hunting Tools

• https://botsentinel.com/ - Bot Sentinel is a free non-partisan platform developed to classify and track inauthentic accounts and toxic trolls.

• https://botometer.osome.iu.edu/ - Botometer (formerly BotOrNot) checks the activity of a Twitter account and gives it a score. Higher scores mean more bot-like activity.

• https://hoaxy.osome.iu.edu/ - Visualize the spread of a tweet to determine if it is artifically propagated.

• https://csmr.umich.edu/projects/iffy-quotient/ - The Iffy Quotient is a metric for how much content from “Iffy” sites has been amplified on Facebook and Twitter.

• https://www.io-archive.org/#/ - The Information Operation Archive hosts publicly available and rigorously attributed datapoints from known Information Operations on social media platforms.

• http://twittertrails.com/ - A tool that allows members of the media to track the trustworthiness of stories shared on Twitter

• https://botscout.com/search.htm - Search a bot name, email, or IP address and it returns internal intelligence related to Bot activity.

Vehicle/Automotive

• OSHINT Vehicle INT links

Vin/Lincese Search

• NHTSA Product Information Catalog and Vehicle Listing

• AutoCheck.com - Search VIN or plate #

• License Plate Lookup Online - Car Plate Search

• SearchQuarry - Background Checks, License Plate Searches, & More

• Check Any VIN Title By License Plate #

3KB

License.html

Cryptocurrencies

Cryptocurrency Search Tools

• https://www.blockchain.com/ - Queries blockchain.info to find the balance of identified bitcoin wallet addresses.

• https://bitcoinwhoswho.com/ - Bitcoin verification tool used to check bitcoin addresses for malicious reputation.

• https://www.bitcoinabuse.com/ - Check Bitcoin addresses against the bitcoinabuse.com database of suspect/malicious addresses.

• https://zerodot1.gitlab.io/CoinBlockerListsWeb/ - Cryptojacking IP address blocklists.

• https://etherscan.io - Queries etherscan.io to find the balance of identified ethereum wallet addresses.

• Wallet explorer — bitcoin wallet transaction history

• Blockpath.com — viewing bitcoin wallet transactions as a graph

• Cryptocurrency alerting — track spending and deposits in Bitcoin and Ethereum wallets

• Learnmebitcoin.com — find transactions between two Bitcoin adresses

• Coinwink.com — allows you to set up email notifications in case Bitcoin (or other #cryptocurrency) rate rises (falls) above (below) a certain value

• BlockCypher — Blockchain explorer for Bitcoin, Ethereum, Litecoin, DogeCoin, Dash. Getting into about address, transactions and block hashes, block number or wallet name.

13KB

Currencies.html

Location

Geolocation Search Tools

• goKML.net :: short links for KML content - Embed KML requests in resources and return geolocation data when they are accessed.

• https://www.geocreepy.com/ - A Geolocation OSINT Tool. Offers geolocation information gathering through social networking platforms.

• https://www.sentinel-hub.com/ - Cloud API for Sattelite Imagery

24KB

Location.html

WiFi Networks

Wifi Network Search Tools

• Wigle.net - Maps and database of 802.11 wireless networks with statistics

• wifimap.io - Connect to all Free WiFi Hotspots using WiFi Map App all over the World!

• wificafespots.com - Free WiFi Cafe Spots

• wifispc.com - Free map of Wi-Fi passwords anywhere you go!

• openwifimap.net - HTML5 map with OpenWiFiMap data

• mylnikov.org - Public API implementation of Wi-Fi Geo-Location database

Misc Utility

• OSINT Browser Extensions

  • https://github.com/ninoseki/mitaka

  • https://chrome.google.com/webstore/detail/sputnik/manapjdamopgbpimgojkccikaabhmocd?hl=en

  • https://chrome.google.com/webstore/detail/threatpinch-lookup/ljdgplocfnmnofbhpkjclbefmjoikgke?hl=en

• https://www.webgap.io/ - Remote Browser Service. Gives 12 month free use for all OSINT researchers.

• Hunchly - Hunchly is a an interesting tool that passively captures the web pages as you browse. This can be handy when you are parsing through a large volume of pages and you want to keep track of them, or if you are concerned a page may change after you visit.

• Carbon14 - This is an OSINT tool for estimating when a web page was written. Common CMS's easily permit to change the displayed date of content, affecting both websites and RSS feeds. Moreover, the dynamic nature of most web pages does not allow investigators to use the Last-Modified HTTP header. However, most users do not alter the timestamps of static resources that are uploaded while writing articles. The Last-Modified header of linked images can be leveraged to estimate the time period spent by the writer while preparing a blog post. This period can be compared to what the CMS shows in order to detect notable differences.

• JupyterPen - For those who love Jupyter notebooks, this is a project that started as an OSINT framework built around JupyterNotebooks and has expanded into a full penetration testing tool.

• CardPwn - OSINT Tool to find Breached Credit Cards Information

• https://api.c99.nl/ - API platform with dozens of web based utilities.

• https://www.tracelabs.org/initiatives/osint-vm

• https://start.me/p/0PeKwy/osint-russie-iec-ies

• https://github.com/j3ssie/metabigor - Metabigor is Intelligence tool, its goal is to do OSINT tasks and more but without any API key.

• upi-recon-cli - A command line tool for reconnaissance using virtual payment address (VPA). This tool leverages the openness available with the UPI platform to find mobile number, gmail account and even vehicle registration number.