HACKIT:~/OSINT#
Home↩
More lists:
To Dox someone you need to have a layout first, here is a simple one:
Name:
Street:
Postcode:
City:
Country:
School:
Work:
Phone:
Email:
Skype:
IP:
ISP:
Facebook:
Twitter:
Instagram:
Youtube:
Website(s):
Family:
Other:
Here are some the link you can use to gather information on people:
USA People Search
http://10digits.us
http://www.whitepages.com
http://www.411.com
http://www.zabasearch.com
http://www.intelius.com
http://www.yellowpages.com
http://publicrecords.directory/
http://www.411locate.com
http://www.addresses.com
http://www.spokeo.com
http://www.anywho.com
http://www.peoplefinders.com
http://www.skipease.com
https://www.vetfriends.com/
http://radaris.com
http://www.superpages.com
https://nuwber.com/
UK People Search
http://www.192.com
http://webmii.com
http://www.kgbpeople.com
http://www.yasni.com
http://www.peekyou.com/united_kingdom
http://britishphonebook.com/
Canada People Search
http://www.canada411.ca
http://www.freeality.com
http://world.192.com/
Phone Search
http://www.spydialer.com/
http://www.phonevalidator.com
http://www.fonefinder.net
http://canada.numbers.tel
http://www.infobel.com/en/world
http://www.spokeo.com
http://freecellphonelookups.phonelookuprjt.com/
http://www.numberway.com/
Username Search
https://www.google.com/advanced_search
https://pipl.com
http://checkusernames.com
http://knowem.com
Picture Search
http://www.tineye.com
https://images.google.com/
http://exifdata.com/
http://geoimgr.com/
Email Search
http://com.lullar.com
http://www.emailfinder.com
http://www.spokeo.com/email-search
http://ctrlq.org/google/images/
http://emailchange.com/
MISC Search
http://www.criminalsearches.com
http://www.usatrace.com
http://www.criminalsearches.com
http://www.abika.com
http://www.gps-coordinates.net/
http://www.speedguide.net/ip/
http://db-ip.com/
http://www.ipgeek.org/
Useful sites to get/use IPs
https://www.iplocation.net/
http://www.proxyornot.com
http://www.infosniper.net
https://www.whois.net
http://www.ip-tracker.org
http://skypegrab.net
http://mostwantedhf.info
http://iphostinfo.com/cloudflare/
Social Network Searches
http://www.facebook.com
http://topsy.com/
http://monitter.com/
http://socialmention.com/
http://knowem.com/
http://twoogel.com/
http://www.yacktrack.com
http://www.samepoint.com/
http://www.whostalkin.com/
Passwords
https://haveibeenpwned.com/
https://www.hacked-db.com/
https://www.leakedsource.com
https://hashkiller.co.uk/Cracker/MD5
https://hacked-emails.com
https://breachalarm.com/
https://lastpass.com/adobe/
|| Data Breaches ||
URL Domain:
xjypo5vzgmo7jca6b322dnqbsdnp3amd24ybx26x5nxbusccjkm4pwid.onion.ws/
https://pwndb2am4tzkvold.onion.ws/
https://checkleaked.cc
http://intelx.io/
https://breachdirectory.tk/
http://haveibeenpwned.com/
http://dehashed.com/
https://weleakinfo.to/
https://ghostproject.fr/
http://hashes.com/
https://breach.myosint.com/
|| General Info ||
https://cachedview.com/
https://xlek.com/
http://emailrep.io/
http://ekata.com/ [hard to sign up but worth it]
https://www.spytox.com/
https://webresolver.nl/
https://tools.epieos.com/
https://www.martinvigo.com/tools/phonerator/
https://calleridtest.com/
http://www.fonefinder.net/ - great for finding a phone numbers rate center
https://www.telcodata.us/
|| Recovery Info ||
https://twitter.com/account/begin_password_reset (Twitter)
https://iforgot.apple.com/password/verify/appleid (Apple)
https://www.instagram.com/accounts/password/reset/ (Instagram)
https://www.facebook.com/login/identify/?ctx=recover&ars=facebook_logins (Facebook)
https://login.live.com/ (outlook)
https://www.paypal.com/authflow/password-recovery/ (paypal)
https://signin.ebay.com/signin/ (ebay)
|| Tools ||
https://github.com/mxrch/GHunt (my favorite on this list)
https://github.com/megadose/holehe
https://github.com/khast3x/h8mail (mainly for data breach info)
https://github.com/martinvigo/email2phonenumber
https://github.com/Datalux/Osintgram
https://github.com/iojw/socialscan
https://github.com/D4Vinci/Cr3dOv3r (Credential Stuffer)
https://github.com/lightos/credmap (Credential Stuffer)
|| Other ||
https://wigle.net/ (this site is godly)
http://www.onstrat.com/osint/
https://www.reddit.com/r/OSINT/comments/iaqvdm/how_to_find_users_reviews_on_google_maps_by_gmail/
https://www.osintdojo.com/
https://1lib.us/g/Michael%20Bazzell (the books this guy makes are amazing)
https://1lib.us/book/5985308/dc1dca (the contact exploitation part is great)
google and social medias are your friend put all the information in all the boxes in front of you and keep repeating the process until you get something useful
eg: you have a username, try going on gmail and try the username on there and bam you got yourself a email which can lead to a ton more information.
if someone is selling is something see if they accept paypal and get their email, if they give you a paypal.me link send them one cent and get their email that way.
its all about knowing how to use google in the end. lol
OSINT
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
VOTERS - https://stevemorse.org/voterrecords/voterrecords.html
TPEOPLESEARCH - https://www.truepeoplesearch.com/
THATSTHEM - https://thatsthem.com/
WHITEPAGES - https://whitepages.com/
ZABASEARCH - https://www.zabasearch.com/
LULLAR - https://com.lullar.com/
GOOGLEADVCS - https://www.google.com/advanced_search
441COM - https://www.411.com/
MACLOOKUP - https://www.macvendorlookup.com/
SPOKEO - https://www.spokeo.com/
PIPL - https://pipl.com/
INTELIUS - https://www.intelius.com/
JAILBASE - https://www.jailbase.com/
FONEFINDER - https://www.fonefinder.net/
THEHARVESTER - https://github.com/laramies/theHarvester
MALTEGO - https://www.maltego.com/
RECON-NG - https://tools.kali.org/information-gathering/recon-ng
USERNAMECHECK - https://checkusernames.com/
PEOPLEFINDER - https://www.peoplefinder.com/
ICANN - https://lookup.icann.org/lookup
WHOIS - https://whois.domaintools.com/
EXIFDATA - https://exifdata.com/
BEENVERIFIED - https://www.beenverified.com/
TINEYE - https://tineye.com/
SPIDERFOOT - https://github.com/smicallef/spiderfoot
CREEPY - https://github.com/ilektrojohn/creepy
THEPHONEBOOK - https://www.thephonebook.bt.com/person/
ROBTEX - https://www.robtex.com/
FASTPEOPLESEARCH - https://www.fastpeoplesearch.com/
MYLIFE - https://www.mylife.com/
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
DATABASES
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
PWNDB (ONION) - http://pwndb2am4tzkvold.onion/
EXPLOIT DATABASE - https://www.exploit-db.com/
DEHASHED - https://dehashed.com/
LEAK-LOOKUP - https://leak-lookup.com/
LEAK-CHECK - https://leakcheck.net/
SNUSBASE - https://www.snusbase.com/
SKIDSEARCH - https://skidsearch.net/panel/login.php
SHODAN - https://www.shodan.io/
CENSYS - https://censys.io/
DOXBIN - https://doxbin.org/
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Tips
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
1# SEARCH YOURSELF UP. USE EVERY LINK POSSIBLE TO FIND INFORMATION ABOUT YOURSELF. YOU CAN USE VARYING DEGREES OF INFORMATION IN EACH LINK, DEPENDING ON HOW ANONYMOUS YOU WANT TO REMAIN. IF YOU FIND INFORMATION ON YOURSELF THAT IS ACCURATE, FIGURE OUT HOW TO CHANGE IT IMMEDIATELY.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2# SOCIAL MEDIA. HAVING ANY FORM OF SOCIAL MEDIA (FACEBOOK, TWITTER, GOOGLE+) THAT IS LINKED TO YOUR PERSONAL LIFE IS A BAD IDEA. IF YOU ARE SERIOUS ABOUT NOT GETTING D$#ED, YOU WILL DELETE EVERYTHING LINKED TO YOUR PERSONAL LIFE. IF YOU DECIDE TO KEEP IT, THERE WILL BE TIPS DOWN BELOW ON HOW TO AVOID GETTING DOXED WITH THEM.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
3# DON'T BE A DUMBASS. GIVING OUT PERSONAL INFORMATION IS THE WAY TO GET CAUGHT. IF SOMEONE ASKS FOR IT, TELL THEM TO SHOVE IT AND MOVE ALONG.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
4# USE COMMON USERNAMES AND DON'T REPEAT USERNAMES. THIS MAKES IT HARDER TO GATHER ALL OF YOUR INFORMATION AND MAKES THE D$#ER USE MULTIPLE TOOLS TO FIND YOU.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
5# NEVER CONNECT USERNAMES TO GAMERTAGS AND VICE VERSA. ONE REAL LIFE EXAMPLE IS OF ANON "SKID" WHO WAS CAUGHT BECAUSE THE POLICE WERE ABLE TO CONNECT HIS GAMERTAG TO HIM AND THEN CONNECT HIM TO #OPPAYPAL. 🤡
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
6# IF YOU ARE TRULY SERIOUS ABOUT OPERATIONAL SECURITY, CONSIDER FULL DISK ENCRYPTION IN CASE SHITS HITS THE FAN.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
7# A TOOL TO REMOVE EXIF DATA FROM YOUR PICTURES CAN BE FOUND HERE MAT.BOUM.ORG OR EXIFPURGE.COM
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
8# GOOGLE ALL OF YOUR ALIASES DAILY TO SEE WHAT SOMEONE COULD POTENTIALLY FIND OUT ABOUT YOU
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
9# BEFORE ORDERING SOMETHING ONLINE, CHECK THE COMPANY ON SITES LIKE TRUSTPILOT.COM. IF YOU ARE ORDERING FROM A MALICIOUS SITE, THEY COULD BE STEALING/SELLING YOUR PAYMENT INFORMATION OR CHARGING YOU WITHOUT YOUR KNOWLEDGE. USE SERVICES LIKE PRIVACY.COM (US) OR PREPAID WHEN USING YOUR CARD DIRECTLY ON A WEBSITE.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
10# REMEMBER ALSO TO HIDE YOUR *P ADDRESS.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
11#`` CALL YOUR MOBILE CARRIER AND TELL THEM NOT TO POST YOUR NUMBER ON SITES LIKE WHITEPAGES.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
12# IF YOU CANT DELETE A ACCOUNT, THEN CHANGE THE NAME, PICTURE, INFO AND EVERYTHING ELSE ON THAT ACCOUNT.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
13# WHEN SIGNING UP FOR SOCIAL MEDIA/FORUMS, DON'T CHANGE YOUR USERNAME WHEN SWITCHING TO A NEW ALIAS. REGISTER A NEW ACCOUNT WITH COMPLETELY DIFFERENT INFO AND CHANGE YOUR BEHAVIOR. YOU DO NOT WANT (USERNAME HISTORY). YOU CAN ALSO SAY GOODBYE TO YOUR "FRIENDS".
OSINT: Cars
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
search for a car model by the name, license plate or by VIN number US
https://www.oreillyauto.com/vin-lookup/
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Government record Search by VIN in the URL US
https://vpic.nhtsa.dot.gov/decoder/
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
search car owner by VIN number
https://carsowners.net/
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
NICB's VINCheck is a free lookup service provided to the public to assist in
determining if a vehicle may have a record of an insurance theft claim
https://www.nicb.org/vincheck
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Search for car past rental receipt (Last Name* & Driver's License Number*)
https://www.enterprise.com/en/reserve/receipts.html
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Driver's License number finder (US Only)
http://www.highprogrammer.com/cgi-bin/uniqueid
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Search reciept by Driver license or credit CARD number
https://www.hertz.com/rentacar/receipts/request-receipts.do
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
capable of recognizing the Make, Model and Generation of most cars
https://carnet.ai/
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
search information about car by venicle numbers of 14 different countries
https://cipher387.github.io/venicle_number_search_toolbox/
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
How license plates look in other countries
http://www.worldlicenseplates.com/