/DFW1N-OSINT

Australian Open Source Intelligence Gathering Resources

alt tag

DFW1N Open Source Intelligence Specifically for Australians

Description:

So you want to do background checks on employees or find a missing person assist in the government finding people this will provide you with plenty of information to get you started this will speed up your process in finding information on your target.

This List is in progress and will be a list specifically on Open Source Intelligence Gathering tools to scrape the Internet and Deep Web for information this list was made for the upcoming The AustCyber Canberra Innovation Node that partnered with the Australian Federal Police, the National Missing Persons Coordination Centre and Trace Labs to conduct a missing person capture the flag (CTF) event (aka Hackathon) this list is designed for Australians who want a quick and easy list for the event to assist them with most resources relating to Australia so it is easier to bring the scope down to persons who have gone missing in Australia.

↑ Credits

Contributor:

📖 Table of Contents

↑ Introduction

I have created this for the purposes of Open Source Intelligence Gathering known as (OSINT) this is a guide and cheat sheet or just somthing you can use to speed up your process for Background Checks, Employee Information Scraping, Finding Missing People and much more this list would benefit, Government Agencies, Recruiting Officers, Employees, Managers, Police Services, Intelligence Services and more this has been targeted towards OSINT in Australia only for finding missing people and other reasons.

Start by downloading a OSINT Operating System (OS), create burner accounts for all social media platforms so you do not use your real information as websites sometimes show who has been on there profile or similar use a VPN or even if your doing it for a short time use a free VPN but dont be sure to rely on free VPN services you get what you pay for and use this list to assist in finding OSINT information on your target good luck.

↑ OSINT Operating Systems

Below will be listed the Two best known operating systems to start conducting OSINT to scrape the wider Internet and Deep web on your target.

  • Buscador OS - This Operating System is setup for Investigators and Ethical Hackers for OSINT purposes.
  • Kali Linux OS - Kali Linux Operating System is widely used by Offensive Security Teams, Hackers and Ethical Hackers.

↑ Virtual Machines

↑ Live Cams Australia

Have you seen anything suspicious happening in these live cams streaming all around Australia?

↑ Online Fake Identification

So you are making burn accounts to do your OSINT on the internet and deep web wouldnt it be easy for you to create a quick easy fake identity online to save to a notepad to remember your fake address, username, email, burner phone numbers these websites will assist you in creating a fake identity in a matter of minutes to help with OSINT on burn accounts.

  • Burner Mobile Numbers - mobile numbers to verify yourself to any service as Facebook or WhatsApp.
  • New York Address Generator - Use generated Addresses for your online fake identity to sign up to sites.
  • Burner - Burner is the original second phone number app for calling, texting and picture messaging, however this isnt free.
  • RecieveSMS - They are a service that allows you to use our free phone numbers to receive SMS online and anonymously.
  • Random Address Generator - Generated addresses covering all cities and states in the United States.
  • SpinXO Username Generator - Use there username generator to combine various popular keywords with your name, words that are important to you or characterize you and your personality.
  • TempSMS - Recieve SMS online instantly using New Zealand burner mobile numbers.

↑ Large Free Email Providers

This list will provide you with the largest email providers to assist you in either creating burner accounts or running email scrapes against there email domain servers on your target.

  • Protonmail - This Email Provider is based in Switzerland and has encryption protection used as @protonmail.com.
  • Outlook Live - Used as @outlook.com @hotmail.
  • iCloud - Most Mac, iPad, and iPhone users have an account used as @icloud.com.
  • Zoho Mail - Zoho Mail is part of a larger office productivity suite.
  • GMX Mail - *One of Germany’s largest internet service providers used as @gmx.com & @gmx.ch.
  • Yahoo Mail - Yahoo! Mail had 281 million users, making it the third largest web-based email service in the world.
  • Mailinator - The Mailinator Email System puts millions of inboxes right at your fingertips. It is an amazing Email Workflow Testing tool for your Software or Service, great use for throw away burn emails.

↑ Large Social Networks

↑ Social Media OSINT Tools

Facebook Tools

  • Facebook Search Basics - Learn to use Facebook Search take advantage of it to find out data on your target.
  • Facebook ID Identifier - Lookup-ID.com helps you to find the Facebook ID for your profile or a Group.
  • Facebook Information Publisher - What does Facebook publish about you and your friends?
  • Facebook Social Monitoring - People are talking about you, your brand and your industry all around the social web. Fanpage Karma Social Monitoring shows you, what they are talking about.
  • ExtractFace - Investigators, researchers or other analysts often have to get local copies of Facebook data.
  • Facebook Sleep Status - A small tool to show the potential privacy implications modern social media have. By tracking online/offline status of people on Facebook, it is possible to get an accurate image of their sleep pattern.

Twitter Tools

↑ Australian Dating Networks

You may find informaiton on your target on these dating websites or find them listed on it, it could become a potential lead to find out if they were listed on a dating site before they went missing or anything releated to your target.

↑ Username Identifiers

The person you are searching do you know the username they go under like on reddit, xbox, playstation, steam here are some links that scan through sites to find what sites they are registered on.

  • Knowem - Searches for usernames on social media sites.
  • User Search - Searches for usernames on social media sites.
  • Xbox Username Checker - Search for you're targets gamer tag on xbox when was the last time they where online?

↑ Person Investigations

This will assist you with quick references to websites that could speed up your research on people.

Australia

↑ Job Search Networks

This list is the main job search networks used in Australia to find job employment did your target recently apply for a job on any of these sites before they went missing or maybe you want to find out information about companies your doing OSINT research on.

Australia

↑ Online Alerts

Specifically use these to get alerts when somthing changes or is posted with specific enteries online. Wouldn't be a bad idea to put alerts on your targets social media accounts or name online.

  • Google Alert - Create Google Alerts.
  • Mention - Get live updates about your brand from the web and social media.
  • Talkwalker Alerts - Monitor the Web for interesting new content about your name, brand, competitors, events or any favorite topic with Talkwalker Alerts!
  • Meltwater - Social and marketing teams go beyond media monitoring. Try Monitoring your targets bussiness or organisation.
  • PasteLert - Set up alerts (like google alerts) for pastebin.com entries.
  • VisualPing - Select an area and relax: We’ll send you an email alert when something changes.

↑ Email Data Dumps

Assuming you have know or have obtained your targets email you can always check if there email has been compromised which results in Email data dump and password dumps and what if you got a encrypted text relating to the password data dump use the tools I list below to help you with getting the informaiton on your target or even yourself.

  • Haveibeenpwned - Check if you have an account that has been compromised in a data breach
  • MD5 Decryption and Encryption - Decrypt MD5 Hashes this website also provides many other decryption tools such as Sha512 decryption, Sha256, Morse Code Decryption etc.

↑ Police Websites

This section is dedicated to assist Australian, Ethical hackers, Police Services, Intelligence Agencies or Private investigators in quickly finding all police sites in one place for quick access to information or policies you are looking for or leads on your targets.

Australia

↑ Internet Search Engines

List known search engines used to browse the internet.

↑ Best Browser Add-ons for OSINT

Mozilla Firefox

Google Chrome

  • Adblock - Blocks Ads.
  • FireShot - Take Webpage Screenshots.
  • Mostly Harmless - Tells you whether or not it’s on Reddit.
  • Distill Web Monitor - Distill runs in your browser to check monitored pages for changes. Get instant alerts as soon as a change is detected.
  • Treeverse - It takes a conversation on Twitter and breaks it down into a hierarchical tree and tells you who is talking to who and where the connections are.
  • RevEye - Reverse Image Search.

↑ Internet Browsers

This section will list known Internet Browsers.

↑ Most Visited Sites

This Section will list the most visited sites in Australia the benefit of this list will give you quick access to sites you could use to scrape for usernames or emails registered to it to locate or find information on people.

Australia

↑ Australian Capital Cities

Australia

↑ Geolocation Tools & Sites

These programs and tools can be used for OSINT Research to try get a understanding of the area and the surroundings to research the area for any clues in the surrounding area that could help with person finding.

Tools

Sites

↑ OSINT Tools

  • Maltego - Maltego is proprietary software used for open-source intelligence and forensics.
  • OSINT Framework - OSINT framework focused on gathering information from free tools or resources.
  • Grabify - Grabify IP Logger by Creating or Track URLs that you create you can find out there IP, location, Service provider, device being used this type of method is used if you are getting catfished or trying to get further information on your target.
  • Sherlock - Hunt down social media accounts by username across social networks.

Automated OSINT Tools

  • Spiderfoot - SpiderFoot is an open source intelligence (OSINT) automation tool. Its goal is to automate the process of gathering intelligence.
  • Sn1per - Sn1per is an automated Penetration Testing tool it can be used for information gathering I could gather data on your target in a very short amount of time.
  • theHarvester - This tool harvests informaration on your target best way to use these type of tools is through the operating systems like Kali Linux.
  • Datasploit - This automation tool is outdated but it can be easily fixed within its code to work for your needs it scans the internet based on OSINT data.
  • Recon-ng - Tool used to perform information gathering thoroughly and quickly.
  • Metagoofil - *
  • FOCA - FOCA is a tool used mainly to find metadata and hidden information in the documents it scans. These documents may be on web pages, and can be downloaded and analysed with FOCA.

↑ Image Forensics

  • Deblur Image - Have you found a photo of what your looking for but its blurry and cant make it out use this tool to try make the image clearer for your investigation.
  • Blurity! - Works on making your blurry photo more sharp.
  • Lets Enchance - Enhance and upscale images online using AI.
  • CamFind - Have you ever wanted to Search the Physical World™? Enter CamFind. The world’s most accurate mobile visual search engine.
  • Image Identifier - Image Identification Project.

↑ VPN Services

Below will be well known VPN Services to keep you annonymous online and to ensure you cannot be tracked by hackers or others especially when browsing the dark web or scraping information from sites on the wider internet.

VPN Services

There are many other VPN Services this is just a handful look around find one that is right for you.

↑ Dark Web Links

Support

Please Support me if this has helped you with OSINT Research or investigation by following me on Twitter or connecting with me on LinkedIn.

@Sacha_Roussakis

@Sacha Roussakis-Notter