A couple of weeks ago, I published an article 8 basic methods of automating the collection of information from company websites. It describes methods for finding the maximum number of sites associated with a particular company, as well as different methods for obtaining a list of URLs of those sites…

A few days ago, I asked my Twitter readers if they thought Google searches seemed worse lately.

Today we’ll talk about simple ways to automate the collection of contact information from target company websites — emails, phone numbers, cryptocurrency wallet addresses, social media links and documents. In general, everything that can be used as entry points into an investigation. Most of the techniques described below can also…

One of the most common tasks in OSINT is to collect information about a person by nickname and/or last name and first name. It can be divided into four main stages: searching for information about the person in various databases: business registries, registers of debtors, cadastral maps, civil or court…

In this short post, I’m going to tell you about a very simple and quick way to collect contact information from DuckDuckGo search results. We will use the Python library duckduckgo_search (https://github.com/deedy5/duckduckgo_search) and the PDFgrep utility (https://pdfgrep.org/). To get started, you need a Linux distribution with Python installed. If you…

Let me make it clear right away that this article does not encourage you to guess passwords in order to log into other people’s accounts. A password is as much a point of entry to an investigation as an email, username, phone number, or full name. The password can be…

One of the most popular types of tools in the OSINT community are nickname enumeration tools: Sherlock, Maigret, Blackbird, WhatsMyName and many others. They all essentially do the same thing — they give a list of profiles on different sites includes a certain nickname (and differ only in the list…

Gravatar (Globally Recognized Avatars) is a service that allows user to upload avatar and personal information about himself once, and then use Gravatar account to quick register on various sites. According to Builtwith (https://trends.builtwith.com/widgets/Gravatar-Profiles), Gravatar profiles are supported by more than 14 million websites worldwide (8 million live now).

Nuclei is a tool for scanning websites for vulnerabilities. But it can be used for a variety of investigative or scientific purposes. Nuclei has three main advantages. The first is speed. Written in Go, it can scan thousands of URLs in seconds. The second is the extremely easy extensibility of…