Facebook FBStalker tool uses Graph Search for powerful OSINT analysis Facebook, and more in general social networks, is a platform that if not properly managed could harm user’s privacy, the fact that also friends’ social behavior could have a dangerous impact on our digital experience is very concerning. Recently at the Hack In The Box conference in Kuala Lumpur, security experts Jonathan Werrett and Keith Lee from SpiderLabs demonstrated how to conduct a powerful OSINT analysis using a simple tool they created, anyone using it could find a comprehensive amount of data on any user of the popular social network. The tool for information gathering on Facebook created by the researchers is named FBStalker, a name that give us the idea of the potential of the instrument. Through the use of Graph Search data mining activities has become very easy, Graph Search mines Facebook’s vast user data returning personalized results from natural-language queries. It is questionable whether a tool like FBStalker is legal: Pierluigi Paganini
yougetsignal Find other sites hosted on a web server by entering a domain or IP address above. Note: For those of you interested, as of May 2014, my database has grown to over 100 million domain names. I am now offering this domain list for purchase. A reverse IP domain check takes a domain name or IP address pointing to a web server and searches for other sites known to be hosted on that same web server. Data is gathered from search engine results, which are not guaranteed to be complete. Background All web sites are hosted on web servers, which are computers running specialized software that distribute web content as requested. As of 2003, more than 87% of all active domains names were found to share their IP addresses (i.e. their web servers) with one or more additional domains. While IP sharing is typically transparent to ordinary users, it may cause complications for both search engine optimization and web site filtering. Concerning SEO (search engine optimization) Concerning web site filtering
Network Intelligence Gathering This article is all about different information-gathering techniques on the network. It is the most essential and important task of attackers. Knowing the opponents and their interests can be valuable. Here I am going to show you which are the different ways and techniques one can do the network information/intelligence gathering. Let’s think of any thrilling movie theft. The same scenario can also be applied in the information security world. The map below shows the juicy areas in which attackers might be interested. Before starting to footprint anything, we need to keep in mind what or who our target is. Techniques of Intelligence Gathering Information Available in Air There is much information that is publicly available, but no one knows about it. In older days, Company Webpages used to provide valuable information about their security policy and configuration directly to the client side. Make sure to check related organizations. related: www.chintangurjar1990.com Want to learn more??
NSLOOKUP Query a DNS domain nameserver to lookup and find IP address information of computers in the internet. Convert a host or domain name into an IP address. This is the right place for you to check how your web hosting company or domain name registrar has set up the DNS stuff for your domain, how your dynamic DNS is going, or to search IP addresses or research any kind of e-mail abuse (UBE/UCE spam) or other internet abuse. This online service is for private non-commercial use only. Please do not abuse. If you prefer dig over nslookup, you may try our dig service. This page is also available in German, French and Portuguese. Link to www.kloth.net. A new discussion forum has been set up. Recommended books about Networking.
OSINT (Open-Source Intelligence) With an estimated 80% of required information available for use in an open source for specific information vital for a deep analysis in newspapers, magazines, industry newsletters, television transcripts, and blogs. OSINT makes our work easier, by using OSINT we are able to get important information in just a couple of minutes. Ethical Hacking Training – Resources (InfoSec) OSINT (Open-Source Intelligence) helps us to find, select and acquire information from available public sources. OSINT is unclassified and available, but link-crawling search engines like Google do not always access it. Today it’s common to see corporations using OSINT but perhaps calling it “Competitive Intelligence”. Open Sources of Information: Sources from where we can collect information (seen below): Open Source Information Transition 1455 to 2008 Elements of OSINT The OSINT process includes four key elements: What OSINT can do? ● Email addresses ● Phone numbers ● OS info ● IP info ● Software’s / version ● Geo location
SocialWhois Free People Search Engines & People Finder. Find People Free, Locate People and Search People Free. Person Search, Locator, Finder and Searches Online. OSINT Tools - Recommendations List | Subliminal Hacking With the New Year fast approaching I thought now would be a great time to post the first draft of some recommended Open Source Intelligence (OSINT) gathering tools and resources. I will look to maintain this list overtime and have it grow, so if you come across something you think should be on the list, drop me an email or leave a comment for consideration. The reconnaissance phase of any engagement is very important and can often save you alot of time and of course money. * Please note even though the aim is to provide information for free OSINT Tools, some may require a subscription or commercial fee. Spokeo – People search engine and free white pages finds phone, address, email, and photos. Its not listed above, but of course popular Social Networks such as Facebook, Twitter, LinkedIn and alike have a wealth of information. Lastly I will add alot of Social Engineers dont have alot of global exposure, so do your homework of where you are targeting.
tinfoleak | Free dossier of a twitter user Top 9 Popular OSINT Facebook Tools Social networks are indeed a big part of any OSINT investigation. They can reveal useful information about individuals, what they look for, how they do it, what they like and many other personal details. But OSINT Facebook data-gathering doesn’t stop with tools that show you only information about Facebook profiles. Today we’ll show you the best OSINT utilities that not only gather information about Facebook public data but also dig a little bit deeper under the surface — so keep reading. 9 popular OSINT Facebook tools Let’s start with the best online tools to help you get the most out of Facebook intel gathering. NetBootCamp NetBootCamp is a great tool for searching different strings within Facebook. It allows you to generate requests inside Facebook from a simple web-based interface. This interface and its options will generate a request that looks like this: Maltego FB People Directory
OSINT Search Tool by IntelTechniques | Open Source Intelligence Live Events Online Resources Blog Podcast Books Contact IP Location Tool - Locate a Network Address on a Google Map To navigate, press the arrow keys. Remote Address Use Current IPLocation identified. IP Address66.70.177.218 Base Domainip-66-70-177.net CountryUnited States RegionIL CityLisle Latitude41.787 Longitude-88.0833 Area Code630 Postal Code60532 Distance from Last(as the crow flies)0 miles SourceMaxMind The network location tool is a utility that approximates and displays the geophysical location of your network address on a Google Map. If you want to try another IP geolocation tool, check out this IP Address Location tool from IPAddressLocation.org.