The OSINT Curious Project

Join The OSINT Curious Project team as we talk about some news and tools in #OSINT. This week, Micah (@WebBreacher) and Christina (@ChristinaLekati) put some extra emphasis on demonstrating new tools and search techniques. They started by discussing SMART (Start Me Aggregated Resource Tool), an OSINT Start.me page parser and aggregator. Bash scripting came into the conversation shortly after and along with it, Sinwindie's (@OSINTDojo) video tutorial. OSINT on Mastodon had it's special place on this episode, as it is a social media platform that has been growing exponentially the past few weeks. We discussed what is different from other social media platforms and shared an introductory guide on how to conduct OSINT investigations on it. We also demonstrated 3 different ways & tools one can use to find usernames and accounts on Mastodon. Micah and Christina moved on to discuss the role cryptography can play in certain investigations and shared a blog post that acts as a useful introduction into this intersection of disciplines. Micah demonstrated the project "Backmoji", a resource that keeps historical data on the bitmoji's someone has historically used, based on their user ID. This database can reflect changes people have made in their appearance over time. Speaking of appearances and images, we also shared a twitter thread that lists a number of resources that help conduct and improve reverse image searches. The list does not only contain tools that conduct RIS, but also editing tools that help this process. Thank you for joining us for another episode, we wish everyone a happy holiday season and a happy new year! See you next time! 📚 LINKS AND RESOURCES mentioned in this stream: SMART (Start Me Aggregated Resource Tool): https://webbreacher.com/2022/11/14/get-smart-about-osint/ Sinwindie's (@Sinwindie / @OSINTDojo) Bash Scripting Video - https://www.youtube.com/watch?v=hrXZv0hST0M Blog “Mastodon OSINT: A Comprehensive introduction” https://www.secjuice.com/mastodon-osint-a-comprehensive-introduction/ WhatsMyName Username Checking Tool: https://whatsmyname.app/ Imagstodon Tool: https://seintpl.github.io/imagstodon/ Masto Tool: https://github.com/C3n7ral051nt4g3ncy/Masto Blog: "Cryptography & OSINT - The fundamentals": https://www.dutchosintguy.com/post/cryptography-osint-the-fundamentals Backmoji Tool: https://backmoji.osint.ninja Twitter thread by “OSINT for All”: “Ultimate list of resources for reverse image search”: https://twitter.com/AllForOsint/status/1588348612802932736 👁‍🗨 OSINT Curious: 🌍WEBSITE: All of our resources, blog posts, 10 minute tips, videos and podcasts in one place. You also find ways to participate and support our project. https://osintcurio.us/ 🦉TWITTER: Connect with us! We post OSINT updates, news, tips and tools, and interact with the Twitter community. https://twitter.com/osintcurious 👩‍💻 DISCORD: Chat with us on The OSINT Curious Discord server! This is a place to share your own resources, ask questions, give and receive help in solving OSINT challenges, and interact with a very enthusiastic OSINT community. https://iam.osintcurio.us/discord --- Support this podcast: https://podcasters.spotify.com/pod/show/osintcurious/support

This week, Micah (@WebBreacher), and Christina (@ChristinaLekati) are joined by Chris Kirsch (chris_kirsch) for an interview! Chris is the CEO of runZero, a cyber asset management company he co-founded with Metasploit creator HD Moore. In 2017, he earned the Black Badge for winning the Social Engineering Capture the Flag competition at DEF CON, while last year, he participated as a judge for the vishing competition at the Social Engineering Community. In this interview, we discuss the intersection between OSINT and social engineering. Chris shares with us stories from the application of OSINT in social engineering operations, and describes some of the top OSINT techniques and resources that he observed at the Social Engineering vishing competition. You can follow Chris on: Twitter: https://twitter.com/chris_kirsch LinkedIn: https://www.linkedin.com/in/ckirsch/ Mastodon: https://infosec.exchange/@chris_kirsch 📚 LINKS AND RESOURCES mentioned in this stream: Layer8 Presentation "Using OSINT For Competitive Intelligence": https://www.youtube.com/watch?v=NB-wLadJ3hk Blog "Top OSINT sources and vishing pretexts from DEF CON’s social engineering competition": https://medium.com/@chris.kirsch/top-osint-sources-and-vishing-pretexts-from-def-cons-social-engineering-competition-8e08de4c8ea8 Blog "Corporate OSINT for Social Engineering": https://osintcurio.us/2022/05/17/corporate-osint-for-social-engineering/ Winning call from DEF CON SECTF 2017: https://www.youtube.com/watch?v=yhE372sqURU Pickpocketing talk: https://www.youtube.com/watch?v=OvET4r4uARQ Social engineering resources: https://medium.com/@chris.kirsch/social-engineering-recommended-resources-10243113b80b Chris' company: https://www.runzero.com/ External scanning using runZero: https://www.runzero.com/blog/external-scanning/ 👁‍🗨 OSINT Curious: 🌍WEBSITE: All of our resources, blog posts, 10 minute tips, videos and podcasts in one place. You also find ways to participate and support our project. https://osintcurio.us/ 🦉TWITTER: Connect with us! We post OSINT updates, news, tips and tools, and interact with the Twitter community. https://twitter.com/osintcurious 🤝 PATREON SPONSORSHIP: As our project continues to grow, we are increasingly thankful for those people, companies, and organizations that choose to support us financially. https://www.patreon.com/osintcurious 👩‍💻 DISCORD: Chat with us on The OSINT Curious Discord server! This is a place to share your own resources, ask questions, give and receive help in solving OSINT challenges, and interact with a very enthusiastic OSINT community. https://iam.osintcurio.us/discord --- Support this podcast: https://podcasters.spotify.com/pod/show/osintcurious/support

This week, Micah (@WebBreacher) and Christina (@ChristinaLekati), are joined by Robin (@NothicEye) to talk about this month's #OSINT News & Tools. Our conversation started by focusing on the individuals that are wishing to enter the world of open-source intelligence not only as hobbyists but also, perhaps, as professionals. We talked about our latest blog post “Five tips to get you started in OSINT” in which 5 of our OSINT Curious members are sharing one quick tip each on getting started in this space. Thinking of the ones who would like to start a career in OSINT or look for different opportunities, we moved on to discuss a series of new interviews that were posted last month in the OSINT Jobs website. The blog/interview series is called “What hiring managers are looking for” and draws from the perspectives of 6 different hiring managers in the OSINT industry. The questions in these interviews include "how can candidates stand out right away?" and "What does the recruitment process look like in your organization?" among other, many interesting questions. Few things can help an OSINT practitioner develop their skills and broaden their perspective more than belonging to a small or large group or community. Robin (@NothicEye) who is also one of the moderators of the OSINT Curious Discord group, was able to share with us her observations from participating in OSINT-focused groups. She points out that smaller groups of practitioners can have a wide range of benefits. Our team then moved on to discussing Nico Deken's (@dutch_osintguy) updates on his programmable search engine for people's digital business cards and social media details. For the Geolocation fans we shared and discussed two resources: 1. Benjamin Strick's (@BenDoBrown) YouTube videos in which he goes through different tips, techniques and tools in geolocating visual elements. Last week, Benjamin started a new video series called "Let's Geolocate" 2. A Geolocation Cheat Sheet from @TheSEINT - a pretty detailed mind map with different elements that you can investigate when you analyze an image and try to geolocate it. All the relevant links can be found below! 📚 LINKS AND RESOURCES mentioned in this stream: OSINT Curious Blog: “Five tips to get you started in OSINT” : https://osintcurio.us/2022/10/13/five-tips-to-get-you-started-in-osint/ OSINT Jobs Blog Post Series: “What hiring managers are looking for” : https://www.osint-jobs.com/blog/career-osint-jobs Nico Deken’s Custom Digital Business Card Search Engine: https://github.com/Dutchosintguy/digital-business-cards-pse/ Benjamin Strick’s new YouTube series “Let’s Geolocate” (& other videos): https://www.youtube.com/c/Bendobrown Geolocation Cheat Sheet from @TheSEINT https://github.com/seintpl/osint/blob/main/Geolocation%20Analysis%20Diagram%20Outside%20clues.pdf 👁‍🗨 OSINT Curious: 🌍WEBSITE: All of our resources, blog posts, 10 minute tips, videos and podcasts in one place. You also find ways to participate and support our project. https://osintcurio.us/ 🦉TWITTER: Connect with us! We post OSINT updates, news, tips and tools, and interact with the Twitter community. https://twitter.com/osintcurious 🤝 PATREON SPONSORSHIP: As our project continues to grow, we are increasingly thankful for those people, companies, and organizations that choose to support us financially. https://www.patreon.com/osintcurious 👩‍💻 DISCORD: Chat with us on The OSINT Curious Discord server! This is a place to share your own resources, ask questions, give and receive help in solving OSINT challenges, and interact with a very enthusiastic OSINT community. https://iam.osintcurio.us/discord --- Support this podcast: https://podcasters.spotify.com/pod/show/osintcurious/support

This week, Micah (@WebBreacher), Christina (@ChristinaLekati), and Nico (@dutch_osintguy) talked about this month's #OSINT News, Tools and Blogs. They started by discussing a new blog post by Theo Baxter (@T-Baxter90) on investigating violent and distressing content through an OSINT investigation. Two additional resources were recommended by our team, as complementary reading/viewing material to this very important topic. They also discussed their new OSINT Curious blog post “Find Company Data With A Programmable Search Engine”, written by @nixintel. Micah, Christina, and Nico went on showcasing and discussing some new interesting tools, including a tool that conducts url scans, a database of landmarks, and Instagram's new map feature that allows you to view the public stories from specific locations. They also showcased how to change user agent in Chrome, using built-in features. Last, this week's OSINT Curious team discussed some recent community projects and contributions that our listeners and viewers could find both useful and entertaining. If you did not have enough of OSINT goodness this week, head out to the videos that our team produced, in collaboration with David Bombal (details in the links below). 📚 LINKS AND RESOURCES mentioned in this stream: Blog "Investigating violent & distressing content as part of OSINT investigations" : https://medium.com/@T_Baxter90/investigating-violent-distressing-content-as-part-of-osint-investigations-6fa141fa7f2d Blog "Vicarious trauma and OSINT – a practical guide" : https://osintcurio.us/2020/06/08/vicarious-trauma-and-osint-a-practical-guide/ OSINT Curious Live Stream with Nicole Beckwith on mental health during OSINT investigations: https://www.youtube.com/watch?v=03t7ctuVMnk Blog "Find Company Data With a Programmable Search Engine": https://osintcurio.us/2022/09/12/find-company-data-with-a-programmable-search-engine/ UrlScan: https://urlscan.io GeoHints: https://geohints.com/ Instagram's map feature: https://www.businessinsider.com/guides/tech/instagram-map UserAgent Switcher: https://twitter.com/WebBreacher/status/1572595024046465024 WhatsMyName: https://whatsmyname.app David Bombal's Videos With: Lisette, Steven, and Micah - https://www.youtube.com/watch?v=ImWJgDQ-_ek Lisette and Steven - https://www.youtube.com/watch?v=OsY32K1s51Y Micah - https://www.youtube.com/watch?v=F6l2Bmh7Dq4 NotMyPlate - Car Tracking: https://twitter.com/intidc/status/1574263808607997953 👁‍🗨 OSINT Curious: 🌍WEBSITE: All of our resources, blog posts, 10 minute tips, videos and podcasts in one place. You also find ways to participate and support our project. https://osintcurio.us/ 🦉TWITTER: Connect with us! We post OSINT updates, news, tips and tools, and interact with the Twitter community. https://twitter.com/osintcurious 🤝 PATREON SPONSORSHIP: As our project continues to grow, we are increasingly thankful for those people, companies, and organizations that choose to support us financially. https://www.patreon.com/osintcurious 👩‍💻 DISCORD: Chat with us on The OSINT Curious Discord server! This is a place to share your own resources, ask questions, give and receive help in solving OSINT challenges, and interact with a very enthusiastic OSINT community. https://iam.osintcurio.us/discord --- Support this podcast: https://podcasters.spotify.com/pod/show/osintcurious/support