#OSINT #GOOGLE Today, dear ESPYERS, we will explore the possibility of identifying the owner of Google documents. In the simplest version, you just need to open the file properties and hover over the owner's profile picture.
If your document is presented in edit format, then the work becomes more complicated. Go to your Google Drive, open the "Shared with me" tab. Press F12 to put the browser in code view mode. Select the "Network" tab, below "Fetch/XHR". Now click on the file in question in Google Drive. In the code, open the "v2internal?%24ct=..." item and find an indication of the @gmail.com mail there. I tried to illustrate this on the screen.
You can also use an open source tool to identify Google Docs - Malfrats
If your document is presented in edit format, then the work becomes more complicated. Go to your Google Drive, open the "Shared with me" tab. Press F12 to put the browser in code view mode. Select the "Network" tab, below "Fetch/XHR". Now click on the file in question in Google Drive. In the code, open the "v2internal?%24ct=..." item and find an indication of the @gmail.com mail there. I tried to illustrate this on the screen.
You can also use an open source tool to identify Google Docs - Malfrats
👍4
HOW TO DEANONYMIZE A USER OF A TELEGRAM ACCOUNT. Telegram is one of the most popular instant messengers in the world. Why? Pavel Durov built the marketing strategy of his project on the idea of "security". Under the slogan "Taking back our right to privacy", users were assured that no special services would be able to read their messages. And it worked!
But the question is: is Telegram really anonymous or is Durov just a good salesman? All you need to know about the “privacy” of this messenger is when registering here you need to specify your cell number. There is simply no better solution! Is it difficult to find out who is the owner of a Telegram account? Not at all. You just need to know where to poke, and then the messenger itself will give out all the necessary information.
OK! What do we have? The account itself, or rather its numerical identifier (ID), username (symbolic alias), nickname (sometimes it is the first and last name, sometimes it is a pseudonym), avatar and, finally, messages that are sent from the account. Thumbs up! Behind all this lies an almost complete package of data about a Telegram user.
Let's start with ID. What can be learned from it? Phone number (@QuickOSINT_bot ), approximate account creation date (@creationdatebot), nickname change history (@SangMataInfo_bot), chats and groups with target account membership (@telesint_bot).
“This is all, of course, wonderful, but how can you find out the ID itself?” - you ask. A very pertinent question! This can be done, firstly, through a third-party Telegram client - for example, Graph Messenger. There you can find out the ID of any profile, you just need to press the button in the form of three dots in the upper right corner of the screen. Conveniently! But there is another way (in case the first one is prohibited by religion or did not fit for another reason) - bots. This is @getmyid_bot (you need to forward the victim's message) or @telesint_bot (you need to send username).
Next - nickname and username. Everything is simple here: users often use the same nickname for all their accounts. If we find the victim's accounts on other services, this may complement the virtual portrait of the target. Let's use the tools to search by nickname! These are, for example, @maigret_osint_bot, Sherlock utility, namechk.com, knowem.com, etc.
It would also be nice to check which aliases the victim used before (@SangMataInfo_bot, @telesint_bot). This will give us even more information! Those. the current nickname may be new, and therefore not "highlighted" anywhere. But here are the old ones... There is a chance here, and not a small one.
The next step is the avatar. Download it, then look for exact copies of the photo (exact (using quotes) search in Yandex and Google). If there is a face in the photo, you can and should use advanced search tools - Eye of God, findclone.ru, primeyes.com, tineye.com, search4faces.com.
Now - messages of the victim in public chats. @telesint_bot is responsible for this. There may be useful clues - audio, photo or video - to which the methods already listed can be applied. In addition, this can be used to determine the linguistic behavior of the victim - writing style, types of emoji used, expressiveness of speech, etc. This can help when we find another account of the target (for example, on a cinephile forum) and want to make sure that the profile really belongs to her.
BONUS! Psst, boy, would you like some social engineering? Let's not forget about the human factor - people will hand themselves over with giblets if a professional is engaged in "processing". Get to know the person, gain confidence, embed a logger (iplogger.ru, grabify.link) into a harmless link and convince the account owner to follow it. Everyone knows what happens next - we will have the IP address of the victim at our disposal.
But the question is: is Telegram really anonymous or is Durov just a good salesman? All you need to know about the “privacy” of this messenger is when registering here you need to specify your cell number. There is simply no better solution! Is it difficult to find out who is the owner of a Telegram account? Not at all. You just need to know where to poke, and then the messenger itself will give out all the necessary information.
OK! What do we have? The account itself, or rather its numerical identifier (ID), username (symbolic alias), nickname (sometimes it is the first and last name, sometimes it is a pseudonym), avatar and, finally, messages that are sent from the account. Thumbs up! Behind all this lies an almost complete package of data about a Telegram user.
Let's start with ID. What can be learned from it? Phone number (@QuickOSINT_bot ), approximate account creation date (@creationdatebot), nickname change history (@SangMataInfo_bot), chats and groups with target account membership (@telesint_bot).
“This is all, of course, wonderful, but how can you find out the ID itself?” - you ask. A very pertinent question! This can be done, firstly, through a third-party Telegram client - for example, Graph Messenger. There you can find out the ID of any profile, you just need to press the button in the form of three dots in the upper right corner of the screen. Conveniently! But there is another way (in case the first one is prohibited by religion or did not fit for another reason) - bots. This is @getmyid_bot (you need to forward the victim's message) or @telesint_bot (you need to send username).
Next - nickname and username. Everything is simple here: users often use the same nickname for all their accounts. If we find the victim's accounts on other services, this may complement the virtual portrait of the target. Let's use the tools to search by nickname! These are, for example, @maigret_osint_bot, Sherlock utility, namechk.com, knowem.com, etc.
It would also be nice to check which aliases the victim used before (@SangMataInfo_bot, @telesint_bot). This will give us even more information! Those. the current nickname may be new, and therefore not "highlighted" anywhere. But here are the old ones... There is a chance here, and not a small one.
The next step is the avatar. Download it, then look for exact copies of the photo (exact (using quotes) search in Yandex and Google). If there is a face in the photo, you can and should use advanced search tools - Eye of God, findclone.ru, primeyes.com, tineye.com, search4faces.com.
Now - messages of the victim in public chats. @telesint_bot is responsible for this. There may be useful clues - audio, photo or video - to which the methods already listed can be applied. In addition, this can be used to determine the linguistic behavior of the victim - writing style, types of emoji used, expressiveness of speech, etc. This can help when we find another account of the target (for example, on a cinephile forum) and want to make sure that the profile really belongs to her.
BONUS! Psst, boy, would you like some social engineering? Let's not forget about the human factor - people will hand themselves over with giblets if a professional is engaged in "processing". Get to know the person, gain confidence, embed a logger (iplogger.ru, grabify.link) into a harmless link and convince the account owner to follow it. Everyone knows what happens next - we will have the IP address of the victim at our disposal.
❤1👍1
Binance shared users' personal data with the FSB.
The information the FSB wanted included the names and addresses of Binance users. The head of Russian Binance, Gleb Kostarev, agreed to the request of the FSB and shared the database with the security forces. Kostarev also said he "didn't have a choice".
In addition, Rosfinmonitoring demanded from the crypto-exchange data on “millions of dollars” that went to support the opposition leader Alexei Navalny (Opposition of Putin)
The information the FSB wanted included the names and addresses of Binance users. The head of Russian Binance, Gleb Kostarev, agreed to the request of the FSB and shared the database with the security forces. Kostarev also said he "didn't have a choice".
In addition, Rosfinmonitoring demanded from the crypto-exchange data on “millions of dollars” that went to support the opposition leader Alexei Navalny (Opposition of Putin)
👍1
INFOOOZE – (#OSINT) TOOL - NodeJs-based open-source intelligence tool. It has a number of modules that enable for quick searches.
👍2
#NEWS A new iMessage exploit used to install NSO Group spyware on iPhone has been discovered. It was used in a campaign targeting at least 65 people between 2017 and 2020.
Telegram is one of the most popular instant messengers in the world. Why? https://espysys.com/blog/how-to-deanonymize-a-user-of-a-telegram-account/
ESPY - Data Enrichment
Telegram OSINT: The Ultimate Guide
Telegram OSINT is a valuable tool for those seeking to extract insights from the messaging app.
Dear OSINTERS! Our channel has migrated to a new address and we look forward to seeing you all on our new channel OSINT ANATOMY Please Join!
Telegram
OSINT ANATOMY
Get your weekly dose of OSINT-Related resources, case studies and news from around the globe. We publish only the most interesting or useful cases and tools. No spamming or paid posts. No fake news.
Forwarded from OSINT ANATOMY
TORBOT – DARKWEB OSINT TOOL Extensive use of Dark web for communication of terrorism-related information makes it a challenge for Law Enforcement Agencies. TorBot should be able to monitor such illegal activities that are happening in this encrypted network.
👍2❤1