nDorker

Enter the domain name and get quick links to Google Dorks, Github dorks, Shodan dorks and quick links to get info about domain in Codepad, Codepen, Codeshare and other sites ("vendor dorking")

https://github.com/nerrorsec/nDorker

#python #opensource

The full list of 4,000+ resources and their associated citation counts, which contribute to the interactive MO chart, are provided below. More background details about this dataset can be found in the FAQ.
Sources List
MO draws from the following list of OSINT tools & resources lists (meta, right?). Sources are listed in alphabetical order by domain name.
https://metaosint.github.io/table/

Global Biodiversity Information Facility

Enter the name of an animal, bird or plant to see a map of where it has been spotted.

Useful for fact-checking (e.g., verifying geographical coordinates in the metadata of photos with animals).

https://gbif.org/occurrence/map?q=cobra

#osint #geoint

Since the OSINT world evolves fastly, its tools and methods must be updated often.

The original project, osintframework.com, have not really been updated for a while now, so we decided to make our own version.
https://map.malfrats.industries/

Maltego Handbook for Social Media Investigations...

Deep Face Live

Real-time face swap for streaming and video calls

(use and set-up requires considerable effort as well as a lot of free time)

https://github.com/iperov/DeepFaceLive

#python #deepfake #onnx #opensource

Let's continue talking about advertising identifiers. They can also be found manually in the web page code (in Chrome - Ctrl + U), then we search for the following words:

AdSense: Pub- или ca-pub
Analytics: UA-
Amazon: &tag=
AddThis: #pubid / pubid
Metrika: mc.yandex / ym
Rambler: top100
Mail.ru: Top.Mail.Ru

As a rule, the metric on the site is indicated with a unique ID, which we can use to open the site's public statistics. For example, like this:

▫️ https://metrika.yandex.ru/dashboard?id=ADD_ID
▫️ https://top100.rambler.ru/search?query=ADD_ID
▫️ https://top.mail.ru/visits?id=ADD_ID

Let's say that we found a public Yandex Metrika https://metrika.yandex.ru/dashboard?id=55694881. Let's try to find information about the website administrator on it. Let's open Yandex Metrica on the date of its registration on 10/09/2019. The only visitor is the one who put Yandex Metrica on the website. We find out that our admin is a man, 25-34 years old. Lives in Kazan.

Everyone knows the WHOIS services. They store registration data about a domain name (date and period of registration, owner's name, etc.). Here are some popular WHOIS services:

▫️ https://whois.domaintools.com/
▫️ https://whoer.net/ru/checkwhois
▫️ https://www.iana.org/whois
▫️ https://lookup.icann.org/

It is much more interesting to get archived data from WHOIS, which is not limited by the GDPR and stores contacts and specific names of domain name owners. I know several such archives:

▫️ http://whoishistory.ru/
▫️ https://drs.whoisxmlapi.com/whois-history

Undoubtedly useful collections of additional services for studying websites:

▫️ https://osint.sh/
▫️ https://suip.biz/
▫️ https://hackertarget.com/ip-tools/
▫️ https://abhijithb200.github.io/investigator/