It’s easy to chase the narrative you want, not the truth.#
Username/Email/IP#
Username / handle reuse – search same handle on other sites; record all matches in one sheet
| Link/Name | Comment | Type |
|---|---|---|
| UserSearch | Cross-platform username search | SaaS |
| Holehe | Email-based site registration check | Software |
| osint.rocks | Automated username search | SaaS |
| BreachDirectory | Breached username check | SaaS |
| Censys | IP Search | SaaS |
| Shodan | Internet General Search | SaaS |
| Have I been Pwned | Email-based leak check | SaaS |
| MailCat | Find existing email addresses | Software |
Social Media Tools#
Social graph signals > single posts – pull top 10 interactors and scan for repeated overlap
| Link/Name | Comment | Type |
|---|---|---|
| InsE | Instagram Email Extractor | Chrome Plugin |
| Castrick | Connections Mapper | SaaS |
| GHunt | Google Account | Software |
Metadata#
download file/photo, check EXIF or doc properties for names/emails
| Link/Name | Comment | Type |
|---|---|---|
| ExifTool | Read, write, edit metadata | Software |
| LeakIX | Public Leak Detection/Finder | SaaS |
Temporal & location patterns – log 10 most recent post times, compare to timezone map
Cross-platform redundancy#
collect job titles from LinkedIn, Instagram captions, GitHub bio and compare
| Link/Name | Comment | Type |
|---|---|---|
| Epieos | Profile aggregation by email | SaaS |
| That’s them | Reverse lookup for employment cross-check | SaaS |
| Skymem | Email-based public data search | SaaS |
Common recurring keypoints#
Reuse of elements – see if matches appear elsewhere
| Link/Name | Comment | Type |
|---|---|---|
| DorkSearch | Pattern-based Google dorking | SaaS |
| UserSearch | Keyword-based username scan | SaaS |
Visual overlaps#
match objects/backgrounds in photos, save side-by-side for reference
| Link/Name | Comment | Type |
|---|---|---|
| TinEye | External duplicate image detection | SaaS |
| Google Images | SaaS | |
| Yandex | External reverse image search | SaaS |
Public records fill gaps#
check local registry to confirm address; screenshot results with source date
| Link/Name | Comment | Type |
|---|---|---|
| CriminalIP | Asset/risk correlation | SaaS |
| That’s them | Public records validation | SaaS |
Social media OSINT – essential questions#
What other accounts are linked? – search email/phone in reverse lookup; note matches
| Link/Name | Comment | Type |
|---|---|---|
| Epieos | Profile aggregation by email | SaaS |
| Holehe | Email-based site registration check | Software |
| MailCat | Find existing email addresses | Software |
Who are the top interactors?#
pull top 10 interactors and note overlaps in multiple posts
| Link/Name | Comment | Type |
|---|---|---|
| InsE | Instagram Email Extractor | Chrome Plugin |
Which accounts are frequently co-tagged?#
list all tagged accounts in last 20 posts and rank by frequency
Do mutual connections span same domains?#
tag each mutual as work, school, or hobby; see dominant group
| Link/Name | Comment | Type |
|---|---|---|
| Castrick | Connections Mapper | SaaS |
| FullHunt | Domain Map | SaaS |
| Subdomain Finder | Subdomain Mapper | SaaS |
Are posts geotagged or show landmarks?#
cross-check location tag with Google Maps Street View
| Link/Name | Comment | Type |
|---|---|---|
| FOFA | Geolocated asset mapping | SaaS |
| Google Maps | External location verification | SaaS |
Do timestamps show routines?#
plot post times on a simple chart to find regular posting windows
Are there employment or education cues?#
collect company names, logos, school crests from images
| Link/Name | Comment | Type |
|---|---|---|
| Hunter Domain Search | Company role verification | SaaS |
| Netlas | Organization-based discovery | SaaS |
Do reverse-image searches find duplicates?#
run top 5 profile pics through reverse image search, log matches
| Link/Name | Comment | Type |
|---|---|---|
| ZoomEye | Device mapping/finder | SaaS |
| Onyphe | Image metadata analysis | SaaS |
| Google Images | SaaS |
All tools/links:#
| Link/Name | Comment | Type |
|---|---|---|
| CyberSec Tools | Tools | |
| Binary Edge | Threat intelligence platform | SaaS |
| BreachDirectory | Breached username check | SaaS |
| Castrick | Connections Mapper | SaaS |
| Censys | IP Search | SaaS |
| CriminalIP | Asset/risk correlation | SaaS |
| DorkSearch | Pattern-based Google dorking | SaaS |
| Epieos | Profile aggregation by email | SaaS |
| ExifTool | Read, write, edit metadata | Software |
| FOFA | Geolocated asset mapping | SaaS |
| FullHunt | Domain Map | SaaS |
| GHunt | Google Account | Software |
| Google Images | SaaS | |
| Google Maps | External location verification | SaaS |
| Grey Noise | Scan noise intelligence | SaaS |
| Have I been Pwned | Email-based leak check | SaaS |
| Holehe | Email-based site registration check | Software |
| Hunter Domain Search | Company role verification | SaaS |
| InsE | Instagram Email Extractor | Chrome Plugin |
| LeakIX | Public Leak Detection/Finder | SaaS |
| MailCat | Find existing email addresses | Software |
| Netlas | Organization-based discovery | SaaS |
| Onyphe | Image metadata analysis | SaaS |
| osint.rocks | Automated username search | SaaS |
| Packet Storm News | Security tools and exploits | News |
| Shodan | Internet General Search | SaaS |
| Skymem | Email-based public data search | SaaS |
| Subdomain Finder | SaaS | |
| That’s them | Reverse lookup for employment cross-check | SaaS |
| TinEye | External duplicate image detection | SaaS |
| UserSearch | Cross-platform username search | SaaS |
| UserSearch | Keyword-based username scan | SaaS |
| VX Underground | Malware Library | Tools |
| Yandex | External reverse image search | SaaS |
| ZoomEye | Device mapping/finder | SaaS |
