This document discusses using OSINT (open-source intelligence) techniques and Python automation to explore various online sources of information. It provides examples and demonstrations of extracting data through social media platforms like Facebook and Snapchat, obtaining free airport wifi passwords, profiling LinkedIn users by email, and checking if emails and passwords have been part of data breaches. The document aims to share these OSINT techniques and get feedback from others on additional methods or APIs to investigate open online information.

1. - Santhosh Baswa
OSINT like a B0$$
1
Pyth0n Aut0mati0n

2. • OSINT + Funny Guy
• Explore dirty stuff with Python
• CTF player *Occasionally*
Who Am I
2

3. “ OSINT - Who + Where + What + How + When ?
3
*** Share Your Thoughts***

4. **This book is wasting our time.**
Social Media
????Book
Any idea on Facebook Graph API/Search ??
Is it really disabled by Facebook ?
** Demo time **

5. Yes/No
https://www.facebook.com/search/fb_id_friend1/friends/fb_id_friend2/friends/intersect/
*** Is it working in normal Facebook search ??***
Facebook id search: https://findmyfbid.in/

6. Any one having idea on snapchat ?
Social Media
????Chat
Shell we download live video from snapchat ?
Access videos any Geographical area ?
** Demo time **

7. Snap chat
• Go to *https://maps.snapchat.com*
• It will show all World wide geographical map. (live data red/pink/blue colours)
• Put mouse over specific location and *Right Click*
• Live video will display on small window embedded in Map.
• Go to View page source.
• CTRL + F - “mp4” -> click the link -> Save As Video
Live video data download

8. Do you guys want to use Airport Lounge Wifi Passwords for free ?
8
World wide - Free Wifi @***ports
Link: https://www.google.com/mymaps/viewer?mid=1Z1dI8hoBZSJNWFx2xr_MMxSxSxY&hl=en_GB

9. 9
LinkdeIn - Logic
Extract LinkdeIn profile details with email address ???
https://www.linkedin.com/sales/gmail
/profile/viewByEmail/xxxxxxxxx@gm
ail.com

10. 10
Pwning Kubernets & Keys & etcd misconfiguration

11. Email
• https://dehashed.com/search?query=
• https://intelx.io/?s=xxxx@gmail.com
• https://en.gravatar.com/site/check/
• https://data.occrp.org/search/q=
• https://www.spytox.com/email-search/
OSINT
Let’s do automate some email validation
http://api.trumail.io/v2/lookup/json?email=
** Demo time **

12. Passwords
Have I Been Pwned
Have I been pwned - Python
Email checkup - online check
Hash checkup - with some kind of tricky logic
** Demo time **

13. “
13
— Santhosh Baswa
Any Questions ???