{"id":"offensive-osint","name":"offensive-osint","summary":"攻撃的なセキュリティ、レッドチームの情報収集、バグバウンティ偵察のための包括的なOSINT手法スキル。","body":"# Offensive OSINT Methodology\n\n## Workflow\n\n1. Define target scope (domain, org, person, crypto address, or geo subject)\n2. Select applicable categories below based on scope\n3. Work top-down within each category; pivot on discovered artifacts\n4. Archive every key artifact: URL + timestamp + screenshot (PNG) + hash (SHA-256)\n5. Log findings in JSONL with a `run_id` and tool versions for reproducibility\n6. Suggest next steps based on what each tool returns\n\n---\n\n## General OSINT\n\n- [Bookmarks](https://tools.myosint.training/) — Comprehensive OSINT bookmarks\n- [OSINT Framework](https://osintframework.com/) — Tool/resource directory\n- [IntelTechniques Tools](https://inteltechniques.com/tools/) — Suite of investigative tools\n- [Bellingcat Toolkit](https://www.bellingcat.com/resources/2024/09/24/bellingcat-online-investigations-toolkit/) — Investigative journalism tools\n- [CyberSudo OSINT Toolkit](https://docs.google.com/spreadsheets/d/1EC0sKA_W9znzsxUt0wye9UYtyATXw5m8) — OSINT websites list\n- [Google Dorks](https://dorksearch.com/) — Efficient Google searching\n- [Distributed Denial of Secrets](https://ddosecrets.com/) — Leaked data\n- [Country-Specific Resources](https://digitaldigging.org/osint/) — Country-targeted OSINT\n\n### Search Engines\n\n| Tool | Notes |\n|------|-------|\n| [Carrot2](https://search.carrot2.org/#/search/web) | Clusters results by topic |\n| [etools](https://www.etools.ch/) | Metasearch engine |\n| [Kagi](https://kagi.com/) | Privacy-first, non-personalized results |\n| [Brave Search](https://search.brave.com/) | Independent index; Goggles for custom ranking |\n| [PDF Search](https://www.pdfsearch.io/) | Search PDF files and view table of contents |\n| [Google Fact Check Explorer](https://toolbox.google.com/factcheck/explorer) | Cross-site fact-check search |\n\n---\n\n## Username & Email Investigation\n\n| Tool | Purpose |\n|------|---------|\n| [Sherlock](https://github.com/sherlock-project/sherlock) | Username search across social networks |\n| [Maigret](https://github.com/soxoj/maigret) | Collect profiles by username from many sites |\n| [What's My Name](https://whatsmyname.app/) | Username search across platforms |\n| [Holehe](https://github.com/megadose/holehe) | Check if email is registered on platforms |\n| [Epieos](https://epieos.com/) | Email address pivots and metadata |\n| [OSINT Industries](https://osint.industries/) | Email/username/phone lookups |\n| [Hunter.io](https://hunter.io/) | Find email addresses for a domain |\n| [EmailRep](https://emailrep.io/) | Email reputation and associated data |\n| [Emailable](https://emailable.com/) | Verify email existence |\n| [Mugetsu](https://mugetsu.io/) | X/Twitter username history |\n| [RocketReach](https://rocketreach.co/) / [Apollo](https://www.apollo.io/) | Email enrichment and pattern guessing |\n| [PhoneInfoga](https://github.com/sundowndev/phoneinfoga) | Phone number intelligence framework |\n\n**Browser extensions:** [GetProspect](https://chromewebstore.google.com/detail/email-finder-getprospect/bhbcbkonalnjkflmdkdodieehnmmeknp), [SignalHire](https://chrome.google.com/webstore/detail/signalhire-find-email-or/aeidadjdhppdffggfgjpanbafaedankd)\n\n---\n\n## People Search\n\n- [TruePeopleSearch](https://www.truepeoplesearch.com/) — Free U.S. people search\n- [WhitePages](https://www.whitepages.com/) — Contact information\n- [Spokeo](https://www.spokeo.com/) — People search engine\n- [Webmii](https://webmii.com/) — People search\n- [Pipl](https://pipl.com/) — Deep web people search (paid)\n- [Clearbit](https://clearbit.com/) — Company/individual data enrichment\n- [FaceCheck](https://facecheck.id/) / [FaceSeek](https://faceseek.online/) — Reverse face search\n\n---\n\n## Phone Number OSINT\n\n- [TrueCaller](https://www.truecaller.com/) — Caller ID and spam blocking\n- [ThatsThem](https://thatsthem.com/) — Reverse phone search\n- [Infobel](https://infobel.com/) — Phone search outside USA\n- [FreeCarrierLookup](https://freecarrierlookup.com/) — Carrier/type lookup (US)\n- [NumlookupAPI](https://numlookupapi.com/) [Freemium] — Programmatic carrier/line-type checks\n- [CallerIDTest](https://calleridtest.com/) — Phone search\n- [Advanced Background Checks](https://www.advancedbackgroundchecks.com/) — All people linked to a number\n\n---\n\n## Social Media\n\n| Platform | Tool |\n|----------|------|\n| Instagram | [Picuki](https://www.picuki.com/) — view profiles without account |\n| X/Twitter | [snscrape](https://github.com/snscrape/snscrape) — preferred CLI scraper; use Twint only as fallback |\n| Facebook | [Graph Search](https://inteltechniques.com/tools/Facebook.html), [sowsearch.info](https://sowsearch.info/), [lookup-id.com](https://lookup-id.com/), [whopostedwhat.com](https://whopostedwhat.com/) |\n| Facebook (research) | [Meta Content Library](https://transparency.meta.com/researcher) — CrowdTangle successor (researcher-gated) |\n| YouTube/Twitch | [Social Blade](https://socialblade.com/) — analytics |\n| TikTok | [Tokboard](https://tokboard.com/) — trend and profile analytics |\n| Reddit | [Reveddit](https://www.reveddit.com/) — removed content; [RedTrack.social](https://redtrack.social/) — user history |\n| Bluesky | [Firesky](https://firesky.tv/) — real-time firehose; [SkyView](https://bsky.jazco.dev/) — follower graphs |\n| Mastodon | [FediSearch](https://fedisearch.skorpil.cz/) — cross-instance search; [Fedifinder](https://fedifinder.glitch.me/) — find Twitter users on Mastodon |\n| Faces | [Search4Faces](https://search4faces.com/) |\n\n---\n\n## Public Records & Company Information\n\n- [OpenCorporates](https://opencorporates.com/) — World's largest open company database\n- [SEC EDGAR](https://www.sec.gov/edgar.shtml) — U.S. company filings\n- [OpenOwnership Register](https://register.openownership.org/) — Beneficial ownership datasets\n- [MuckRock](https://www.muckrock.com/) — FOIA repository and request tracking\n- [EU Tenders (TED)](https://ted.europa.eu/) — EU procurement notices\n- [World Bank Projects](https://projects.worldbank.org/) — Project and procurement records\n\n### RU/CN Registries\n\n**Russia:** [Rusprofile](https://www.rusprofile.ru/), [Kontur.Focus](https://focus.kontur.ru/) (freemium), [zakupki.gov.ru](https://zakupki.gov.ru/) (procurement), EGRUL/EGRIP (official, captcha-gated)\n\n**China:** [GSXT](https://www.gsxt.gov.cn/) (National Enterprise Credit), [Qichacha](https://www.qcc.com/)/[Tianyancha](https://www.tianyancha.com/) (freemium), [MIIT ICP/Beian](https://beian.miit.gov.cn/) (ICP filings)\n\n### Sanctions & Compliance\n\n- [OFAC SDN List](https://sanctionssearch.ofac.treas.gov/)\n- [EU Sanctions Map](https://www.sanctionsmap.eu/)\n- [OpenSanctions](https://www.opensanctions.org/) — Aggregated persons/entities datasets\n- [OCCRP Aleph](https://aleph.occrp.org/) — Investigative documents, leaks, company records\n\n---\n\n## Breach & Leak Data\n\n- [Have I Been Pwned](https://haveibeenpwned.com/) — Breach lookup; Pwned Passwords API (k-anonymity)\n- [Dehashed](https://dehashed.com/) — Credential search\n- [IntelX](https://intelx.io/) — Data intelligence\n- [LeakCheck](https://leakcheck.io/) — Breach lookups\n- [Snusbase](https://snusbase.com/) — Database breach lookups\n- [BreachDirectory](https://breachdirectory.org/) — Recent breach credentials\n- [Scattered Secrets](https://scatteredsecrets.com/)\n- [Cavalier (Hudson Rock)](https://cavalier.hudsonrock.com/) — Infostealer lookups\n- [Phonebook](https://phonebook.cz/)\n- [LeakPeek](https://leakpeek.com/)\n\n---\n\n## Infrastructure & Attack-Surface OSINT\n\n- [Shodan](https://www.shodan.io/) — Internet-connected device/service search\n- [Censys](https://search.censys.io/) — Host and certificate enumeration\n- [GreyNoise](https://viz.greynoise.io/) — Distinguish background noise from targeted scans\n- [SecurityTrails](https://securitytrails.com/) — Passive DNS and asset discovery\n- [SpiderFoot](https://www.spiderfoot.net/) — Automated recon and correlation\n- [theHarvester](https://github.com/laramies/theHarvester) — Subdomain, email, metadata harvesting\n- [Recon-ng](https://github.com/lanmaster53/recon-ng) — Web recon framework\n- [Amass](https://github.com/owasp-amass/amass) / [Subfinder](https://github.com/projectdiscovery/subfinder) — Passive subdomain discovery\n- [BuiltWith](https://builtwith.com/) — Tech stack enumeration\n- [Netlas](https://netlas.io/) — Large-scale HTTP/DNS/certificate pivots\n- [BinaryEdge](https://www.binaryedge.io/) / [FOFA](https://fofa.so/) / [ZoomEye](https://www.zoomeye.org/) — Infra pivots complementing Shodan/Censys\n- [RiskIQ PassiveTotal](https://community.riskiq.com/) — Passive DNS/cert/host pivots\n- [Spur](https://spur.us/) — IP lookups and tracking\n- [Robtex](https://www.robtex.com/) — Passive DNS and infrastructure pivots\n\n### ASN/BGP & Internet Measurement\n\n- [Hurricane Electric BGP Toolkit](https://bgp.he.net/) — ASN, prefix, peers, IRR data\n- [RIPEstat](https://stat.ripe.net/) — IP/ASN history, routing, geolocation, abuse contacts\n- [BGPView](https://bgpview.io/) — ASN and prefix explorer\n- [bgp.tools](https://bgp.tools/) — Clean ASN/IX views, routing details\n- [PeeringDB](https://www.peeringdb.com/) — Facility and peering info\n\n### Certificates & CT Monitoring\n\n- [crt.sh](https://crt.sh/) — Search Certificate Transparency logs\n- [Censys Certificates](https://search.censys.io/certificates) — CT and x509 attribute pivots\n- [CertStream](https://certstream.calidog.io/) — Real-time CT feed via WebSocket\n- [Rapid7 Open Data](https://opendata.rapid7.com/) — Sonar DNS/HTTP/SSL datasets\n- [Cert Spotter](https://sslmate.com/certspotter) [Freemium] — CT monitoring and alerts\n- Favicon hash (mmh3): cluster infrastructure; pair with Shodan/Censys favicon search\n\n---\n\n## Threat Intel & IOCs\n\n- Vendor/CERT advisories: CISA/NSA/CSA joint advisories, CERT-EU, NCSC-UK, JPCERT/CC, CERT-UA\n- [MISP Project](https://www.misp-project.org/) and public MISP feeds\n- [OpenCTI](https://www.opencti.io/) — CTI knowledge graph\n- [Malpedia](https://malpedia.caad.fkie.fraunhofer.de/) — Malware families, YARA, references\n- [ThreatFox](https://threatfox.abuse.ch/) / [URLHaus](https://urlhaus.abuse.ch/) / [SSLBL](https://sslbl.abuse.ch/)\n- [MalwareBazaar](https://bazaar.abuse.ch/) — Hash-based sample sharing\n- [PhishTank](https://www.phishtank.com/) / [OpenPhish](https://openphish.com/)\n\n### Malware Analysis & Sandboxes\n\n- Static analysis: [pefile](https://github.com/erocarrera/pefile), [FLOSS](https://github.com/mandiant/flare-floss), [capa](https://github.com/mandiant/capa)\n- Similarity: SSDEEP, TLSH\n- Sandboxes: [ANY.RUN](https://any.run/), [Hybrid Analysis](https://www.hybrid-analysis.com/), [CAPE](https://capesandbox.com/), [Tria.ge](https://tria.ge/)\n- Intelligence: [Intezer](https://analyze.intezer.com/) (code reuse), [VirusTotal](https://www.virustotal.com/) (**caution**: uploads become public)\n- TLS fingerprints: [JA3](https://github.com/salesforce/ja3), [JA4](https://github.com/FingerprinTLS/ja4)\n\n---\n\n## Cryptocurrency OSINT\n\n### Blockchain Explorers\n\n| Chain | Explorer |\n|-------|---------|\n| Bitcoin | [Blockchain.com](https://www.blockchain.com/explorer), [Blockchair](https://blockchair.com/) |\n| Ethereum | [Etherscan](https://etherscan.io/) |\n| BNB Chain | [BSCScan](https://bscscan.com/) |\n| Polygon PoS | [PolygonScan](https://polygonscan.com/) |\n| Solana | [Solscan](https://solscan.io/) |\n| Multi-chain | [OKLink](https://www.oklink.com/) [Freemium], [Cielo](https://cielo.io/) |\n\n**L2 Explorers:** [Arbiscan](https://arbiscan.io/), [Optimistic Etherscan](https://optimistic.etherscan.io/), [BaseScan](https://basescan.org/), [zkSync Era](https://explorer.zksync.io/), [L2Beat](https://l2beat.com/) (risk/TVL comparison)\n\n### Transaction Tracking & Analytics\n\n- [Arkham](https://www.arkhamintelligence.com/) — Multichain explorer, entity labels, graphs, alerts\n- [TRM](https://www.trmlabs.com/) — Address/transaction graphs\n- [MetaSleuth](https://metasleuth.io/) — Visual crypto flow analysis\n- [Breadcrumbs](https://www.breadcrumbs.app/) [Freemium] — Visual graphing and labeling\n- [Bubblemaps](https://bubblemaps.io/) — Holder concentration visualization\n- [Whale Alert](https://whale-alert.io/) — Large transaction monitoring\n- [Chainalysis](https://www.chainalysis.com/) / [Crystal Blockchain](https://crystalblockchain.com/) — Professional analytics\n- [GraphSense](https://graphsense.info/) — Cryptocurrency analytics platform\n- [Nansen](https://www.nansen.ai/) — Smart Money labels (paid)\n- [Dune](https://dune.com/) — Custom blockchain data queries\n- [Token Sniffer](https://tokensniffer.com/) — Honeypot and scam token detection\n\n### NFT & Exchange Intelligence\n\n- [OpenSea](https://opensea.io/) / [NFTScan](https://www.nftscan.com/) — NFT marketplace/explorer\n- [DappRadar](https://dappradar.com/) — NFT sales and marketplace activity\n- [CoinGecko](https://www.coingecko.com/) / [CoinMarketCap](https://coinmarketcap.com/) — Market data\n- [Glassnode](https://glassnode.com/) — On-chain market intelligence\n\n### Bridge Monitoring\n\n- [Socketscan](https://socketscan.io/) — EVM bridge explorer\n- [L2Beat Bridges](https://l2beat.com/bridges) — Bridge risk analysis\n- [Pulsy](https://pulsy.io/) — Bridge explorer aggregator\n\n---\n\n## Media Intelligence\n\n### Reverse Image & Facial Search\n\n- [Google Images](https://images.google.com/) — General reverse image search\n- [TinEye](https://tineye.com/) — Reverse image search\n- [Yandex Images](https://yandex.com/images/) — Effective for Russian/Eastern European content\n- [PimEyes](https://pimeyes.com/en) — Face-based image search\n- [FaceCheck](https://facecheck.id/) — Find people by photo\n\n### Image Forensics\n\n- [Forensically](https://29a.ch/photo-forensics/) — Digital image forensics toolkit\n- [ExifTool](https://exiftool.org/) — Read/write/edit metadata\n- [Jimpl](https://jimpl.com/) — Online EXIF viewer\n- [Jeffrey's EXIF viewer](http://exif.regex.info/exif.cgi) — Online metadata viewer\n- [FOCA](https://www.elevenpaths.com/labstools/foca) — Metadata in documents\n- [Metagoofil](https://www.edge-security.com/metagoofil.php) — Extract metadata from public documents\n- [C2PA Verify](https://verify.contentauthenticity.org/) — Verify content credentials and AI provenance\n\n### Video Analysis\n\n- [YouTube Data Viewer](https://citizenevidence.amnestyusa.org/) — Extract YouTube metadata\n- [InVID & WeVerify](https://www.invid-project.eu/tools-and-services/invid-verification-plugin/) — Video verification browser extension\n- [YouTube Geo Tag](https://mattw.io/youtube-geofind/location) — Video geolocation via geo tags\n- [MediaInfo](https://mediaarea.net/en/MediaInfo) — Technical/tag info for video/audio\n- Snap Map (public stories) — Area/event context\n\n### Browser Extensions for Media\n\n- [Fake News Debunker by InVID & WeVerify](https://chrome.google.com/webstore/detail/fake-news-debunker-by-inv/mhccpoafgdgbhnjfhkcmgknndkeenfhe)\n- [RevEye Reverse Image Search](https://chrome.google.com/webstore/detail/reveye-reverse-image-sear/kejaocbebojdmebagkjghljkeefgimdj)\n- [EXIF Viewer Pro](https://chrome.google.com/webstore/detail/exif-viewer-pro/mmbhfeiddhndihdjeganjggkmjapkffm)\n- [Wayback Machine Extension](https://chrome.google.com/webstore/detail/wayback-machine/fpnmgdkabkmnadcjpehmlllkndpkmiak)\n- [Search by Image](https://chromewebstore.google.com/detail/search-by-image/cnojnbdhbhnkbcieeekonklommdnndci)\n\n---\n\n## Geospatial Intelligence\n\n### Satellite Imagery & Mapping\n\n- [Google Maps](https://www.google.com/maps) / [Bing Maps](https://www.bing.com/maps/) — General mapping\n- [Sentinel Hub EO Browser](https://apps.sentinel-hub.com/eo-browser/) — Sentinel/Landsat satellite imagery\n- [NASA Worldview](https://worldview.earthdata.nasa.gov/) — NASA satellite imagery\n- [Zoom Earth](https://zoom.earth/) — Live satellite images and weather\n- [Wayback Imagery](https://livingatlas.arcgis.com/wayback/) — Historical satellite images\n- [NASA FIRMS](https://firms.modaps.eosdis.nasa.gov/map/) — Fire/hotspot data\n- [Open Infrastructure Map](https://openinframap.org/) — Global infrastructure networks\n- [Windy](https://www.windy.com/) — Live weather map\n\n### Geolocation Tools\n\n- [Mapillary](https://www.mapillary.com/app) — Crowdsourced street-level imagery\n- [KartaView](https://kartaview.org/) — Open-source street-level imagery\n- [Overpass Turbo](https://overpass-turbo.eu/) — Advanced OpenStreetMap queries\n- [SunCalc](https://www.suncalc.org/) — Sun position for chronolocation\n- [GeoNames](https://www.geonames.org/) — Geographical database\n- [PeakVisor](https://peakvisor.com/) — Identify mountain peaks\n- [GeoGuesser tips](https://somerandomstuff1.wordpress.com/2019/02/08/geoguessr-the-top-tips-tricks-and-techniques/) — Geolocation methodology\n\n**Street View:** Google Street View, [Apple Maps](https://maps.apple.com/), [Yandex Maps](https://yandex.com/maps/), [Baidu Maps](https://map.baidu.com/)\n\n### Flight OSINT\n\n- [FlightRadar24](https://www.flightradar24.com/) / [FlightAware](https://www.flightaware.com/) / [RadarBox](https://www.radarbox.com/)\n- [ADSBExchange](https://www.adsbexchange.com/) — Unfiltered community ADS-B feed\n- [Planespotters](https://www.planespotters.net/) — Fleet/airframe history by tail number\n- [AirFrames](https://www.airframes.org/) / [JetPhotos](https://www.jetphotos.com/) — Visual confirmation\n\n### Maritime OSINT\n\n- [MarineTraffic](https://www.marinetraffic.com/) — Live AIS vessel tracking\n- [VesselFinder](https://www.vesselfinder.com/) — Global ship movements and port calls\n- [FleetMon](https://www.fleetmon.com/) — Historical AIS data and analytics\n- [Global Fishing Watch](https://globalfishingwatch.org/map/) — Fishing vessel behavior and AIS gap analysis\n\n---\n\n## AI-Assisted OSINT\n\n> **Warning:** Never paste PII, sensitive IOCs, or unique pivots into cloud LLMs. They log inputs and may use them for training. Use local models (Ollama, LM Studio) for sensitive analysis.\n\n| Tool | Strength |\n|------|---------|\n| [ChatGPT](https://chat.openai.com/) (paid) | Log parsing, dataset analysis, Code Interpreter for CSVs/JSON, GPT-4 Vision for image OCR |\n| [Claude](https://claude.ai/) (paid) | 200K token context for large document dumps and report synthesis |\n| [Gemini 1.5 Pro](https://gemini.google.com/) | 2M token context; Deep Research mode with citations |\n| [Perplexity Pro](https://www.perplexity.ai/) (paid) | Real-time web search + reasoning; multi-query synthesis |\n\n**Local/privacy-preserving:** [Ollama](https://ollama.com/) (Llama 3, Mistral), [LM Studio](https://lmstudio.ai/), [GPT4All](https://gpt4all.io/)\n\n### Commercial AI OSINT Platforms\n\n- [Cylect](https://www.cylect.io/) — AI entity extraction and link-analysis\n- [Fivecast Matrix](https://www.fivecast.com/products/matrix/) — Generative-AI triage for social-media datasets\n- [Recorded Future](https://www.recordedfuture.com/) — AI-driven threat intelligence\n- [DarkOwl Vision](https://www.darkowl.com/) — AI-powered darknet data analysis\n\n### Deepfake & Synthetic Media Detection\n\n- [Sensity AI](https://sensity.ai/) — Deepfake detection\n- [Reality Defender](https://realitydefender.com/) — AI-generated content detection\n- [Adobe Content Credentials Verify](https://contentcredentials.org/verify) — C2PA verifier\n- [CarNet](https://carnet.ai/) — AI car model identification (useful for geolocation)\n\n---\n\n## Archiving & Evidence Preservation\n\n- [archive.today](https://archive.today/) — One-page content archiver with screenshot\n- [URLScan.io](https://urlscan.io/) — On-demand webpage scan with resource map\n- [ArchiveBox](https://archivebox.io/) — Self-hosted archiving (HTML, PDF, screenshots, media)\n- [Hunchly](https://www.hunch.ly/) — Evidence capture for investigators (paid)\n- Wayback SavePageNow API v3 — On-demand archiving with job IDs\n- [SingleFileZ](https://github.com/gildas-lormeau/SingleFileZ) — Browser extension for offline HTML archives\n- [Kasm Workspaces](https://kasmweb.com/) — Containerized OSINT workspace/browser isolation\n\n**Evidence handling:**\n- Capture: URL + timestamp + PNG screenshot + WARC/SingleFileZ archive\n- Hash all downloaded files (SHA-256) and record in case notes\n- Separate work profiles/containers per case; store evidence read-only\n- Use JSONL (NDJSON) logs with `run_id` and tool versions for reproducibility\n\n---\n\n## Automation & Workflows\n\n- [n8n](https://n8n.io/) — Self-hosted workflow automation (e.g., RSS → scrape → alert pipelines)\n- [Huginn](https://github.com/huginn/huginn) — Agent-based monitoring, scraping, alerting\n- [Playwright](https://playwright.dev/) — Headless browser automation with stealth plugins\n- [Browsertrix Crawler](https://github.com/webrecorder/browsertrix-crawler) — Archival crawling with WARC export\n- [Prefect](https://www.prefect.io/) / [Apache Airflow](https://airflow.apache.org/) — Workflow orchestration for data pipelines\n\n---\n\n## Regional Search Engines\n\n- Russia/CIS: [Yandex](https://yandex.com/), [Mail.ru Search](https://go.mail.ru/)\n- China: [Baidu](https://www.baidu.com/), [Sogou](https://www.sogou.com/), [360 Search](https://www.so.com/)\n- Russia social: [VK](https://vk.com/), [OK.ru](https://ok.ru/)\n- China social: [Weibo](https://weibo.com/), [Bilibili](https://www.bilibili.com/), [Zhihu](https://www.zhihu.com/), [Douyin](https://www.douyin.com/)\n\n---\n\n## Telegram & Messaging Intelligence\n\n- [TGStat](https://tgstat.com/) — Channel analytics and search\n- [Telemetr](https://telemetr.io/) — Channel growth, overlaps, forwards\n- [Combot](https://combot.org/) — Group analytics (partially paid)\n- [TelegramDB Search Bot](https://t.me/TGdb_bot) — Basic Telegram OSINT\n- [Discord ID](https://discord.id/) — Basic Discord account information\n- Sogou Weixin search — WeChat Official Accounts content search\n- View public Telegram channels: `https://t.me/s/<channel>`","author":"@SnailSploit","ownerProfile":null,"authorContacts":null,"sourceUrl":"https://github.com/SnailSploit/Claude-Red/tree/main/Skills/recon/offensive-osint","license":"MIT","category":"document","lang":"en","tokens":5969,"stars":0,"calls30d":1,"claimed":false,"visibility":"public","origin":"crawler","version":"0.1.0","createdAt":"2026-08-22","updatedAt":"2026-08-22","files":[],"requires":{"mcp":[],"tools":[]},"safety":{"flags":[],"scannedAt":"2026-08-22","hasScripts":false,"networkEndpoints":["29a.ch","airflow.apache.org","aleph.occrp.org","analyze.intezer.com","any.run","apps.sentinel-hub.com","arbiscan.io","archive.today","archivebox.io","basescan.org","bazaar.abuse.ch","beian.miit.gov.cn","bgp.he.net","bgp.tools","bgpview.io","blockchair.com","breachdirectory.org","bscscan.com","bsky.jazco.dev","bubblemaps.io","builtwith.com","calleridtest.com","capesandbox.com","carnet.ai","cavalier.hudsonrock.com","certstream.calidog.io","chat.openai.com","chrome.google.com","chromewebstore.google.com","cielo.io","citizenevidence.amnestyusa.org","claude.ai","clearbit.com","coinmarketcap.com","combot.org","community.riskiq.com","contentcredentials.org","crt.sh","crystalblockchain.com","dappradar.com","ddosecrets.com","dehashed.com","digitaldigging.org","discord.id","docs.google.com","dorksearch.com","dune.com","emailable.com","emailrep.io","epieos.com","etherscan.io","exif.regex.info","exiftool.org","explorer.zksync.io","facecheck.id","faceseek.online","fedifinder.glitch.me","fedisearch.skorpil.cz","firesky.tv","firms.modaps.eosdis.nasa.gov","focus.kontur.ru","fofa.so","freecarrierlookup.com","gemini.google.com","glassnode.com","globalfishingwatch.org","go.mail.ru","gpt4all.io","graphsense.info","haveibeenpwned.com","hunter.io","images.google.com","infobel.com","inteltechniques.com","intelx.io","jimpl.com","kagi.com","kartaview.org","kasmweb.com","l2beat.com","leakcheck.io","leakpeek.com","livingatlas.arcgis.com","lmstudio.ai","lookup-id.com","malpedia.caad.fkie.fraunhofer.de","map.baidu.com","maps.apple.com","mattw.io","mediaarea.net","metasleuth.io","mugetsu.io","n8n.io","netlas.io","numlookupapi.com","ok.ru","ollama.com","opencorporates.com","opendata.rapid7.com","openinframap.org","openphish.com","opensea.io","optimistic.etherscan.io","osint.industries","osintframework.com","overpass-turbo.eu","peakvisor.com","phonebook.cz","pimeyes.com","pipl.com","playwright.dev","polygonscan.com","projects.worldbank.org","pulsy.io","realitydefender.com","redtrack.social","register.openownership.org","rocketreach.co","sanctionssearch.ofac.treas.gov","scatteredsecrets.com","search.brave.com","search.carrot2.org","search.censys.io","search4faces.com","securitytrails.com","sensity.ai","snusbase.com","socialblade.com","socketscan.io","solscan.io","somerandomstuff1.wordpress.com","sowsearch.info","spur.us","sslbl.abuse.ch","sslmate.com","stat.ripe.net","t.me","ted.europa.eu","telemetr.io","tgstat.com","thatsthem.com","threatfox.abuse.ch","tineye.com","tokboard.com","tokensniffer.com","toolbox.google.com","tools.myosint.training","transparency.meta.com","tria.ge","urlhaus.abuse.ch","urlscan.io","verify.contentauthenticity.org","viz.greynoise.io","vk.com","webmii.com","weibo.com","whale-alert.io","whatsmyname.app","whopostedwhat.com","worldview.earthdata.nasa.gov","www.adsbexchange.com","www.advancedbackgroundchecks.com","www.airframes.org","www.apollo.io","www.arkhamintelligence.com","www.baidu.com","www.bellingcat.com","www.bilibili.com","www.binaryedge.io","www.bing.com","www.blockchain.com","www.breadcrumbs.app","www.chainalysis.com","www.coingecko.com","www.cylect.io","www.darkowl.com","www.douyin.com","www.edge-security.com","www.elevenpaths.com","www.etools.ch","www.fivecast.com","www.fleetmon.com","www.flightaware.com","www.flightradar24.com","www.geonames.org","www.google.com","www.gsxt.gov.cn","www.hunch.ly","www.hybrid-analysis.com","www.invid-project.eu","www.jetphotos.com","www.mapillary.com","www.marinetraffic.com","www.misp-project.org","www.muckrock.com","www.nansen.ai","www.nftscan.com","www.oklink.com","www.opencti.io","www.opensanctions.org","www.pdfsearch.io","www.peeringdb.com","www.perplexity.ai","www.phishtank.com","www.picuki.com","www.planespotters.net","www.prefect.io","www.qcc.com","www.radarbox.com","www.recordedfuture.com","www.reveddit.com","www.robtex.com","www.rusprofile.ru","www.sanctionsmap.eu","www.sec.gov","www.shodan.io","www.so.com","www.sogou.com","www.spiderfoot.net","www.spokeo.com","www.suncalc.org","www.tianyancha.com","www.trmlabs.com","www.truecaller.com","www.truepeoplesearch.com","www.vesselfinder.com","www.virustotal.com","www.whitepages.com","www.windy.com","www.zhihu.com","www.zoomeye.org","yandex.com","zakupki.gov.ru","zoom.earth"]}}