beyeugroup
Backend Admin
2
MONTHS
2 2 MONTHS OF SERVICE
LEVEL 2
900 XP
Download:
Use OSINTFRAMEWORK.COM
I have seen many doxxing tutorials leave this out. OSINTFramework is an amazing website which lists hundreds of tools that can be used to find information on people. USE IT!
GOOGLE
This method is awfully self-explanatory. When it comes to using OSINT, Google is the first thing people use to find information on another user. Use google. You can search for emails, names, etc all on google and most of the time, this information will link to further information on the user. Here is an example:
As you can see, we now have their: email, PayPal address, Facebook and their steam ID.
You can furthermore, google the id, his name on Facebook, etc for more information.
SHERLOCK-PROJECT
Sherlock-Project is the most efficient way to hunt down social media accounts by username across social networks. This is great if your target uses the same username in most media platforms.
USE INFORMATION REGISTRY SITES
This is very useful when finding information on adult targets. Most information registry websites hold information on users such as their address, number, occupation, full name and date of birth. You can refer to OSINTFramework for more details and links but here are some useful ones below:
SEARCH FOR LEAKED INFORMATION ON DATABASE BREACHES.
This is very very helpful when it comes to finding sensitive information on other users such as passwords, emails, usernames, addresses, etc. As you can see, through Google, we found out further information based off of one email. We can expand this by looking through databases to find sensitive information on our target. I have listed a whole bunch of sites both free and paid you could use.
1.Deep Internet (.onion)
[xjypo5vzgmo7jca6b322dnqbsdnp3amd24ybx26x5nxbusccjkm4pwid.onion]
2. Safe Internet
[ghostproject.fr]
[snusbase.com]
[intelx.io]
[psbdmp.ws]
[leak-lookup.com]
-------------------------------------------------------------------
APIs and web services for search credentials leaks:
Onions:
[pwndb2am4tzkvold.onion]
[myspacexsan7ksvq.onion]
[dumpedlqezarfife.onion]
[hackinflukyc37se.onion]
Clearnet:
[hacked-emails.com]
[weleakinfo.com]
[haveibeenpwned.com]
[dehashed.com]
[ghostproject.fr]
[leakedsource.ru]
[leakprobe.net]
[spycloud.com]
[monitor.firefox.com]
[leaksify.com]
[meethacksy.com]
[snusbase.com]
[leaked.site]
[breachalarm.com]
[breachaware.com]
[https://www.avast.com/]
[intelx.io]
[psbdmp.ws]
[ashley.cynic.al]
[breachrecon.com]
[*BannedWebsite*]
[leak-lookup.com]
[citadel.pw]
[databreaches.live]
[vigilante.pw]
[rslookup.com]
[dataviper.io]
USING SKYPE RESOLVERS AND ID LOOKUPS.
Skype IP resolver is the place you enter a Skype username and it lets you know the client's IP. Skype resolver is an apparatus used to snatch online clients IP addresses. These will help you find further information which can help lead to ISP doxxing or you could do what most 14 yr old kids do... and hit off their internet connection if they are on a static address with a botnet.
You may also use Steam ID lookups to find some sensitive information such as finding their real name that they may have registered when making their steam account. Here are some services you could use:
ISP DOXXING
Have your target's IP and dont know what to do with it? Social Engineer the ISP provider!
What will I need?
Basic Social Engineering Skills.
Intelligence
Skype
Once you have the IP of your target, you can use https://check-host.net/ip-info to find the ISP of your target.
Now call your ISP provider and follow this script. Once you are talking to a Representative, you can follow this script, and modify it with your own information/etc. Going to be using Comcast as an example.
*You: Hello, My name is Joe, and I'm with Tech Support. I was trying to look up a Customer's Account Information in Grandslam, when our systems crashed. I currently cannot open up Grandslam or CSG. I was wondering if you could help me out and look up a customer's information on your end. Thanks.
Agent: They will ask you for a Phone number. Reply with:
*You: Unfortunately, I only have their IP address, since I was in Live Chat with them. I have them on scheduled called back in 3 hours. I know Grandslam can look up Customer Info with an IP, can you try it in that.
Agent: Sure... blah, blah, give them the IP.
*You: They should look everything up. You can ask for:
>Name on the account
>Address
>Phone Number
>Account Number
>Last 4 of the SSN
Reading Image Meta-Data
I rarely ever see people discuss about this but it can be useful and it is common in most CTFs regarding OSINT. You can download software such as ExifTools to help you read Meta-Data of the image which may contain some sensitive information that could be used to help develop a dox.
Use OSINTFRAMEWORK.COM
I have seen many doxxing tutorials leave this out. OSINTFramework is an amazing website which lists hundreds of tools that can be used to find information on people. USE IT!
This method is awfully self-explanatory. When it comes to using OSINT, Google is the first thing people use to find information on another user. Use google. You can search for emails, names, etc all on google and most of the time, this information will link to further information on the user. Here is an example:
As you can see, we now have their: email, PayPal address, Facebook and their steam ID.
You can furthermore, google the id, his name on Facebook, etc for more information.
SHERLOCK-PROJECT
Sherlock-Project is the most efficient way to hunt down social media accounts by username across social networks. This is great if your target uses the same username in most media platforms.
You must upgrade your account or reply in the thread to view the hidden content.
This is very useful when finding information on adult targets. Most information registry websites hold information on users such as their address, number, occupation, full name and date of birth. You can refer to OSINTFramework for more details and links but here are some useful ones below:
Loading…
clustrmaps.com
Loading…
www.ancestry.com.au
Loading…
www.whitepages.com
Loading…
publicdatadigger.com
This is very very helpful when it comes to finding sensitive information on other users such as passwords, emails, usernames, addresses, etc. As you can see, through Google, we found out further information based off of one email. We can expand this by looking through databases to find sensitive information on our target. I have listed a whole bunch of sites both free and paid you could use.
1.Deep Internet (.onion)
[xjypo5vzgmo7jca6b322dnqbsdnp3amd24ybx26x5nxbusccjkm4pwid.onion]
2. Safe Internet
[ghostproject.fr]
[snusbase.com]
[intelx.io]
[psbdmp.ws]
[leak-lookup.com]
-------------------------------------------------------------------
APIs and web services for search credentials leaks:
Onions:
[pwndb2am4tzkvold.onion]
[myspacexsan7ksvq.onion]
[dumpedlqezarfife.onion]
[hackinflukyc37se.onion]
Clearnet:
[hacked-emails.com]
[weleakinfo.com]
[haveibeenpwned.com]
[dehashed.com]
[ghostproject.fr]
[leakedsource.ru]
[leakprobe.net]
[spycloud.com]
[monitor.firefox.com]
[leaksify.com]
[meethacksy.com]
[snusbase.com]
[leaked.site]
[breachalarm.com]
[breachaware.com]
[https://www.avast.com/]
[intelx.io]
[psbdmp.ws]
[ashley.cynic.al]
[breachrecon.com]
[*BannedWebsite*]
[leak-lookup.com]
[citadel.pw]
[databreaches.live]
[vigilante.pw]
[rslookup.com]
[dataviper.io]
USING SKYPE RESOLVERS AND ID LOOKUPS.
Skype IP resolver is the place you enter a Skype username and it lets you know the client's IP. Skype resolver is an apparatus used to snatch online clients IP addresses. These will help you find further information which can help lead to ISP doxxing or you could do what most 14 yr old kids do... and hit off their internet connection if they are on a static address with a botnet.
Loading…
www.skypeipresolver.net
Loading…
webresolver.nl
Loading…
mostwantedhf.info
Loading…
steamidfinder.com
Loading…
steamid.io
Have your target's IP and dont know what to do with it? Social Engineer the ISP provider!
What will I need?
Basic Social Engineering Skills.
Intelligence
Skype
Once you have the IP of your target, you can use https://check-host.net/ip-info to find the ISP of your target.
Now call your ISP provider and follow this script. Once you are talking to a Representative, you can follow this script, and modify it with your own information/etc. Going to be using Comcast as an example.
*You: Hello, My name is Joe, and I'm with Tech Support. I was trying to look up a Customer's Account Information in Grandslam, when our systems crashed. I currently cannot open up Grandslam or CSG. I was wondering if you could help me out and look up a customer's information on your end. Thanks.
Agent: They will ask you for a Phone number. Reply with:
*You: Unfortunately, I only have their IP address, since I was in Live Chat with them. I have them on scheduled called back in 3 hours. I know Grandslam can look up Customer Info with an IP, can you try it in that.
Agent: Sure... blah, blah, give them the IP.
*You: They should look everything up. You can ask for:
>Name on the account
>Address
>Phone Number
>Account Number
>Last 4 of the SSN
Reading Image Meta-Data
I rarely ever see people discuss about this but it can be useful and it is common in most CTFs regarding OSINT. You can download software such as ExifTools to help you read Meta-Data of the image which may contain some sensitive information that could be used to help develop a dox.
