OSINT and Sleuthing - Cause you retards LOOOOVE dawksing

  • 🐕 I am attempting to get the site runnning as fast as possible. If you are experiencing slow page load times, please report it.
Polentic

Polentic

I DID IT FOR THE PINS!!!!
True & Honest Fan
kiwifarms.net
Joined
May 29, 2021
  • Informative
  • Like
  • Winner
Reactions: y a t s, gish., jenna raiding and 17 others
These tools seem really useful but also seem to require additional knowledge not directly stated. I did a search on a username I use on a lot of websites other than this one and GitHub immediately stuck out as a means of "dawksing" but that's because I obviously know about the logs. I wonder how straightforward that is for some of these other sites.
 
Holehe - searches for sites an email address has been used to sign up for (require CLI and python knowledge.)
WHOIS database archives.
Email Validator - Can be used to find potential email's via usernames.
Picarta - Try to find the location a picture was taken in via A.I (note: data is iffy, be sure to verify its results.)
EXPOSED - haveibeenpwned if it occasionally gave passwords.
SteamID - History of a Steam account (usernames, avatars, friends, etc.)
PimEyes - A.I tool to find other pictures of a person via facial recognition.
Popular tool aggregators include OSINT4ALL, AsINT_Collection, and Bellingcat’s Tools.
Polentic said:
https://whatsmyname.app/ (USERNAME SEARCH)
Click to expand...
I've used sherlock and a fork of it (maigret), and this still seems the best username search overall.
Belisarius Cawl said:
These tools seem really useful but also seem to require additional knowledge not directly stated.
Click to expand...
Very true, a tool is only as good as its user. While I'm far from a professional, this video seems to be pretty good:
Another option is to just observe how others have been doxed/found (e.g., the H.W.N.D.U flag captures) and try to learn from that.
 
  • Like
  • Winner
  • Thunk-Provoking
Reactions: 1994 Honda Civic, jenna raiding, clipartfan92 and 4 others
Cowboy Kim said:
Very true, a tool is only as good as its user.
Click to expand...
I can't think but help of every thread I've seen where someone was under the impression Kalee Leenooks is a miraculous instant hacking tool that will scrape bobs and vagene pictures from Instagram
pajeet-vagene-pics.jpg
Also, is there a book equivalent of the video lecture you can recommend? I don't do well with lectures. I have a few OSINT materials in my archives but was looking for some advice here.
 
  • Like
  • Feels
Reactions: Toji Suzuhara, melty and Cowboy Kim
admitting you're a foid on the tech board in an explicit way (clearly not a tranny since trannies know how to computer)
Anyways,

Mental Outlaw came out with a video relatively recently, where he talks about using the national public data records breach to do local background checks with grep (https://youtu.be/bkpfUKP7T-Y).

However, since I am not a criminal and am tech-illiterate, I do not know how I myself could find, download, and access this data in a safe manner. I would want to do it without exposing myself to javascript that could be malicious (due to breachforums being a fed honeypot), without compromising my own anonymity, and without accidentally downloading malware from a threat actor. I want to do background checks with grep too, but I do not want a virus on my computer! Also, I do not know if the data breach is still publicly accessible at all anymore, and I do not know how to check.

So, if anyone wants to help a girl out (and if it is not against site rules), please advise on how I can proceed! <3
 
  • Like
  • Dumb
  • Thunk-Provoking
Reactions: Dante Alighieri, HahaYes, Toolbox and 2 others
revenge of rebecca said:
"breach.vip is the largest Minecraft DB search engine." https://breach.vip/faq

So this is only for Minecraft?

This website seems to require javascript to function. This scares me.
Click to expand...
It's certainly not only for Minecraft because I saw an example of a breach for me on armorgames.com from who knows how long ago. Having said that, I'm reluctant to search for passwords I've used in the past on there without knowing more. A password hash was available for the armorgames.com account but that isn't the same as the password itself.
revenge of rebecca said:
Anyways,

Mental Outlaw came out with a video relatively recently, where he talks about using the national public data records breach to do local background checks with grep (https://youtu.be/bkpfUKP7T-Y).

However, since I am not a criminal and am tech-illiterate, I do not know how I myself could find, download, and access this data in a safe manner. I would want to do it without exposing myself to javascript that could be malicious (due to breachforums being a fed honeypot), without compromising my own anonymity, and without accidentally downloading malware from a threat actor. I want to do background checks with grep too, but I do not want a virus on my computer! Also, I do not know if the data breach is still publicly accessible at all anymore, and I do not know how to check.

So, if anyone wants to help a girl out (and if it is not against site rules), please advise on how I can proceed! <3
Click to expand...
Virtually any website you visit will have JavaScript on it. Here's one of the few websites I can think of with no JavaScript which belonged to the late famous mathematician John Nash:
It's very Web 1.0. Anyway, obviously something as dynamic as JavaScript can be used with malicious intent. Most JavaScript is of course not malicious however; that would be total mayhem. I haven't watched your video but if it says that you can search for your info in it using grep, then that means that it's in the form of a very big plain text file. I am not aware of any way of executing malicious code just by reading (as opposed to executing) a text file. grep and others are relatively easy tools to use in a Linux or other Unix operating system. Correct me if I'm wrong but you are coming from a Windows environment, yes? Due to it being a different operating system and to your concerns about malware, you might want to consider running Linux in a VM and accessing the data from inside that VM. If anything goes haywire, you can trash the VM and not worry about the host operating system. I use Linux Mint and it works well both for beginners and seasoned users. Hope that helps.
 
Last edited:
  • Agree
  • Thunk-Provoking
  • Like
Reactions: Toolbox, Cowboy Kim and Oh Sugar
Belisarius Cawl said:
Correct me if I'm wrong but you are coming from a Windows environment, yes? Due to it being a different operating system and to your concerns about malware, you might want to consider running Linux in a VM and accessing the data from inside that VM. If anything goes haywire, you can trash the VM and not worry about the host operating system. I use Linux Mint and it works well both for beginners and seasoned users. Hope that helps.
Click to expand...

I am a new convert from Windows. I use the virtual machine known as Whonix in order to access the kiwifarms onion website. See https://en.wikipedia.org/wiki/Whonix. However, the virtual machine (and computer itself) does not have enough space to store a 300Gb+ text file.

In whonix, we are supposed to disable javascript in the web browser, to prevent browser fingerprinting and malware. See https://youtu.be/7wLLcFMmbpg for a Whonix demo in which the guest disables javascript in the browser.

When I was able to, I always accessed https://kiwifarmsaaf4t2h7gc3dfc5ojhmqruw2nit3uejrpiagrxeuxiyxcyd.onion with javascript disabled. However, @Null has taken away the ability to pass the ddos protection without javascript. So I am forced to use javascript to access this site.

Thanks for your kind comments!!
 
  • Thunk-Provoking
Reactions: Toolbox and Cowboy Kim
revenge of rebecca said:
When I was able to, I always accessed https://kiwifarmsaaf4t2h7gc3dfc5ojhmqruw2nit3uejrpiagrxeuxiyxcyd.onion with javascript disabled. However, @Null has taken away the ability to pass the ddos protection without javascript. So I am forced to use javascript to access this site.
Click to expand...
It is theoretically possible (and some PoW systems do this, since the concept of PoW for smooth anti-DoS attacks has spread like absolute wildfire since we adopted it) to provide linux commands that can be copy+pasted to solve the task without JS.
 
  • Informative
Reactions: Cowboy Kim
Null said:
It is theoretically possible (and some PoW systems do this, since the concept of PoW for smooth anti-DoS attacks has spread like absolute wildfire since we adopted it) to provide linux commands that can be copy+pasted to solve the task without JS.
Click to expand...

Yes, so I installed the argon2 package in Whonix and used the terminal to solve the cryptographic challenges. That was the way it was set up until recently. Now I have to turn on the javascript.
 
  • Informative
Reactions: JT Marlin
revenge of rebecca said:
I am a new convert from Windows. I use the virtual machine known as Whonix in order to access the kiwifarms onion website. See https://en.wikipedia.org/wiki/Whonix. However, the virtual machine (and computer itself) does not have enough space to store a 300Gb+ text file.
Click to expand...
In that case there might be a way to filter the data so that it's reduced in ways that are relevant to you so that it's only, say, 10 GB or something else a lot more manageable. I can't say "yes" or "no" without further details though.
revenge of rebecca said:
In whonix, we are supposed to disable javascript in the web browser, to prevent browser fingerprinting and malware.
Click to expand...
I haven't used Whonix but a brief search on Whonix and disabling JS led me here for example:
Disabling JS by default is something I can understand. I can also understand selective acceptance or rejection of JS files from some host or other but turning it off altogether is pretty much unthinkable. To get a sense of what I mean, install a browser called "dillo" on Whonix. Whonix is based on Debian so it should be available with apt. dillo doesn't implement JavaScript at all and frankly I'm not sure who the target audience is anymore. You will see that virtually every website you try with it will barely function, if at all. Ironically, the dillo website itself uses JS (can be confirmed with "View Source" functionality on any browser):
 
  • Agree
  • Like
Reactions: Cowboy Kim and Anti Alien Alarm
Belisarius Cawl said:
Also, is there a book equivalent of the video lecture you can recommend? I don't do well with lectures. I have a few OSINT materials in my archives but was looking for some advice here.
Click to expand...
Michael Bazzell's books seem to be held in high regard, same goes for Structured Analytic Techniques for Intelligence Analysis by Pherson and Heuer. I've also heard that Cases in Intelligence Analysis by Beebe and Pherson is used for training by actual glowies. Keep in mind I haven't read any of these books, so I can't verify any of those claims, nor the aforementioned books quality.
Belisarius Cawl said:
It's certainly not only for Minecraft because I saw an example of a breach for me on armorgames.com from who knows how long ago.
Click to expand...
It's probably a joke/attempt at making it seems less "dangerous" to outside parties who could report it.
revenge of rebecca said:
I am not a criminal
Click to expand...
>I am not a criminal
Downloading leaked databases is a legal grey-area at best, as the databases are only leaked by illegally accessing a computer/server
revenge of rebecca said:
I would want to do it without exposing myself to javascript that could be malicious (due to breachforums being a fed honeypot), without compromising my own anonymity, and without accidentally downloading malware from a threat actor.
Click to expand...
Considering your threat model includes nearly zero-JS and Whonix, I'm guessing you're using the internet on most-wanted mode. Assuming you're running Whonix under Qubes to ensure you aren't crossing streams (personal life, legally dubious, and shitposting aren't routing through the same connection), you could run all the JS you want and have no fear, since the VM you accessed the leak from is tossed the second you get the data you need.
revenge of rebecca said:
I do not know if the data breach is still publicly accessible at all anymore, and I do not know how to check.
Click to expand...
If it was published on BreachForums, you'd have to check BreachForums.
Belisarius Cawl said:
In that case there might be a way to filter the data so that it's reduced in ways that are relevant to you so that it's only, say, 10 GB or something else a lot more manageable.
Click to expand...
Someone else would have to filter the file, in which case you may as well tell the second party to run the grep commands for you.
 
  • Informative
  • Thunk-Provoking
  • Winner
Reactions: Silica Gel, freund, JT Marlin and 2 others
Not gonna bother replying directly because there's a lot but if you don't want to use a tool and just want to download the databases to grep through it yourself, here you go.

BreachForums V2 (before original LEA takeover) - Includes most of the famous breaches, including KiwiFarms too
New BreachForums Databases - Recent databases after the LEA takeover, doesn't include current BF stuff

I had a list of torrent links to like 100+ other breaches like Naz.API, Collections and Antipublic but can't find it right now, i'll update this later if I do
 
  • Winner
  • Informative
Reactions: freund, HahaYes, melty and 2 others
You must log in or register to reply here.
Back