If you need to track down a person using open or free sources on the internet , you'll need to use the OSINTUX tool . This will allow you to find related information using automated methods.
To use OSINTUX correctly, you need to know what the tool is for and how to install it on a virtual machine . You'll find this information in the paragraphs of this post.
But that's not all; you'll also learn about all the tools installed in OSINTUX to perform your work like a true professional. Don't miss a thing if you want to become an expert in computer intelligence.
What is OSINTUX and what is this tool used for?
OSINTUX is a program that uses various tools to gather intelligence on the internet using open-source data . This allows you to track a person, identify website domains containing their name, discover related IP addresses, and find social media usernames.
Learn step-by-step how to install OSINTUX in a virtual machine for open-source intelligence
Below are the steps you will need to take to install OSINTUX on a virtual machine:
Create a virtual machine
The first thing you'll need to do is create a virtual machine on your computer , so you'll need to know your PC's resources. You'll need to check the RAM, storage disk, and installed operating system.
Next, you will need to download the VirtualBox tool:
Download VirtualBox for Windows
- Once you have everything ready, you will have to choose the OS you want.In this case, we'll be using Windows. You'll need to go to the official Windows website and click on "Download the tool now." Then, You will need to run MediaCreationTool and choose the option to create installation media (USB flash drive, DVD, or ISO file) for another PC. This will prompt you to choose the operating system partitioning methods, so you will need to select the option ISO file on the next screen
- Configure the installation program by choosing the language, partition, and architecture. When you're finished, you'll need to click on Next.
- Run VirtualBox and choose the tab NewNext, enter a name for the virtual machine and choose the system type and version. Once everything is ready, click on... NextNext, you will need to choose the amount of RAM the virtual machine will have and create a HDDwhich you can have a fixed size or be dynamically reserved.
- Install the operating system using the ISO file that you downloaded for Windows (you can modify this step and choose Linux or MacOS). To do this, you will have to click on Configuration, select StorageClick on the optical drive and then on Start.
- Follow the installation instructions to complete the operating system configuration.
Download OSINTUX
- Once you have a virtual machine installed On your computer, you will be able to download the open-source intelligence program. All you need to do is go to the website using your browser. OSINTUX, To do this you will need to write the URL
http://www.osintux.org. - Go to the tab DownloadsIn this window you will find the available executable files. You will have information about the file name, download type, size, version, and sha256 hash.
- Choose the one that suits you best by clicking on HTTP, Click on Download and later Save. To end Continue with the steps of the installation process.
List of all the tools installed on OSINTUX for use in our work
Below we will show you all the tools installed in OSINTUX:
Belati v.0.2.4.1
It is responsible for analyzing metadata and obtaining information about domains and other elements.
They are in the same place:
- banner grabbing
- Django Web Management
- Document Metadata/Exif Extractor Document Author Metadata
- Emails and Documents Public Git Finder in domain/subdomain
- Fake and Random User Agent (Prevent from blocking)
- Gather Public Company Info & Employee
- Appalyzer Web Machine
- Mail Harvester from MIT PGP Public Key
- Mail Harvester from Website & Search Engine
- Proxy Support for Harvesting
- Public Document for Domain from Search Engine
- Public SVN Finder in domain/subdomain
- txt Scraper in domain/subdomain
- Scanning for all subdomains
- Server Scraping
- Setup Wizard/Configuration for Belati
- SQLite3 Database Support for storing Belati Results
- Subdomain Enumeration Service
- Support DNS mapping / Zone Scanning
- Webserver only mode
- Whois (Indonesian TLD Support)
Creepy v1.4
With this platform, you can find the geographic location of a Flickr or Twitter account and export the report in CSV or KML format. This will allow you to use Google Maps to pinpoint the exact location based on IP triangulation.
Crunchbase
When you need to find information about companies that have innovated anywhere in the world and want to learn about their employees, you can use this tool offered by OSINTUX . Discovering trends in a specific market sector will become a much shorter and easier process to interpret using this data collection method.
Datasploit for OSINT
You'll be able to use this tool when you need to automatically obtain open-source intelligence. This way, you can find out social media usernames, email addresses, and phone numbers, among other data . Furthermore, you can link the results you obtain with other sources that will provide information about domains and subdomains that are, or have been, registered to the person you're tracking.
Dmitry (Deepmagic information gathering tool)
If you need to study and analyze a particular hosting service to find out its domains, subdomains, and email addresses, among other things, you will need to use this tool, which is developed in the C language.
Exiftool v11.03
You can quickly and automatically obtain metadata from videos and images that have AFCP, Exif, FlashPix, GeoTIFF, ICC Profile, ID3, IPTC, JFIF, Photoshop IRB and XMP formats.
Google Database Hacking
If you want to perform OSINT using Google, you can use this platform since it works by using the search engine as an open-source search tool. It will then generate a report based on the characteristics it finds, according to its assigned categories.
Which we show you below:
- Error messages.
- Files containing juicy info.
- Files containing passwords.
- Files containing usernames.
- Footholds.
- Network or vulnerability data.
- Pages containing login portals.
- Sensitive directories.
- Sensitive online shopping info.
- Various online devices.
- Vulnerable servers.
- Vulnerable files.
- Web server detection.
Infoga – Email Information Gathering vM4110k
Each time you use this online tool, you can gather information about email accounts through various search engines. It's ideal for understanding a brand's or company's online visibility.
GeoIP
The tool's name says it all; its task is to locate the geographical location of an IP address.
Glassdoor
You can use this tool offered by OSINTUX to find information about a specific company. This way, you can learn about salary levels, the number of employees, employee reviews, and the location of different offices, among other things.
We know
Whenever you need to find out the availability of a username , you can use this tool, as it searches more than 500 platforms.
Maltego v4.1.6.11045
It's an ideal tool for understanding at a glance all the information gathered using OSINT on the internet. This is because the tool combines its functions with FOCA , resulting in a graph that is easy to analyze.
MentionMap
If you're looking to analyze Twitter user profiles and hashtags , you can access this tool from OSINTUX through the social network to quickly identify trending topics. A key feature is that it doesn't require any software installation on your computer.
Metagoofil v2.2
You will have the ability to extract information related to email, programs used to create documents, and weaknesses of said software from public files in doc, docx, pdf, ppt, pptx, xls, and xlsx formats.
MrLooquer
This tool works with IPv6 and is used to simulate search engines like Shodan or to find DNS servers that are vulnerable and have an IPv4-IPv6 relationship.
Netcraft
This program is used to gather intelligence on a specific host . In just a few steps, you can obtain the requested information. Simply enter the URL of the website you wish to analyze to obtain information such as the IP address , owner name, and DNS data, among other elements.
Shodan
Shodan is a search engine offered by OSINTUX that identifies devices vulnerable to security controls . This helps strengthen various devices that are important for personal privacy, such as security cameras.
opencorporates
It's a database containing information on a vast number of companies worldwide . It's estimated that intelligence gathering can be conducted on over 100 million companies globally. Therefore, whenever there's a need to analyze money laundering, corruption, or any other illicit activity carried out by members of these organizations, this OSINTUX tool can be used.
Operational Framework
The digital fingerprints found on servers can be used to extract and retrieve information about the owners of domains and emails hosted on a server.
OSINT-Spy v0.0.1
This feature offered by OSINTUX allows users to find information from open sources using their respective APIs. This way, you can find information related to people, emails , geolocation, and any activity they have performed . It is ideal for working with malicious files and tracking Bitcoin block movements.
OSRFramework v2018
OSRFramework is one of the most widely used features of OSINTUX, thanks to its capabilities and ease of use. It can extract user information, phone numbers, and email addresses by querying hundreds of platforms.
The commands available for Linux are:
- usufy.py
- mailfy.py
- searchfy.py
- phonefy.py
- entify.py
OSINTFramework
The function offered by OSINTFramework for intelligence gathering is to obtain the vulnerabilities that exist in a control system and determine which tools can be used to solve this problem.
PIPL
OSINTUX offers a specialized people search engine that focuses on social networks like Twitter and Facebook . Simply enter the data you wish to track, and you will obtain names, phone numbers, and even geographic locations.
Recon-NG v4.9.3
With this tool you can find information related to host names , IP addresses, emails and geographical locations , among other data.
SocialBearing
When you need to study Twitter accounts , you can use this tool offered by OSINTUX to automatically locate the geographical location of the tweets that interest you.
Socialmention
You'll be able to collect and analyze social media data using the Socialmention search engine . This will give you insights and statistics on users and their activities across different platforms.
SpiderFoot v2.12
This tool uses different search engines for the footprinting process , helping to easily find information related to people and websites. It uses search engines such as Google, Shodan, and Bing.
The Harvester v2.2a
This OSINTUX feature allows you to find information from open sources using passive methods. It utilizes search engines that analyze data related to email addresses, social media profiles , and phone numbers, among other elements.
Tineye
Using TinEye as a search engine allows this tool to find data related to images, which you can upload from your computer or provide the program with the URL . It works with neural networks and machine learning, enabling reverse image searches.
Tinfoleak v2.1
It's a tool designed with Python that works with Twitter . You enter the data you want to track, and the program will return a wealth of information related to users' social media accounts. This will help you more easily find images, names, email addresses, and devices used to interact on Twitter.
Twopcharts
Like the previous tool, this OSINTUX feature works with the Twitter API , so you can automatically obtain information related to users, hashtags, and keywords.
ViewDNS
When you need to view the history of IP addresses and DNS servers , you can use this platform simply by entering the domain. But that's not all; you can also find reverse WHOIS lookups , IP location , and HTTP protocol headers , among other things.
YouGetSignal
YouGetSignal is a simple platform that offers intelligence capabilities through its features. You'll be able to geographically locate phone numbers, email addresses, and even Whois information.
Whois
With this OSINTUX tool you can find out information about a URL , domain, subdomain and email address.
