Listen to this Post
Introduction:
Open-Source Intelligence (OSINT) has moved beyond simple data collection; the modern challenge lies in correlating fragmented digital breadcrumbs from social media accounts, phone numbers, vehicles, and locations into a cohesive intelligence picture. The OSINT Mapping Tool, a fully front-end web application developed by anonymousRAID, addresses this directly by running entirely within your browser, ensuring no sensitive data ever leaves your local machine while allowing researchers to visually map complex relationships through an interactive node graph.
Learning Objectives:
- Master the installation and configuration of a local browser-based OSINT mapping tool for secure investigative workflows.
- Understand how to create, link, and geolocate intelligence artifacts using node graphs and mapping APIs (Google Maps/OpenStreetMap).
- Implement practical OSINT gathering techniques using Linux and Windows command-line tools to feed data into the mapping tool.
You Should Know:
- Local Deployment & API Hardening of the OSINT Mapping Tool
The OSINT Mapping Tool is a React-based application designed for complete data sovereignty—no uploads, no cloud storage, all data remains in a local `.osint.json` file. This guide walks you through its deployment and securing external API keys.
Step‑by‑step deployment guide:
Prerequisites: Ensure Node.js (version 18 or higher) and npm are installed on your system.
Cloning and Installation (Linux/macOS/Windows):
Clone the repository git clone https://github.com/anonymousRAID/OSINT-Mapping-Tool.git cd OSINT-Mapping-Tool Install dependencies npm install Start the development server npm run dev
Once running, navigate to `http://localhost:5173` in your browser (Chrome, Edge, or Safari recommended).
Secure Google Maps API Key Configuration (Optional):
To leverage richer point-of-interest data, you can integrate Google Maps. This requires enabling the Maps JavaScript API, Geocoding API, and Places API in your Google Cloud project. Crucially, restrict your API key by HTTP referrers (e.g., adding `http://localhost:5173/`) to prevent unauthorized usage and potential billing abuse. The key is stored locally in your browser’s `localStorage` and never transmitted to any server.
Building for Production:
npm run build Creates an optimised './dist' folder npm run preview Serves the production build locally on port 4173
2. Harvesting OSINT Data with theHarvester (Linux/Kali)
Before mapping relationships, you need data. `theHarvester` is a classic OSINT tool for gathering emails, subdomains, and IPs from public sources.
Step‑by‑step guide:
Installation:
sudo apt update sudo apt install theharvester -y
Basic Reconnaissance:
Gather emails and hosts from Google, Bing, and other sources theHarvester -d example.com -b all -l 500
This command scours search engines and PGP key servers, returning up to 500 results including email addresses and subdomains.
Using API Keys for Enhanced Results:
For more comprehensive data, integrate API keys for services like Shodan or Bing. The results, containing potential employee emails and network infrastructure, can then be manually entered as ‘nodes’ into the OSINT Mapping Tool’s information tab, forming the basis of your relationship graph.
3. Advanced Identity Correlation with Recon-1g (Linux/Windows)
`Recon-1g` provides a powerful, Metasploit-like framework for automating web reconnaissance and correlation.
Step‑by‑step guide:
Launching Recon-1g:
recon-1g
Core Framework Commands:
| Command | Description |
| : | : |
| `marketplace install
| `modules load
| `info` | Display details and options for the loaded module. |
| `set
| `run` | Execute the loaded module. |
| `show hosts` | Display discovered hosts stored in the database. |
Refer to the official documentation for a full list of commands. The structured data exported from Recon-1g can be directly correlated with the geographic pins in the mapping tool’s Map tab, linking digital artifacts to physical locations.
4. Phone Number and Username OSINT (Linux/Windows/Termux)
Tools like `Mr.Holmes` and `PhoneInfoga` specialize in pivoting from a single identifier to a broader digital footprint.
Step‑by‑step installation (Linux):
git clone https://github.com/Lucksi/Mr.Holmes cd Mr.Holmes sudo chmod +x install.sh sudo bash install.sh
Usage:
sudo python3 MrHolmes.py
Follow the interactive prompt to search for information on a domain, username, or phone number. The discovered social media accounts, associated phone numbers, and usernames become the nodes you will connect within the OSINT Mapping Tool’s graph interface.
5. Visualizing Relationships with Alternative Graph-Based OSINT Tools
While the OSINT Mapping Tool is a fantastic front-end solution, other platforms offer deeper analytical capabilities.
SpectraGraph: An open-source intelligence studio with a graph-first workspace, live transforms, and a robust architecture using FastAPI, Redis, and Neo4j for handling heavy OSINT workloads. It ensures defensible, repeatable investigations.
Orion Platform: A comprehensive, web-based Docker solution that combines browser, crawler, and data aggregation tools with machine learning for advanced content analysis and threat intelligence.
Helix & PANO: `Helix` is an asynchronous OSINT identity mapper that visualises actual connections between online identities. `PANO` provides a powerful combination of graph visualization, timeline analysis, and AI assistance to uncover hidden patterns.
- Cloud Hardening & API Security for OSINT Tools
When integrating external APIs (like Google Maps or Shodan), improper key management is a critical vulnerability.
Always restrict API keys by HTTP referrers (for web apps) or IP addresses (for server-side tools).
Never commit API keys to public repositories. Use environment variables (.env files) or a secrets management solution like HashiCorp Vault, as seen in SpectraGraph’s architecture.
Monitor your API dashboards for unusual usage patterns to quickly detect and revoke compromised keys.
What Undercode Say:
- Key Takeaway 1: The OSINT Mapping Tool exemplifies a critical shift towards privacy-centric OSINT, where all data correlation and storage occur locally, mitigating the risks of cloud-based intelligence platforms.
- Key Takeaway 2: Effective OSINT is no longer about gathering the most data, but about correlating disparate identifiers (social, telephonic, physical locations) into actionable intelligence, which is precisely what this tool’s node-based graph enables.
Prediction:
- +1 The adoption of front-end, browser-based OSINT tools will accelerate as cybersecurity professionals demand greater data sovereignty and resistance to supply-chain attacks.
- +1 The integration of AI-driven entity resolution within graph-based tools will automate the process of linking ‘John Doe’s’ phone number to his multiple social media personas, drastically reducing investigation time.
- -1 As these mapping tools become more accessible, threat actors will increasingly deploy anti-OSINT techniques, such as generating fake digital personas and location data to poison relationship graphs and mislead investigators.
▶️ Related Video (86% Match):
🎯Let’s Practice For Free:
🎓 Live Courses & Certifications:
Join Undercode Academy for Verified Certifications
🚀 Request a Custom Project:
Secure, high-velocity infrastructure and disruptive technological engineering. Contact our engineering team for high-tier development and proprietary systems:
[email protected]
💎 Smart Architecture | 🛡️ Secure by Design | ⭐ Trusted by Thousands
IT/Security Reporter URL:
Reported By: Syed Muneeb – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅
