Listen to this Post
The blog post clarifies that no accusations of cybercriminal activities have been made against any individual, including Mr. Rachid. The investigation is based solely on Open-Source Intelligence (OSINT), utilizing publicly accessible data from platforms like GitHub and LinkedIn. The post emphasizes transparency and encourages collaborative verification while denying any malicious intent or doxxing.
You Should Know:
1. OSINT Data Collection Techniques
- Use Google Dorking to find exposed emails or sensitive data:
site:github.com "[email protected]"
- Scrape LinkedIn public profiles using LinkedInt (OSINT tool):
python3 LinkedInt.py -u "Target Name" -o results.txt
2. Verify Public GitHub Data
- Clone a repo and inspect commit history for exposed emails:
git clone https://github.com/user/repo.git cd repo git log --pretty=format:"%ae" | sort -u
3. Cross-Check Domain Registrations
- Use WHOIS to validate domain ownership:
whois example.com
4. Metadata Extraction
- Analyze public documents (PDFs, images) with exiftool:
exiftool -a document.pdf
5. Social Media Recon
- Scrape Twitter for public mentions using Twint:
twint -u "@TargetHandle" --since "2024-01-01" -o tweets.csv
6. Email Header Analysis
- Use mxtoolbox.com to verify email server authenticity.
7. Automate OSINT with Maltego
- Map relationships between domains, emails, and IPs visually.
What Undercode Say
OSINT is a powerful tool for ethical investigations, but misuse can lead to unintended harm. Always:
– Anonymize your searches with Tor or Proxychains:
proxychains curl http://example.com
– Document findings meticulously to avoid false assumptions.
– Respect privacy laws—avoid scraping non-public data.
Expected Output: A structured OSINT report with verified public data, devoid of unsubstantiated claims.
URLs referenced in the article:
References:
Reported By: Jakom There – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅
