Listen to this Post
Introduction:
Open-source intelligence (OSINT) has evolved beyond social media scraping into automated, API-driven reconnaissance. TokIntel, a Python-based OSINT framework, specifically targets TikTok—one of the world’s fastest-growing platforms—to link email addresses or phone numbers to user profiles. This tool extracts creation dates, bios, metrics, and high-resolution avatars, generating structured JSON/TXT reports for investigators, forensic analysts, and threat hunters.
Learning Objectives:
- Master installation and configuration of TokIntel with RapidAPI credentials for TikTok OSINT gathering.
- Execute email-to-account and phone-to-account lookups, automating multi-target investigations via TXT batch processing.
- Analyze extracted metadata (profile age, bio, metrics) to build behavioral timelines and link digital identities.
You Should Know:
- Setting Up TokIntel: From GitHub to First Query
TokIntel requires Python 3.8+ and a free RapidAPI key. Follow this step-by-step guide to deploy the tool on both Linux and Windows environments.
Step 1: Clone the Repository
bash
Linux/macOS
git clone https://github.com/HackUnderway/TokIntel.git
cd TokIntel
Windows (PowerShell as Administrator)
git clone https://github.com/HackUnderway/TokIntel.git
cd TokIntel
[/bash]
Step 2: Install Dependencies
bash
Linux
python3 -m pip install -r requirements.txt
Windows
py -m pip install -r requirements.txt
[/bash]
Step 3: Obtain RapidAPI Key
- Visit RapidAPI Hub and sign up.
- Search for “TikTok” or locate the specific TikTok API endpoint used by TokIntel (the tool’s README may point to a dedicated API). Subscribe to the free tier.
- Copy your `X-RapidAPI-Key` from the dashboard.
Step 4: Configure API Key
TokIntel typically accepts the key via command line argument or environment variable. Check the tool’s help:
bash
python3 tokintel.py –help
[/bash]
Example usage (common pattern):
bash
export RAPIDAPI_KEY=”your_key_here” Linux/macOS
set RAPIDAPI_KEY=your_key_here Windows CMD
$env:RAPIDAPI_KEY=”your_key_here” Windows PowerShell
python3 tokintel.py –email [email protected] –output report.json
[/bash]
What this does: The script sends an HTTP request to RapidAPI’s TikTok endpoint, authenticating with your key. It parses the JSON response to extract profile metadata, then saves formatted results.
2. Executing Email and Phone Number Lookups
TokIntel’s core functionality links contact data to TikTok accounts. Use these commands for single or batch investigations.
Single Email Lookup
bash
python3 tokintel.py –email [email protected] –format json –output email_report.json
[/bash]
Expected output fields: username, bio, follower_count, following_count, video_count, create_time, avatar_url.
Single Phone Lookup (international format recommended)
bash
python3 tokintel.py –phone “+1234567890” –format txt –output phone_report.txt
[/bash]
Batch Processing via TXT File
Create a file `targets.txt` with one email or phone per line:
bash
[email protected]
[email protected]
+441234567890
[/bash]
Then run:
bash
python3 tokintel.py –batch targets.txt –output-dir ./results/
[/bash]
Windows PowerShell alternative:
bash
Get-Content targets.txt | ForEach-Object { python tokintel.py –email $_ –output “$_.json” }
[/bash]
Pro tip: For large-scale investigations, implement rate limiting. The free RapidAPI tier typically allows 5–10 requests per minute. Use `time.sleep(6)` between batch items.
3. Extracting High-Resolution Avatars and Metadata Analysis
Beyond text reports, TokIntel can download profile pictures and calculate account age.
Download Avatar Automatically
Modify the script or use a wrapper:
bash
save_avatar.py – companion script
import requests, json, sys
with open(sys.argvbash) as f:
data = json.load(f)
avatar_url = data[‘avatar_high_res’]
img_data = requests.get(avatar_url).content
with open(‘avatar.jpg’, ‘wb’) as handler:
handler.write(img_data)
print(“Avatar saved as avatar.jpg”)
[/bash]
Run after report generation:
bash
python3 save_avatar.py email_report.json
[/bash]
Analyze Account Age (Linux/macOS)
bash
Extract creation timestamp from JSON and convert
jq -r ‘.create_time’ email_report.json | xargs -I {} date -d @{} +’%Y-%m-%d %H:%M:%S’
[/bash]
Windows (using PowerShell):
bash
$json = Get-Content email_report.json | ConvertFrom-Json
[/bash]
What this reveals: An account created yesterday with 10,000 followers suggests bot activity; an account from 2018 with consistent bio updates indicates a legitimate long-term user.
- Hardening Your OSINT Workflow: API Security and Evasion
When using TokIntel, protect your RapidAPI key and avoid detection.
Store Keys Securely
bash
Linux/macOS – add to ~/.bashrc or ~/.zshrc
export RAPIDAPI_KEY=”$(cat ~/.secrets/rapid.key)”
Windows – use environment variables via System Properties or:
[/bash]
Rotate User-Agents to Avoid Rate-Limiting
Modify `tokintel.py` to include random User-Agents:
bash
import random
user_agents = [
“Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36”,
“Mozilla/5.0 (iPhone; CPU iPhone OS 14_0 like Mac OS X)”
]
headers[‘User-Agent’] = random.choice(user_agents)
[/bash]
Use Proxies for Bulk Investigations
bash
Configure SOCKS5 proxy
export HTTP_PROXY=”socks5://127.0.0.1:9050″
python3 tokintel.py –email [email protected]
[/bash]
5. Mitigating OSINT Exposure for TikTok Users
Defenders can use TokIntel to audit their own exposure. Here’s how to reduce your digital footprint.
Check Your Own Account
bash
python3 tokintel.py –email [email protected]
[/bash]
If a profile appears, TikTok has linked your contact info. Remove it via:
– TikTok Settings → Privacy → “Suggest your account to others” → Disable phone/email sync.
– “Find friends” → Revoke contact permissions.
Linux/Windows Command to Monitor Leaked Contact Data
bash
Check if your email appears in any past OSINT dump (using haveibeenpwned API)
curl -s “https://haveibeenpwned.com/api/v3/breachedaccount/[email protected]” -H “hibp-api-key: YOUR_KEY”
[/bash]
Automated Weekly Check Script (Linux)
bash
!/bin/bash
echo “Checking $1 on TikTok…”
python3 tokintel.py –email $1 –output /var/log/tokintel/$(date +%F).json
if [ $? -eq 0 ]; then
echo “ALERT: Profile found!” | mail -s “TikTok OSINT Alert” [email protected]
fi
[/bash]
6. Integrating TokIntel with Broader OSINT Frameworks
Combine TokIntel with other tools for full-spectrum identity linkage.
Pipeline: Email → TikTok → Instagram → Twitter
bash
Step 1: TokIntel to get TikTok username
python3 tokintel.py –email [email protected] | jq -r ‘.username’ > tiktok_user.txt
Step 2: Use Sherlock to find other social accounts
sherlock $(cat tiktok_user.txt) –output all_profiles.json
Step 3: Cross-reference with theHarvester for email domains
theHarvester -d targetdomain.com -b google,linkedin
[/bash]
Windows Batch Script Example
bash
@echo off
set EMAIL=%1
python tokintel.py –email %EMAIL% –output tiktok.json
python sherlock.py %EMAIL% –output all.json
echo Completed for %EMAIL%
[/bash]
API Security Consideration: When chaining tools, avoid storing plaintext API keys in scripts. Use `python-dotenv` or Windows Credential Manager.
7. Legal and Ethical Use of TokIntel
TokIntel is a powerful tool; misuse violates TikTok’s Terms of Service and may breach privacy laws (GDPR, CCPA, CFAA).
Authorized Use Cases:
- Penetration testing with written consent from the account owner.
- Law enforcement investigations with proper warrants.
- Personal exposure audits (your own contact info only).
Add a Disclaimer to Your Reports
bash
Automatically append legal notice to every JSON output
jq ‘. + {legal_disclaimer: “This data collected under authorized OSINT operations only”}’ report.json > report_clean.json
[/bash]
Rate Limit Compliance (Ethical Scraping)
bash
Add delay to tokintel.py or wrapper
import time
time.sleep(2) Respect API rate limits
[/bash]
What Undercode Say:
- TokIntel transforms contact data into actionable TikTok intelligence – but its power demands strict ethical boundaries. Always obtain authorization before investigating third parties.
- API-driven OSINT is fragile – RapidAPI endpoints change, and TikTok actively blocks scrapers. Combine TokIntel with fallback methods (manual searches, archive.org) for reliable results.
- Defenders must think like attackers – Run TokIntel against your own organization’s email domain to discover shadow TikTok accounts leaking internal information.
Prediction:
As TikTok integrates deeper into e-commerce and political discourse, OSINT tools like TokIntel will become standard in due diligence and threat intelligence. However, platform countermeasures (CAPTCHA, rate-limiting, contact-info hashing) will escalate, pushing investigators toward legal, API-based partnerships with TikTok’s official transparency channels. By 2027, expect regulatory frameworks to mandate OSINT tool registration, forcing a balance between open investigation and individual privacy.
▶️ Related Video (82% Match):
🎯Let’s Practice For Free:
IT/Security Reporter URL:
Reported By: Osint Osint – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅
