mishakorzik / UserFinder

OSINT tool for finding profiles by username
GNU General Public License v3.0
958 stars 71 forks source link

XOSINT #18

Closed vikings-1 closed 3 months ago

vikings-1 commented 3 months ago

X-osint This is an osint tool which gathers useful and yet credible valid information about a phone number, user's email address and ip address and more to come in future updates

Menu X-osintv2.2

Bugs Report X-osint version 2.2 has undergone a deepsource code analysis scan to check for Security Risks and Bugs Risks, which displayes that X-OSint is free from Bugs so far in Version 2.2, If you do have version 2.1 installed, Kindly Update to newer version for improved changed and bug fixes. Bug Report

Features IP Address information gathering Email Address information gathering Location MetaData Extraction from Image Host finding Ports finding Subdomain Enumeration CVE Exploits Finder Email Finder Exploit Open Source Vulnerability Database DNS Lookup DNS Reverse Vin extractor Protonmail OSINT Check Global InfoStealer Attack Phone Number Information Lookup And many more... MANY OTHER FEATURES SOON TO COME

Report bugs If you notice issues while installing this tool or running this tool kindly mail to me at Gmail or Open an issue via github.

Requirements Python 3 pip Internet Connection And some other python packages (alot)

How to Update Manually (For any version) This tool would be updated regularly or as time progresses to improve it, fix more bugs and add so many other features, I would be showing you how to update it

How to Update For Termux ALSO TYPE THE DOLLAR SIGN 1) Type: cd $HOME

cd $PREFIX/bin

rm xosint

2) Re-clone from git: cd $HOME

git clone https://github.com/TermuxHackz/X-osint

cd X-osint

3) Grant permissions and run install file chmod +x *

bash setup.sh

And your all done!!!..and updated

How to Update for Linux ALSO TYPE THE DOLLAR SIGN 1) Type: cd $HOME

cd /usr/local/bin

sudo rm xosint

2) Re-clone from GitHub cd $HOME

git clone https://github.com/TermuxHackz/X-osint

cd X-osint

3) Grant permissions and run install file chmod +x *

bash setup.sh

And your all done!!!..and updated

Demo Installation Here is a video demonstration below that shows how to install X-osint in your various terminal(s)

Install X-osint2.1

Youtube Video Demo here Watch the Video installation Installation sudo apt install python3-pip -y cd $HOME git clone https://github.com/TermuxHackz/X-osint cd X-osint chmod +x * sudo bash setup.sh sudo xosint OR python xosint if your using Termux, Type the same commands from above without the "sudo" and replace "apt" commands to "pkg"

Installation using python virtual environment if normal installation doesnt work The normal installation of Xosint might likely have some issues running or installing due to some missing python packages, use this method only if the normal installation and usage doesnt work!!

sudo apt install python3-pip python3-venv -y cd $HOME git clone https://github.com/TermuxHackz/X-osint cd X-osint chmod +x *.sh python3 -m venv X-osint_venv source X-osint_venv/bin/activate pip install google sudo bash setup.sh sudo xosint OR python xosint

NOTE: Make sure you quit the python virtual environment after you have finished using Xosint by typing: deactivate And then reactivate it anytime you want to use X-osint.

Creating a Python Virtual Enviornment to install for MacOS python3 -m venv venv

Activate using: source venv/bin/activate

Then RUn Script Deactivate the virtual Environment when done deactivate

cd X-osint-fork source X-osint_venv/bin/activate sudo xosint deactivate

Optional: You can copy X-osint to /usr/local/bin and remove the cloned repository.

cd X-osint sudo cp -r xosint /usr/local/bin cd /usr/local/bin && sudo chmod u+x xosint cd $HOME && sudo rm -rf X-osint

How to update Automatically (if your using version 2.1 of X-Osint and above) For Termux cd $HOME

xosint

And then from the menu Type 99 and proceed to selecting termux

For linux cd $HOME

sudo chmod +x /usr/local/bin/xosint

sudo xosint

And from the menu Type 99 and proceed to selecting linux

🤝 Partnership X-Osint has also partnered with owner of the repo tookie-osint to bring all of its OSINT tools into X-osint. This is to ensure a more Advance use of OSINT tools. New Features would continue to roll over How to use tookie-OSINT after installing it After installing X-osint, go to the NEXT tools option, then you should see tookie-osint and you can install

cd $HOME For Windows: python.exe brib.py For Linux/Mac: python3 brib.py OR Launch tookie-osint from X-osint (Longer method though)

📌 NOTICE If you are using the Subdomains feature and it ask for a word list, please download from here and then extract the zip, make sure you know the location where it is kept, then proceed with using subdomain

🔑 API Keys Get your various API keys

1) Shodan (https://shodan.io) (Number 4 - 9 from my tool will require a shodan API key, Sign up on shodan and paste your API and begin to use flawlessly) 2) Hunter (https://hunter.io) 3) Opencagedata (https://opencagedata.com): Use this for geolocation of numbers, And get your API from here THIS WOULD BE REQUIRED IN PHONE NUMBER INFORMATION<+, SO SIGN UP AND GET YOUR API TO USE 4) Google Search API Key (https://cse.google.com/cse): Use this for the ImageHunt OSINT feature in X-ossint This is required for proper use of ImageHunt in X-soint 5) Google CLoud Console (https://console.cloud.google.com/apis/credentials) 6) NumVerify (https://numverify.com/): Needed for the Phone number information to work 7) Vonage API (https://dashboard.nexmo.com): Needed for Phone mumber information to work How to create a desktop Launcher for X-osint in Linux 1) Go to your home desktop, right click then click on Create Launcher 2) Fill the field as follows Name: X-osint

Comment: An osint tool made by AnonyminHack5 in python3

Command: sudo xosint

Working Directory: /usr/local/bin

Icon: Click the No icon button and add an icon, and then Go to my github, and download the .ico image there then select that as your Icon and thats it

Create Launcher

3) For the Options Tick

Run in terminal Works for Termux and Linux/MacOS Tested License Plate OSINT X-osint is able to fetch and provide information about a car license plate easily, which only works for license plates registered in the United States, States that this feature works for include: Alabama, Alaska, Arizona, Arkansas, California, Colorado, Connecticut, Delaware, Florida, Georgia, Hawaii, Idaho, Illinois, Indiana, Iowa and Distric of Columbia. KIndly note that this feature doesnt work for license plate registered in another country, how ever i may add such a feature but to do so i need encouragement hence, you supporting this project by Starring it and Buying me a cup of coffee. Thanks

Google Dork Hacking X-osint provides a way by which you can use Google for hacking once you know how to the particular search queries to perform, I have provided some useful google dork queries in this repo code, kindly view and use. Thank you.

SMTP Analysis X-osint is able to perform an SMTP Analysis and enumerate if an SMTP server is vulnerable or not

VIN Number Identification X-osint is able to gather information from a gov database and display the list or infos of vehicles based on their Identification numbers. X-osint is able to do that flawlessly without need for an API. VIN is available to use Via CLI or the GUI

ProtonMail OSINT Credits to pixelbubble, X-Osint is able to perform OSINT investigation on Proton service (for educational purposes only). ProtOSINT is separated in 3 sub-modules:

[1] Test the validity of one protonMail account and get additional information [2] Try to find if your target have a protonMail account by generating multiple adresses by combining information fields inputted [3] Find if your IP is currently affiliate to ProtonVPN [4] Find a protonmail user PGP Key and download it right from your terminal And so many More Demo protonmail OSINT Protonmail osint

More features are still to come..Stay Tuned

ChangeLogs for 2.1 [1] Fixed updating [2] Fixed Number 3 Option error [3] Changed Banner [4] Changed User interface [5] Added Features [6] Improved Speed [7] And thats about it, if you face any errors or bugs kindly mail them to me or open an Issue in github Changelogs Version 2.2 Critical Bugs Fixed [1] Fixed Issue where the python module folium wouldnt install [2] Fixed Issue where the python module numpy wouldnt install [3] Fixed Issue where the python module google-search wouldnt install [4] Fixed Issue where number 2 Option wouldnt work [5] Phone number information is now in the "Next Menu" [6] Fixed issues where The 'SyntaxWarning' you're encountering is due to the use of invalid escape sequences in regular expression strings. Buy me a coffee Donate Love my work and wish to support me, Buy me a coffee here

Contributing Feel free to clone this project. For major changes, please open an issue first to discuss what you would like to change or add, thank you!!.

Credits Some of the modules here and APIs used for the creation of X-osint, got the idea from them, and so i would like to give them credit as most of the features of X-osint wouldnt be so without these mentioned Devs.

[1] Pixellbubble [2] C3n7ral051nt4g3ncy [3] SpiderAnonGreyHat [4] midnit3Z0mbi3 [5] Cavalier-HudsonRock New Features Added Check Global InfoStealer Attack: This feature will check a database of over 27,941,924 computers which either emails or domains were compromised through global info-stealer campaigns performed by threat actors. ImageHunt: ImageHunt is a Python-based reverse image search application that allows users to upload an image and search for similar images across the web using Google Custom Search. The application features a user-friendly GUI built with Tkinter. Currently being Worked On Location Metadata From Image This feature will extract location metadata from an image file. including jpg and png, All you need to do is put in the path of the image and let the script extract the location metadata from the image and it would open the location of where the picture was taken in your respective map service. If the location metadata isnt present in the image the script wont fetch anything . NewsOSINT This feature lets you search the entire news articles about any inputed keyword or query and gives you links to those articles Code Analysis I've added a bonus called Code Analysis which aims to providing clear bugs or errors from your python file or Javascript file. More Languages will be surpported in Feature Updates. Note: This feature is still in beta and might not work properly for all types of files 📌 NOTE For locating a phone number and getting the exact location, it is not exacly possible to get the exact location from a phone number, The Opencage module that serves to get location from a number doesnt exactly get the location per say Here is what is actually happening:

The phone number is entered and a library is used to turn the country calling code into the name of the country. For example numbers starting with +91 becomes India, +880 is Bangladesh, +34 is Spain, etc.

The country name is then sent to openCage geocoding API as a forward geocoding request (placename to coordinates). We then return the coordinates of the center of the country. For example we turn India into 22.3511148, 78.6677428, roughly in the middle of Uttar Pradesh.

People get confused and angry as to why the coordinates are not actually where the phone is physically located.

Unfortunately there is no such thing as magic, and neither we, nor anyone else, have the ability to derive a phone’s location from an input string like India or Spain.

If you want to know the location of a phone you need a service (application) running on the phone that has user permission to access the location from the operating system. How accurate the coordinates reported by the phone are will depend on which technology is used to determine the location (GPS, cell triangulation, wifi, etc). Once you have those coordinates you can then send them to opencage API as a reverse geocoding request. More info at https://opencagedata.com

Faqs If your getting the error below which says sudo xosint Traceback (most recent call last): File "/usr/local/bin/xosint", line 11, in from googlesearch import search ModuleNotFoundError: No module named 'googlesearch' Solution: Kindly make sure you ran the bash setup.sh file and make sure you don't interrupt the setup process and after you run that, and doesnt still work type pip install google and re run xosint. if your still having issue with it run pip install googlesearch-python and run xosint. That should solve your problem with xosint. Thank you and share to friends.

Having an npm error when installing eslint? Solution: Type curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.1/install.sh | bash Then type source ~/.bashrc OR source ~/.zshrc

Then type nvm install node nvm use node nvm alais default node npm cache clean --force