The OSINT Curious Project

By OSINTCurious

The OSINT Curious Project is a source of quality, actionable, Open Source Intelligence news, original blogs, instructional videos, and a bi-weekly webcast/podcast. Most of all, we want to inspire peop... more

· Technology

4.7

2020 ratings

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about The OSINT Curious Project:

How many episodes does The OSINT Curious Project have?

The podcast currently has 76 episodes available.

The OSINT Curious Project episodes:

December 05, 2020Episode 48: Keyword search on Instagram, Scraping Fleets, OSINTDojo, AI-generated photos, Parler searching
People in this Episode
Micah Hoffman (@WebBreacher)

Nico Dekens (@dutch_osintguy)

Ritu Gill (@OSINTTechniques)
Links to what we discussed
Nico is tracking all black friday / cyber monday related deals for you: https://github.com/Dutchosintguy/Blackfriday-Deals-2020

Interesting Twitter thread on Arabic clothing that might be useful in some OSINT investigations: https://twitter.com/AD_GQ/status/1331092825858076673

Nico’s tip on how to search for Parler content without accessing Parler: https://twitter.com/dutch_osintguy/status/1330515656916262912

Keyword search is coming to Instagram! More info here: https://www.theverge.com/platform/amp/2020/11/17/21570475/instagram-keyword-search-update-hashtag-account?__twitter_impression=true

YouTube-DI is back on GitHub: https://github.blog/2020-11-16-standing-up-for-developers-youtube-dl-is-back/

Practice your verification skills with First Draft News’s new interactive quizzes: https://ftp.firstdraftnews.org/articulate/temp/ovcR/story_html5.html

Need some AI generated faces? Check out this massive archive but keep in mind they’re easily recognisable: https://generated.photos/faces

Great Twitter thread on scraping Fleets without triggering the ‘read’ notification: https://twitter.com/donk_enby/status/1329935540049817600

Great resource for international geolocation and winning the GeoGuessr.com game: https://geotips.net/

There’s a new OSINT project, called OSINTDojo that you might want to check out: https://www.osintdojo.com/

Wanna view all tweets from one account? Then check out this tool: https://nitter.net/

Protect your identity by creating an AI-generated photo of yourself: https://generated.photos/anonymizer#
Self Promotion
Ritu will be teaching the SANS SEC487 OSINT course with Micah in December. Look at https://www.sans.org/event/cyber-defense-initiative-2020-live-online/course/open-source-intelligence-gathering for details.

Nico will also be on the https://zolder.io/category/zoldersessions/.
...more
54min
December 05, 2020Episode 47: Samuel Lolagar (OSINTGeek), FireEye VM, Dark Web, Parler, ETags, a bit of SIGINT and collecting info from Youtube videos
Today’s special guest is Samuel Lolagar @osintgeek
Samuel’s website: https://osintgeek.de

People in this Episode
Micah Hoffman (@WebBreacher)

Matthias Wilson (@MwOsint)

Steven Harris (@nixintel)

John TerBush (@thegumshoo)

Nico Dekens (@dutch_osintguy)

Lisette (@technisette)
Links to what we discussed
Here’s a new VM from FireEye for threat intel/research: https://github.com/fireeye/ThreatPursuit-VM

Check out OSINTCombine’s new blog post on dark web OSINT: https://twitter.com/osintcombine/status/1326329875037216768

If you want to know more about Parler and what info you can find: https://twitter.com/firstdraftnews/status/1326973035207921667

Case study of how to verify and geolocate images: https://mxsx.eu/2020/11/13/Wakashio.html

How to use ETags (part of the HTTP response) in OSINT investigations: https://medium.com/@catalyst256/osint-etag-youre-it-ecd7e923392c

Article about militias, their radio gears and channel frequencies utilised by them: https://radiofreeq.wordpress.com/2016/01/19/militia-radio-frequencies/

Tool to collect valuable info from YouTube videos: https://tools.digitalmethods.net/netvizz/youtube/

Lorand’s new blog post explains how to construct powerful search queries: https://www.lorandbodo.com/blog/constructing-searchqueries-osint

Curated dark web resources for OSINT by MidaSearch: https://midasearch.org/dark-web/

Thoughts about sockpuppet accounts for OSINT: https://www.aaroncti.com/lets-talk-about-sockpuppet-accounts/
Self Promotion
Matthias and Samuel are preparing for the German OSINT conference. More info here: https://gosintcon.de

Micah and John are co-chairs of the SANS OSINT Summit, a free 2-day OSINT conference in February 2021 (https://www.sans.org/event/osint-summit-2021/) and are looking for presenters and attendees!

DutchOSINTGuy is proud of his SANS SEC537 Practical OSINT Class (https://www.sans.org/cyber-security-courses/practical-osint-analysis-and-automation/). Registration is open for those classes at significant discount.
...more
1h 5min
November 08, 2020Episode 46: Guest Amine Ghoulidi, resources on mis- and disinformation, investigating international phone numbers, Geolocation 10-minute tip and much more!
Today’s special guest
Amine (@aityaakub)
People in this Episode
Micah Hoffman (@WebBreacher)

Matthias Wilson (@mwosint)

Lorand Bodo (@LorandBodo)

Steven Harris (@nixintel)

John TerBush (@thegumshoo)
Links to what we discussed
TOCP Resource List: https://bit.ly/osintcuriousresources

What to do when a Facebook profile is private? https://osintcurio.us/2020/10/19/what-to-do-when-a-facebook-profile-is-private/

10 Minute Tip on geolocation – part I: https://osintcurio.us/2020/11/01/ten-minute-tip-image-geolocation-part-1/

Bellingcat’s OSINT tools: https://docs.google.com/spreadsheets/d/18rtqh8EG2q1xBo2cLNyhIDuK9jrPGwYr9DI2UncoqJQ/edit

Resources on mis/disinformation: https://mediamanipulation.org

Training session on how to verify images/videos by Jane Lytvynenko: https://www.youtube.com/watch?v=8aMk48O3vpM&feature=youtu.be

Geolocating Kim Kardashian: https://vickymochama.medium.com/how-dare-you-kim-kardashians-40th-birthday-an-investigation-766dc879eb23

Guide on how to use Optical Character Recognition: https://www.ghacks.net/2020/10/24/screentranslator-is-an-open-source-tool-that-can-translate-text-from-images/

Finding connections between entities based on text: https://jantegze.medium.com/how-to-find-out-who-owns-my-data-d0c7984ae20f

Investigate international phone numbers: https://www.secjuice.com/phone-numbers-investigation-the-open-source-way/

RIAA GitHub projects for downloading YouTube videos https://www.zdnet.com/article/riaa-blitz-takes-down-18-github-projects-used-for-downloading-youtube-videos/

Lorand’s blog on how to search social media: https://www.lorandbodo.com/blog/social-media-search-strategies

Christina Letaki & OSINTGeek’s blog on combining intelligence disciplines: https://osintgeek.de/fcihi/blog/index.html

and much more!
...more
1h 4min
October 23, 2020Episode 45: Q&A with the audience, lifting fingerprints from fotos, CONINT, understanding time stamps on social media, Google IDs and more
People in this Episode
Micah Hoffman (@WebBreacher)

Matthias Wilson (@mw_Osint)

Lorand Bodo (@LorandBodo)

Technisette

Sector035

Ritu Gill (@OSINTTechniques)

John TerBush (@thegumshoo)
Links to what we discussed
App usage by country: https://www.applyzer.com/?mmenu=worldcharts

Top sites worldwide: https://www.alexa.com/topsites

OSINT technique to find Start.me page: https://twitter.com/OSINTtechniques/status/1316937466222465024

Download Win7, 8.1 and 10 (90 day trial) VM’s: https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/ & https://web.archive.org/web/20191226134552/https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/

Sinwindie’s attack surface for the dark web: https://twitter.com/sinwindie/status/1315082663384899584

Lifting fingerprints from photos: https://twitter.com/BenDoBrown/status/1317544626425913351

Lorand Bodo’s new website & blog: https://lorandbodo.com

RSS feeds for Subreddits: https://twitter.com/LorandBodo/status/1314548615071834112

Download CONINT presentations here: https://conint.io/2020downloads

Understanding time stamps on social media: https://twitter.com/firstdraftnews/status/1314007636036259842

Update on WeVerify: https://twitter.com/WeVerify/status/1317548452784578561

Data scraping with Google Sheets: https://tompatrickjarvis.medium.com/data-scraping-with-google-sheets-to-assist-journalism-and-osint-tutorial-4f490d0dd5c4

Blog post on pivoting and researching info: https://keyfindings.blog/2020/10/16/where-is-leonardos-car-using-osint-to-trace-vehicles/

Retrieve info about Google account &activity: https://tools.epieos.com/google-account.php

Keeping grid on Google IDs: https://sector035.nl/articles/keeping-a-grip-on-google-ids

and much more!
...more
1h 6min
October 05, 2020Episode 44: Guest Julia Bayer, Geolocating without Street View and Google Maps, SOCMINT on foreign social media, FOCA for OSINT, DNS research
This week’s guest is Julia Bayer (@bayer_julia)
Julia Bayer is an investigative journalist, innovation manager and trainer at Deutsche Welle. At DW´s Investigative unit she is diving deep online collecting publicly available sources to uncover the (in)visible using OSINT. Before that she researched and verified UGC for (breaking) news at DW´s Social Media Newsroom.
People in this Episode
Nico Dekens (@DutchOSINTGuy)

Matthias Wilson (@mwOsint)

Lorand Bodo (@LorandBodo)

Nixintel (@nixintel)

Sector035 (@sector035)

Rae Baker (@wondersmith_rae)
Links to what we discussed
OSINTCurious blog post by Technisette: https://osintcurio.us/2020/09/28/when-there-is-no-google-earth-or-street-view-what-can-you-do/

Blog by Matthias Wilson: SOCMINT on foreign platforms: https://keyfindings.blog/2020/10/04/social-media-around-the-world/

Updated browser extension by OSINTSupport: https://osint.support/chrome-extensions/2019/09/29/osint-socmint-tooling.html

Google dorks to access confidential information: https://benjaminstrick.com/dear-x-your-staff-passwords-numbers-and-confidential-data-is-on-google/

Blog post by Nixintel: https://nixintel.info/osint/do-dns-records-prove-that-jim-watkins-is-q/

Blog post by Rae Baker: https://medium.com/@raebaker/using-foca-for-osint-document-metadata-analysis-6745c8d709fa

Search for emojis: https://www.fastemoji.com/

Update by Telegram: https://twitter.com/LorandBodo/status/1311591571498971136

2020 OSINT tools & resources handbook by @i_intelligence: https://i-intelligence.eu/resources/osint-toolkit

FREE online investigative training course for journalists: https://twitter.com/KnightCenterUT/status/1312508586216497153

Create your own bookmarks database: https://www.aware-online.com/en/create-your-own-osint-database-with-bookmarks/

Thread on how to investigate websites: https://twitter.com/aware_online/status/1308312883248467975

How discover relationships between websites using Maltego: https://www.maltego.com/blog/tracing-internet-relationships-with-maltego/
...more
58min
October 05, 2020Episode 43: Guest Emmanuelle Welch, Maltego for Telegram, Google Account Finder, WIPO Database, Twitter Analysis Framework
This week’s guest is Emmanuelle Welch (@frenchpi)
Emmanuelle Welch is a Licensed Private Investigator, Certified Fraud Examiner, and owner of French Connection Research, a private investigative agency in Brooklyn, NY, licensed in New York and Washington, DC. She specializes in white-collar crime investigations, cross-Atlantic litigation support and OSINT analysis.

People in this Episode
Nico Dekens (@DutchOSINTGuy)

Lorand Bodo (@LorandBodo)

Nixintel (@nixintel)

Kirby Plessas (@kirbstr)

John (@thegumshoo)

Rae Baker (@wondersmith_rae)
Links to what we discussed
Emmanuelle’s OSINT tools/resources start.me page for dating apps: https://start.me/p/VRxaj5/dating-apps-and-hook-up-sites-for-investigators

Introduction to researching foreign influence in the US: https://osintcurio.us/2020/09/14/introduction-to-researching-foreign-influence-in-the-us/

NEW Twitter Analysis framework by @sowdust: https://github.com/sowdust/tafferugli

OSINT Intelligence Cycle by @sinwindie: https://www.secjuice.com/the-osint-intelligence-cycle-part-i-planning-and-direction/

Maltego Transform for Telegram: https://twitter.com/noneprivacy/status/1304357985297346560?s=21

Using R to find stories in financial publicly available data: https://medium.com/@itoufexi/how-i-used-the-companies-house-streaming-api-to-find-a-newsworthy-story-a96d787955b2

How hackers can find sensitive information in your photos: https://medium.com/digital-marketing-lab/subtle-information-hackers-find-in-the-background-of-your-social-media-photos-938ec1876246

Interesting and detailed case study about what can be found with someone’s passport number: https://mango.pdf.zone/finding-former-australian-prime-minister-tony-abbotts-passport-number-on-instagram

Google Account Finder: https://tools.epieos.com/google-account.php

Best investigative podcasts: https://gijn.org/2020/09/09/a-global-tour-of-top-investigative-podcasts-the-2020-edition/

Call for proposals for ConINT (@conint)_io: https://twitter.com/CONINT_io/status/1306676769718706181

Database of industrial designs data: https://twitter.com/navlys_/status/1306333649877504000

How to use industrial designs data for OSINT: https://keyfindings.blog/2020/05/03/using-the-wipo-ip-portal-for-osint/
...more
56min
September 07, 2020Episode 42: New Facebook design, creating sock puppets, Redditor, OSINT on Telegram, WhatsMyName Update
Welcome back!
We are back with a brand new episode after our one-month summer break! In this week’s episode, we catch up with the latest OSINT news, as usual!
People in this Episode
Micah Hoffman (@webbreacher)

Nico Dekens (@Dutch_osintguy)

Lorand Bodo (@LorandBodo)

Sector035 (@Sector035)

Technisette (@technisette)

Rae Baker (@wondersmith_rae)
What we discussed
A big thank you to all our sponsors and Patreon patrons who have been supporting us!

Learn how to create a sock puppet account for your OSINT investigations here

Learn about the main differences between the old and new Facebook design here

Check out this new OSINT tool, called Redditor. It’s similar to Tweetdeck but just for Reddit

Need some new OSINT resources? Then check out this amazing collection

Dutch's talk about leveraging Telegram for OSINT purposes

Sinwindie’s attack surface for Twitter. For similar flow charts, click here

Interested in detecting deep fakes? Microsoft has launched a new tool to detect them

Here’s a great thread about some of the most popular dark net markets. Get free and daily updates about new dark net sites

Update about PimEye – a facial search engine

Wanna track ‘dictators’? Check out this website that tracks aircraft associated with specific countries

New updates for SentinelHub

Also new updates for WhatsMyName – a username search engine developed by Micah in collaboration with OSINTCombine and many others.

Search for 393+ million US court records on JudyRecords

Practice OSINT and work on real cases. Tracelabs has announced monthly OSINT Search Party CTFs!
Self Promotion
Micah will be at the OSINT Symposium in Australia and OSMOSISCon in October

Rae will be presenting at the Bsides conference in Copenhagen on 18/19 September

Lisette will be presenting at OSMOSISCon in October – check out her new website too
...more
58min
July 28, 2020Episode 41: Special Guest Ines Narciso, video search tool Peteyvid, estimating crowd sizes, and more on facial recognition (even for dogs)
Special Guest
Inês Narciso (@IWN_LX) – Ines worked in the Portuguese Intelligence Service for 12 years. She started up doing OSINT in 2008 and later became an OSINT and online undercover operations project manager. In 2019, she joined Iscte Iul a Lisbon University where she teaches Digital Methods and conducts research on disinformation. Since then, she’s also built a company that uses OSINT to find people’s ancestors and build family trees. In her spare time, she also helps pro bono fellow journalists in Portugal and abroad in their investigations and women who have been a victim of revenge porn or intimate image abuse.
People in this Episode
Micah Hoffman (@webbreacher)

Nico (@DutchOSINTGuy)

Matthias Wilson (@mwosint)

Nixintel

Lorand Bodo

Sector035

Ritu Gill (@OSINTTechniques)
Links to what we discussed
Protecting personal privacy against unauthorized deep learning models: https://sandlab.cs.uchicago.edu/fawkes/

Search for videos across 60 platforms: https://www.peteyvid.com/

Estimate the size of a crowd with this tool: https://www.mapchecking.com/

Twitter thread about the video conferencing platform Zoom: https://twitter.com/securitytrails/status/1284187387103457282

Great verification case study in French: https://ledesk.ma/desintox/le-bonimenteur-de-habanos-sa-encore-frappe-il-sest-paye-un-panama-paper/

Twitter search tricks: https://www.labnol.org/internet/twitter-search-tricks/13693/

Improved face detection software that even works on animals: https://www.omgubuntu.co.uk/2020/07/digikams-improved-face-detection-for-photos-even-works-on-animals

Blog that has started dropping “0Days” with regards to the TOR project: https://www.hackerfactor.com/blog/index.php?/archives/888-Tor-0day-Stopping-Tor-Connections.html

New Telegram update: https://telegram.org/blog/profile-videos-people-nearby-and-more

Upcoming virtual OSINT Symposium between 10 and 13 October: https://www.osintsymposium.com/event-details/australian-osint-symposium-1
Self Promotion
Learn more about Ines’s work: https://medialab.iscte-iul.pt/ (in Portuguese with some English articles)

The Open Source Intelligence Skills-building Conference (October 2020): https://www.osmosiscon.com/

German Open Source Intelligence Conference (GOCON): https://www.gosintcon.de/ – if you have any questions, reach out to Matthias (@mwosint)
...more
1h
July 13, 2020Episode 40: Geolocating IPs and mobile phones, PimEye, 3D reconstruction of facial images and more...
People in this Episode
Micah Hoffman (@webbreacher)

Matthias Wilson (@mwosint)

Nixintel

Technisette

Baywolf88
Links to what we discussed
https://www.instagram.com/hushpuppi/?hl=en Big phishing criminal Hushpuppi arrested in Dubai. His Instagram account was well-known for flaunting his wealth. Allowed investigators to track his movements and identify his financial assets.

https://pimeyes.com/en/ Matches facial images from across the web

https://keyfindings.blog/2020/07/01/saving-images-from-google-maps-and-street-view/ Getting photo sphere images from Google Maps using developer tools

https://nixintel.info/osint/geolocating-mobile-phones-with-an-ip/ Gives insight on the locations of IP adresses

https://twitter.com/SebMeineck/status/1281577528164003841 PimEye reaction to a recent article (https://netzpolitik.org/2020/pimeyes-face-search-company-is-abolishing-our-anonymity/), now you can’t upload a pic anymore. You can only allow PimEye access to your camera

https://pskreporter.info/pskmap Shows ham radio operators (with call sign and location) worldwide. Might be useful is ever working on a case involving ham radios

https://twitter.com/LorandBodo/status/1281606517825974273 This website allows users to create a 3d reconstruction from a single image. super useful for osint investigations.

https://medium.com/@CassiusXIII Guide to corporate OSINT recon

https://keyfindings.blog/2020/07/12/how-to-geolocate-mobile-phones-or-not/ Follow-up on the IP geolocation article

https://medium.com/analytics-vidhya/who-where-whomwith-wwww-a-facial-recognition-tool-for-image-based-data-gathering-and-graph-dd8f2b13c279

https://www.reddit.com/r/videos/comments/fxgi06/not_new_news_but_tbh_if_you_have_tiktiok_just_get/fmuko1m/?context=1 TikTok mobile app security issues and how they may impact your investigations.
Self Promotion
Micah Hoffman, Nico Dekens & John TerBush: SANS SEC487 Open-Source Intelligence (OSINT) Gathering & Analysis. Several options for Live Online & In Person
...more
1h 5min
June 30, 2020Episode 39: Ibexmind with Peter King, Twitter history, aircraft and drone monitoring, TraceLabs OSINT Virtual Machine and more...
People in this Episode
Micah Hoffman (@webbreacher)

Nico Dekens (@dutch_osintguy)

Rae Baker (@wondersmith_rae)

Nixintel

Ginsberg5150

Special Guest: Peter King (@ibexmind) additional info: https://ibexmind.com/
Links to what we discussed
https://spoonbill.io/ Shows historic profile and pinned tweet changes for Twitter accounts.

https://radar.freedar.uk/VirtualRadar/desktop.html Aircraft monitoring site but includes military/drones too.

https://www.inquirer.com/news/philly-protests-arrests-fbi-lore-elisabeth-blumenthal-george-floyd-20200617.html Good OSINT case study, using social media to ID suspect

https://citizenevidence.org/2020/06/26/investigating-infrastructure-links-with-passive-dns-and-whois-data/ Explains how to use OSINT to investigate a website, very beginner friendly

https://www.tracelabs.org/trace-labs-osint-vm/ Trace Labs OSINT VM

https://www.sans.org/webcasts/tech-tuesday-workshop-introduction-osint-video-image-verification-115875/ Nico’s free SANS image verification workshop

https://www.youtube.com/channel/UCynWOUeHAOflEQtJnrZpkNA/videos Layer8 OSINT and Social Engineering conference videos are posted

https://www.youtube.com/watch?v=-Psyw3ADNvo&feature=youtu.be Sector035’s Google Dorking 10 minute tip

https://www.osintcombine.com/post/download-social-media-videos-without-tools OSINTCombine’s blog post on using the web developer tools in web browsers to download videos on several social media platforms

https://twitter.com/TraceLabs/status/1273950482214641665 Trace Labs has renamed their Missing CTF to OSINT Search Party CTF and is doing monthly global events!

https://www.npr.org/sections/health-shots/2017/04/09/523011446/how-playing-tetris-tames-the-trauma-of-a-car-crash?t=1593371114814 How Playing Tetris helps Tame Trauma
Self Promotion
Micah Hoffman, Nico Dekens & John TerBush: SANS SEC487 Open-Source Intelligence (OSINT) Gathering & Analysis. Several options for Live Online & In Person

Several Online workshops at dutchosintguy.com
...more
56min

FAQs about The OSINT Curious Project:

How many episodes does The OSINT Curious Project have?

The podcast currently has 76 episodes available.