4173
Founder of @osint_mindset / soxoj.com / @soxoj
A friend of mine built Exploratores, a collection of online OSINT tools inspired by CyberChef and Michael Bazzell's books.
It brings a wide range of investigation tools in one interface:
• Clear web and darknet search engines
• People search
• Social media research
• IP address and domain analysis
• GEOINT tools
• Media analysis
• Cryptocurrency lookups
• Company name and IBAN searches
The best part: you only need a browser. You can also download it and run everything locally!
🔎 Try it online
💻 Download and run locally
🤖 Use it with Claude
📖 Read more about the project
At probably the hottest leHACK ever, I presented my new cybersecurity tool for penetration testers: 𝐂𝐨𝐦𝐦𝐢𝐏𝐢𝐬𝐭𝐞 🔥
CommiPiste can 𝐢𝐝𝐞𝐧𝐭𝐢𝐟𝐲 𝐭𝐡𝐞 𝐞𝐱𝐚𝐜𝐭 𝐯𝐞𝐫𝐬𝐢𝐨𝐧 𝐨𝐟 𝐨𝐩𝐞𝐧-𝐬𝐨𝐮𝐫𝐜𝐞 𝐰𝐞𝐛 𝐬𝐨𝐟𝐭𝐰𝐚𝐫𝐞 using only publicly accessible static files and then 𝐟𝐢𝐧𝐝 𝐭𝐡𝐞 𝐂𝐕𝐄𝐬 associated with that version.
It can be especially useful when version information is hidden, removed from headers, or unavailable through conventional fingerprinting methods 🔎
It already supports 300 𝐝𝐢𝐟𝐟𝐞𝐫𝐞𝐧𝐭 𝐩𝐥𝐚𝐭𝐟𝐨𝐫𝐦𝐬. For some of them, CommiPiste uses a complete index of commits, while others are identified through smart heuristics 🛠️
👉 𝐆𝐢𝐯𝐞 𝐢𝐭 𝐚 𝐭𝐫𝐲: https://github.com/soxoj/CommiPiste
A huge thank you to the person behind the idea and just an awesome guy, paranoid android 😉
OSINT mindset team came in 2nd place at Trace Labs Search Party! 🥈
This past weekend, the Trace Labs Global OSINT Search Party took place — an international CTF focused on finding missing persons. This time, 130+ teams from around the world competed for the top spots 🌍
Our team, consisting of @Soxoj, adk, @vali, and Pr1tchard, delivered an excellent result:
— 2nd place among 130+ teams 🥈
— 28 accepted submissions
— 1,050 points
We will continue participating in events like these and helping people 🧡
🌐Site | 💬 Forum | 🔍 Family |▶osint_mindset">YT
KRONIKIER
If you haven’t been able to find the contact details on a particular website today, that doesn’t mean they’ve never been there
The Internet Archive API and Kronikier may find contact details that have been removed very quickly
https://github.com/soxoj/kronikier
Creator @soxoj_insides
Just a reminder: I maintain socid-extractor, an open-source Python tool that extracts account data from 130+ sites.
👉 Usernames, bios, avatars, follower counts, external links — plus the stable internal identifiers that survive renames and let you re-identify accounts across leaks and archives.
No API keys, no headless browser, normalized field names and ontology, MIT license. ✅
Powers Maigret 🥸 and a number of other OSINT tools.
Don't hesitate to give it a ⭐!
🔗 https://github.com/soxoj/socid-extractor
Three standout open-source OSINT username search tools right now: Blackbird, Aliens_eye, and Naminter 🚀
I finally updated my list of username search tools 👇, retested a bunch of them, and these 3 really stood out.
Huge thanks to their creators (p1ngul1n0, 3xp0rtblog, arxhr007) for building genuinely useful tools and pushing username-based OSINT forward! 🔥
Full list on GitHub: https://github.com/soxoj/osint-namecheckers-list
MCP + OSINT is a powerful combo 🔥
Instead of figuring out how to run CLI tools, just ask your LLM — and it runs Shodan queries, Maigret lookups, DNS fuzzing, and threat intel checks for you.
So, I've made a curated list of OSINT MCP servers. Take a look, try plugging something into your AI tool, or submit a new one!
👉 https://github.com/soxoj/awesome-osint-mcp-servers
I made an interactive website to "hack" Telegram spoilers
👉 https://spoiler.soxoj.com/
It has some examples, lets you upload your own screenshots; you can play with dictionaries, adjust region detection, or enter pseudo-Braille by hand.
Ping me if you want a source code! 👍
KazHackStan 2025 спикері — Дмитрий Даниловты "Soxoj" қарсы алайық! 💥
OSINT құралдарын әзірлеуші
Баяндама тақырыбы: OSINT 0-days: hack to search
📍Track zone
Баяндамада тікелей қараңғы жағы қарастырылады — OSINT үшін нөлдік күндік осалдықтар және байқалмайтын осалдықтар қалай ақпараттық қару ретінде қолданылатыны. Барлығы толық қарастырылады: мұндай осалдықтарды қалай іздеу керек және оларды қалай пайдалану мүмкін екенін көрсетеді.
17–19 қыркүйек
📍 Алматы | SADU Arena
Тіркелу 👉🏼 kazhackstan.com
——
Welcome the speaker of KazHackStan 2025 - Dmitrii "Soxoj" Danilov! 💥
OSINT tools developer
Topic of the speech: OSINT 0-days: hack to search
📍Track zone
This talk is about the dark side — OSINT zerodays and how hidden vulnerabilities turn into information weapons. We'll cover everything from discovering and exploiting such 0-days to protection methods and little-known SaaS OSINT services.
September 17–19
📍 Almaty | SADU Arena
Registration 👉🏼 kazhackstan.com
——
Поприветствуем спикера KazHackStan 2025 - Дмитрий Данилов "Soxoj"! 💥
OSINT tools developer
Тема доклада: OSINT 0-days: hack to search`
📍Track zone
Это доклад про тёмную сторону — зиродеи для OSINT и то, как незаметные уязвимости становятся информационным оружием. Мы разберём всё: от поиска таких 0-days и их эксплуатации до методов защиты и малоизвестных SaaS OSINT сервисов.
17–19 сентября
📍 Алматы | SADU Arena
Обязательная регистрация 👉🏼 kazhackstan.com
At leHACK!
You'll find me around the OSINT Village 😉
#event
Mystical: a visualization of PostScript programs through magical circles and sigils 😳
B e a u t i f u l
GitHub link
#tools #github
Having a fantastic time at OSINTomático 2025!
Engaging talks on OSINT, great networking, and the cool vibe of Madrid during the Fiesta de San Isidro -- enjoying it all! 🦊
#community #event #osintomatico
🏆 Took 1st place at yesterday's TraceLabs Search Party CTF as part of The Legendary Badgers (Les Blaireaux des Légendes) team!
As always, it was a great honor to use #OSINT4good, supporting law enforcement in locating missing persons.
Truly proud to have participated alongside such an amazing teammates! Who are they:
- Tweet from OSINT Tactical
- LinkedIn post
Oh, since this is an "insides" channel, I should mention what helped to win. As for the tools, l have to say thanks to SL Crimewall, Noimosiny, and AI. But, still, analytical skills remain the core to solve such challenges. And the willingness to spend hours piecing together small evidences that could shed light on a person's disappearance. 🙃
Oh, and -- Happy Easter to everyone! 🐣
#realinside #tracelabs #ai #tools
Have you read the intro to the upcoming leHACK 2025 "Singularity" event?
Love it.
YOU WILL KNOW NOTHING AND BE HAPPY
Fritz Lang with his Maschinenmensch in Metropolis, Stanley Kubrick with HAL in 2001: A Space Odyssey, Isaac Asimov in his Robots series, or Philip K. Dick in Do Androids Dream of Electric Sheep?, the 1983 WARGAME Film, all sought to warn us: the rise of self-aware artificial intelligence poses an existential threat to humanity. You may build them with the best intentions or to solve a problem, but even when you control the parameters, logical flaws creep in. You just can’t control the outcomes in very complex meta-systems. Even less so if you don’t fully understand why they work.
AGI within Large Language Models is expected to become a reality by the end of 2025. Just as the printing press and the internet brought unprecedented transformations to human destiny, this cultural meteorite could upend our world. Professions such as law, trading, human resources, videography, writing, accounting, software development, IRS along with their tax evaders, may soon become obsolete. Nobody building LLMs has a precise idea of what they are doing. Statistical models are a challenge to human comprehension; they are too far removed from the structure of the human mind. All they know is that it works.
AI is a lot more efficient at ingesting a large corpus of documents, they can scoop through a bazillion websites in hours, they can statistically predict instantaneous human passions by slurping social medias APIs, and write PR plans to counter them in near real time. Government decision-making tools. Defense pre-cogs. A perfect dictature.
We’ve finally reached the point where every possible human-generated training material has been consumed. LLM operators have had no choice but to keep training them on synthetic datasets—essentially, data generated by other LLMs. Just like in genetics, inbreeding leads to evolutionary collapse, and the AI models collapse: retarded AGIs are just around the corner. What if they fuel important decision-making?
They also will soon be entire operating systems reading your intentions. An operating system “with soul”, they say. It will read your mind, anticipate your every move—moves you will never learn to make yourself. Soon, nobody will have the knowledge of how to do things any more. AI corporations will detain your life API Key. What do you think will happen if they stop providing service?
We will have acquired human obsolescence at a great price.
Are we doomers? Yes and no.
We are hackers.
Hackers are a peculiar breed: show them a card, and they’ll decipher what’s on the back. The front image is obvious and self-explanatory, but the back might conceal a magician’s trick or a casino cheater’s secret.
Perhaps that’s why hacker culture has always been filled with anarchists, paranoids, social outliers, and geniuses. You can’t have the front without the back—at least not in a N=3 dimension ( with a notable Möbius stripexception ). Technology doesn’t impress us; we control it. Financial stakes don’t intimidate us; we remain the ultimate minority.
We love machines—and we hate them.
We are hackers.
Finally: Maigret in LLM! 🕵️♀️🧪
You ask the AI to create an intelligence report on a username — it runs the tool itself, reads the results, and turns them into a readable format.
- Maigret MCP server by BurtTheCoder
- Free Claude 3.5 Haiku, Desktop Client
#maigret #ai
Maigret 0.6.3 is out! 🕵️
115 site checks fixed, 15 new sites added, better Chinese-site support, improved Cloudflare bypass, and upgraded PDF templates.
Over the past few months, I’ve been receiving more and more fixes from the community. Maigret now gets over 100K installs per month, with more than 1M installs in total! 🚀
👉 Try it yourself: https://github.com/soxoj/maigret#in-one-minute
My train from Amsterdam to Paris was cancelled due to the heat 🥵, but I'm still coming to leHACK!
See you at OSINT Village — feel free to reach out! ✌️
Kronikier (web app version)
Get historical contacts (emails, phones) for a website from Internet Archive snapshots.
Web version of https://github.com/soxoj/kronikier
https://kronikier.soxoj.com/
Creator @soxoj_insides
#osint #python #webarchive
Do you remember my tool gitcolombo to extract emails from code repositories? I've updated it in my spare time:
🟢 hacker-style CLI
⚡ additional powerful checks
🌐 web version: gitcolombo.soxoj.com
P.S. If gitcolombo won't help you, try GitFive — the best tool to find Github user's email
OSINT tools should give you actionable leads, not just random URLs and raw data 🫡
My open source tool Maigret has always been able to search by username, but results analysis was up to the user 🤔
I've now added AI analytics and identity resolution to it, so you can get fast conclusions about a target across 3K sites 🚀
Over the last few weeks, I also rewrote Maigret and cleaned up the checks database: it has near-zero false positives now 🔥
Want to know why such a powerful tool is open? Apply via the link and add the comment: “show me Crimewall QuickLink mode” — and see how insanely far the commercial tools I'm building go beyond this 😉
🎭 ShareTrace: reveal the identity behind any share link
Works for 12 platforms: TikTok, Instagram, Discord, Google Drive, Notion, Telegram, Pinterest, Substack, Suno, ChatGPT, Claude, Perplexity.
Original repo was deleted — I rebuilt it with new platforms and fixes.
👉 https://github.com/soxoj/sharetrace
OSINT WORLD MAP
Together with @Adk, we created OSINT WORLD MAP — a curated collection of links to OSINT tools, websites, and projects, organized by geographic location. It includes:
• 193 UN member states
• Dependent territories
• Special administrative regions
• Partially recognized states and disputed territories
• Other regions
👉 https://map.wddadk.com
Just select or search for the country you need — and that’s it. All relevant OSINT tools and resources are listed right in front of you. If you have new links make PR here https://github.com/wddadk/OSINT-for-countries
Telegram spoilers are vulnerable and can be decoded 😳
If you've ever shared your Telegram screen and used spoilers to hide certain info, I got bad news: your hidden text might be stolen.
The problem? Usually a spoiler is shown as an animated noise and only revealed on tap. But in some parts of the MacOS Telegram client it works differently, e.g. last message in the chat list and pinned message use a fallback that turns text into pseudo-Braille characters with a one-way mapping. The code.
This transform is mathematically non-invertible, but in practice we usually know the language and roughly what symbols someone uses. So you can guess and recover the original text with a limited brute-force over likely characters. 😨
Proof-of-concept encoder/decoder:
https://github.com/rawrdcore/tg-hidden-messages-decoder
Huge thanks to @dalmatrix for researching and documenting the privacy issue.
P.S. If you've ever put passwords or other secrets under a Telegram spoiler, now is a good time to change them! 😈
leHACK 2025 was amazing! 🎉
Merci beaucoup to the wonderful team behind the conference and OSINT Village -- and especially to OSINT-FR and Navlys.
I had a great time! ❤️
#event
I'll be speaking online today at OSINTCon 2025 (hosted by OSINT Ambition, India) with my talk "SOWEL: An OSINT Framework" at 2:00 PM GMT.
📅 Full schedule: https://osintconference.com/schedule-day2
🎥 The online stream: https://streamyard.com/watch/EnUeJrqA5gPr
(The picture is just a joke, unrelated to the topic! 😅)
Nameguesser! 🕵️♂️🌍✨
Sharing a link to my game where you guess where someone is from based on their full name!
Vibe-coded it in several days as a fun side project to level up my OSINT name recognition skills.
Tested it on some folks at OSINTomático 2025 conference -- it was a lot of fun!
👉 https://nameguesser.soxoj.com/
Give it a try and let me know what you think! ;)
🚀 OFFICIALLY LAUNCHED: AI-powered Digital Identifier Search is now LIVE!
What previously took intelligence analysts HOURS can now be accomplished in SECONDS:
🔍 Simultaneous reverse search across 250+ data sources
👁️ Facial recognition with cross-platform biometric matching
👤 Sophisticated username/alias correlation engine
🧠 AI-driven pattern recognition that connects partial identifiers
Our revolutionary system transforms scattered digital breadcrumbs into comprehensive identity maps with just one prompt. Watch our release video to see how our technology is redefining the intelligence landscape.
The era of hiding behind disconnected online personas is over.
🎁 LAUNCH SPECIAL: Register by April 29th and receive 5 GOLD CREDITS automatically added to your account! Experience the full power of all platform features from day one.
Try it today: noimosiny.com
Just dropped the demo of our new AI-powered OSINT powerhouse that transforms hours of manual work into seconds🚀:
🔄 Parallel reverse search across 250+ sources
👤 Advanced facial detection & cross-platform biometric matching
🧮 Intelligent username/alias correlation
🔗 Programmatic pattern recognition for partial identifier matches
Watch our demo to see our engine analyze digital identities in seconds what would take would take human analysts hours to compile. Take publicly available information from fragmented breadcrumbs to comprehensive identity maps with a single prompt!
Your targets can't hide behind disconnected personas anymore.
AI-Powered OSINT: Email/Username Lookup + Face Matching
Watch how you can verify identities using just two inputs:
- Discover all linked accounts
- Cross-check information across profiles
- Match faces from extracted photos
- Generate an editable intelligence report
Cutting-edge investigations 👌
HANDLEHAWK
By nickname, collects profile information across multiple platforms:
Bluesky
Mastodon
Nostr
TruthSocial
Reddit
Snapchat
Twitter (via optional RapidAPI)
https://github.com/C3n7ral051nt4g3ncy/HandleHawk
Creator x.com/OSINT_Tactical
#socmint