Soxoj insides

🕵️ Nobody is impressed by OSINT on the main social media platforms anymore. They're covered by plenty of tools.

At the same time, the smaller sites are getting harder to reach. Google keeps dropping them from search results, and LLM tools give you a summary off a few links instead of checking the thousands of related small sites.

Maigret 0.6.6 now covers thousands of niche forums, discussion boards and wikis — where the real investigation leads live: interests, background, the people around them.

The most interesting highlights:
⚡️ 5,900 sites in the database: nearly twice as many as in the last release
⚡️ Run stable release on Windows easily: double-click, no Python
⚡️ Bulk check improvements: search a long list of usernames in one run
⚡️ French translation of the README and docs ;)

Try it: 👉 soxoj.com/maigret-r066-tg

Username in, a full dossier out. Open source, MIT, runs locally, no API keys, no signup.

And what do you use to find accounts on niche platforms?

🎤 KazHackStan 2026 спикері - Дмитрий Данилов (Soxoj)

Дмитрий - цифрлық зерттеулер мен киберқауіпсіздік шешімдеріне маманданған CPO 🔐

Ол «Сіз қауіпсіздік шешімдерін сатып алдыңыз. Хакерлер сіздің қызметкерлеріңізді пайдаланды» тақырыбында сөз сөйлейді.

Дмитрий әлеуметтік инженерияға арналған деректерді қалай жинайтынын және тәуекелдерді, ақпараттың таралуын және identity spoofing-ті қалай бақылауға болатынын түсіндіреді 👀

📅 29–30 қыркүйек
📍 Астана, Тәуелсіздік сарайы
🔗 kazhackstan.com

🎤 Спикер KazHackStan 2026 - Дмитрий Данилов (Soxoj)

Дмитрий - CPO, специализирующийся на цифровых расследованиях и решениях в области кибербезопасности 🔐

Он выступит с докладом «Вы купили решения для безопасности. Хакеры использовали ваших сотрудников».

Дмитрий расскажет, как злоумышленники собирают данные для атак с использованием социальной инженерии и как снижать связанные с этим риски 👀

📅 29–30 сентября
📍 Астана, Дворец Независимости
🔗 kazhackstan.com

🎤 KazHackStan 2026 Speaker - Dmitrii Danilov (Soxoj)

Dmitrii is a CPO specializing in digital investigations and cybersecurity solutions 🔐

He will present “You Bought Security Solutions. Hackers Exploited Your Employees”.

Dmitrii will explain how attackers collect employee data for social engineering and how organizations can reduce these risks 👀

📅 September 29–30
📍 Astana, Palace of Independence
🔗 kazhackstan.com

Did you know a Telegram bot keeps its full chat history on Telegram's servers? 😳

With the bot token you can pull every message it exchanged with its users.

My telegram-bot-dumper does exactly that, and now renders the dump like Telegram Web: chat list, text, media, files, plus search across everything.

Where it's useful in legit security work:
- Pentest - pull everyone who ever talked to the bot and read what they sent
- Recon - grab the data moving through it: docs, infrastructure, services, credentials
- Malware analysis - a stealer built on a bot exposes every infected host and everything it stole.

👉 Try it: github.com/soxoj/telegram-bot-dumper

If you do pentest, OSINT or threat intel, this belongs in your kit!

❤️ Soxoj insides

OSINT WORLD MAP

Together with https://t.me/offensiveosint, we created OSINT WORLD MAP — a curated collection of links to OSINT tools, websites, and projects, organized by geographic location. It includes:

• 193 UN member states
• Dependent territories
• Special administrative regions
• Partially recognized states and disputed territories
• Other regions

👉 https://map.wddadk.com/

Just select or search for the country you need — and that’s it. All relevant OSINT tools and resources are listed right in front of you. If you have new links make PR here https://github.com/wddadk/OSINT-for-countries

Telegram spoilers are vulnerable and can be decoded 😳 If you've ever shared your Telegram screen and used spoilers to hide certain info, I got bad news: your hidden text might be stolen. The problem? Usually a spoiler is shown as an animated noise and only…

Telegram spoilers are vulnerable and can be decoded 😳

If you've ever shared your Telegram screen and used spoilers to hide certain info, I got bad news: your hidden text might be stolen.

The problem? Usually a spoiler is shown as an animated noise and only revealed on tap. But in some parts of the MacOS Telegram client it works differently, e.g. last message in the chat list and pinned message use a fallback that turns text into pseudo-Braille characters with a one-way mapping. https://github.com/overtake/TelegramSwift/blob/579cebbf0c01fd41b712eff3647fa7f69db9665d/Telegram-Mac/Extensions.swift#L1805

This transform is mathematically non-invertible, but in practice we usually know the language and roughly what symbols someone uses. So you can guess and recover the original text with a limited brute-force over likely characters. 😨

Proof-of-concept encoder/decoder:
https://github.com/rawrdcore/tg-hidden-messages-decoder

Huge thanks to https://t.me/dalmatrix for https://t.me/rawrdcore the privacy issue.

P.S. If you've ever put passwords or other secrets under a Telegram spoiler, now is a good time to change them! 😈

KazHackStan 2025 спикері — Дмитрий Даниловты "Soxoj" қарсы алайық! 💥

OSINT құралдарын әзірлеуші

Баяндама тақырыбы: OSINT 0-days: hack to search

📍Track zone

Баяндамада тікелей қараңғы жағы қарастырылады — OSINT үшін нөлдік күндік осалдықтар және байқалмайтын осалдықтар қалай ақпараттық қару ретінде қолданылатыны. Барлығы толық қарастырылады: мұндай осалдықтарды қалай іздеу керек және оларды қалай пайдалану мүмкін екенін көрсетеді.

17–19 қыркүйек
📍 Алматы | SADU Arena
Тіркелу 👉🏼 http://kazhackstan.com/

——

Welcome the speaker of KazHackStan 2025 - Dmitrii "Soxoj" Danilov! 💥

OSINT tools developer

Topic of the speech: OSINT 0-days: hack to search

📍Track zone

This talk is about the dark side — OSINT zerodays and how hidden vulnerabilities turn into information weapons. We'll cover everything from discovering and exploiting such 0-days to protection methods and little-known SaaS OSINT services.

September 17–19
📍 Almaty | SADU Arena
Registration 👉🏼 http://kazhackstan.com/

——

Поприветствуем спикера KazHackStan 2025 - Дмитрий Данилов "Soxoj"! 💥

OSINT tools developer

Тема доклада: OSINT 0-days: hack to search`

📍Track zone

Это доклад про тёмную сторону — зиродеи для OSINT и то, как незаметные уязвимости становятся информационным оружием. Мы разберём всё: от поиска таких 0-days и их эксплуатации до методов защиты и малоизвестных SaaS OSINT сервисов.

17–19 сентября
📍 Алматы | SADU Arena
Обязательная регистрация 👉🏼 http://kazhackstan.com/

Digital Asset Inventory by @pandora_intelligence

Local-first scanner for discovering accounts and digital assets from data you already have:
- bookmarks
- password-manager exports
- browser history
- local email archives
- saved Google/Apple connected-app pages.

https://github.com/Panda-Lewandowski/digital_asset_inventory

Bookmarked a cool command-line OSINT tool from GitHub but never found time to try it?

I built OSINT Tool Deploy Skill for Claude Code which turns a GitHub link into a working tool 💪 with deployment and verification that it actually works. Windows is supported!

Installation time decreases from hours to minutes 📉 with templates and a knowledge base of common issues and fixes.

Investigate crimes, not Python dependency errors 🥸

👉 Try it: https://github.com/soxoj/claude-osint-deploy

https://lehack.org/ was amazing! 🎉

Merci beaucoup to the wonderful team behind the conference and OSINT Village -- and especially to https://osintfr.com/ and Navlys.

I had a great time! ❤️

#event

At leHACK!
You'll find me around the OSINT Village 😉

#event

A friend of mine built Exploratores, a collection of online OSINT tools inspired by CyberChef and Michael Bazzell's books.

It brings a wide range of investigation tools in one interface:
• Clear web and darknet search engines
• People search
• Social media research
• IP address and domain analysis
• GEOINT tools
• Media analysis
• Cryptocurrency lookups
• Company name and IBAN searches

The best part: you only need a browser. You can also download it and run everything locally!

🔎 Try it online
💻 Download and run locally
🤖 Use it with Claude
📖 Read more about the project

Maigret 0.6.3 is out! 🕵️

115 site checks fixed, 15 new sites added, better Chinese-site support, improved Cloudflare bypass, and upgraded PDF templates.

Over the past few months, I’ve been receiving more and more fixes from the community. Maigret now gets over 100K installs per month, with more than 1M installs in total! 🚀

👉 Try it yourself: https://github.com/soxoj/maigret#in-one-minute

At probably the hottest leHACK ever, I presented my new cybersecurity tool for penetration testers: 𝐂𝐨𝐦𝐦𝐢𝐏𝐢𝐬𝐭𝐞 🔥

CommiPiste can 𝐢𝐝𝐞𝐧𝐭𝐢𝐟𝐲 𝐭𝐡𝐞 𝐞𝐱𝐚𝐜𝐭 𝐯𝐞𝐫𝐬𝐢𝐨𝐧 𝐨𝐟 𝐨𝐩𝐞𝐧-𝐬𝐨𝐮𝐫𝐜𝐞 𝐰𝐞𝐛 𝐬𝐨𝐟𝐭𝐰𝐚𝐫𝐞 using only publicly accessible static files and then 𝐟𝐢𝐧𝐝 𝐭𝐡𝐞 𝐂𝐕𝐄𝐬 associated with that version.

It can be especially useful when version information is hidden, removed from headers, or unavailable through conventional fingerprinting methods 🔎

It already supports 300 𝐝𝐢𝐟𝐟𝐞𝐫𝐞𝐧𝐭 𝐩𝐥𝐚𝐭𝐟𝐨𝐫𝐦𝐬. For some of them, CommiPiste uses a complete index of commits, while others are identified through smart heuristics 🛠️

👉 𝐆𝐢𝐯𝐞 𝐢𝐭 𝐚 𝐭𝐫𝐲: https://github.com/soxoj/CommiPiste

A huge thank you to the person behind the idea and just an awesome guy, paranoid android 😉

My train from Amsterdam to Paris was cancelled due to the heat 🥵, but I'm still coming to leHACK!

See you at OSINT Village — feel free to reach out! ✌️

OSINT mindset team came in 2nd place at Trace Labs Search Party! 🥈

This past weekend, the Trace Labs Global OSINT Search Party took place — an international CTF focused on finding missing persons. This time, 130+ teams from around the world competed for the top spots 🌍

Our team, consisting of @Soxoj, adk, @vali, and Pr1tchard, delivered an excellent result:
— 2nd place among 130+ teams 🥈
— 28 accepted submissions
— 1,050 points

We will continue participating in events like these and helping people 🧡

🌐Site | 💬 Forum | 🔍 Family |▶YT

Kronikier (web app version)

Get historical contacts (emails, phones) for a website from Internet Archive snapshots.

Web version of https://github.com/soxoj/kronikier

https://kronikier.soxoj.com/

Creator @soxoj_insides

#osint #python #webarchive

KRONIKIER

If you haven’t been able to find the contact details on a particular website today, that doesn’t mean they’ve never been there

The Internet Archive API and Kronikier may find contact details that have been removed very quickly

https://github.com/soxoj/kronikier

Creator @soxoj_insides

I'll be speaking online today at https://osintconference.com/ (hosted by OSINT Ambition, India) with my talk "SOWEL: An OSINT Framework" at 2:00 PM GMT.

📅 Full schedule: https://osintconference.com/schedule-day2

🎥 The online stream: https://streamyard.com/watch/EnUeJrqA5gPr

(The picture is just a joke, unrelated to the topic! 😅)

Mystical: a visualization of PostScript programs through magical circles and sigils 😳

B e a u t i f u l

https://github.com/denismm/mystical_ps

#tools #github

Nameguesser! 🕵️‍♂️🌍✨

Sharing a link to my game where you guess where someone is from based on their full name!

Vibe-coded it in several days as a fun side project to level up my OSINT name recognition skills.

Tested it on some folks at OSINTomático 2025 conference -- it was a lot of fun!

👉 https://nameguesser.soxoj.com/

Give it a try and let me know what you think! ;)

Do you remember my tool gitcolombo to extract emails from code repositories? I've updated it in my spare time:

🟢 hacker-style CLI
⚡ additional powerful checks
🌐 web version: gitcolombo.soxoj.com

P.S. If gitcolombo won't help you, try GitFive — the best tool to find Github user's email

Just a reminder: I maintain socid-extractor, an open-source Python tool that extracts account data from 130+ sites.

👉 Usernames, bios, avatars, follower counts, external links — plus the stable internal identifiers that survive renames and let you re-identify accounts across leaks and archives.

No API keys, no headless browser, normalized field names and ontology, MIT license. ✅

Powers Maigret 🥸 and a number of other OSINT tools.

Don't hesitate to give it a ⭐!

🔗 https://github.com/soxoj/socid-extractor

here we go again

OSINT tools should give you actionable leads, not just random URLs and raw data 🫡

My open source tool Maigret has always been able to search by username, but results analysis was up to the user 🤔

I've now added AI analytics and identity resolution to it, so you can get fast conclusions about a target across 3K sites 🚀

Over the last few weeks, I also rewrote Maigret and cleaned up the checks database: it has near-zero false positives now 🔥

Want to know why such a powerful tool is open? Apply via the link and add the comment: “show me Crimewall QuickLink mode” — and see how insanely far the commercial tools I'm building go beyond this 😉

Three standout open-source OSINT username search tools right now: Blackbird, Aliens_eye, and Naminter 🚀

I finally updated my list of username search tools 👇, retested a bunch of them, and these 3 really stood out.

Huge thanks to their creators (p1ngul1n0, 3xp0rtblog, arxhr007) for building genuinely useful tools and pushing username-based OSINT forward! 🔥

Full list on GitHub: https://github.com/soxoj/osint-namecheckers-list

🎭 ShareTrace: reveal the identity behind any share link

Works for 12 platforms: TikTok, Instagram, Discord, Google Drive, Notion, Telegram, Pinterest, Substack, Suno, ChatGPT, Claude, Perplexity.

Original repo was deleted — I rebuilt it with new platforms and fixes.

👉 https://github.com/soxoj/sharetrace

MCP + OSINT is a powerful combo 🔥

Instead of figuring out how to run CLI tools, just ask your LLM — and it runs Shodan queries, Maigret lookups, DNS fuzzing, and threat intel checks for you.

So, I've made a curated list of OSINT MCP servers. Take a look, try plugging something into your AI tool, or submit a new one!

👉 https://github.com/soxoj/awesome-osint-mcp-servers