Skip to main content

Tinfoleak - Twitter Open Source Intelligence Tool


tinfoleak is an open-source tool within the OSINT (Open Source Intelligence) that automates the extraction of information on Twitter and facilitates subsequent analysis for the generation of intelligence. Taking a user identifier, geographic coordinates or keywords, tinfoleak analyzes the Twitter timeline to extract great volumes of data and show useful and structured information to the intelligence analyst.

tinfoleak is included in several Linux Distros: Kali, CAINE, BlackArch and Buscador. It is currently the most comprehensive open-source tool for intelligence analysis on Twitter.


tinfoleak can extract the following information:
  1.     Account info / User Activity / Protected Accounts
  2.     Source Applications / User Devices / Use Frequency
  3.     Hashtags / Mentions / Likes
  4.     Text Analysis / Words Frequency / Media / Metadata
  5.     User Visited Places / User Routes / User Top Locations
  6.     Social Networks / Digital Identities
  7.     Geolocated Users / Tagged Users
  8.     Followers / Friends
  9.     Lists / Collections
  10.     Conversations
Installation
Install Python and dependencies:
sudo apt install python-pip python-dev build-essential python2.7-dev python-pyexiv2 python-openssl
sudo pip install --upgrade pip
sudo pip install --upgrade virtualenv
sudo pip install --upgrade tweepy
sudo pip install --upgrade pillow
sudo pip install --upgrade exifread
sudo pip install --upgrade jinja2
sudo pip install --upgrade oauth2
Download: https://github.com/vaguileradiaz/tinfoleak

Getting started

The first time you runs tinfoleak, you need to assign the OAuth settings.

    1. Edit “tinfoleak.conf”
        Use your favorite editor 😉
    2. Give value to these variables:
        CONSUMER_KEY
        CONSUMER_SECRET
        ACCESS_TOKEN
        ACCESS_TOKEN_SECRET
    3. How to obtain these values:
        https://developer.twitter.com/en/docs/basics/authentication/guides/access-tokens
    4. Save “tinfoleak.conf”
    5. Execute “tinfoleak.py”


Lets see video:




Labels:

Comments

Post a Comment

Popular posts from this blog

10 reasons Websites get Hacked

Below you will find list of top 10 web vulnerabilities classified by OWASP, here is also description of the problem and some examples. I will just give you the list in case you missed it before, i will not comment on any of these as there is already hot discussion about this matter on several sites/forums. So here it starts: 1. Cross site scripting (XSS) The problem: The “most prevalent and pernicious” Web application security vulnerability, XSS flaws happen when an application sends user data to a Web browser without first validating or encoding the content. This lets hackers execute malicious scripts in a browser, letting them hijack user sessions, deface Web sites, insert hostile content and conduct phishing and malware attacks. Attacks are usually executed with JavaScript, letting hackers manipulate any aspect of a page. In a worst-case scenario, a hacker could steal information and impersonate a user on a bank’s Web site, according to Snyder. Real-world example: PayPal was targete...
10 comments
Read more

How To Enable DNS over HTTPS

  DNS over HTTPS (DoH) is a protocol for performing remote Domain Name System (DNS) resolution via the HTTPS protocol. A goal of the method is to increase user privacy and security by preventing eavesdropping and manipulation of DNS data by man-in-the-middle attacks by using the HTTPS protocol to encrypt the data between the DoH client and the DoH-based DNS resolver. An alternative to DoH is the DNS over TLS (DoT) protocol, a similar standard for encrypting DNS queries, differing only in the methods used for encryption and delivery. On the basis of privacy and security, whether or not a superior protocol exists among the two is a matter of controversial debate, while others argue the merits of either depend on the specific use case. Benefits DoH improves privacy by hiding domain name lookups from someone lurking on public WiFi, your ISP, or anyone else on your local network. DoH, when enabled, ensures that your ISP cannot collect and sell personal information related to your br...
Post a Comment
Read more

Hiburan Murah Bagi Anak Kost

Masih ingat dengan lagu “Nasib Anak Kost” yang pernah dipopulerkan oleh P Project? Lagu yang terkenal beberapa tahun lalu tersebut menceritakan betapa sulitnya hidup sebagai anak kost. Dari yang jarang mengikuti kuliah, telat mendapatkan uang kiriman dari rumah, hingga sulitnya memenuhi janji dengan pacar diceritakan di lagu ini. Namun, apakah hal tersebut dirasakan juga oleh anak kost masa kini? Ternyata, baik yang sudah bekerja maupun belum, sama-sama mengeluhkan masalah keuangan. Alasannya pun beragam, dari gaji tidak cukup, kebanyakan foya-foya, hingga sering berbelanja di akhir minggu. Pada kenyataannya, masalah ekonomi tersebut mudah untuk diatasi. Salah satu kuncinya adalah disiplin. Paksa diri Anda agar tidak terjebak dalam hidup konsumtif. Ada satu alasan kuat mengapa anak kost gemar untuk keluar dari kost dan mulai menghabiskan uang. Kelamaan di kost, berdiam diri saja, memang sangat membosankan. Memang anak kost memerlukan banyak hiburan alternatif. Ada beberapa tips bagaima...
8 comments
Read more