Professional Documents
Culture Documents
Versao PDF
Versao PDF
_OSINT
Hacker Investigador
(alunos) _ENGENHARIA SOCIAL
_VANTAGEM DESLEAL
1.1.2. 1 Recado
2. _OSINT
2.1. Definição?
2.1.2. *
2.1.2.1.1. Passivo
2.1.2.1.1.1. Ativo
2.1.2.1.2. Crescimento
Link: https://clavis.com.br/servicos/threat-
intelligence/
Link: https://clavis.com.br/servicos/threat-
intelligence/
Link: https://securityintelligence.com/what-are-
the-different-types-of-cyberthreat-intelligence/
2.2.1. Uso
2.2.1.1.1.1.1. .
2.2.1.1.1.1.2. .
2.2.1.1.1.1.3. .
2.2.1.1.1.1.4. .
2.2.1.1.1.1.6. Veredito
Link:
https://edition.cnn.com/2021/11/19/us/kyle-
rittenhouse-trial-friday/index.html
2.2.1.1.1.1.7. Prosecutors
2.2.1.1.1.1.7.1. https://youtu.be/JG8PhtFrO0Y?
t=836
Link: https://www.fbi.gov/wanted
2.2.1.1.2.2. Caso
2.2.1.1.2.2.1.1. .
2.2.1.1.2.2.1.2. .
Link: https://www.youtube.com/watch?
v=PmkklnR3TwQ
2.2.1.1.2.2.1.4. OSINT
2.2.1.1.2.2.1.4.1. Caminho 1
2.2.1.1.2.2.1.4.1.1. .
2.2.1.1.2.2.1.4.2. Caminho 2
2.2.1.1.2.2.1.4.2.1.1.1. .
2.2.1.1.2.2.1.4.2.1.1.1.1. turkey
trash bean - Google Search
Link:
https://www.google.com/search?
q=turkey+trash+bean&source=lnms&t
2.2.1.1.2.2.1.4.2.1.2.1. .
2.2.1.1.2.2.1.4.2.1.2.1.1.
http://www.grosfillexturkiye.com/en/referen
Link:
http://www.grosfillexturkiye.com/en/refe
2.2.1.1.2.2.1.4.2.1.2.1.1.1.
"Lugares Modelos"
2.2.1.1.2.2.1.4.2.1.3.1. o "chão"
2.2.1.1.2.2.1.4.2.2.2. Mapeamento
2.2.1.1.2.2.1.4.2.2.2.1. 1.5m
2.2.1.1.2.2.1.4.2.3.1.1. entrando em
cidades e navegando
2.2.1.1.2.2.1.4.2.3.1.1.1. Side
2.2.1.1.2.2.1.4.2.3.1.1.1.1. Hoteis
em Side
2.2.1.1.2.2.1.4.2.3.1.1.1.1.1.
Booking.com
Link:
https://www.booking.com/hotel/tr/p
hane-garden.en-gb.html?
aid=356980;label=gog235jc-
1DCAso5AFCFHByaW1hc29sLWhhb
2.2.1.1.2.2.1.4.2.3.1.1.1.1.1.1.
.
2.2.1.1.2.2.1.4.2.3.1.1.1.1.1.1.1
*Primasol Hane*
2.2.1.1.2.2.1.4.2.3.1.1.1.1.1.1
The Primasol Hane
Family Hotel.
2.2.1.1.2.2.1.4.2.3.1.1.1.1.
.
2.2.1.1.2.2.1.4.2.4. O Hotel
2.2.1.1.2.2.1.4.2.4.1.1.1. Cache
2.2.1.1.2.2.1.4.2.4.1.1.2.
Reviews/Social/Fotos ?
2.2.1.1.2.2.1.4.2.4.1.1.2.1.
PrimaSol Hane Family (Evrenseki)
• HolidayCheck (Türkische Riviera
| Türkei)
Link:
https://www.holidaycheck.de/hi/prima
hane-family/62dfaca2-2db1-
3cef-a6d2-f6ad2cf916d9
2.2.1.1.2.2.1.4.2.4.1.2. Quando?
2.2.1.1.2.2.1.4.2.4.1.2.1. .
2.2.1.1.2.2.1.4.2.4.1.2.1.1. .
2.2.1.1.3.1.1. Noticias
Link: https://www.reuters.com/article/us-
mideast-crisis-qaeda-leader-idUSKBN16924L
Link: https://www.wsj.com/articles/secret-u-s-
missile-aims-to-kill-only-terrorists-not-nearby-
civilians-11557403411
Link:
https://www.nytimes.com/2020/06/24/world/middleea
qaeda-r9x-hellfire-missile.html
2.2.1.1.3.1.2. .
2.2.1.1.3.1.3. OSINT
2.2.1.1.3.1.3.1. .
2.2.1.1.3.1.3.1.1. .
2.2.1.1.3.1.3.2. Ataques
2.2.1.1.3.1.3.2.1. https://t.co/VyquiabgdP?
amp=1
Link:
http://g1.globo.com/mundo/noticia/2015/10/investigaca
conclui-que-voo-mh17-foi-derrubado-por-missil-
na-ucrania.html
2.2.1.1.3.2.2. OSINT
Link: https://www.bellingcat.com/news/uk-and-
europe/2014/11/08/origin-of-the-separatists-
buk-a-bellingcat-investigation/
2.2.1.1.3.3.1. TikTok
Link: https://www.tiktok.com/@wlfdllinha
Link: https://www.fbi.gov/investigate/violent-
crime/art-theft/national-stolen-art-file
2.2.1.1.4.2. Search
Link: https://www.lootedart.com/search2.php
2.2.1.2.1.1. Pré
2.2.1.2.1.1.1. tamanho?
2.2.1.2.1.1.3. oq esperar?
2.2.1.2.1.2. Live
Link: https://onemilliontweetmap.com/?
center=25.505,-0.09&zoom=2&search=&timeStep=0&
2.2.1.2.1.2.2. https://www.trendsmap.com/map
2.2.1.2.1.3. Pós
Link:
https://maphub.net/MappingInsurgencies/taliban-
checkpoints
2.2.1.3. Jornalismo
2.2.1.6. Cybersecurity
2.2.1.6.1.2. Mas...
2.2.1.6.1.2.1.1. É um grupo?
2.2.1.6.1.2.3. É direcionado?
2.2.1.6.2. Pentest
2.2.1.6.2.2.1. Certificações
2.2.1.6.2.5. Leaks
2.2.1.6.3. Monitoramento
2.2.1.7. Detetives
2.2.1.9. ....
2.3.1.1.1.2. comportamento
2.3.1.1.1.3. hábitos
2.3.1.1.2. Contas
2.3.1.1.2.1. Email
2.3.1.1.2.2. Telefone
2.3.1.1.2.3. Username
2.3.1.1.2.3.1. Computador
2.3.1.1.2.3.2. Documentos
2.3.1.1.2.5. ...
2.3.1.1.3. Navegador
2.3.1.1.3.1. Cookies
2.3.1.1.3.2. Sessões
2.3.1.1.3.3. Fingerprint
2.3.1.1.4. Computador
2.3.1.1.5. Internet
2.3.1.2.1. .
2.3.1.2.2. Guias
Link: https://www.secjuice.com/the-art-of-the-sock-
osint-humint/
Link: https://hackernoon.com/how-to-make-sock-
puppet-accounts-for-osint-in-2021-12r33gs
Link:
https://www.reddit.com/r/OSINT/comments/dp70jr/my_proc
2.3.1.2.3. Criação
2.3.1.2.3.1.2. "estratéginas"
Link: https://namecheap.com
2.3.1.2.3.4. Dicas
2.3.1.2.3.4.1. Conexão
2.3.1.2.3.4.1.1.2. hotel
2.3.1.2.3.4.1.1.3. cafe
2.3.1.2.3.4.2.1. privacidade
2.3.1.2.3.4.3. telefone
2.3.1.2.3.4.3.2. hoteis
Link: http://howmanyofme.com/
2.3.1.2.3.4.4.2.3. comente
2.3.1.2.3.4.4.3. Dados
2.3.2.1.1.1. VMWARE
2.3.2.2. Navegador
2.3.2.2.1. Chrome/Chromium
2.3.2.2.2. Firefox
2.3.2.3. VPN
2.3.2.4. Note-taking
2.3.2.4.1. Notion
2.3.2.5.1. OBS
2.3.2.6.1. Wireshark
2.3.2.6.2. Glasswire
Link: https://www.glasswire.com/
Link:
https://www.obdev.at/products/littlesnitch/index.html
2.3.2.7. Burners
Link: https://mysudo.com/
Link: https://callyo.com/
Link: https://protonmail.com/
2.3.2.8. GIMP
2.3.2.9. Audicity
2.4. Buscas
Link: https://www.searchenginecolossus.com/
2.4.1.2. Google
Link: https://www.google.com/advanced_search
Link: https://moz.com/blog/mastering-google-
search-operators-in-67-steps%20
2.4.1.2.2. Exemplos
2.4.1.3. Bing
Link: https://www.bing.com/
2.4.1.3.2. https://www.compass-
security.com/fileadmin/Research/White_Papers/2017-
01_osint_cheat_sheet.pdf
Link: http://advangle.com/
2.4.1.5. BVSG
Link: http://bvsg.org/
2.4.1.6. Yahoo
Link: https://www.yahoo.com/
2.4.1.7. Yandex
2.4.1.7.1. https://yandex.com/
2.4.1.8. Millionshort
Link: https://millionshort.com/
Link: https://start.me/p/b56xX8/osint
Link: https://archive.org/
Link: http://cachedview.com/
Link: http://www.cachedpages.com/
Link: https://github.com/hartator/wayback-machine-
downloader
2.4.2.6. GAU
2.4.2.6.1. instalar o go
Lucas Dos Santos Proficio - lucasproficio@gmail.com - IP: 189.79.14.89
2.4.2.6.2. GitHub - lc/gau: Fetch known URLs from
AlienVault's Open Threat Exchange, the Wayback
Machine, and Common Crawl.
Link: https://github.com/lc/gau
2.4.3.1. AHMIA
Link: https://ahmia.fi/
2.4.3.2. DarkSearch
Link: https://darksearch.io/
Link: https://wigle.net/
2.5. Identificadores
2.5.1. Nomes
Link: https://www.spokeo.com/
2.5.1.2. Buscadores
2.5.1.2.1. Google
2.5.2. E-mail
2.5.2.1. Buscadores
2.5.2.2. LinkedIn
2.5.2.3. theHarvester
2.5.2.4. hunter.io
2.5.3. Usernames
Link: https://whatsmyname.app/
Link: https://namechk.com/
2.5.3.3. Sherlock
Link: https://github.com/sherlock-project/sherlock
2.5.4. Telefones
2.5.4.1. PhoneInfoga
Link: https://github.com/sundowndev/PhoneInfoga
2.5.5.
2.5.5.1. Consulta
2.5.5.1.2. ...
2.5.5.1.2.1. Telegram
2.5.5.1.2.1.1. ###
2.5.5.1.2.1.2. ####
2.5.5.1.2.1.3. ###
2.6.1. Twitter
2.6.1.1. Operadores
Link: https://github.com/igorbrigadir/twitter-advanced-
search
2.6.1.2. Archive
Link: https://web.archive.org/web/*?twitter.com/user
2.6.1.3. Tweetdeck
2.6.1.4. Ferramentas
2.6.1.4.1. Mentiomapp
Link: http://analytics.mentionmapp.com/?v=free
Link: https://foller.me/
Link: https://tinfoleak.com/
Link: https://twitonomy.com/
Link: https://twiangulate.com/search/
Link: https://followerwonk.com/
Link: https://sleepingtime.org/
Link: https://onemilliontweetmap.com/
2.6.1.4.9. Spoonbill
Link: https://spoonbill.io/
Link: https://tweetbeaver.com/
2.6.1.4.11. https://www.trendsmap.com/
Link: https://www.trendsmap.com/
Link: https://www.omnisci.com/demos/tweetmap
Link: https://github.com/twintproject
2.6.2. Instagram
2.6.2.1. Objetivos
2.6.2.1.2. Postagens
2.6.2.1.2.1. horários
2.6.2.1.2.1.1. taken_at_timestamp
2.6.2.1.2.2. locais
2.6.2.1.3. username / id
2.6.2.2. URLs
https://www.instagram.com/USER/channel/
https://www.instagram.com/explore/tags/keyword/
https://www.instagram.com/USER/tagged/
https://www.instagram.com/USER/?__a=1
2.6.2.3. Operadores
2.6.2.4. Ferramentas
Link: https://www.searchmy.bio/
Link: https://followerwonk.com/track
Link: https://www.instadp.com/
2.6.2.4.3.1. og:image
Link: https://www.instafollowers.co/download-
instagram-stories
Link: https://github.com/althonos/InstaLooter
Link: https://github.com/Datalux/Osintgram
2.6.3. TikTok
2.6.3.1. URL
https://tiktok.com/@username
https://tiktok.com/tag/keyword
https://www.tiktok.com/@username/video/ID
2.6.3.2. Identificadores
2.6.3.2.1. uniqueid
2.6.3.2.3. nickname
2.6.3.3. Buscas
2.6.3.3.3. inurl:https://m.tiktok.com/h5/share/usr
filetype:html keyword
Link:
https://web.archive.org/web/*/https://www.tiktok.com/@usern
2.6.3.4. Ferramentas
Link: https://www.osintcombine.com/tiktok-quick-
search
Link: https://ttdown.org/
Link: https://github.com/bravoTF117/berserkparser
2.6.4. LinkedIn
2.6.4.1. $
Lucas Dos Santos Proficio - lucasproficio@gmail.com - IP: 189.79.14.89
2.6.4.2. Analise
2.6.4.3. Buscas
2.6.4.4. Operadores
2.6.4.5. Ferramentas
2.6.4.5.1. Discoverly
Link:
https://chrome.google.com/webstore/detail/discoverly/dijhcpb
utm_source=chrome-ntp-icon
Link: https://github.com/eth0izzle/the-endorser
2.6.5. Facebook
Posts: https://www.facebook.com/search/posts/?
q=busca
People: https://www.facebook.com/search/people/?
q=busca
Photos; https://www.facebook.com/search/photos/?
q=busca
Photos; https://www.facebook.com/search/photos/?
q=busca
Videos: https://www.facebook.com/search/videos/?
q=busca
Marketplace:
https://www.facebook.com/search/marketplace/?
q=busca
Pages: https://www.facebook.com/search/pages/?
q=busca
Groups: https://www.facebook.com/search/groups/?
q=busca
Apps: https://www.facebook.com/search/apps/?
q=busca
Events: https://www.facebook.com/search/events/?
q=busca
Links: https://www.facebook.com/search/links/?
q=busca
Timeline: https://www.facebook.com/zuck
About: https://www.facebook.com/zuck/about
Employment: https://www.facebook.com/zuck/about
?section=work
Education: https://www.facebook.com/zuck/about?
section=education
Locations: https://www.facebook.com/zuck/about?
section=living
Relationships: https://www.facebook.com/zuck/about
?section=relationship
Family
Members: https://www.facebook.com/zuck/about?
section=family
Bio: https://www.facebook.com/zuck/about?
section=bio
Friends: https://www.facebook.com/zuck/about?
section=friends
Profile
Photos: https://www.facebook.com/zuck/about?
section=photos
Videos: https://www.facebook.com/zuck/about?
section=videos
Check-Ins: https://www.facebook.com/zuck/about?
section=places_recent
Sports: https://www.facebook.com/zuck/about?
section=sports
Music: https://www.facebook.com/zuck/about?
section=music
Movies: https://www.facebook.com/zuck/about?
section=movies
TV Shows: https://www.facebook.com/zuck/about?
section=tv
Books: https://www.facebook.com/zuck/about?
section=books
Likes: https://www.facebook.com/zuck/about?
section=likes
Events: https://www.facebook.com/zuck/about?
section=events
Facts: https://www.facebook.com/zuck/about?
section=facts
Reviews: https://www.facebook.com/zuck/about?
section=reviews
Notes: https://www.facebook.com/zuck/about?
section=notes
2.6.6.1. ...
2.6.6.1.1. live
Link:
https://map.snapchat.com/@41.335703,-95.590514,2.00z
2.6.7. Dating
Link: https://start.me/p/VRxaj5/dating-apps-and-hook-up-
sites-for-investigators
Link: https://addons.mozilla.org/en-
US/firefox/addon/location-guard/
Link: https://www.aware-online.com/en/osint-tools/
2.7. Arquivos
2.7.1. Metadados
2.7.1.1. Exiftool
2.7.1.2. FotoForensics
Link: https://fotoforensics.com/
2.7.2. Conteúdo
2.7.2.1. Fotos
Link: https://images.google.com/
Link: https://bing.com/images
Link: https://tineye.com/
2.7.2.1.1.4. https://images.yandex.com/
Link: https://www.osintcombine.com/reverse-image-
analyzer
2.7.2.1.1.6. Ferramentas
Link:
https://chrome.google.com/webstore/detail/search-
by-image/cnojnbdhbhnkbcieeekonklommdnndci
Link:
https://chrome.google.com/webstore/detail/reveye-
reverse-image-
sear/keaaclcjhehbbapnphnmpiklalfhelgf?hl=en
Link: https://29a.ch/photo-forensics/#forensic-
magnifier
2.7.2.1.3. Rostos
Link: https://pimeyes.com/en
2.7.2.1.4.
https://somerandomstuff1.wordpress.com/2019/02/08/geoguess
the-top-tips-tricks-and-techniques/
2.7.2.2. Documentos
2.7.2.3. Código-fonte
2.7.3. Nomenclaturas
Link:
https://github.com/s0md3v/Dump/blob/master/static/filename-
fingerprinting.md
2.8.1. Mapas
2.8.1.4. https://yandex.com/maps/
2.8.2. Satalites
Link: https://earth.google.com/web/
Link: https://www.gearthhacks.com/
Link: https://zoom.earth/
2.8.2.4. https://apps.sentinel-hub.com/
Link:
https://livingatlas.arcgis.com/wayback/#active=42403
2.8.3. Cameras
2.8.3.1. https://www.insecam.org/
2.8.4. Hands-on
2.8.4.1. 1
2.8.4.2. 2
2.8.4.2.1. Foto
Link: https://www.suncalc.org/
2.8.4.2.2.1. ☀
2.8.4.2.2.2. Uniforme
2.8.4.2.2.2.1. Camopedia
Link:
https://camouflageindex.camouflagesociety.org/index-
2.html
2.8.4.2.2.3. Badge
Link:
https://en.wikipedia.org/wiki/List_of_comparative_militar
2.8.4.2.2.3.2. http://www.uniforminsignia.org/
Link:
https://somerandomstuff1.wordpress.com/2019/02/08/geoguessr-
the-top-tips-tricks-and-techniques/
2.9.1. Github
Link: https://buckets.grayhatwarfare.com/
2.9.3. Pastes
2.10.1. Trello
2.10.2. Cloud
2.10.3. ...
Link: https://weleakinfo.com/
Link: https://github.com/Greyjedix/Profil3r
2.11.3. Snapchat
Link: https://archive.org/download/SnapChat.7z
2.11.4. LinkedIn
Link: https://archive.org/details/LIUsers.7z
2.11.5. DEHASHED
2.12. Transporte
2.12.1. Barcos
Link:
https://www.marinetraffic.com/en/ais/home/centerx:-12.0/cente
Link: https://bosphorusobserver.com/
Link: https://iuu-vessels.org/Home/Search
2.12.1.5. OSINT
Link:
https://www.bellingcat.com/resources/2021/03/26/suez-
canal-satellite-clues-on-a-stricken-cargo-ship/
2.12.2. Aviões
Link: http://flightradar24.com/
2.12.2.2. c/ militar
Link: https://globe.adsbexchange.com/
Link: https://www.bellingcat.com/resources/how-
tos/2019/10/15/a-beginners-guide-to-flight-tracking/
2.12.2.4. ODINT
2.12.3. Trem
Link:
https://wiki.openstreetmap.org/wiki/OpenRailwayMap
Link: https://mobility.portal.geops.io/world.geops.transit?
baselayers=world.geops.travic,ch.sbb.netzkarte,ch.sbb.netzkar
2.13. Dominios
2.13.1. whois
Link: https://dnsdumpster.com/
2.13.3. Buscadores
2.14. Mortos
Link: https://www.familysearch.org/en/
2.16. Projetos
Link: https://github.com/jivoi/awesome-osint
Link: https://osintframework.com/
Link: https://start.me/p/DPYPMz/the-ultimate-osint-collection
2.16.4. SHODAN
2.16.5. MALTEGO
3. _ENGENHARIA SOCIAL
3.1. Definição
3.1.2.1. Hackers
3.1.2.1.3.4. crimes
Link: https://humanbehaviorcon.com/
3.1.2.2. Pentest
3.1.2.4. Scammers
3.1.2.5. Vendedores
3.1.2.6. Governos
3.1.2.6.1. comunicação
Link: https://www.social-
engineer.org/wiki/archives/Governments/Governments-
FoodElectionWeapon.html
3.1.2.7. "Negociadores"
3.1.2.8. Humanos :)
3.1.2.8.1. crianças
3.1.2.8.2. pais
3.1.2.8.3. jornalistas
3.1.2.8.4. medicos
3.1.2.8.5. policiais
3.1.2.8.6. ...
3.2.1. PESQUISA
Link: https://www.social-engineer.org/social-
engineering/social-engineering-infographic/
3.2.2. Phishing
3.2.2.3.1. Dropbox
3.2.2.6. Itau
3.2.2.6.1. BB
3.2.2.7. Netflix
3.2.3. Vishing
Link: https://www.social-engineer.com/analyzing-the-
2020-twitter-attack/
Link: https://krebsonsecurity.com/2020/11/godaddy-
employees-used-in-attacks-on-multiple-cryptocurrency-
services/
3.2.3.4. COVID
3.2.3.4.1. .
3.2.3.5. India
Video:
http:https://www.youtube.com/embed/o2ixj0m4F_E?
start=0
Link: https://www.youtube.com/watch?v=daHVD9a_rJU
Video:
http:https://www.youtube.com/embed/daHVD9a_rJU?
start=0
3.2.3.6.
3.2.3.6.1. .
3.2.3.6.1.1. .
3.2.4. SMiShing
3.2.5. Impersonation
3.2.5.2. Entregadores
3.2.5.3. Inspeção
3.3.1.1. Comunicação
Link: https://www.youtube.com/watch?v=6cAk6xdgueI
Video:
http:https://www.youtube.com/embed/6cAk6xdgueI?
start=0
3.3.1.2.2. VIPS
Link: https://www.youtube.com/watch?
v=wfJ3OXwSfDU
Video:
http:https://www.youtube.com/embed/wfJ3OXwSfDU?
start=0
3.3.1.3. Microexpressões
3.3.1.3.1. .
3.3.1.4. Rapport
3.3.1.4.2.1. Controle
Link: https://www.youtube.com/watch?
v=iUmo8Y1LRYE
Video:
http:https://www.youtube.com/embed/iUmo8Y1LRYE?
start=0
3.3.1.4.2.4. Empatia
3.3.1.4.2.5. Ego
3.3.1.4.2.6.1. como?quando?porque?
3.3.1.5.2.
3.3.1.5.2.2. O Alvo
3.3.1.5.2.2.1.2. Exemplos
3.3.1.5.2.2.1.2.1. No Marketing
3.3.1.5.2.2.1.2.2. ...
3.3.1.5.3. Entrevistas/Interrogatórios
3.3.1.6.1. Autoridade
3.3.1.6.2. Reciprocidade
3.3.1.6.3. Escassez
Link: https://rockcontent.com/br/blog/gatilhos-
mentais/
3.3.1.7. Elicitação
3.3.1.7.2. Interrogatório/Quesitonário
Link:
https://whatreallyhappened.com/RANCHO/POLITICS/CIA_
3.3.1.7.3. ..
3.3.1.8. Pretexting
3.3.1.8.1.1. .
4. _VANTAGEM DESLEAL
4.1. Hacking + OSINT + Engenharia Social
4.1.1.4. OSINT
4.1.1.5. Interações
4.1.2. Phishing
4.1.2.1. Direcionado
4.1.2.3.1. #1
4.1.2.3.1.1. Direcionado
4.1.2.3.1.3. Email
4.1.2.3.1.3.1. lookalike
4.1.2.3.2. #2
4.1.2.3.2.1. Gatilhos
4.1.2.3.3. #3
4.1.2.3.3.1. Phishing
4.1.2.4. PhishStats
Link: https://phishstats.info/
4.1.3. Vishing
4.1.3.1.
4.1.4. SMiShing
4.1.4.1.
4.1.5. "Ask"
4.1.5.1. Camera
4.1.5.2. Geolocalização
4.1.5.3. Microfone
4.1.5.4. ....
4.1.6. IoT
4.1.7. Trojan/Malwares
4.1.7.1. ANDROID
4.1.7.2. WINDOWS