DFW1N-OSINT

Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers

View on GitHub

DFW1N Open Source Intelligence List Australia

Description:

Conduct background checks on employees or find a missing person that will assist the government finding people. The goal of this repository is to provide information or ideas to assist in your OSINT investigation on your target. This repository will provide you with many ideas and information to conduct a thorough search.

A reminder that this list is still currently being developed and is built on OSINT gathering tools to scrape the clear web and deep web for information. This list was designed to assist cyber professionals and ethical hackers for the AustCyber Canberra Innovation Node that partnered with the Australian Federal Police, the National Missing Persons Coordination Centre, and Trace Labs to conduct a missing persons event. The purpose of this list is to ensure it is easier to find OSINT on Australians that have gone missing. This list can also be used for many other purposes beyond OSINT.

Australia’s Largest Open Source Intelligence Repository

↑ Credits

Contributor:

Contributing

Please read the Contributing file for information if you wish to start contributing to this respository.

📖 Table of Contents

↑ Introduction

I have created this for the purposes of Open Source Intelligence (OSINT) Gathering. This is a guide and cheat sheet you can use to speed up your process for background checks, employee information scraping, missing person searches, and much more. This list would benefit:

… and more. This has been targeted towards OSINT specifically in Australia.

Start by downloading a OSINT Operating System (OS), create burner accounts for all social media platforms so you do not use your real information as some services could alert your target to your investigation. Use a VPN when conducting OSINT investigations, but do not use a free VPN - they are an information security risk.

↑ OSINT Operating Systems

Below are the most popular methods to start conducting OSINT investigations.

Linux Distros

Android Emulators

↑ Virtual Machines

↑ Google Dorking

Google Dorking is a passive information gathering method. It uses leverages specially crafted Google search queries to isolate pieces of information about your target.

↑ Live Cams Australia

Have you seen anything suspicious happening in these live cams streaming all around Australia?

↑ Online Fake Identification

So you are making burner accounts to do your OSINT on the internet and deep web. Wouldn’t it be helpful for you to create a quick easy fake identity online to save to a notepad to remember your fake address, username, email, burner phone numbers? These websites will assist you in creating a fake identity in a matter of minutes to help with your investigation.

↑ Large Free Email Providers

This list will provide you with the largest email providers to assist you in either creating burner accounts or running email scrapes against there email domain servers on your target.

↑ Large Social Networks

↑ Social Media OSINT Tools

Facebook Tools

Twitter Tools

LinkedIn Tools

↑ Australian Dating Networks

You may find information on your target on these dating websites or find them listed on it, it could become a potential lead to find out if they were listed on a dating site before they went missing or anything related to your target.

↑ Username Identifiers

Some links that scan through sites to find where your target is registered:

↑ Person Investigations

This will assist you with quick references to websites that could speed up your research on people.

Australia

↑ Job Search Networks

This list is the main job search networks used in Australia to find job employment did your target recently apply for a job on any of these sites before they went missing or maybe you want to find out information about companies your doing OSINT research on.

Australia

↑ Online Alerts

Specifically use these to get alerts when something changes or is posted with specific entries online. Wouldn’t be a bad idea to put alerts on your targets social media accounts or name online.

↑ Email Data Dumps

Assuming you know or have obtained your target’s email address, you can check if their email has been compromised. A compromised email could lead to hashed, encrypted, or even plaintext passwords as well as more personally-identifiable information.

↑ Australian Police and Intelligence Services

This section is dedicated to assist Australian, Ethical hackers, Police Services, Intelligence Agencies or Private investigators in quickly finding all law enforcement bodies in one place for quick access to information or policies you are looking for or leads on your targets.

Australian Police Services

Australian Intelligence Services

Australian Cyber Departments

↑ Internet Search Engines

List of big known search engines used to browse the internet.

IoT Search Engines

↑ Best Browser Add-ons for OSINT

Mozilla Firefox

Google Chrome

↑ Internet Browsers

↑ Most Visited Sites

This Section will list the most visited sites in Australia the benefit of this list will give you quick access to sites you could use to scrape for usernames or emails registered to it to locate or find information on people.

Australia

↑ Search Australian Vehicle Registrations

Find out what type of car your target, employee, boss or company has what colour, engine type, brand is it this information would benefit you if you find there registration plate number this information could be used to locate their car passing through live cams on Australian highways to find out where your target was heading towards or disappeared at this could unlock a whole new piece of information on your targets location it gives you the ability to find out where they were heading if you find it the direction the vehicle was traveling.

Live Traffic Cameras for OSINT Gathering

↑ Australian Prison System

Is your target from prison? Maybe a person went missing near a jail. This section will list:

… for quick OSINT research of areas that could pose a risk to the Australian society if something was to happen in the surrounding area.

↑ Australian Capital Cities

Australia

↑ Geolocation Tools & Sites

These programs and tools can be used for OSINT Research to try get a understanding of the area and the surroundings to research the area for any clues in the surrounding area that could help with person finding.

Tools

Sites

↑ OSINT Tools

↑ Barcode Readers & Generators

↑ Automated OSINT Tools

↑ Image Forensics

↑ Mobile Forensics

So you have your target’s phone number. Use these OSINT tools to assist with your investigation or background checks:

↑ Australian Credit Checks

So let’s assume you have done a fair amount of OSINT gathering on your target and you have managed to get the basics of their details. Why not take it a step further and use those details to do a credit check on them? This would increase your profile on your target as this may unlock unpaid bills or outstanding debts.

↑ Australian ABN Look Up

You may have found the company or name of your target. Why not check if they have a ABN? You may find some interesting details that are free and open source that could help you with your investigation.

Companies need to be registered with ASIC, as well as business names. You can find information about companies tied to their ACNs (Australian company numbers) as well as information behind sole traders (including home addresses in some cases, if they haven’t marked themselves as anonymous in the Australian Electoral Role). ASIC also offers the ability to obtain company filings for a fee.

↑ Report Generators

After you have enough information on your target, you can use these tools to assist in generating a final report:

↑ VPN Services

Below are popular VPN services to keep your IP address hidden when browsing the internet.

VPN Services

There are many other VPN Services this is just a handful look around find one that is right for you.

↑ Dark Web Links

↑ Freedom Of Information

Every state and territory jurisdiction as well as the Commonwealth has a Freedom Of Information (FOI) Act. These pieces of legislation allow anyone to request publication of a vast range of documents held by the governments of Australia. Note that the specifics of FOI requests differ between jurisdictions, and legislation is often amended.

↑ Australian Archives

Your target may have been mentioned in an old newspaper article or other archived media. You can use the following services to attempt to dig up any relevant information:

Support

Please Support me if this has helped you with OSINT Research or investigation by following me on Twitter or connecting with me on LinkedIn feel free to visit my site at Crimol. I hope this has helped with your investigation or OSINT or atleast given you ideas to where to start your search and the potential of open source intelligence that relates to the target.

@Sacha_Roussakis

@Sacha Roussakis-Notter

↑ Radio/Signal Broadcasts

Many Australian radio and signal feeds are streamed and/or archived across the web. For example, the ACT’s emergency services broadcast feed and its archives can be found here:

These feeds can be incredibly useful. The ABC used this particular feed to time the emergency response to the Namadgi bushfire in January 2020.

↑ Aerial Imagery

Beyond satellite data from providers like MODIS, Australian jurisdictions often release aerial imagery and other geospatial data through public GIS servers (often running ArcGIS behind the scenes).

Geoscience Australia has a vast online collection of historic aerial imagery that is available for free access:

Other providers include State/Territory governments themselves. The ACT and NSW governments both provide ArcGIS access to historic and current(ish) aerial imagery:

↑ Transport

Flights

Like pretty much anywhere else in the world, you can track Australian airlines and flights with flight trackers like Flightradar24.

Public Transport

Many jurisdictions have open data feeds that provide current or near-current information about public transport systems. The ACT has a data feed for their ACTION buses as well as live data feeds for their tram system. More information canb e found here. If you have access to the Google Maps API, you can get a general interface into most jurisdictions’ transport systems where Google has already done the API integration work for you. More info can be found here.

↑ Courts and Tribunal Hearings

Most courts in Australia are open, meaning the public is allowed to know about who each hearing is for, and can visit the court (or in some cases dial in remotely) to watch/listen to the hearing’s proceedings.

NSW provides a central list for all court cases. If you can pass a CAPTCHA, you can access them all:

The ACT does the same (pretty easy, as it only has 2 courts beyond the Childrens Court):

Some other jurisdictions like Queensland make the process a bit harder, where some local/magistrate courts (e.g., Toowoomba) have their own websites with their own hearing list system. These can range from well-maintained to copy-and-pasted-PDF to non-existing levels of accessibility:

The Federal courts (including the High Court) provide regularly updated hearing lists:

↑ Tenders and Contracts

Each government around Australia contracts out certain activities to private third parties. Tenders (proposals for this work) and contracts (agreements between 3rd parties and the government to complete the work and constraints, etc.) are publicly available to different degrees depending on jurisdiction. The Commonwealth’s one-stop shop for contracts and tenders is AusTender. Each state and territory provides their contract listings to varying degrees of accessibility.

Contracts and tenders, and surrounding media reports, can help paint a picture of why certain decisions were made and can be full of information relevant to an investigation.

↑ Intellectual Property & Trade Marks

IP Australia offers a search function for trade marks and copyright. This may help an investigation directly, but it’s also important to respect trade mark and copyright legislation as part of the investigation and reporting process, so as to not jeapordise your work.

↑ Public Service Gazettes

Most governments in Australia publish employment gazettes. These documents contain the names of new internal employees within the public service. You’re not going to find any ASIO agents this way, but they can offer some quick wins if you have a full name to use within your investigation:

etc., you can easily Google the rest.