How Hackers Find Anyone's Info From Just Their Instagram... — Transcript

Full transcript

1. 0:00Watch this. I'm going to take this
2. 0:01Instagram handle, just one username, and
3. 0:03I'll get her real name, the city she
4. 0:05lives in, her phone number, and every
5. 0:08other account she's ever made online. I
6. 0:10got all of this through OSINT, open
7. 0:12source intelligence. Basically, all the
8. 0:14public information that's out there
9. 0:16about you online, scattered across the
10. 0:18internet. And I'm going to be showing
11. 0:20you exactly how it's done. But before we
12. 0:22go any further, everything I'm about to
13. 0:24show you on this video is done on my own
14. 0:25accounts. Don't do this with malicious
15. 0:27intent. OSINT by itself is legal, but
16. 0:30the second you start using it to stalk,
17. 0:32harass, or even scam someone, that's
18. 0:34where you cross the line and it becomes
19. 0:36illegal. Let's begin. The first tool I
20. 0:38want to show you guys here is called
21. 0:39OSINTGram, and it's pretty popular. It
22. 0:41has 12,000 stars on GitHub, and it does
23. 0:44one thing very well. You give it one
24. 0:45single Instagram username, and it pulls
25. 0:48back everything Instagram is publicly
26. 0:50leaking on that account. Without wasting
27. 0:52much time, let's just scroll down and
28. 0:53begin with the installation. And we can
29. 0:54either just clone this right here and
30. 0:55paste it in our terminal, or we can go
31. 0:57up here and click the big green button
32. 0:59and copy the web URL, then go to our
33. 1:01terminal and just type git clone, and
34. 1:03then paste in the web URL we just
35. 1:04copied. And while this is cloning,
36. 1:06scroll down and hit the subscribe
37. 1:07button. I would really appreciate it.
38. 1:09Once done, we CD into the tool, CDO, and
39. 1:12then tab to fill it out by itself. Press
40. 1:14enter. Let's list the Let's clear this
41. 1:16up first and then list the files. And
42. 1:17here inside the tool, we can see a bunch
43. 1:19of files and folders, and one of them is
44. 1:21requirements.txt.
45. 1:23This means we have a bunch of
46. 1:24dependencies to install so this tool can
47. 1:26run smoothly without any errors. And
48. 1:28also in the installation guide right
49. 1:29here, we see we first need to make a
50. 1:30virtual environment to install the
51. 1:32dependencies. So we copy this and we
52. 1:33just paste it in our terminal. Hit
53. 1:35enter. Now we load the virtual
54. 1:36environment that we just created. And to
55. 1:38do that, we go to the installation page
56. 1:39again, and in the fourth section, load
57. 1:41the virtual environment. If you're on
58. 1:43Windows, you use this command right
59. 1:44here, but since I'm on Kali Linux, I use
60. 1:46a source to activate it. I'll copy this
61. 1:48section, then paste it in my terminal.
62. 1:49Right click, paste to clipboard. And by
63. 1:51this part right here, you know it loaded
64. 1:53successfully. Now all that's left to do
65. 1:54is going to the dependencies. To to the
66. 1:57requirements of Instasheck. To do that,
67. 1:58we just copy right pip install -r
68. 2:00requirements.txt. We copy it, paste on
69. 2:02terminal, standard, and it takes a bit
70. 2:04to install. After it's done, we clean up
71. 2:06the terminal so it's nice and clean. And
72. 2:08now we're almost done, but there's one
73. 2:10more thing. We need to pull the data
74. 2:11somehow from Instagram. And then the
75. 2:13sixth step, right over here, open the
76. 2:14credentials.ini file in the config
77. 2:17folder. Let's go ahead and do that real
78. 2:18quick. There's the files, we can click
79. 2:20that inside config, list the files
80. 2:22again, and here we see it,
81. 2:23credentials.ini. Nano credentials and we
82. 2:27tab. Inside we have three fields,
83. 2:29username, password, and hiker_api_token.
84. 2:33There's two ways we can pull the data.
85. 2:34Either we log in into our normal
86. 2:36Instagram account using our username and
87. 2:38password, or use the hiker API token. In
88. 2:41my opinion, using your own Instagram
89. 2:42account is a very bad idea because
90. 2:44Instagram is very aggressive and cracks
91. 2:46down on bots. And as soon as the tool
92. 2:48starts pulling data, the Instagram is
93. 2:50going to think this account is a bot,
94. 2:52either going to lock it or ban it
95. 2:53completely. So, we should go with the
96. 2:55hiker API token. We get the token or the
97. 2:57access key that we need directly from
98. 2:58the website, and it says in the
99. 3:00paragraph right here, use hiker API
100. 3:01token from the website. Right click,
101. 3:04open new tab. First 100 requests are
102. 3:06free after registration and confirmation
103. 3:08with your Telegram. Let me show you.
104. 3:10When you go to the site, you get
105. 3:11redirected to the tokens page. And I
106. 3:13already did it and I'm all logged in,
107. 3:14and here's my access key, my token that
108. 3:16I need. Don't try to use it, it's going
109. 3:17to be deleted after this video. But once
110. 3:19you're here, scroll down, go to the
111. 3:21Telegram page, and just verify with the
112. 3:23bot, do /start. Once you're verified,
113. 3:25come here and you're going to have your
114. 3:26access key here. And in your terminal,
115. 3:28just go ahead and paste in your token
116. 3:29you just got, and then save it and exit.
117. 3:31Let's just clear the whole thing up, and
118. 3:33now we're set up and ready to go. And
119. 3:34for the last step, all we have to do is
120. 3:35just run the main file, main.py. So,
121. 3:38python3 main.py and target username, the
122. 3:41Instagram username of the target, to
123. 3:43spawn interactive prompt. Let's go ahead
124. 3:45and do that. So, python3
125. 3:47main.
126. 3:48py and the target username, the
127. 3:51Instagram account that I definitely
128. 3:52didn't made up. It's not one of my
129. 3:53alternate account named miss.firewall.
130. 3:58Yeah, when I made this account I thought
131. 4:00the username would be pretty funny. Now
132. 4:01it's just kind of cringe. I can't lie.
133. 4:03But let's just send it.
134. 4:04Uh it's in config folder. Let's just
135. 4:06exit it.
136. 4:07And then clear it again and let's run it
137. 4:09again. python3 main.py
138. 4:12miss
139. 4:13firewall
140. 4:15After it ran, we can see right here it
141. 4:17connected to the Highker API first and
142. 4:19then it found the target miss firewall
143. 4:21and then her Instagram ID.
144. 4:23Scrolling down, we first have to type
145. 4:24list to show all the commands we can
146. 4:26run. So let's just do that. list
147. 4:29And you can see a bunch of commands
148. 4:31starting from address, get all
149. 4:32registered address by the target photos,
150. 4:34clear cache with the tool, a bunch of
151. 4:36stuff. But first, let's just run info to
152. 4:38get basic information on the target.
153. 4:40info
154. 4:41And here we have some information again,
155. 4:42basic ones like the ID of the Instagram,
156. 4:45full name miss firewall, her bio hello,
157. 4:47my name is miss firewall. Miss fire I
158. 4:50must have misspelled it. And this is my
159. 4:52personal blog.
160. 4:54Followers zero, he has four followers,
161. 4:56two photos, two photos posted, business
162. 4:58account. It is a business account since
163. 5:00it is a personal blog.
164. 5:02Verified account false and here we have
165. 5:04her HD profile picture, a full HD
166. 5:06profile picture of uh
167. 5:08her profile.
168. 5:09And here we have it, her profile
169. 5:10picture. It's a um girl with a firewall
170. 5:13face.
171. 5:15Anyways, let's just move on to the next
172. 5:16one.
173. 5:17Let's do something like address. Get all
174. 5:19registered addresses by the target
175. 5:21photos. addrs And here, woohoo, we found
176. 5:25one addresses. One post with an address
177. 5:28and the address right here.
178. 5:29But she probably didn't give her full
179. 5:31address on the post. And we can see
180. 5:32right here, let me go out to the to the
181. 5:34profile. Instagram miss.firewall I'm
182. 5:37already logged in so I can show you
183. 5:38guys. And here we have the post and in
184. 5:40the location it says Anthony, Texas.
185. 5:43But why does it say a full address in
186. 5:44our terminal?
187. 5:46What most people don't know that
188. 5:48these these locations right here users
189. 5:50create them. Normal users like you and
190. 5:52me.
191. 5:52And then when they create them, they
192. 5:54first have to drop a pin on an exact
193. 5:56location. Then they can name that
194. 5:57location whatever like Anthony, Texas.
195. 6:00When a user goes to create a post,
196. 6:02Instagram suggests the closest pin near
197. 6:05that person.
198. 6:06It might say Anthony, Texas, but behind
199. 6:08that is an exact location, exact
200. 6:10address, a pin. So when the user was
201. 6:12choosing a location and saw Anthony,
202. 6:14Texas, she was like, "Yeah, that's where
203. 6:16I'm at the right now. I'm going to
204. 6:17choose it." Without knowing that in the
205. 6:19background, she actually doxxed herself
206. 6:21and gave out her full location. And then
207. 6:23we can go ahead and actually copy this
208. 6:24location and then go to our Google Maps
209. 6:26so I can show you. google.com/maps
210. 6:29and then we go ahead and paste in our
211. 6:30location we just copied.
212. 6:33And then we see the pin right here.
213. 6:35This address is showing to this location
214. 6:36right here, RV Jones Colina.
215. 6:39And when we go back to Instagram page,
216. 6:40here we see a sign, "Welcome to Texas."
217. 6:43Let us search up for that sign to see
218. 6:44exactly where it is.
219. 6:45Our address that we extracted is right
220. 6:47here. Let's go look up for the sign,
221. 6:49"Welcome to Texas" sign.
222. 6:53Our pin is right here and the "Welcome
223. 6:54to Texas" sign is right here. So she
224. 6:56took her picture here, then went on
225. 6:57Instagram to post it, searched up for a
226. 6:59location, Instagram saw the nearest pin
227. 7:02to her was named Anthony, Texas,
228. 7:04suggested it to her. She thought, "Yeah,
229. 7:06that's where I'm at, Anthony, Texas. I'm
230. 7:08going to choose it." Without thinking
231. 7:09much, but in the background, she
232. 7:11actually doxxed herself. Now let's try
233. 7:13something else. Let's try something like
234. 7:15following email. She doesn't have
235. 7:17followers, let's try following email.
236. 7:18This gets all the emails of users
237. 7:20followed by the target.
238. 7:22Let's copy that
239. 7:24and then paste it right in. And here we
240. 7:25got a three out of four emails from her
241. 7:27following list from Hack The Box,
242. 7:29Network Chuck, and David Bombal. These
243. 7:31were the first people that came to mind
244. 7:32when I first made the account, but
245. 7:34that's beside the point. What we got
246. 7:36here is super important during an
247. 7:38information gathering because now we
248. 7:39have leverage. We have something we can
249. 7:41pivot to when we hit a roadblock or a
250. 7:43wall. Now, we can always send nice
251. 7:45personalized
252. 7:46emails or DMs pretending to be Miss
253. 7:48Firewall to our friends. Let's imagine
254. 7:50these are our friends.
255. 7:51And now we can do for example hash tags
256. 7:54and get some hashtags on her posts. For
257. 7:55example, farm girl, family, Texas, road
258. 7:58trips. So, now we know she likes road
259. 8:00trips, she's a farm girl, she lives in
260. 8:02Anthony, Texas, and we can make nice
261. 8:05personalized DMs or emails to her
262. 8:07friends pretending to be her so we can
263. 8:09get her even more information on her.
264. 8:11Now, since we mapped out where she's
265. 8:12been, her friends, her hobbies, the most
266. 8:15obvious thing would be to look for
267. 8:17different accounts so we can extract
268. 8:18more information. And the tool for that
269. 8:20is Sherlock. I've already covered it in
270. 8:22one of my other OSINT videos, but I'm
271. 8:24going to cover it again.
272. 8:25And what it does is it that simple. You
273. 8:27give it a single username and it looks
274. 8:29through over 400 websites to check if
275. 8:31that username exists. You can also give
276. 8:34it multiple usernames, you can specify
277. 8:36which sites you wanted to go through.
278. 8:38You can even give it a TXT file full of
279. 8:40usernames that you wanted to search. And
280. 8:42to top it all off, you can even search
281. 8:44through NSFW websites. And to install
282. 8:46it, we can either just copy this pipx
283. 8:48install sherlockproject or we can just
284. 8:50go to our terminal or terminal and type
285. 8:51pip install sherlock.
286. 8:54For me, it says the requirements already
287. 8:56satisfied cuz I already installed it.
288. 8:57But first, let me see the usage. Let's
289. 8:59see what we can do with Sherlock. You
290. 9:00type sherlock dash dash help and let's
291. 9:03just scroll up to see what we can do.
292. 9:05Usage sherlock. We have to type sherlock
293. 9:07and everything here within the square
294. 9:08brackets is optional. It's optional
295. 9:10parameters. We don't have to give them
296. 9:12except one, the username. We have
297. 9:14obviously have to give it the username
298. 9:15so you can search for something. So,
299. 9:16let's just try the most simplest option,
300. 9:18sherlock and then the username. Sherlock
301. 9:21and then for us, missfirewall.
302. 9:24Sherlock slowly goes through multiple
303. 9:25websites and check if it's available.
304. 9:27After it's finished, here we can see it
305. 9:29gave us 46 results back. It searched
306. 9:31through hundreds of sites and it found
307. 9:3346 results, 46 social media platforms or
308. 9:36platform platforms in general, that have
309. 9:38missed that firewall. In here we can see
310. 9:40sites like seven cups, airliners,
311. 9:43Discord,
312. 9:45Reddit,
313. 9:46YouTube, TryHackMe, which is kind of
314. 9:48cool. And then we can also do a full
315. 9:50file of usernames cuz maybe they have we
316. 9:53want to search their friends or their
317. 9:54family. And I already made a file so I
318. 9:56can show you guys firewall fam. dot txt.
319. 10:01And I here I have a bunch of usernames,
320. 10:02missfirewall, misterfirewall,
321. 10:04firewallthefam, firewallfather,
322. 10:06firewallkin. You get the point. To
323. 10:07search up multiple usernames in a file
324. 10:09we type Sherlock followed by dollar
325. 10:11sign. And then in and then in brackets
326. 10:13we type cat firewall fam. txt. And then
327. 10:18we type dash dash site. I'm not going to
328. 10:20go through all the websites, all the
329. 10:22usernames cuz it's going to be a lot a
330. 10:23lot of work for us. It's going to take a
331. 10:25long time. So I'm going to do dash dash
332. 10:26site. I'm going to specify YouTube cuz
333. 10:28if I go through all it's going to take a
334. 10:29long time. It's going to be too much.
335. 10:30And once it's done we got 16 results
336. 10:32back and we got all the links of their
337. 10:34accounts. But obviously Sherlock only
338. 10:36looks up their usernames on different
339. 10:37sites and doesn't really give us any
340. 10:39information on the sites.
341. 10:41But the good news, we have a tool just
342. 10:43for that called the maigret. Let me show
343. 10:45you guys. And here it is, maigret.
344. 10:47And here it is.
345. 10:48And here it is, maigret. When we scroll
346. 10:50down we see how it is.
347. 10:52First it searches up the username on the
348. 10:53site and then gathers information on the
349. 10:55sites.
350. 10:56To install this super easy we just do
351. 10:57pip install maigret. So let's go ahead
352. 10:59and copy that. Go to our terminal, open
353. 11:01a new one, clear this up, make it
354. 11:03bigger,
355. 11:04and then just run that, pip install
356. 11:06maigret. Then clear it up once again
357. 11:07once it's installed. Go back to the
358. 11:09site. And the usage is super simple. We
359. 11:10just type maigret and the username. So
360. 11:13maigret.
361. 11:15And I'm going to use who am I gang not
362. 11:17missfirewall cuz someone else might have
363. 11:19missfirewall and I don't want to show
364. 11:20their information here on the video. So
365. 11:22I'm going to use my username but you get
366. 11:23the idea. Who am I gang.
367. 11:26After After it's done here we can see it
368. 11:28went through 500 sites and it looks
369. 11:31pretty similar to Sherlock. But the
370. 11:33difference is that this is way more
371. 11:34information-rich. For example, here in
372. 11:36the GitHub, it's on my GitHub, not only
373. 11:37did it find my follower count, 67,
374. 11:40my following count, full name,
375. 11:42it also found my location, my
376. 11:45Germany. I literally live in Germany.
377. 11:47And this is super important for your
378. 11:48investigations, cuz you don't have to go
379. 11:49through each website and look at the
380. 11:51information yourself. You can just use
381. 11:52Myriad, and it just extracts all the
382. 11:53information itself. Okay, so now you've
383. 11:55seen exactly how easy this is to do. How
384. 11:58can you make sure it doesn't happen to
385. 11:59you? My number one tip is that you just
386. 12:01go on Google, type in your name, see
387. 12:03what results come up, look at the ones
388. 12:05you don't like. If it's one of your
389. 12:06social media accounts or your website,
390. 12:08just change it or private your social
391. 12:09media account. If it's something you
392. 12:11don't own, like you won a tournament on
393. 12:13a school 3 years ago, you don't want
394. 12:15your name being there, just email them
395. 12:16or DM them. I'm sure they'll gladly
396. 12:18remove it. With that being said, I hope
397. 12:19you enjoyed this video. Don't forget to
398. 12:21subscribe and join the Discord, link in
399. 12:22the description.