I've made a comprehensive guide including lots of usefull tools for Telegram OSINT:

Search Engines :
https://xtea.io/ts_en.html
https://lyzem.com/
TELEGRAPH SEARCH : https://telegcrack.com/

General Resources:
https://medium.com/dataseries/telegram-network-visualization-tracing-forwards-and-mentions-f75746712fcf
https://www.youtube.com/watch?v=e_aXQYq2l6U

Telegram Bots:
https://tgdev.io/tgscan/
https://t.iss.one/username_to_id_bot
https://t.iss.one/userinfobot
https://t.iss.one/creationdatebot
https://t.iss.one/SangMataInfo_bot
https://t.iss.one/MotherSearchBot
https://t.iss.one/LinkCreatorBot
https://t.iss.one/FunstatusfanBot https://teletype.in/@telelog
https://t.iss.one/osint_maigret_bot

------------------------------------------------
Telegram OSINT tools:
https://github.com/odysseusmax/tg-index
https://github.com/pigpagnet/save-telegram-chat-history
https://github.com/TGViewer/TGViewer.github.io
https://github.com/Postuf/telegram-osint-lib
https://github.com/Forichok/TelegramOnlineSpy
https://github.com/paulpierre/informer
https://github.com/aahnik/tgcf
https://github.com/Nukesor/archivebot
https://github.com/pielco11/telescan
https://intelx.io/tools?tab=telegram

------------------------------------------------
Directories:
https://www.telegramdb.org/
https://telemetr.io/en/catalog/global
https://tgstat.ru/
https://telemetr.me/
https://tgramsearch.com/
https://telegramcatalog.com/en/channels
https://tgram.ru/channels
https://www.telegram-group.com/en/
https://tgram.io/
https://tlgrm.eu/channels
https://combot.org/top/telegram/groups
https://telegramchannels.me/
https://tgrm.su/

------------------------------------------------
Resources:
https://osintteam.blog/telegram-security-best-practices-1b33eb10be05
https://www.osintcombine.com/post/telegram-chats-media
https://www.cqcore.uk/telegram-fundamentals/
https://publication.osintambition.org/analyzing-telegram-chats-and-channels-regular-expressions-in-osint-in-practice-48810d5b77e6
https://hatless1der.com/telegram-osint-from-the-outside/
https://hatless1der.com/telegram-osint-basics-5-tips-anyone-can-do-right-now/
https://projetfox.com/en/2022/08/geogramint-an-osint-geolocalization-tool-for-telegram/
https://www.osintme.com/index.php/2022/10/18/the-osint-me-ultimate-guide-to-telegram-osint-and-privacy/
https://www.osint.industries/post/osint-on-telegram-find-phone-numbers-emails-and-user-details

To find a Telegram account with OSINT, you can try:
Telegram’s In-App Search
If a user has a public username, you can find their profile by searching ‘@username’ directly in the app. It’s best to always try this first.

Browsing Public Groups & Channels
Many Telegram users participate in open groups, where their profile and past messages may be visible with a simple search or just by browsing.

Cross-Referencing
Netizens are unimaginative – or maybe using one username across all our accounts is just less complicated. If your subject’s reused the same username across multiple platforms, a Google dork can reveal additional accounts tied to a Telegram username. Common dorks include:

site:t.iss.one “username”
site:twitter.com “username”
site:github.com “username”
OSINT Tools listed above also help together with this very usefull albeit paid bot : https://t.iss.one/FunstatusfanBot

#OSINT #Telegram #recon #CyberSec

Another thing to consider when conducting OSINT on Telegram is to have this enabled in the Advanced —> Experimental settings on telegram to make life easier with a lot of these tools.

OSINT - Practical Training

Kase Scenarios → https://kasescenarios.com/
National Missing Persons Aackathon AU → https://www.missingpersonshackathon.com.au/home
Cyber Detective CTF - OSINT Focussed → https://ctf.cybersoc.wales/
Verif!cation Quiz Bot (@quiztime) → https://twitter.com/quiztime
TryHackMe Geolocating Images → https://tryhackme.com/room/geolocatingimages
TryHackMe Google Dorking → https://tryhackme.com/room/googledorking
TryHackMe OhSINT → https://tryhackme.com/room/ohsint
Tryhackme Searchlight Osint → https://tryhackme.com/room/searchlightosint
Sourcing.Games – Games For Recruiters and Sourcers → https://sourcing.games/
Ictf.io → https://ictf.io/
GeoGuessr → https://www.geoguessr.com/
Quiztime – Medium → https://medium.com/quiztime
CTF Academy Osint Challenge → https://ctfacademy.net/osint/index.php
First Draft Online Verification Exercise → https://ftp.firstdraftnews.org/articulate/temp/ovcR/story_html5.html
Roppers Academy CTF Course → https://www.hoppersroppers.org/courseCTF.html
Github (apsdehal/awesome) CTF Resources → https://github.com/apsdehal/awesome-ctf
Reddit - What Is This Thing → https://www.reddit.com/r/whatisthisthing/

#OSINT #cybersec

RustScan: High-Speed Port Scanning with Python, Lua & Shell Script Integration

GitHub: https://github.com/bee-san/RustScan

• Scans all 65k ports in just 3 seconds
• Full scripting engine support (Python, Lua, Shell)
• Automatically pipes open ports into Nmap
• Adaptive learning, gets smarter the more you use it
• No bloat... just clean, fast scanning with basic math
• Supports IPv6, CIDR notation, file input, and more

#cybersec

I've compiled a usefull list of API's for OSINT ( very usefull for automating tasks and developing ):

https://osintteam.blog/finding-hidden-api-keys-tokens-and-sensitive-information-in-applications-d8a40a5a162a

API OSINT :
IOT/IP Search engines
---------------------------------------------
https://ipquery.io/ API for ip information such as ip risk, geolocation data, and asn details


Phone Number Lookup and Verification
------------------------------------------------
https://numverify.com/ Global Phone Number Validation & Lookup JSON API. Supports 232 countries. 250 requests FREE
https://veriphone.io/ Phone number validation & carrier lookup 1000 requests/month FREE

Address/ZIP codes lookup
--------------------------------------------------
https://rapidapi.com/adminMelissa/api/global-address Easily verify, check or lookup address
https://www.smarty.com/docs/cloud/us-street-api Validate and append data for any US postal address

Business/Entity search
---------------------------------------------------
https://docs.microsoft.com/en-us/linkedin/marketing/integrations/community-management/organizations/company-search?context=linkedin%2Fcompliance%2Fcontext&tabs=http Find companies using keywords, industry, location, and other criteria

Domain/DNS/IP lookup
--------------------------------------------------------
https://github.com/davidonzo/apiosintDS Collect info about IPv4/FQDN/URLs and file hashes in md5, sha1 or sha256
https://www.ipinfodb.com/api The API returns the location of an IP address (country, region, city, zipcode, latitude, longitude) and the associated timezone in XML, JSON or plain text format
https://bgpview.docs.apiary.io/# allowing consumers to view all sort of analytics data about the current state and structure of the internet
https://www.dnscheck.co/api monitor the status of both individual DNS records and groups of related DNS records up to 10 DNS records/FREE
https://github.com/fawazahmed0/cloudflare-trace-api Get IP Address, Timestamp, User Agent, Country Code, IATA, HTTP Version, TLS/SSL Version & More
https://host.io/ Get info about domain

Scraping
--------------------------------------------------------------
https://webscraping.ai/ Web Scraping API with built-in proxies and JS rendering
https://www.zenrows.com/ Web Scraping API that bypasses anti-bot solutions while offering JS rendering, and rotating proxies apiKey Yes Unknown

GEO IP
------------------------------------------------------------------
https://ipstack.com/ Detect country, region, city and zip code
https://www.ipinfodb.com/api Free Geolocation tools and APIs for country, region, city and time zone lookup by IP address
https://ip-api.com/ Free domain/IP geolocation info

Wi-fi lookup
-----------------------------------------------------------------------
https://api.wigle.net/ get location and other information by SSID

Network
-----------------------------------------------------------------------------
https://www.peeringdb.com/apidocs/ Database of networks, and the go-to location for interconnection data
https://lab.dynamite.ai/api.html .pcap files analyze

Finance
------------------------------------------------------------------------------
https://binlist.net/ get information about bank by BIN
https://api.fdic.gov/banks/docs institutions, locations and history events
https://www.amdoren.com/currency-api/ Free currency API with over 150 currencies
https://api.vatcomply.com/docs Exchange rates, geolocation and VAT number validation
https://docs.alpaca.markets/reference/corporateactions-1 Realtime and historical market data on all US equities and ETFs

Email
---------------------------------------------------------------------------------
https://open.kickbox.com/ Email verification API
https://docs.api.facha.dev/ Allows checking if an email domain is a temporary email domain

Crypto
-----------------------------------------------------------------------------------
https://etherscan.io/apis Ethereum explorer API
https://coinlayer.com/ Real-time Crypto Currency Exchange Rates
https://www.worldcoinindex.com/apiservice Cryptocurrencies Prices

Malware
-----------------------------------------------------------------------------------------
https://docs.virustotal.com/reference/overview files and urls analyze
https://docs.abuseipdb.com/#introduction IP/domain/URL reputation
https://otx.alienvault.com/api IP/domain/URL reputation
https://urlscan.io/docs/api/ Scan and Analyse URLs

Reverse Image Search
-----------------------------------------------------------------------------------------------
https://github.com/SOME-1HING/google-reverse-image-api/ This is a simple API built using Node.js and Express.js that allows you to perform Google Reverse Image Search by providing an image URL.
https://github.com/vivithemage/mrisa MRISA (Meta Reverse Image Search API) is a RESTful API which takes an image URL, does a reverse Google image search, and returns a JSON array with the search results
https://github.com/kitUIN/PicImageSearch Aggregator for different Reverse Image Search API

#OSINT #API #cybersec

reconFTW: A powerful automated reconnaissance tool designed for security researchers and penetration testers.

GitHub: https://github.com/six2dez/reconftw

#recon #cybersec

IMAGE OSINT TOOLS:
-----------------------------------------------------------------------------
https://images.google.com/ Reverse image search
https://www.bing.com/images Reverse image search
https://yandex.ru/images/ Reverse image search
https://image.baidu.com/ Reverse image search
https://tineye.com/ Reverse image search
https://addons.mozilla.org/nl/firefox/addon/who-stole-my-pictures/ Reverse image search
https://www.exifdata.com/ Exif viewer
https://chromewebstore.google.com/detail/fake-news-debunker-by-inv/mhccpoafgdgbhnjfhkcmgknndkeenfhe?pli=1 Fake news debunker (add-on)
https://29a.ch/photo-forensics/#forensic-magnifier Detection of digital alterations
https://fotoforensics.com/ Detection of digital alterations
https://www.diffchecker.com/image-compare/ Compares two images
https://photoscissors.com/ Remove background
https://letsenhance.io/ Enahce image quality
-----------------------------------------------------------------------------
AI TOOLS :
https://lenso.ai/en
https://pimeyes.com/en ( use USA vpn )
-----------------------------------------------------------------------------
MISC:
-----------------------------------------------------------------------------
https://github.com/tanaikech/goris A very fast tool written in Go that searches by image files and image URLs. Searched images display URLs and also can be downloaded as image files.
https://github.com/ThoughtfulDev/EagleEye It conducts a comprehensive search by first scanning Facebook for the target’s name and then utilising a reverse image search on Google, ImageRaider, and Yandex to locate additional social media profiles.
-----------------------------------------------------------------------------
RESTORE IMAGES:
If any part of an image appears blurry or obscured, consider using AI to restore it. With the recent advancements in technology, even faces that are blurred can be reconstructed fairly quickly and easily
https://app.remini.a
https://neural.love/image-sharpen
-----------------------------------------------------------------------------
REMOVE BACKGROUND:
https://www.fotor.com/photo-editor-app/editor/basic
https://cleanup.pictures/
https://www.remove.bg/

Some tools do a better job of searching for specific types of images than others. Having a couple of search engines at hand will increase your chances of finding the right image.
-----------------------------------------------------------------------------
FACIAL RECOGNITION:
https://6mzld2.csb.app/ Face detection and comparison.
https://aws.amazon.com/rekognition/?nc2=h_ql_prod_ml_rek/ Amazon Rekognition offers pre-trained and customizable computer vision (CV) capabilities to extract information and insights from your images and videos.
https://www.faceplusplus.com/ Can detect and locate human faces in an image and return high-precision face bounding box results.
https://facecheck.id/ Upload a face of a person of interest and discover their social media profiles, appearances in blogs, video, and news websites.
https://faceagle.com/ A search engine for face, Search among 4,190,646 face images.
https://faceonlive.com/face-search-online/ Explore FaceOnLive’s reverse face search to find where your photos appear online.
https://www.faceseek.online/ Search faces across the internet and social media to verify identity.
https://github.com/GONZOsint/deepfaceui DeepFace UI is a web application for facial recognition and analysis built with DeepFace.
https://azure.microsoft.com/en-au/products/ai-services/ai-vision/ Image, and identification of a person by a match to your private repository or via photo ID.
https://pimeyes.com/en PimEyes is an online face search engine that goes through the Internet to find pictures containing given faces.
https://search4faces.com/en/ Search4faces is a reverse face search engine that can help you to find photos of a person all across the web.
https://github.com/vin3110/facecheck.id-results-extractor A Tampermonkey script to extract URLs from FaceCheck.id results for free.
-----------------------------------------------------------------------------
TUTORIALS:
https://www.youtube.com/watch?v=YkUnuouRhuE
https://www.youtube.com/watch?v=0pRcutNq7U4
https://www.youtube.com/watch?v=9TW82ZELLx0

#OSINT #recon #cybersec

HexStrike AI: The World's Most Advanced AI-Powered Penetration Testing Framework with Autonomous Agents, Intelligent Decision Engine, and 150+ Security Tools.

#recon #cybersec

Worldwide OSINT

Resources with lists of investigation tools for different countries:

OSINT for countries
OSINT for countries 2
OSINT World series

#OSINT #recon #cybersec

Interesting web based tool for finding specific objects in videos. Simply describe what you want to find in words and receive timecodes where it appears.

LINK
#OSINT #recon

https://t.iss.one/DataScanner_bot - Top tier data-breach scanner and a very usefull OSINT tool, input any query either in the chat with the bot or as a .txt file if you wish to scan multiple things at once, biggest base of breaches i've seen so far.

#OSINT #cybersec #recon

Useful tools for dealing with hashes.

https://crackstation.net/
- High-capacity hash-cracking service using extensive lookup tables to reverse MD5, SHA1, SHA2, WPA and more.

https://www.deepfind.me/tools/file-analysis/file-hash-checker
- Verify file integrity or check against known malicious hashes.

https://hashes.com/en/decrypt/hash
- Free online platform for decrypting a variety of hashes.

https://mattw.io/hashID/
- Browser-based tool that identifies the hash type (e.g., MD5, SHA variants) from user input.

https://hashmob.net/search
- Community-powered hash search where users can query hashes to see if their plaintext has already been discovered by others.

https://md5decrypt.net/en/#answer
- Online service for encrypting and decrypting (reverse lookup) MD5 hashes.

https://www.mobilefish.com/services/hash_generator/hash_generator.php
- Web-based generator for common hash algorithms.

https://www.onlinehashcrack.com/hash-identification.php
- Hash identification interface using a large reverse-lookup database to determine the algorithm used.

https://osint.sh/md5
- Search for information on an MD5 hash.

https://xorbin.com/tools/sha256-hash-calculator
- Online SHA-256 hash calculator.

https://www.sha1-online.com/
- Web page offering SHA-1 and additional hash generation tools.

https://book.shodan.io/command-line-tools/shodan-hash
- A command-line to calculate simple hashes of a website, favicon, local file or text. It can be used freely without a Shodan account.

#OSINT #cybersec #recon

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints.

CVE-2025-55182

#cybersec

@infodatabaze_bot - Find info about Telegram Accounts/Chats/Groups, send an ID/Username and get info, past Usernames, shared groupchats and more!