skiptracer Ghetto OSINT for Broke Hackers
Low-cost OSINT tool using web scraping to gather PII and passive information on targets without paid services.
Summary
Budget Reconnaissance Challenge
Initial recon vectors typically use paid-for data, APIs like Recon-NG, or transforms like Maltego. These tools require budget many researchers lack.
Skiptracer Solution
Using basic Python web scraping of PII paywall sites enables passive target information gathering on a budget. The tool compiles information from free sources rather than paid databases.
Gathered Information
Modules support queries for phone numbers, emails, screen names, real names, addresses, IPs, hostnames, breach credentials, and more.
Practical Guidance
The demo covers tool usage, problems and pitfalls with scrapers, and how the tool helps expand attack surface knowledge. Relevant target information is collected efficiently without budget constraints.
Related talks
Recon Village·28 min
marc dacosta
Mining US federal government databases, especially FCC data, for geolocation and infrastructure discovery.
Main Stage·36 min
Michael Schrenk
Michael Schrenk explores introduction to writing spiders and web agents at DEF CON 10, examining web-scraping and practical defenses.
Main Stage·41 min
Adam Bresson
Adam Bresson examines description from DEF CON 9 Speaker’s Page: Data Mining with PHP Adam Bresson has been programming in PHP, MySQL and HTML for over five years.