ctf-osint

Perform OSINT workflows to identify targets and extract geolocation from public sources.

Updated Aug 23, 2026

Search Tags:#social media #metadata extraction #ctf #geolocation #osint #reverse image search #dns recon

Ready to run

npx skills add https://github.com/3xecutablefile/opencode-rev-forensics --skill ctf-osint-3xecutablefile

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ctf-osint
Source: https://github.com/3xecutablefile/opencode-rev-forensics/tree/main/skills/ctf-osint
Command: npx skills add https://github.com/3xecutablefile/opencode-rev-forensics --skill ctf-osint-3xecutablefile

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires shodan, Pillow, and includes references (resource) components.

What problem does it solve?

It helps solve CTF tasks by transforming scattered public information (web, social media, DNS, images, and metadata) into actionable leads and, ultimately, the flag.

Core Features & Use Cases

Open-source investigation chains: correlate usernames, accounts, and artifacts across platforms using archived and public sources.
Geolocation and media intelligence: extract and interpret image metadata, perform reverse image search, and derive precise coordinates from signs/landmarks/coordinate formats.
Network and naming intelligence: use DNS, WHOIS, Tor relay lookups, and service fingerprinting to identify infrastructure behind challenge targets.
Common CTF pivots: switch to related skills (forensics, web, malware) when the task evolves from OSINT to extraction or active interaction.

Quick Start

Use the ctf-osint skill to investigate a suspected username and find its associated identity across public profiles, archives, and image/metadata clues.

Frequently Asked Questions about ctf-osint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I extract geolocation and metadata from images for OSINT investigations?▼

OSINT metadata extraction analyzes images using tools like exiftool and Pillow to reveal hidden GPS coordinates and timestamps. This workflow reconstructs challenge context from public artifacts.

What is the best way to enumerate social media accounts for CTF challenges?▼

Social media enumeration correlates usernames across platforms using archived and public sources. This open-source investigation chain identifies associated identities, pivoting from scattered accounts into actionable leads.

Can I use DNS recon and WHOIS lookups to identify challenge infrastructure?▼

DNS recon and WHOIS lookups identify infrastructure behind targets by querying domain records and ownership data. Tor relay lookups and service fingerprinting with nmap further map network assets.

Do I need internet access and Python 3 to run OSINT workflows?▼

OSINT workflows require a filesystem-capable agent with Python 3 and internet access to perform live lookups. Dependencies like Shodan and Pillow must be installed to support network queries and image processing.

When should I pivot from OSINT to forensics or web exploitation tasks?▼

Pivot from OSINT to forensics or web exploitation when the challenge evolves from passive information gathering to active extraction or system interaction. This switch handles tasks requiring deeper artifact analysis.