skills.rest
wgpsec
wgpsecOFFICIAL
Explore all skills by this author →
Website𝕏@wgpsecGitHub

ctf-osint

Enumerate usernames and geolocate photos using public online sources.

1.6k|234|Updated Dec 7, 2019
Search Tags:#ctf#geolocation#social-media#osint#wayback-machine#dns-recon#reverse-image-search
One-click install
npx skills add https://github.com/wgpsec/AboutSecurity --skill ctf-osint-wgpsec
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ctf-osint
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/ctf/ctf-osint
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill ctf-osint-wgpsec

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Help investigators and CTF players discover identities and precise locations from publicly available signals by consolidating OSINT techniques into repeatable decision flows and checklists.

Core Features & Use Cases

  • Username & account enumeration: Cross-platform username searches, archived profile recovery, and rename tracking to locate accounts across services.
  • Image and media geolocation: EXIF and metadata extraction, reverse image search, cropped-region Lens queries, panorama/street-view matching and What3Words/Plus Codes conversion for precise coordinates.
  • Web & DNS reconnaissance: Google Dorking, Wayback archive recovery, DNS record enumeration (TXT/CNAME/MX), and zone transfer checks for hidden flags or clues.
  • Use Case: Given a challenge image or leaked username, produce a ranked list of candidate accounts or coordinates with evidence and step-by-step verification methods.

Quick Start

Use the ctf-osint skill to enumerate a username, extract image metadata, run reverse image searches, and propose candidate locations with supporting evidence.

Frequently Asked Questions about ctf-osint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find someone's location from a photo using reverse image search?▼

Reverse image search locates photographed places by extracting EXIF metadata and matching cropped regions against search engines or Street View panoramas to propose candidate coordinates. This workflow processes challenge images to produce ranked locations with supporting evidence.

What is the best way to enumerate social media usernames across multiple platforms?▼

Username enumeration cross-references a single handle across multiple social media services, checks archived profiles, and tracks rename histories. This identifies candidate accounts linked to a target username for investigative or CTF OSINT tasks.

How do I extract hidden flags or clues from DNS records during a CTF?▼

DNS reconnaissance queries TXT, CNAME, and MX records, and attempts zone transfers to uncover hidden flags or configuration clues. This technique analyzes target domain infrastructure to reveal metadata and intentional leaks.

Can I recover deleted web pages using Wayback Machine archives for OSINT investigations?▼

Wayback Machine analysis recovers archived web pages and profiles that have been deleted or modified. This historical web recovery extracts past content and metadata to support investigative profiling and CTF puzzle solving.

How do I convert GPS coordinates to What3Words or Plus Codes for geolocation challenges?▼

Geolocation coordinate conversion translates standard GPS coordinates into What3Words or Plus Codes formats. This conversion standardizes location data for precise mapping and verification in photo geolocation challenges.

What steps are needed to profile an individual using publicly available data?▼

Individual profiling combines username enumeration, archived profile recovery, DNS reconnaissance, and metadata extraction to locate and identify targets. This systematic process produces a ranked list of candidate identities with step-by-step verification evidence.

Related Skills

Explore More Education & Research Skills→
brucesongsbrucesongs
60

recon-osint

Perform OSINT reconnaissance to build target profiles from public sources.

Community
Advanced
specs-devsspecs-devs

api-location

Access GPS coordinates, device heading, and Snap Places data for AR experiences.

Official
Intermediate
salmanabdurrahmansalmanabdurrahman

recon-archive-urls

Collect and categorize historical URLs from public web archives for security reconnaissance.

Community
Advanced
jdrodriguezjdrodriguez
6

analyze-photos

Extract metadata, GPS coordinates, and tampering indicators from evidence photos.

Community
Advanced