Social Mapper.
Open Source Intelligence.
The world today abounds in open information to an extent unimaginable intelligence.
Social Mapper is an Open Source Intelligence Tool that uses facial recognition to correlate social media profiles across different sites on a large scale.
What social mapper does is it actually logs you in to different social networks of your target for information and generate report i.e picture linked to various social network sites in CSV and HTML format this will help us to build attacking strategies, phishing campaigns, social engineering campaigns and also help to find fake accounts, duplicate accounts, etc. what good part is you don't need any API access or any deep database access. Just you need a standard user account and then what it does is it will login with provided user accounts and will look for specific people that you are looking for on that social network.
What’s interesting about it is it actually takes a photograph of a person and uses facial recognition to pinpoint that exact person.
Social Mapper is an Open Source Intelligence Tool that uses facial recognition to correlate social media profiles across different sites on a large scale.
What social mapper does is it actually logs you in to different social networks of your target for information and generate report i.e picture linked to various social network sites in CSV and HTML format this will help us to build attacking strategies, phishing campaigns, social engineering campaigns and also help to find fake accounts, duplicate accounts, etc. what good part is you don't need any API access or any deep database access. Just you need a standard user account and then what it does is it will login with provided user accounts and will look for specific people that you are looking for on that social network.
What’s interesting about it is it actually takes a photograph of a person and uses facial recognition to pinpoint that exact person.
So if you are pentesters looking for particular employee x and want to dig through LinkedIn for employee x there are thousands of employee x but if we have a photograph of employee x. we can actually apply facial recognition techniques to that photograph and find the exact employee x you're looking for in an automated fashion, it allows us to dig through social networks find very specific people using facial recognition techniques and then pull back that information for entire social mapping. In the past, we've seen over 55% of the compromises was investigated that initial foothold was gained through a social engineering attack of some sort so we want to make sure we're emulating the exact same techniques that criminals are using to attack organization in order to develop the security awareness and better secure those customers.
Supported platforms
Follow the command to install and run the Social Mapper tool.
wget https://github.com/mozilla/geckodriver/releases/download/v0.26.0/geckodriver-v0.26.0-linux32.tar.gz
tar -xvzf geckodriver-v0.26.0-linux32.tar.gz
ls
cp geckodriver /usr/bin
sudo apt-get install build-essential cmake
sudo apt-get install libgtk-3-dev
sudo apt-get install libboost-all-dev
git clone https://github.com/Greenwolf/social_mapper.git
python3 -m pip install --no-cache-dir -r requirements.txt
leafpad spcailapper.py
#example 1 : Run this command to being our search. python3 social_mapper.py -f imagefolder -i ./mytargets -m fast -fb -tw
O
Our search result is stored CSV and HTML format.
There are different switches to try and play.
Than you for reading the post. Stay safe and visit again for new posts.:)
Comments
Post a Comment