Doxing Anyone

Introduction

Doxing is the act of finding one's personal information through research and discovery, with little to no information to start with. You may have seen doxing in the news, for instance when not so long ago, hacker team Anonymous doxed and reported thousands of twitter accounts related to ISIS. Doxing can be useful for finding the address of a coworker, or simply investigating people on the internet. The tutorial I will provide to you now will teach you the basics of doxing and how you can protect yourself against malicious people on the internet.

Methodology

Start  
↓  
Define Objectives and Gather Basic Information  
↓  
Identify Social Media and Online Accounts  
↓  
Analyze Public Records and Background Information  
↓  
Track Location and Geolocation Data  
↓  
Examine Connections and Affiliations  
↓  
Monitor Digital Activity for Further Clues  
↓  
Verify Information and Cross-Reference  
↓  
End

Tools to Use

Social Media and Username Search Tools

• Sherlock (GitHub): Username search across social media.
• Social Searcher: Search posts and mentions on social media.
• Namechk: Check username availability on multiple platforms.
• KnowEm: Search for usernames and brand names across platforms.
• Maltego: Network mapping and social media connections.

Public Records and Personal Data

• Pipl: People search engine (requires subscription).
• Spokeo: US-based public records (requires subscription).
• BeenVerified: People search, public records in the US (requires subscription).
• FamilyTreeNow: Free genealogical records.
• TruePeopleSearch: Free US-based people search.

Location and Address Lookup

• Google Maps: Address verification and street views.
• Whitepages: Phone, address, and people search (requires subscription).
• IPinfo.io: IP address geolocation.
• ipapi: IP geolocation and data API.

Domain and Website Information

• WHOIS Lookup: Domain ownership information.

• DNS Dumpster: DNS records and subdomain enumeration.
• ViewDNS: Various DNS and IP-related tools.
• Shodan: Search engine for internet-connected devices.
• Hunter.io: Email address lookup based on domain.

Archived Data and Historical Content

• Wayback Machine: View historical versions of websites.

• CachedView: View cached pages from Google, Bing, and more.

Email and Breach Data

• Have I Been Pwned?: Check if an email appears in data breaches.
• Dehashed: Breach data search (requires subscription).
• EmailHippo: Email verification tool.

• Voila Norbert: Email search and verification tool.

Reverse Image Search and Metadata

• Google Reverse Image Search: Search for similar images online.
• TinEye: Reverse image search engine.
• ExifTool (GitHub): Metadata extraction from images.
• Yandex Images: Reverse image search with strong facial recognition.

Social Network and Professional Connections

• LinkedIn: Professional networking platform.
• SignalHire: Contact and profile search (subscription-based).
• LittleSis: Database of public figures and relationships.

Phone Number and Email Lookup

• NumLookup: Reverse phone lookup.
• SpyDialer: Phone and email lookup service.
• Emailrep.io: Analyze email reputation.
• TrueCaller: Phone number identification and reverse lookup.

Automation

Doxxer-Toolkit

Doxxer is a tool that integrates the collection of various tools, techniques and sources of information, facilitating the carrying out of a doxxing or investigation.

Installation

# Clone the repository
git clone https://github.com/Euronymou5/Doxxer-Toolkit
cd Doxxer-Toolkit

# Termux
bash install.sh

# Linux (Debian)
sudo bash install.sh

# Black Arch Linux
sudo bash install_arch.sh

Usage

# Run the tool
python3 dox_en.py

# Select the required option from the menu

Doxxer-Toolkit Menu

---

REFERENCES

• https://www.youtube.com/watch?v=JVvVjgR7ZiE&pp=ygUGZG94aW5n
• https://null-byte.wonderhowto.com/how-to/dox-anyone-0160998/
• https://github.com/Euronymou5/Doxxer-Toolkit
• https://studentlife.sa.ucsb.edu/sites/default/files/2023-01/ucsb-doxing-guide.pdf