Sensitive_Information

English | 简体中文

There are two kinds of cryptography in this world: cryptography that will stop your kid sister from reading your files, and cryptography that will stop major governments from reading your files.

Bruce Schneier《Applied Cryptography》

Content : Information Protection, Open-source intelligence (OSINT) resources
Repository Link : https://github.com/ffffffff0x/Digital-Privacy

Tips

For different platforms try to use different nicknames and avatars.
Do not use a uniform and similar password for multiple platforms, please create a set of your own password management method, we recommend using a password manager. For the security of the password manager itself, you can refer to this report https://www.securityevaluators.com/casestudies/password-manager-hacking/
Use less browser "remember password" function,there are many forensic tools for browsers.
Using virtual machines is not 100% secure.
Empty your emails, SMS, call logs, recycle bin on a regular basis.
Don't be evil

Sensitive_Information

Privacy_Search

Search by email
- 你注册过哪些网站？一搜便知
- Find email addresses in seconds • Hunter (Email Hunter)
Search by username
Search by ip
- Torrent downloads and distributions for IP
Mixed search
- Username Search
- n0tr00t/Sreg

Browser_Fingerprint

Browser fingerprinting happens when websites use special scripts to collect enough information about you — such as your browser, timezone, default language, and more — that they can uniquely identify you out of the sea of other internet users.

Am I unique?
Unique Machine
Panopticlick
Detect Canvas Fingerprint
What is my User Agent
Sploit.io
Supercookie
Related articles
webRTC
- 你的VPN泄漏IP了吗:仍有20%的VPN服务商未解决WebRTC漏洞问题
leak HTTP
- cure53/HTTPLeaks

Cases

Stripe is Silently Recording Your Movements On its Customers' Websites

Password_Leakage_Query

DeHashed
Have I Been Pwned
pwd query
Firefox Monitor
Vigilante.pw
OCCRP Aleph
Snusbase
Leaked password database
- https://cloud.mail.ru/public/2eHX/38Ek7Lmfx?tdsourcetag=s_pctim_aiomsg
- https://downloads.skullsecurity.org/passwords/

DNS_Info

Geolocation

Cases

GPS Location

BS Location

minigps

Phone Location

IP Info

RIPEstat - Internet Measurements and Analysis
IP Info
What is your IP, what is your DNS - IP/DNS Detect
ip8 - IP Lookup Tool
查看自己的IP地址
IPList
Plot IP - IP Addresses
DB-IP - IP Geolocation API and databases
BigDataCloud - Essential IP Geolocation APIs
IPIP.NET
IP查询
ip查询
Whois
查错网
ipplus360.com
openGPS.cn
IP地址查询
多数据源IP地址查询
Get your IPv4 and IPv6 address instantly
What is my IP Address
What Is My IP Address?
ipapi - IP Address Location
IPinfo.io - IP Address API and Data Solutions

IPv6 Info

IPv6地址查询工具
Locate IPv6 Address Online - IPv6 Whois Lookup
findIPv6 - Lookup and locate an IPv6 address

Email Info

Email Search | Reverse Email Lookup - Spokeo

Replacement

Related articles

OS

Software

Browser
- Eloston/ungoogled-chromium
- LibreWolf Browser
Chat
- telegram
- Session
- Element
Network Audit
- W10Privacy
- abcnews/data-life
Anonymous service
- tor
- i2p/i2p.i2p

Browser_extension

chrome
firefox
stylish
- "Stylish" browser extension steals all your internet history
- Stylus is a Stylish fork without analytics

Secure_Delete

How to: Delete Your Data Securely on Windows

Encryption

Flash

支持到32_0_0_223_Adobe{过}{滤}FlashPlayer去区域限制

Input_tools

RIME

Search_Engine

The following are some of the better search engines in terms of privacy protection, but their search results may not be sufficient

Information_Generator

Generate a Random Name
Fake Address, Random Address Generator
Behind the Name - Random Name Generator
Easy Random Name Picker - Random Name Generator
ElfQrin - Fake Identity ID Random Name Generator
Random User Generator
在线身份证号码生成器
中国大陆内地姓名、身份证号、银行卡号生成器
在线身份证号码生成器
airob0t/idcardgenerator 身份证图片生成工具
gh0stkey/RGPerson
naozibuhao/idcard
Just Delete Me
Fake Person/Name Generator | User Identity, Account and Profile Generator
faker.js
Fake Person/Name Generator
Full Contact Information Generator
My Fake Information Generator and Validator
User Information Generator Articles

Image Generation

Photo_Info

EXIF Info

Related articles

The Secret Life Of JPEGs – NixIntel

SMS

receive_sms

Free

http://sms.sellaite.com
https://ch.freephonenum.com
https://zh.mytrashmobile.com
https://www.receive-sms-online.info
https://sms-online.co/receive-free-sms
https://receive-sms.com
http://receivefreesms.com/
https://www.receivesmsonline.net/
https://www.freeonlinephone.org/
https://us-phone-number.com
https://temporary-phone-number.com
https://www.receivesms.co/
https://pingme.tel/receive-sms-online-cn/
http://receivefreesms.net/
http://receivesmsonline.in/
https://sms-receive.net/
https://www.receivesms.net/
https://www.textnow.com/
http://receive-sms-now.com/
http://receive-sms-online.com/
https://www.afreesms.com/freesms/
https://textfree.us/#/login
http://receivesmsverification.com/
http://freereceivesmsonline.com/

Charges

https://sms-activate.ru/cn/
https://5sim.net
http://smspva.com
http://give-sms.com
https://onlinesim.ru/zh
https://www.smsjiema.com/
https://www.textverified.com/
https://autofications.com/
https://service.pvaverify.com/
https://getsms.online/

E-mail

Verify_Email

Temp_Mail

http://www.yopmail.com/zh/
https://10minutemail.com/
https://10minutemail.net/
https://www.guerrillamail.com/zh/inbox
http://www.fakemailgenerator.com/
https://temp-mail.org/en/
https://www.guerrillamail.com/
http://tool.chacuo.net/mailsend
https://maildrop.cc/
http://tool.chacuo.net/mailanonymous
https://tempmail.altmails.com/
https://www.snapmail.cc/
https://www.linshi-email.com/

Encrypted_Email

Platform_control_setting

baidu
- 应用授权
Facebook
- 应用授权
github
- 应用授权
google
Microsoft
- 产品和服务的隐私设置,以及查看和清除 Microsoft 保存到云的数据的位置
- 应用授权
twitter
- 应用授权旧版新版
- 興趣和廣告資料
- 密碼重設保護
tencent
- 广告个性化
- 应用授权
- 微信应用授权 [设置 - 隐私 - 授权管理]

OSINT

OSINT is the collection and analysis of information that is gathered from public, or open sources.

Related Sites and Resources

Cases

OSINT Tools

Device-Voice_Assistant

Alexa
Cortana
Google Home
- 谷歌承认通过语音助手收集用户谈话内容:仅用于开发
- Google admits workers listen to some smart device recordings
HP printers
- 惠普打印机被发现偷偷回传数据:隐藏极深
- HP printers try to send data back to HP about your devices and what you print
Siri
Misc
- 卖二手设备一定要注意,你的信息可能并没被删除
MIUI
- 小米被指记录用户的 Web 和手机使用数据
- 关于去广告
  - 1000字够不够？小米MIUI 10去广告教程
  - How to disable most push advertisement on MIUI China Version
  - 在「设置-小米账号-隐私协议等-系统广告」里关闭广告.
ios

设置-->隐私-->定位服务-->系统服务-->重要地点

Platform-Software

Airbnb
- Related articles
  - Airbnb上的OSINT信息收集
  - I Accidentally Uncovered a Nationwide Scam on Airbnb
AVAST
- 知名安全软件AVAST被爆收集用户各种隐私信息并公开出售给其他公司
AWS S3
- 相关工具
  - Public buckets by grayhatwarfare
Brave
- 事件记录
  - Brave 劫持链接插入返利代码
  - Brave 称自动插入返利代码是失误所致
Chrome
- 事件记录
- 隐身模式
  - Bypassing anti-incognito detection in Google Chrome
  - Google Chrome Incognito Mode Can Still Be Detected by These Methods
EDGE
- 事件记录
Flickr
- Related articles
  - Email to Flickr account
  - Email to Flickr account part 2
firefox
- 国际版和中文版
  - Firefox火狐国际版和中文版的区别
  - Firefox 如何查看和切换本地服务与全球服务
  - Mozilla 向用户展示 Firefox 收集的遥测数据
    - 在地址栏输入 about:telemetry，用户可以看到 Mozilla 收集的遥测数据如浏览器设置、安装的扩展、操作系统/硬件信息，浏览器会话以及运行的进程。
kaspersky
- 事件记录
  - 卡巴斯基修复四年老漏洞注入 HTML 源码的唯一标识符会泄露用户隐私
  安全研究人员在测试卡巴斯基杀毒软件时发现它会以安全的名义在用户访问的每一个网页注入它的脚本,而这个脚本还带有唯一 ID,这个 ID 在不同计算机上是不同的,也就是说它可以作为跟踪代码使用.研究人员将这一发现报告给了卡巴斯基.卡巴斯基承认了数据泄漏,它释出了补丁修复了编号为 CVE-2019-8286 的问题.这个补丁去除了唯一 ID,留下了相同的 ID,也就是说网站仍然会知道有安装了卡巴斯基软件的用户访问了.
  - Unique Kaspersky AV User ID Allowed 3rd-Party Web Tracking
Netflix
- 事件记录
  - Netflix 解释他们追踪用户活动数据的原因
Office 365
- 事件记录
  - Office 365的Webmail在电子邮件中显示用户的IP地址
Opera
- 事件记录
  - 第一次启动 Google Chrome 会发生什么？
    
    Brave 的 Jonathan Sampson 在 Twitter 上发表了一系列帖子,他在 Windows 机器上第一次安装了 Google Chrome、Microsoft Edge (Chromium) Beta、Opera 和 Vivaldi 、Dissenter、Brave 和 Firefox,每个浏览器在安装之后都打开几分钟,期间他会对浏览器发出的请求进行抓包,对抓包结果进行一番分析.他发现 Brave 会发出 23 个请求,访问的都是 Brave.com 域名;Firefox 会发出 26 个请求,部分与 Google 的服务有关;Edge 会发出超过 130 个请求,有微软的还有 Google、Facebook 和 Twitter 的,Edge 在首次运行之后还收集了用户系统的详细信息;Opera 发出的请求有些特别,它有 19 个请求指向了俄罗斯的 yandex.ru,还有亚马逊、ebay 和阿里巴巴,它还预加载了十多个第三方网站的 cookies,它甚至已经开始与第三方共享用户信息,许多人声称这家中国公司拥有的挪威浏览器已经变成了间谍软件.
Riot Games
- 事件记录
  - Riot Games 热门新作《Valorant》安装了 rootkit 去防止作弊
Skype
- 事件记录
  - 当Skype翻译器功能处于活动状态时微软承包商可以获知对话内容
Steam
- 相关工具
  - steamid
zoom
- 事件记录
  - Zoom CEO 称为配合 FBI 免费版不加密
  - Zoom漏洞：超 50 万个 Zoom 账户泄露并在 Dark Web 出售

Social_Network

facebook
- 事件记录
  知情人士透露称,Facebook 付费聘请几百名外部承包商,让他们转录音频片段,这些音频来自使用 Facebook 服务的用户.
- Related articles
- 相关工具
  - harismuneer/Ultimate-Facebook-Scraper
  - Humanitarian Data Exchange
github
- 相关搜索
  - CoderStats - View Statistics for Millions of GitHub Users and Organizations
  - Git Awards - Discover your ranking on GitHub
  - GitHut - Programming Languages and GitHub
  - GitLive
  - Gitstar Ranking - Top GitHub users and repositories
google
- 事件记录
  - Google accused of leaking personal data to thousands of advertisers
  - 执法部门找Google查用户信息需缴费，明码标价童叟无欺
- Related articles
  - 关于Google ID的OSINT信息挖掘
- 相关工具
  - Google Account Finder
  - mxrch/GHunt
Instagram
- Related articles
  - Find an Instagram user ID
  - 在最难搜索的地方：解剖 Instagram 用户
- 相关工具
  - sc1341/InstagramOSINT
  - Datalux/Osintgram
- 相关搜索
  - Instagram Search Engine
  - Webstagram - Instagram Search Account Instagram Web Viewer
  - GramPages
  - Skimagram - Search engine for Instagram
LinkedIn
QQ
- 事件记录
- 查看历史头像
  
  貌似只有 QQ 可以,TIM 不行
telegram
- Related articles
  - MODIFYING TELEGRAM'S "PEOPLE NEARBY" FEATURE TO PINPOINT PEOPLE'S HOMES
- 相关工具
  - paulpierre/informer
  - th3unkn0n/TeleGram-Scraper
- 相关搜索
  - Combot
  - tele.me
  - tgstat
  - Statistics and Telegram Tools
  - Telegram channels online web catalog and bot for news reading
  - Telegram channels rating
  - 18000+ Telegram Channels, Groups, Bots and Stickers List - Discover Telegram Channels
  - Telegram Group - Find Telegram Channels, Bots & Groups
  - Search.buzz.im
  - Telegram Search. Search for posts
  - goq/telegram-list
  - Telegramic
  - Telegroups
  - Telegram Groups List
  - Bots for Telegram
  - Lyzem Search
  - telegram directory
- Tips
  - Telegram 账号的"数字 id"是注册时间越晚就越大吗？
    - 不是.如果多注册一些账号,可以发现有可能后注册的账号数字 id 是要小于先期注册的,因此通过数字 id 来判断一个账号是否为新号是没有依据的.出现这种现象,应该是由于旧账号注销后,该账号的数字 id 又被重新分配给新注册的账号.Telegram 官方客户端无法显示账号数字 id,若想查询自己的账号数字id可以用过机器人 @getidsbot ,还有其他的机器人也有类似的功能,某些第三方客户端也可以显示账号的数字id(请谨慎使用第三方客户端).
      
      来源 : https://t.me/TGgeek/304
tiktok
- Related articles
  - TikTok OSINT: targeted user investigation (Part 1/3: User)
- 相关工具
  - sc1341/TikTok-OSINT
Twitter
- 事件记录
  - Twitter承认未经允许将用户数据与广告商共享
- Related articles
  - 从推特中挖掘真相不需要太复杂的工具：一个常用工具的全面指南
  - Email to Twitter account
- 相关工具
  - twintproject/twint
  - sowdust/tafferugli: Tafferugli is a Twitter Analysis Framework
- 相关搜索
whatapp
- 相关工具
  - LoranKloeze/WhatsAllApp
YouTube
- 相关工具
NetEase Cloud Music
- 链接指纹
  
  试着分享一个音乐 https://music.163.com/#/song/1346907833/?userid=48353
  
  注意一下 userid 变量,构造一下链接: https://music.163.com/#/user/home?id=<!userid!>
  
  https://music.163.com/#/user/home?id=48353
- 历史评论
  
  ios 端、安卓端通用,账号-->关于我-->我的评论
WeChat
- 事件记录
  - How unwitting users of WeChat aid the Chinese messaging app’s blacklisting of sensitive images
    
    阿里巴巴旗下的南华早报引用加拿大多伦多大学公民实验室的报告报道,腾讯的微信利用实时和追溯分析的方法审查用户的图片.报告发现,微信对用户对话中发送的图片进行实时自动检测和审查,审查是基于图片中包含的文字以及目标图片与系统数据库中的敏感图片的相似度匹配;微信通过建立哈希索引(Hash Index)实现过滤,该哈希索引由微信用户在聊天对话中发送的图像的 MD5 值组成;对比微信朋友圈,一对一聊天以及群组聊天的图片审查比例,发现这三项功能的敏感图片库并不相同,其中朋友圈和群组聊天所审查的范围要远大于一对一聊天;与关键词审查一样,微信图片审查与新闻事件相关.
- 链接指纹阅读下面这个文章大致了解一下微信链接组成
  - 微信公众号文章URL的种类与结构
  那么类似 https://mp.weixin.qq.com/s?__biz=MzIyAAANzY0OA==&mid=101111431&idx=1&sn=62accd1299d25d54d1f3ad3f3d7d214&chksm=683d2e402f6sa2dsa2d154058807d1xxxx151213131dasdasdsadasd675ce59fae94ff9908&scene=18&xtrack=1&key=917D458AS46D146SD14AF541DSA4FDSAF131DS31F31DSA31FDSAde153285841fdc398a67d61be441cb0e1898a08232811308bf31dfc92757c3d7d5e3SD54AD1SA1D351S3A1D31S3AD034f1cb34170ecd27b6d7d69&ascene=1&uin=MTk3ODkwODMxMA%3D%3D&devicetype=Windows+7&version=62055833&lang=zh_CN&pass_ticket=r6jSAD55SAF458F61A4S56F51BW2hfIQPocX2O0er0vUheGSD45ASD11DASD361SADAWDbiqW 这么一串可以携带多少信息
alipay
- 支fu宝可以查婚姻状况望周知

Various_search_engines

下方所有搜索引擎不保证其安全性、隐私性,仅保证其功能性

Popular_search_engines

Web_Snapshot

Reverse_Image_Search

acg

Flight_Airplane_Info

Flight Tracker | Flightradar24 | Track Planes In Real-Time
- Flightradar24 — how it works? / Habr
FlightAware
real-time flight tracking | Flightadsb | VariFlight
Direct Flights | Explore all non-stop flights from any airport
AirNav RadarBox - Live Flight Tracker and Airport Status
ADS-B Exchange - tracking 2534 aircraft
FLIGHTVIEW FLIGHT TRACKER
Plane Flight Tracker
FlightStats - Global Flight Status & Tracker, Airport Weather and Delays
iFly.com - Flight Status | Track Flights
FAA Registry - Aircraft - N-Number Inquiry
Virtual Radar

Ship_Info

Related articles

OSINT on the Ocean: Maritime Intelligence Gathering Techniques

Truck_Location

Package_Info

Car_Info

VIN_Code

VIN码是英文(Vehicle Identification Number)的缩写，VIN码是表明车辆身份的代码。VIN码由17位字符（包括英文字母和数字）组成。是制造厂为了识别而给一辆车指定的一组字码。该号码的生成有着特定的规律，对应于每一辆车，并能保证五十年内在全世界范围内不重复出现。因此又有人将其称为"汽车身份证"。车辆识别代号中含有车辆的制造厂家、生产年代、车型、车身型式、发动机以及其它装备的信息。

Cyberspace_Search_Engine

tor_Info

TorBot - Open Source Intelligence Tool for the Dark Web

Academic_Info

Patent_Trademark

Newspaper_Info

Open_Data

World Bank Open Data
Databasd
ICIJ Offshore Leaks Database - OFFSHORE LEAKS DATABASE
QResear.ch
judyrecords
Boardreader

Name		Name	Last commit message	Last commit date
Latest commit History 61 Commits
assets/img		assets/img
.gitignore		.gitignore
LICENSE		LICENSE
README.md		README.md
README.zh-cn.md		README.zh-cn.md

License

sophistd/Digital-Privacy

Folders and files

Latest commit

History

Repository files navigation

Manual

Sensitive_Information

Privacy_Search

Browser_Fingerprint

Password_Leakage_Query

DNS_Info

Geolocation

Replacement

OS

Software

Browser_extension

Secure_Delete

Encryption

Flash

Input_tools

Search_Engine

Information_Generator

Photo_Info

SMS

receive_sms

E-mail

Verify_Email

Temp_Mail

Encrypted_Email

Platform_control_setting

OSINT

Device-Voice_Assistant

Platform-Software

Social_Network

Various_search_engines

Popular_search_engines

Web_Snapshot

Reverse_Image_Search

acg

Flight_Airplane_Info

Ship_Info

Truck_Location

Package_Info

Car_Info

VIN_Code

Cyberspace_Search_Engine

tor_Info

Academic_Info

Patent_Trademark

Newspaper_Info

Open_Data

BGP_Info

Electronic_Hardware_Info

Social_Info

Company_Info

Blog_Search

Code_Search

File_Resources

PDF

music

Weather_Environment

Map

Data_Display

Cyber_Threat

About

Resources

License

Stars

Watchers

Forks

Releases

Packages 0

Packages