跟读练习: How Hackers Find Anyone's Info From Just Their Instagram... - 通过YouTube学习英语口语
B2
Watch this, I'm going to take this Instagram handle,
241 句
如果句子过短或过长,请点击 Edit 进行调整。
1
Watch this, I'm going to take this Instagram handle,
2
just one username, and I'll get her real name,
3
the city she lives in,
4
her phone number, and every other account she's ever made online.
5
I got all of this through OSINT, Open Source Intelligence.
6
Basically all the public information that's out there about you online,
7
scattered across the internet.
8
And I'm going to be showing you exactly how it's done.
9
But before we go any further,
10
everything I'm about to show you on this video is done on my own accounts.
11
Don't do this with malicious intent.
12
OSINT by itself is legal but the second you start using it to stalk,
13
harass or even scam someone that's where you cross a line and it becomes illegal.
14
Let's begin.
15
The first one I want to show you guys here is called OSINT-Gram
16
and it's pretty popular it has 12,000 stars on GitHub and it does one thing very well.
17
You give it one single Instagram username and it pulls back everything Instagram is publicly leaking on that account.
18
Without wasting much time let's just scroll down and begin with the installation
19
and we We can either just clone the scribe
20
and paste in our terminal or we can go up here and click the big green button and copy the web url,
21
then go to our terminal and just type git clone and then paste in the web url we just copied.
22
And while this is cloning,
23
scroll down and hit the subscribe button,
24
I would really appreciate it.
25
Once done, we cd into the tool,
26
cd o and then tab to fill it up by itself,
27
press enter, let's clear this up first and then list the files.
28
And here inside the tool we can see a bunch of files and folders and one of them is requirements.txt.
29
This means we have a bunch of dependencies to install so the tool can run smoothly without any errors.
30
And also in the installation guide, we have a receipt.
31
We first need to make a virtual environment to install the dependencies,
32
so we copy this and we just paste it into our terminal, hit enter.
33
Now we load the virtual environment that we just created,
34
and to do that we go to the installation page again,
35
and in the fourth section, load the virtual environment.
36
If you're on Windows, you use this command right here,
37
this is how I'm on Kali Linux,
38
I use source to activate it.
39
I copy this section, then paste it into my terminal,
40
right click, paste to the clipboard,
41
this part right here you know it loaded successfully now all it's got to do is install the dependencies
42
install the requirements.txt to do
43
that we just copy right here pip install dash r requirements.txt we copy it paste on terminal send it
44
and it takes a bit to install after it's done we clean up the terminal
45
so it's nice and clean and now we're almost done
46
but there's one more thing we need to pull the data somehow from instagram
47
and then the sixth step right here we see it open
48
the credentials at ini file in the config folder let's go ahead and do that real quick there's the files
49
going inside config this files again now here we see credentials.ini nano credentials
50
and tab inside we have three fields username password
51
and hikerapi underscore token there's two ways we can pull the
52
data either we log in into our normal instagram account using our username and password
53
or use a hikerapi token in my opinion using your own instagram account is a very bad idea
54
because instagram is very aggressive and cracks down on bots and as soon as the tool starts pulling data,
55
the Instagram is going to think this account is a bot,
56
either going to lock it or ban it completely.
57
So we should go with the Hiker API token.
58
We get the token or the access key that we need directly from the website and it says in the paragraph here,
59
use Hiker API token from the website.
60
Right click open new tab.
61
First hundred requests are free after registration
62
and confirmation with your telegram let me show you
63
when you go to the site you get redirected to the tokens page
64
and I already did it and I'm not logged in
65
and here's my access key my token
66
that I need don't try to use it it's gonna be deleted after this video
67
but once you're here scroll down go to the telegram page
68
and just verify with the bot do start once you're verified come here
69
and you're gonna have your access key here
70
and in your terminal just go ahead
71
and paste in your token you just got and then save it
72
and exit let's just clear the whole thing up
73
and now we're set up and ready to go
74
and for the last step all we have to do is just run the main file main.py
75
so python3 main.py and target username the instagram username the target to spawn interactive prompt let's go ahead
76
and do that so python3 main.py and the target username the instagram account
77
that i definitely made up it's not one of my alternate account named miss.firewall
78
yeah
79
when i made this account i thought the news name would
80
be pretty funny now it's just kind of cringe i can't lie
81
but let's just end it uh it's in config folder let's just exit it
82
and then clear it again
83
and let's run it again python3 main.py miss firewall after it
84
ran we can see right here it connected to the hiker api first
85
and then it found the target miss firewall and then her instagram ID.
86
Scroll down, we first type list to show all the commands we can run,
87
so let's just do that,
88
list, and here we can see a bunch of commands,
89
starting from address, get all registered address by the target photos,
90
clear cache of the tool,
91
a bunch of stuff, but first let's just run info,
92
to get basic information on the target, info.
93
And here we have some information again,
94
basic ones like the ID of the Instagram,
95
full name, Ms. Firewall, her bio,
96
hello my name is Ms. Firewall,
97
miss I must have misspelled it
98
and this is my personal blog follow the zero it has
99
four followers two photos two photos posted business account it is
100
a business account since it's a personal blog verified account false
101
and here we have her HD profile picture a full HD profile picture of her profile
102
and we have it her profile picture it's a girl with
103
a firewall face anyways let's just move on the next one
104
let's do something like address get all registered addresses by a target photos addrs
105
and here woohoo we found one addresses one post with an address
106
and the address right here but she probably didn't give her full address on the post
107
and we can see right here let me go out to
108
the profile instagram missed our firewall i'm already logged in
109
so i can show you guys and here we have the post
110
and in the location it says anthony texas but why does it say a full address in our terminal.
111
What most people don't know is that these locations right here,
112
users create them, normal users like you and me.
113
And then when they create them,
114
they first have to drop a pin on an exact location.
115
Then they can name that location whatever, like Anthony Texas.
116
When a user goes to create a post,
117
Instagram suggests the closest pin near that person.
118
It might say Anthony Texas,
119
but behind that is an exact location,
120
an exact address, a pin.
121
So when the user was choosing a location
122
and saw anthony texas she was like yeah that's where i'm at right now i'm gonna choose
123
that without knowing that in the background she actually doxxed herself
124
and gave out her full location and then we can go ahead
125
and actually copy this location and then go to our google maps
126
so i can show you google.com slash maps and then we go ahead
127
and paste in our location we just copied
128
and then we see the pin right here this address is showing to this location right here rv jones colina and
129
when we go back to the instagram page here we see a sign welcome to texas let's just search for
130
that sign to see exactly where it is our address
131
that we extracted is right here let's go look up for
132
the sign welcome to texas sign our pin is right here
133
and the welcome texas sign is right here
134
so she took her picture here then went on instagram to
135
post it search for location instagram saw the nearest pin to
136
her was named anthony texas suggested it to her she thought
137
yeah that's where i'm at anthony texas i'm gonna choose it without thinking much
138
but in the background she actually talks herself now let's try
139
something else let's try something like following email she doesn't have
140
followers let's try following email this gets all the emails of users followed by the target let's copy
141
that and then paste it right in
142
and here we got three out of four emails from our following list from hack the box network chuck
143
and david bumble these were the first people that came to mind
144
when i first made the account
145
but that's beside the point what we got here is super importing during an information gathering
146
because now we have leverage we have something we can pivot to
147
when we hit a roadblock or a wall now we can always send nice personalized emails
148
or dms pretending to be miss firewall to our friends let's imagine these are our friends
149
and now we can do for example hash tags
150
and get some hashtags on her posts for example farm girl family texas road trips
151
so now we know she likes road trips she's a farm girl she lives in anthony texas
152
and we can make nice personalized dms
153
or emails to her friends pretending to be her
154
so we can gather even more information on her now since
155
we mapped out where she's been her friends her hobbies the
156
most obvious thing would be to look for different accounts
157
so we can extract more information and the tool for
158
that is sharelock i've already covered it in one of my other oc videos
159
but i'm going to cover it again and what it does is
160
that simple you give it a single username
161
and it looks through over 400 websites to check if
162
that username exists you can also give it multiple usernames you can specify
163
which sites you wanted to go through you can even give it a txc file full of usernames
164
that you wanted to search
165
and to top it all off you can even search through nsfw websites
166
and to install it we can either just copy this pip x install sharelock project
167
or we can just go to our calendar terminal
168
and type pip install sharelock for me it says the requirements already satisfied
169
because i already installed it
170
but first let's just see the usage let's see what we
171
can do with sharelock just type sharelock dash dash help
172
and let's just scroll up to see what we can do usage sharelock we have to type sharelock
173
and everything here in square brackets is optional it's optional parameters
174
we don't have to give them except one the username we have always had I forget the username
175
so you can search for something.
176
So let's just try the most simplest option share lock
177
and the username share lock
178
and then for us miss firewall share lock slowly goes through multiple websites and check if it's available
179
after it's finished here we can see it gave us 46 results back it searched through hundreds of sites
180
and it found 46 results 46 social media platforms or platform platforms in general
181
that have miss.firewall in here we can see sites like seven cops airliners discord reddit youtube try
182
and hack me which is kind of cool
183
and then we can also do a full file of usernames
184
because maybe they have we want to search their friends
185
or their family and i already made a file
186
so i can show you guys firewall fam.txt
187
and i hear i have a bunch of usernames miss firewall
188
mr firewall firewall.fam firewall father firewall kid you get the point
189
to search up multiple usernames in a file we type share lock followed by dollar sign
190
and then in brackets we type cat firewall fam.txt
191
and we type dash dash site i'm not going to go through all the websites all the usernames
192
because it's going to be a lot a lot of works less it's going to take a long time
193
so i'm going to do that site i'm going to specify youtube
194
because if i go through all it's going to take a a long time it's gonna be too much
195
and once it's done we got 16 results back
196
and we got all the links of their accounts
197
but obviously share log just looks up their usernames on different sites
198
and doesn't really give us any information on those sites
199
but the good news we have a tool just for
200
that called a migrate let me show you guys
201
and here it is migrate and here it is
202
and here it is migrate
203
when you scroll down we see how it is first it starts up the username on the site
204
and then gathers information on those sites to install it is super easy we just do pip install
205
and migrate So let's go ahead and copy that,
206
go to our terminal, open a new one,
207
clear this up, make it bigger,
208
and then just run that,
209
pin install migrate, then clear it up once again once it's installed,
210
go back to the side,
211
and the usage is super simple,
212
we just type migrate and the username,
213
so migrate, and I'm going to use whoamitang,
214
not miss firewall, because someone else might have miss firewall,
215
and I don't want to show their information here on the video,
216
so I'm going to use my username,
217
but you don't get the idea,
218
whoamitang, after it's done, here we can see it went through.
219
500 sites and it looks pretty similar to a share log
220
but the difference is
221
that this is way more information rich for example here in
222
the github based on my github not only did it find
223
my follower count 67 my following count full name it also found my location my Germany I live in Germany
224
and this is super important for your investigations
225
because you don't have to go through each website
226
and look at the information yourself you can just use minecraft
227
and it distracts all the information itself okay so now you've seen exactly how easy this is to do,
228
how can you make sure it doesn't happen to you?
229
My number one tip is that you just go on Google,
230
type in your name, see what results come up,
231
look at the ones you don't like,
232
if it's one of your social media accounts or your website,
233
just change it or private your social media account.
234
If it's something you don't own,
235
like you won a tournament on a school three years ago,
236
you don't want your name being there,
237
just email them or DM them,
238
I'm sure they'll gladly remove it.
239
With that being said, I hope you enjoyed the video,
240
don't forget to subscribe, enjoy the discord,
241
we'll link in the description.
下载应用
AI 为你说出的每个句子打分
TRENDING
热门
背景與上下文
在這段視頻中,講者展示如何通過一個簡單的Instagram用戶名,利用開放來源情報(OSINT)技術獲取一個人的個人資訊,包括真實名字、居住城市和電話號碼。講者強調,這些行為必須在法律框架內進行,不可出於惡意目的使用這些工具。本段內容替學習者提供了提升英語口語的切入點,特別是在技術及安全領域的對話中,如何理解和使用此類資訊。
日常交流的五個重要短語
- How to use OSINT?(如何使用OSINT?)
- I'm going to show you how it's done.(我將向你展示如何操作。)
- That’s where you cross a line.(這就是你越界的地方。)
- Let's begin with the installation.(讓我們從安裝開始。)
- Make sure to install the dependencies.(確保安裝所需依賴項。)
這些短語不僅能幫助你在技術話題中更流利地表達,還能在多種情境下靈活運用,適合於雅思口語練習和商業英語交流。
逐步跟隨指南
要有效提升你在這段視頻中的理解和表達能力,可以遵循以下步驟:
- 重覆聆聽:先看一遍視頻,注意視頻中講者的語調和重音,然後重複觀看,進一步理解內容。
- 記下短語:使用上面的五個短語來模擬自己的對話,練習如何在不同情境下使用它們。
- 角色扮演:與朋友進行角色扮演,模擬OSINT的實際應用場景,增強口語能力。
- 錄音回顧:錄下自己的練習並與視頻中的講者進行對比,以找出自己需要改進的地方。
- 定期反覆練習:把這些短語和技能融入日常生活中,比如在社交媒體上討論相關話題,這樣能幫助你更流利地運用英語。
透過持之以恆的練習和跟隨指南,您將能在看YouTube学英语的同時,提高自己的英語口語水平,並更有效地使用shadow speak技巧來提升交流能力。
什么是跟读法?
跟读法 (Shadowing) 是一种有科学依据的语言学习技巧,最初开发用于专业口译员的培训,并由多语言者Alexander Arguelles博士普及。这个方法简单而强大:您在听英语母语原声的同时立即大声重复——就像是一个延迟1-2秒紧跟说话者的影子。与被动听力或语法练习不同,跟读法强迫您的大脑和口腔肌肉同时处理并模仿真实的讲话模式。研究表明它能显着提高发音准确性,语调,节奏,连读,听力理解和口语流利度——使其成为雅思口语备考和真实英语交流最有效的方法之一。
