From 618e311b959b021aefaa1860e115ad7869ac4302 Mon Sep 17 00:00:00 2001 From: s0lray Date: Fri, 27 Mar 2026 02:43:36 -0400 Subject: [PATCH] Enrich Social Networks metadata fields (THE-140) Co-Authored-By: Paperclip --- public/arf.json | 357 +++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 336 insertions(+), 21 deletions(-) diff --git a/public/arf.json b/public/arf.json index b8b4568..599d31e 100644 --- a/public/arf.json +++ b/public/arf.json @@ -2662,27 +2662,102 @@ { "name": "FB Email Search", "type": "url", - "url": "https://www.facebook.com/public?query=email@gmail.com&nomc=0" + "url": "https://www.facebook.com/public?query=email@gmail.com&nomc=0", + "description": "Facebook public search pattern used to test whether an email identifier resolves to matching profiles. Useful for quick account existence checks with manually edited query values.", + "status": "live", + "pricing": "free", + "bestFor": "Quick Facebook account existence checks from an email identifier", + "input": "Email address (replace the query value in the URL)", + "output": "Facebook public search results that may include matching profile records", + "opsec": "passive", + "opsecNote": "Uses Facebook web search endpoints without authentication, but query terms are visible in browser/network logs.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": true, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Recover FB Account", "type": "url", - "url": "https://www.facebook.com/login/identify?ctx=recover" + "url": "https://www.facebook.com/login/identify?ctx=recover", + "description": "Facebook account recovery endpoint that confirms whether an email or phone number is linked to an account and presents recovery options.", + "status": "live", + "pricing": "free", + "bestFor": "Validating whether a target email or phone is tied to a Facebook account", + "input": "Email address or phone number", + "output": "Account match confirmation and available recovery paths", + "opsec": "passive", + "opsecNote": "No login required, but submitted identifiers are sent directly to Facebook.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Facebook Photos by ID (M)", "type": "url", - "url": "https://www.facebook.com/photo.php?fbid=PHOTO-ID-HERE" + "url": "https://www.facebook.com/photo.php?fbid=PHOTO-ID-HERE", + "description": "Direct Facebook photo permalink format that retrieves a specific image when the photo ID is known.", + "status": "live", + "pricing": "free", + "bestFor": "Opening specific Facebook photos from known numeric IDs", + "input": "Photo ID value inserted into the URL", + "output": "Direct Facebook photo page for the supplied photo ID", + "opsec": "passive", + "opsecNote": "Accesses publicly available photo endpoints; visibility depends on the target photo privacy settings.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": true, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "FB Lookup ID", "type": "url", - "url": "https://lookup-id.com/" + "url": "https://lookup-id.com/", + "description": "Web utility that resolves Facebook profile, page, or group URLs into numeric Facebook IDs for downstream investigation tools.", + "status": "live", + "pricing": "free", + "bestFor": "Converting Facebook profile URLs into numeric IDs for pivoting", + "input": "Facebook profile/page/group URL", + "output": "Resolved numeric Facebook ID", + "opsec": "passive", + "opsecNote": "Processes public Facebook URLs through a third-party service.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "FB Identify (Requires Logout)", "type": "url", - "url": "https://www.facebook.com/login/identify" + "url": "https://www.facebook.com/login/identify", + "description": "Facebook identify endpoint used in recovery workflows to resolve account records from submitted identifiers; typically works best when not logged in.", + "status": "live", + "pricing": "free", + "bestFor": "Account discovery checks through Facebook identify flow", + "input": "Email address, phone number, or profile identifier", + "output": "Potential account matches and recovery prompts", + "opsec": "passive", + "opsecNote": "Requires interacting with Facebook recovery interfaces and may produce different results when authenticated.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false } ] } @@ -2781,12 +2856,42 @@ { "name": "Inflact Instagram Viewer (Anonymous)", "type": "url", - "url": "https://inflact.com/instagram-viewer/profile/" + "url": "https://inflact.com/instagram-viewer/profile/", + "description": "Anonymous Instagram viewer for browsing public profiles, stories, and posts without authenticating to Instagram directly.", + "status": "live", + "pricing": "freemium", + "bestFor": "Anonymous reconnaissance of public Instagram profiles", + "input": "Instagram username or profile URL", + "output": "Profile details, posts, stories, and highlight content", + "opsec": "passive", + "opsecNote": "Uses a third-party proxy viewer; avoid entering sensitive target identifiers outside approved workflow.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Osintgram (T)", "type": "url", - "url": "https://github.com/Datalux/Osintgram" + "url": "https://github.com/Datalux/Osintgram", + "description": "Python-based Instagram OSINT toolkit for extracting data from public accounts, including posts, hashtags, and follower relationships.", + "status": "live", + "pricing": "free", + "bestFor": "Deep Instagram profile analysis from a local CLI workflow", + "input": "Instagram username and operator credentials for session access", + "output": "Posts, captions, hashtags, engagement metrics, and account metadata", + "opsec": "active", + "opsecNote": "Direct interaction with Instagram endpoints can trigger rate limits or account monitoring.", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false } ] }, @@ -2801,32 +2906,122 @@ { "name": "Twitter Advanced Search", "type": "url", - "url": "https://twitter.com/search-advanced" + "url": "https://twitter.com/search-advanced", + "description": "Built-in X/Twitter advanced search interface supporting operator-based filtering for users, terms, dates, and engagement constraints.", + "status": "live", + "pricing": "free", + "bestFor": "Targeted discovery of public tweets with complex filters", + "input": "Search operators and filter parameters (keywords, accounts, dates, media flags)", + "output": "Filtered tweet result set matching the applied criteria", + "opsec": "passive", + "opsecNote": "Uses native search features without direct interaction with target accounts.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": true, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Twitter Location Search", "type": "url", - "url": "https://twitter.com/search?q=geocode%3A36.1143855%2C-115.1727518%2C1km&src=typd" + "url": "https://twitter.com/search?q=geocode%3A36.1143855%2C-115.1727518%2C1km&src=typd", + "description": "Operator-based X/Twitter search workflow for geotagged content using `geocode:` and location-focused query parameters.", + "status": "live", + "pricing": "free", + "bestFor": "Finding public tweets associated with specific coordinates and radius", + "input": "Latitude/longitude plus radius in search query", + "output": "Tweets matching the configured location filter", + "opsec": "passive", + "opsecNote": "Searches public indexed content; no outbound contact to targets beyond normal platform queries.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": true, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Twitter Date Search", "type": "url", - "url": "https://twitter.com/search?q=SearchTerm%20since:2016-03-01%20until:2016-03-02" + "url": "https://twitter.com/search?q=SearchTerm%20since:2016-03-01%20until:2016-03-02", + "description": "Date-bounded X/Twitter search pattern using `since:` and `until:` operators to isolate tweets in a specific time window.", + "status": "live", + "pricing": "free", + "bestFor": "Timeline reconstruction and historical tweet collection", + "input": "Keywords plus `since:` and `until:` date operators", + "output": "Tweets posted within the requested date range", + "opsec": "passive", + "opsecNote": "Relies on platform search indexing and public content availability.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": true, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Followerwonk (R)", "type": "url", - "url": "https://followerwonk.com/" + "url": "https://followerwonk.com/", + "description": "Follower analytics platform (now under Fedica) for examining X/Twitter audience demographics, account overlaps, and engagement trends.", + "status": "live", + "pricing": "freemium", + "bestFor": "Audience demographic analysis and account overlap discovery", + "input": "Twitter/X username or profile URL", + "output": "Follower demographics, activity analytics, and comparative account insights", + "opsec": "passive", + "opsecNote": "Uses platform-derived public profile and follower data via third-party analytics.", + "localInstall": false, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Twopcharts", "type": "url", - "url": "https://twopcharts.com/" + "url": "https://twopcharts.com/", + "description": "Legacy Twitter statistics site for ranking active users by geography and language; coverage appears limited and stale.", + "status": "degraded", + "pricing": "free", + "bestFor": "Legacy exploratory checks of historical Twitter influence rankings", + "input": "City or language selection", + "output": "Ranked user lists and basic activity comparisons", + "opsec": "passive", + "opsecNote": "Data freshness is unclear; treat outputs as historical indicators rather than real-time intelligence.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "TweeterID", "type": "url", - "url": "https://tweeterid.com/" + "url": "https://tweeterid.com/", + "description": "Bidirectional converter between X/Twitter usernames and numeric account IDs for correlation and API-ready pivots.", + "status": "live", + "pricing": "free", + "bestFor": "Converting Twitter handles to numeric IDs (and reverse)", + "input": "Twitter username or numeric Twitter ID", + "output": "Mapped username-ID pair for the submitted account", + "opsec": "passive", + "opsecNote": "Performs lookup against public account metadata through a third-party web interface.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false } ] }, @@ -2841,22 +3036,82 @@ { "name": "Tweepsect", "type": "url", - "url": "https://tweepsect.com/" + "url": "https://tweepsect.com/", + "description": "Former Twitter overlap analysis tool for intersecting followers and following lists between accounts; no longer operational under current API limits.", + "status": "down", + "pricing": "free", + "bestFor": "Historical reference for follower overlap analysis workflows", + "input": "Twitter username(s)", + "output": "Follower/following intersection sets (historical behavior)", + "opsec": "passive", + "opsecNote": "Service endpoint is no longer functional; keep for historical context only.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": true }, { "name": "Twitonomy", "type": "url", - "url": "https://www.twitonomy.com/" + "url": "https://www.twitonomy.com/", + "description": "Twitter analytics platform for profile activity, hashtag usage, and follower/following behavior over time.", + "status": "live", + "pricing": "free", + "bestFor": "Profile-level Twitter analytics and behavior baselining", + "input": "Twitter/X username", + "output": "Activity timelines, hashtag/topic frequency, and account-level analytics", + "opsec": "passive", + "opsecNote": "Requires third-party platform access and may prompt X/Twitter sign-in for full features.", + "localInstall": false, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Foller.me Analytics", "type": "url", - "url": "https://foller.me/" + "url": "https://foller.me/", + "description": "Web analytics tool for summarizing public Twitter profile behavior, including hashtags, mentions, topics, and activity cadence.", + "status": "live", + "pricing": "free", + "bestFor": "Quick baseline profiling of a Twitter account", + "input": "Twitter/X username", + "output": "Follower counts, topic and hashtag summaries, posting-time patterns, and account metadata", + "opsec": "passive", + "opsecNote": "Queries publicly visible profile data through a third-party interface.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "X0rz Tweets_analyzer (T)", "type": "url", - "url": "https://github.com/x0rz/tweets_analyzer" + "url": "https://github.com/x0rz/tweets_analyzer", + "description": "Python CLI analyzer for profiling Twitter user behavior, including posting rhythm, language distribution, and source-client usage.", + "status": "live", + "pricing": "free", + "bestFor": "Behavioral profiling and temporal analysis of Twitter accounts", + "input": "Twitter username and API credentials", + "output": "Activity charts, language/source statistics, and account behavior indicators", + "opsec": "active", + "opsecNote": "Requires API-driven collection and can expose investigator infrastructure through API usage patterns.", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false } ] }, @@ -2867,24 +3122,84 @@ { "name": "RiteTag", "type": "url", - "url": "https://ritetag.com/" + "url": "https://ritetag.com/", + "description": "Hashtag intelligence platform that scores and recommends social tags based on trend velocity and engagement potential.", + "status": "live", + "pricing": "freemium", + "bestFor": "Hashtag trend analysis and campaign tag selection", + "input": "Keywords, draft text, or media captions", + "output": "Suggested hashtags with trend and visibility indicators", + "opsec": "passive", + "opsecNote": "Processes submitted content on third-party infrastructure for analytics.", + "localInstall": false, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "TAGSExplorer", "type": "url", - "url": "https://tags.hawksey.info/tagsexplorer/" + "url": "https://tags.hawksey.info/tagsexplorer/", + "description": "Browser-based visualization layer for TAGS archives that maps mentions, replies, and retweet relationships from collected Twitter datasets.", + "status": "live", + "pricing": "free", + "bestFor": "Conversation network mapping from archived Twitter data", + "input": "Google Sheets data produced by TAGS collection workflows", + "output": "Interactive network graph and conversation summaries", + "opsec": "passive", + "opsecNote": "Works on previously collected datasets; no direct contact with target accounts during analysis.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false } ] }, { "name": "Tweet Metadata", "type": "url", - "url": "https://www.wsj.com/public/resources/documents/TweetMetadata.pdf" + "url": "https://www.wsj.com/public/resources/documents/TweetMetadata.pdf", + "description": "Reference document and workflow aid for interpreting metadata fields embedded in tweet payloads and exports.", + "status": "live", + "pricing": "free", + "bestFor": "Understanding tweet metadata fields for forensic analysis", + "input": "Tweet JSON/export data and metadata field references", + "output": "Field-level interpretation guidance for tweet metadata", + "opsec": "passive", + "opsecNote": "Documentation resource only; does not query live targets directly.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Birdwatcher (T)", "type": "url", - "url": "https://github.com/michenriksen/birdwatcher" + "url": "https://github.com/michenriksen/birdwatcher", + "description": "Open-source Twitter data harvesting and analysis framework for collecting tweets and producing offline analytical artifacts.", + "status": "live", + "pricing": "free", + "bestFor": "Local collection and analysis of Twitter datasets at scale", + "input": "Twitter account targets and API configuration", + "output": "Collected tweets, relationship data, and analysis-ready exports (including geospatial artifacts)", + "opsec": "active", + "opsecNote": "Performs direct API/data collection activity from investigator infrastructure.", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Tinfoleak Web",