[77shafina8]

[HEADING=2]1. Introduction[/HEADING]
Doxxing links public data fragments (emails, usernames, phones) into a full profile. Attackers follow: Collect → Correlate → Confirm → Expand. Targets: legal name, address, family, work, habits.

---

[HEADING=2]2. Doxxing Attack Chains – Step-by-Step Profile Build[/HEADING]
[HEADING=3]2.1 Mindset[/HEADING]

• Start with ONE seed (email, username, phone, domain).
  
• Expand outward: email → username → social → work → family → financial.
  

[HEADING=3]2.2 Attack Chain Framework[/HEADING]

1. Seed Data: Emails, usernames, phones, partial names.
   
2. Data Brokers/Public Records: Use Infotracer, Whitepages, Spokeo, Intelius, FastPeopleSearch for addresses, relatives, court records.
   
3. Social Media/Digital Footprint: Username cross-checks (WhatsMyName, Maigret), platform searches (LinkedIn, Facebook Graph, Reddit history), tagged posts/friends.
   
4. Breach Data: HaveIBeenPwned, Dehashed, Scylla for passwords → reused credentials → new accounts.
   
5. Metadata/Fingerprinting: ExifTool (images), FOCA (docs), email headers for IPs/devices.
   
6. Infrastructure Mapping: WhoisXML, SecurityTrails, crt.sh, Shodan/Censys for domains, IPs, SSL certs.
   
7. Relational Pivots: Relatives/friends from brokers → their social → confirm addresses/workplaces.
   

[HEADING=3]2.3 Deep Techniques[/HEADING]

• Phone: Truecaller, Sync.me, Infotracer reverse; HLR lookups.
  
• Email: Gravatar/Google images, Epieos (Google account traces), breach cross-checks.
  
• Username: Sherlock/Maigret for forum/social reuse.
  
• Property: County assessor sites, Zillow/Realtor for ownership/history.
  
• Workplace: LinkedIn scraping, email pattern guessing, ZoomInfo/RocketReach.
  
• Location: Instagram/TikTok geotags, Strava maps, AirBnB profiles.
  

[HEADING=3]2.4 Correlation Tools[/HEADING]

• SpiderFoot (automated chaining), Maltego (graphs), IntelX (leaks/dark web), Scylla.so (breach aggregator).
  

[HEADING=3]2.5 Real-World Examples[/HEADING]

1. Username → forum post → EXIF GPS → property record → family.
   
2. Work email → Dehashed password → LinkedIn login → map company infra.
   

[HEADING=3]2.6 Defensive Countermeasures[/HEADING]

• Opt-out from data brokers; use aliases; strip metadata; limit oversharing.
  

---

[HEADING=2]3. Breach Data Pivoting – Emails → Leaks → Passwords → Infrastructure[/HEADING]
Sources: HaveIBeenPwned (free), Dehashed/Snusbase/Scylla (paid), IntelX.io (dark web).
Steps:

1. Email → breach DB → password.
   
2. Test password reuse.
   
3. Username reuse → find new accounts.
   
4. WHOIS/email → domain pivots.
   
5. Link to addresses/workplaces.
   

---

[HEADING=2]4. Data Brokers & People Search Engines – Indexed & Actionable[/HEADING]
Core US: Infotracer, Whitepages, Spokeo, TruthFinder, Intelius, FastPeopleSearch, PeopleFinders, Radaris, BeenVerified, Pipl (Pro), ZabaSearch, CocoFinder, InstantCheckmate, Nuwber, Thatsthem, TruePeopleSearch, PeekYou, WebMii, IDTrue, NeighborReport, USSearch.
Phone/Email: Truecaller, Sync.me, NumLookup, CallerSmart, Hunter.io, RocketReach, ZoomInfo, Clearbit, Epieos.
Property: County assessor sites, Zillow, Realtor, Redfin, Trulia, PropertyShark.
Courts/Criminal: PACER, state/county portals, VINELink, license boards, sex offender registries.
Corporate: OpenCorporates, Secretary of State, CorporationWiki, Manta/D&B/BBB, IRS Exempt Orgs, SEC EDGAR.
Social/Username: WhatsMyName, Maigret, Sherlock, Namechk/KnowEm, PimEyes, Yandex/Google Lens.
International: 192.com (UK), Companies House (UK), Canada411, White Pages AU, ABN Lookup (AU), MCA (India).
Leaks: HaveIBeenPwned, Dehashed, LeakCheck, Scylla, IntelX.
Misc: Wayback Machine, Gravatar, GitHub/GitLab, WHOIS/SecurityTrails, crt.sh.

Workflows:

• Phone → Truecaller/Whitepages → name → brokers → relatives → property.
  
• Email → Epieos → brokers → breaches → usernames → social.
  
• Name → filter by DOB/city → intersect relatives → LinkedIn verify.
  
• Address → assessor → owner → brokers → household → social tags.
  
• Domain → Hunter.io → LinkedIn → ZoomInfo → crt.sh/SecurityTrails.
  

Opt-Out: Search “[site] opt out”; prioritize Whitepages, Spokeo, Intelius, BeenVerified, Radaris, FastPeopleSearch, PeopleFinders, Nuwber; recheck quarterly.

Checklist:

• Corroborate with 2–3 sources.
  
• Graph links (Maltego/Obsidian).
  
• Timestamp screenshots.
  
• Separate leads vs confirmed.
  

---

[HEADING=2]5. Social Media Doxxing & Digital Footprinting[/HEADING]

• Facebook Graph queries.
  
• Instagram location/tagged filters.
  
• TikTok username/sound search.
  
• Reddit advanced search (Pushshift).
  
• LinkedIn org charts.
  

---

[HEADING=2]6. Metadata & Device Fingerprinting[/HEADING]

• ExifTool (images).
  
• FOCA/metagoofil (docs).
  
• Email headers (IP/device).
  

---

[HEADING=2]7. Image & Geo-Location OSINT[/HEADING]

• PimEyes (face match).
  
• Yandex/Google Lens reverse.
  
• GeoCreepy/MapChecking (geotag plots).
  
• SunCalc (shadow verification).
  

---

[HEADING=2]8. Family, Friends & Relational Mapping[/HEADING]

• Relatives from brokers.
  
• Tagged photos for locations.
  
• Use relatives’ social to confirm addresses/work.
  

---

[HEADING=2]9. IP Hunting & Technical Infrastructure Mapping[/HEADING]
Goals: Deanonymize, map assets, find attack surfaces.
Active: IPLogger/Grabify links; custom VPS logging; email pixels; P2P chats.
Passive: WHOIS history; passive DNS; cert transparency (crt.sh); GeoIP; Shodan/Censys.
Fingerprinting: Headers, WebRTC leaks, email IPs.
Mapping: Start with IP/domain → passive DNS → reverse WHOIS → reverse IP → Shodan for services.
Tools: SecurityTrails, RiskIQ PassiveTotal, Maltego, SpiderFoot, Nmap (authorized only).
OPSEC: No unauthorized probing; throwaway domains; VM isolation; avoid innocent collateral.
Examples:

1. Grabify link → corporate VPN IP → crt.sh → dev subdomains.
   
2. Passive DNS → payroll portal → WHOIS email → breach password reuse.
   
3. Email header IP → Shodan RDP暴露 → associated domains.
   

---

[HEADING=2]10. OSINT Toolsets & Frameworks[/HEADING]

• SpiderFoot (automation).
  
• Maltego (graphs).
  
• Amass (subdomains).
  
• Holehe (email enum).
  
• Sherlock/Maigret (username sweeps).
  
• Epieos (Google account).
  

---

[HEADING=2]11. Google Dorking – Exposures[/HEADING]

• site:target.com filetype:log
  
• inurl:/backup.zip
  
• ext:env DB_PASSWORD
  
• intitle:"index of" "private"
  

---

[HEADING=2]12. Dark Web Intelligence[/HEADING]

• Ahmia/OnionLand (Tor search).
  
• DarkOwl/Flashpoint (paid).
  
• Telegram leaks.
  
• Pastebin/Ghostbin/Anonfiles dumps.
  

---

[HEADING=2]13. OPSEC & Anonymity[/HEADING]

• Multi-hop VPN + Tor + isolated VMs.
  
• Burner devices/accounts.
  
• Never use real identity for testing.
  

Inspired By White LOL☠️
Also Most Important thing how much effort and time u put it in u can dox or osint people

[rape]

[COLOR=rgb(184, 49, 47)]holy fucking ai and opsexxx[/COLOR]

[dox]

rofl.