K2SOsint-Bookmarklets

A small collection of bookmarklets that are useful for OSINT.

Bookmarklets tested on:

The bookmarklets work on the following browsers:

How to use:

Copy and paste the JavaScript into a new bookmark at the same place where the URL normally goes. Don’t forget to give the bookmark a name so you can remember its function. After saving you can click the bookmark to activate the script.

Please note that for a lot of bookmarklets to work, pop-ups need to be enabled in the settings of the browser. Also, do not execute a bookmarklet from the blank or starting page of a browser, but go to an active webpage first.

AdsAnalysis bookmarklet 📈

Made this bookmarklet thanks to the excellent presentation of Craig Silverman on OSMOSIS 2024. Once installed, click your bookmark when you are on the website to check if ads.txt is present. If so, it will open up a second tab to look in well-known.dev for more information. Make sure to login to well-know.dev to see more.

BuiltwithCensys bookmarklet 🔮

This bookmarklet takes any analytics code as input and will drop it in Builtwith.com and Censys.io to find any attached domains to the analytics code. Merged two of my bookmarklets into one.

CTI Companion 🐕‍🦺

Quick & dirty bookmarklet that supports in a CTI investigation. Either select the domain, IP or hash you want to investigate and click the bookmarklet. This will result in several buttons leading you to searches such as Shodan, VT, Urlscan and more. If you do not select anything it will default to the domain you are on. If you select something else it will still show you some search options. Comes with a close button as well.

DocufinderJS 📃

Collaboration with great professional. DocuFinder is an external attack surface monitoring (EASM) tool that automates traditional OSINT techniques to find externally accessible documents within a target domain.

EmailFinder bookmarklet 📧

If you want to search for (hidden) e-mailadresses in the text or source code of a webpage (including in comments), click this bookmarklet. If there are e-mail addresses present, it will return them in a new window. Otherwise a pop-up will state that nothing has been found.

FB Marketplace User 🤑

Visit a Facebook profile, then click the bookmarklet. This will extract the userID from the source code and add it to the FB marketplace URL. An easy way to see if there is a Marketplace profile active for the user.

FBFriendExtractor bookmarklet 📱

If you are on the page of a FB profile, click on the friends tab. The URL should be https://facebook.com/ID/friends. After that, refresh the page by pressing F5 and click on the bookmarklet. It will AutoScroll through the page and extract all URLs that contain ‘facebook.com’ on the page. It’s built to only show unique links and exclude links with the word ‘photo’. It’s still a bit rough around the edges, since it will also collect links from likes and maps. This bookmarklet is easier then using the Chrome extension Instant Data Scraper for example. Do be careful, overuse of this bookmarklet can get your FB account banned 💀

LinkFinder bookmarklet 🔗:

If you want to search for (hidden) links in the text or source code of a webpage (including in comments), click this bookmarklet. If there are links present, it will return them in a new window.

WhatsMyName bookmarklet

Click the bookmarklet to enter a username to search for on WhatsMyName.app. Press enter and a new tab will open where the search will begin on the site. Happy OSINTing!

Please use these scripts in a professional manner.