OSVFF

Base
After Search

OSVFF - (Open Source Vulnerability From Friends)

Inspiration

https://namechk.com/ and OSINT usage from Rainbolt (https://www.youtube.com/@georainbolt). This is a hackathon project from the Privacy and Security Track.

What it does

All it does currently is search through websites that are provided and see if that username is a existing user on that site. With this, they can check if they have dangerously similar usernames to a website that gives dangerous information about themselves and enact on that. In the future we plan on checking friends of the user to see if their friends also have dangerous sites that have similar usernames that people with malicious intent can find information about the user. With this, they can act accordingly and either private their account, or change their username, or tell their friends to not post dangerous information that can trace back to them using OSINT.

How we built it

We built it by using bs4's Beautiful Soup and also API usage from Roblox and Github to determine if a user exists on a site. Through there, we can also see a persons public display Name so that the user can see if it matches (ex: someone can have flyingbanana09 as a user but actually be called Alan).

Challenges we ran into

While looking through the Terms of Conditions for every site we realized that a lot of them didn't allow webscraping (ex: Twitter, Instagram, Snapchat, Linkedin), we didn't have enough time to apply for the API usage for those sites since the response time would be a day to a week.

Accomplishments that we're proud of

We are very proud of the idea of the site and how it can prevent others from being tracked by dangerous OSINT usage. The accomplishments that we overcame were, working with API's successfully, finding out a way to work around ethical issues with web scraping, and coming up with a design.

What we learned

Learning how to use the API's of other sites and strengthening our skill to handle large amounts of data ethically.

What's next for OSVFF

We plan on securing the malicious usage on the site to only allow users to find out dangerous information on their own friends not others. And we also plan on allowing more sites to be part of this.

Thumbnail link: (elephants are one of the most social animals!) https://www.shutterstock.com/es/image-illustration/3d-render-elephant-magnifying-glass-184244411