Package: masto
Masto OSINT Tool🐘About MastoMasto provides information/intelligence onMastodon.socialusers and fediverse instances (servers).🚀Masto capabilitiesMasto OSINT Toolhelps to:Find user IDFind exact username match across instances (the tool currently pulls many accounts with the usernameOSINT, whereas the mastodon.social (browser search bar) returns one result, as well as returning unreliable results, such as accounts that only start withosintFind all accounts belonging to a user without logging in to Mastodon (Mastodon requires users to log in and after 5 results you get:401 Search queries pagination is not supported without authenticationFind username correlation (can't be found by browser)Check if the user is a botCheck if the account is a groupCheck if the account is lockedCheck if the user opted to be listed on the profile directoryGet avatar link with anadditional choiceof opening the avatar within your browserGet profile creation dateGet number of followers & followingGet number of postsGet user last status dateGet user's bioAdditional instance (server) featureThis is a nice feature, if you typesocial.network.europa.euonMastodon.social, you won't get a result as the instance is set tonot discoverable.This function helps to:Get information on an instanceGet instance Admin IDGet instance emailGet a short descriptionGet server thumbnail linkGet instance creation dateGet instance language usedGet instance admin count of followers and followingGet instance admin last status dateGet header image link and avatar linkGet instance display nameGet admin urlGet admin avatarCheck if instance admin account is lockedCheck if registration is required and if the admin needs to approve the requestCheck if the admin is a botMasto Workflow🛠️Installationpip install masto👨‍💻UsageHelp:masto -hSearch for usermasto -user {username}Search for instancemasto -instance {instance_name}⭐Tool use casesUse case 1Searching for a user and bypassing the profile directory opt-outTried searching via browser both termsWebbreacherand@Webbreacher1 result-->@Webbreacher@mastodon.socialSearchedWebbreacheronMasto:3 results--> ✅ 3 accounts foundOn thecounter.socialprofile,@Webbreacher'ssettings are --> user opted to be on the profile directory =False, this is why the browser search didn't find the counter.social profile!🪄Masto successful outcome:Masto found all 3 accounts.Use case 2Searching without getting a 401 errorMany people don't want an account on Mastodon, and if you don't have an account, you can search on Mastodon, but you will only get 5 results.Clicking onload morewill give you a 401 error and request for the user to log in.🪄Masto successful outcome:You can use Masto without logging in to Mastodon, you won't get a 401 error.Use case 3Getting information on locked instances:Tried searching for the instance0sint.social, there isn't much information via a browser search because it's locked.🪄Masto successful outcome:Masto found more information on the instance and on the admin, including email address.Use case 4Conducted a username search for Defcon:Conducted a search with Masto for the usernamedefcon, the Mastodon API returned 2 user accounts.🪄Masto successful outcome:Masto OSINT Tool picked up after the initial API search by doing a full scan and found 4 accounts.Community mentions about MastoFeatured on theUK OSINTwebsite. UK OSINT is headed byNeil Smith, a true OSINT legend who has been using the internet as an investigative tool for well over 20 years.Featured inWeek in OSINT#2022-45by@Sector035Featured in theOSINT Stuff Tool Collectionby@cipher387Mentionned by@DailyOsintMentionned by@Treadstone71Mentionned in thisSecjuice investigationMentionned inMAG'OSINT March 2023 Issue📝LicenseMIT License