From the inception of the internet, people have been looking for ways to exploit systems to their own benefit. And with the invention of Facebook, stalking became not only sociably acceptable…but everyone’s favorite past time. When “web2.0” hit the scene, a handful of people utilized search engine’s in order to gleam information that was thought to be kept private.
For example, Google dorks are one of the simplest ways to totally “pwn” someone as the script kiddies like to say. Just put in a couple magic phrases, and passwords galore come back. For example, after putting in the following phrase, three pages worth of files containing passwords come back. inurl:wp-config-backup.txt
So as you can see, people love using computers in order to obtain information that would other wise force you to get up from the couch in order to get. Now, with the advent of Github and Opensource packages, new tools to give people what they want were created. And with that, comes morally ambiguous packages like Social Mapper.
What is social mapper?
Social Mapper is a computer program that takes in an image of a face, and scours all social media platforms for pictures that resemble that face. So for example, say you suspect your spouse of cheating with one of your facebook friends, but are unable to find their Instagram or Twitter. Social mapper is the tool for you. Just download a picture of them from Facebook, pop it in Social Mapper, and wait.
You will get their profiles back from the following social networks.
How to install?
The program is easy to install, but does require some command line knowledge. As well, the documentation skips a couple steps that may prove as stumbling blocks. The first thing you’ll want to do is download the package from Github.
Here is the download link.
Once downloaded, open the project up and change into the setup folder. Once inside, run the command “python -m pip install –no-cache-dir -r requirements.txt” to install all the necessary dependencies.
You may come across an error about “DLIB”, but you can easily remedy the issue by installing the following packages.
$ sudo apt-get install build-essential cmake
$ sudo apt-get install libgtk-3-dev
$ sudo apt-get install libboost-all-dev
After running the command, you will see the program start to work, and return results like these.
This is pretty amazing, because it’s using facial recognition, instead of parsing strings and texts. The program checks for users with the name you supplied in the picture, and if it finds a name, and then checks if the images are similar. This is much quicker than going to every social media site, typing in names, and sifting through data.
This tool is handy, for crazy-ex girlfriends. Also, for professional pen-testers and red-teamers, this tool saves lots of time and effort that would otherwise be cumbersome. The github to download the program will be below, and as always, ‘with great power comes great responsibility’, so be sure to use with caution and permission.