OSINT - Open Source Intelligence : Extracting Information from TikTok
Today, we will explore the world of social media OSINT with a deeper focus on TikTok. What initially began as a simple short-video sharing application has quickly evolved into a massive global platform with more than one billion active users. Every day, millions of people create, share, and interact with content on TikTok at an incredible pace.
Most users see TikTok purely as an entertainment platform filled with viral videos and trends. However, beyond the entertainment aspect, TikTok can also serve as a valuable source of information. In this article, we will examine how different OSINT tools can help extract useful insights from TikTok, such as location indicators, network relationships, and hidden metadata embedded within the platform. Let’s begin the exploration.
Step #1: Understanding TikTok URL Metadata
Our first tool is Unfurl, a digital forensics tool designed to extract hidden metadata from URLs across multiple online platforms, including TikTok. The name itself reflects its function — it “unfurls” or breaks down complex URL structures to reveal the information embedded within them.
When someone shares a TikTok video, the URL contains much more than just a direct link to the content. TikTok embeds different identifiers, timestamps, and metadata within the link itself. These elements are often encoded in ways that are difficult to interpret at first glance.
Unfurl analyzes these URLs and converts the hidden data into a clear and structured visual format. This makes it much easier to examine and understand the information contained inside the link.
To begin using this tool, simply open dfir.blog/unfurl in your web browser.
The interface is simple. Paste any TikTok video link into this field and click the Unfurl button. The tool processes the URL and generates a tree diagram showing all extracted metadata.
The screenshot above shows that we have extracted the video ID, a unique identifier assigned to each video on the platform. Additionally, the author’s username and timestamps embedded in TikTok URLs indicate when the content was published. Unfurl processes these timestamps from their encoded formats and translates them into easily readable dates and times.
Step #2: Gathering TikTok Account Intelligence
Let’s shift our focus to account-level insights rather than just individual video metadata. To facilitate this, there’s a website called omar-thing.site that can help.
To begin, simply enter the username of the account you wish to explore and submit your query.
The results begin with the avatar, along with the option to download it for further analysis. Next, we can see that the account name and display name are extracted separately. The location of the account is also indicated, showing the country where the account was registered or where TikTok believes the user is based, which in this instance is Belarus. Additionally, the language used by the account owner is noted. Below that, we have the bio; however, I’ve blurred it in this case due to advertisements. Following that, we can find various account stats and details, such as the user ID, which is permanent. We can also see the creation date, the dates of any username changes, and whether the account is private or public.
At the bottom of those details, we can find lists of followers and of those being followed. We can click to explore them further or download the information for analysis later.
Disclaimer
All tutorials are for informational and educational purposes only and have been made using our own routers, servers, websites and other vulnerable free resources. we do not contain any illegal activity. We believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. Hacking Truth is against misuse of the information and we strongly suggest against it. Please regard the word hacking as ethical hacking or penetration testing every time this word is used. We do not promote, encourage, support or excite any illegal activity or hacking.
