Telepathy: An OSINT toolkit for investigating Telegram chats. Developed by Jordan Wildon. Version 2.2.50.
3
+
Telepathy: An OSINT toolkit for investigating Telegram chats. Developed by Jordan Wildon. Version 2.2.58.
4
4
5
5
6
6
## Installation
skipped 16 lines
23
23
24
24
On first use, Telepathy will ask for your Telegram API details (obtained from my.telegram.org). Once those are set up, it will prompt you to enter your phone number again and then send an authorization code to your Telegram account. If you have two-factor authentication enabled, you'll be asked to input your Telegram password.
25
25
26
-
OPTIONAL: Installing cryptg ($ pip3 install cryptg) may improve Telepathy's speed. The package hands decryption by Python over to C, making media downloads in particular quicker and more efficient.
26
+
OPTIONAL: Installing cryptg ($ pip3 install cryptg) may improve Telepathy's speed. The package hand decryption by Python over to C, making media downloads in particular quicker and more efficient.
27
27
28
28
29
29
## Usage:
skipped 68 lines
98
98
$ telepathy -t 51.5032973,-0.1217424 -l
99
99
```
100
100
101
+
101
102
- **'--alt', '-a'**
102
103
103
-
Flag for running Telepathy from an alternative number. You can use the same API key and Hash but authenticate with a different phone number. Allows for running multiple scans at once.
104
+
Flag for running Telepathy from an alternative number. You can use the same API key and Hash but authenticate with a different phone number. Allows for running multiple scans at thesametime.
104
105
105
106
```
106
107
$ telepathy -t Durov -c -a
107
108
```
109
+
108
110
109
111
- **'--export', '-e'**
110
112
skipped 3 lines
114
116
$ telepathy -e
115
117
```
116
118
119
+
117
120
- **'--reply', '-r'**
118
121
119
122
Flag for enable the reply in the channel, it will map users who replied in the channel and it will dump the full conversation chain
skipped 3 lines
123
126
```
124
127
125
128
129
+
## Bonus investigations tips:
130
+
131
+
- Navigating to a media archive directory and running Exiftool may give you a whole host of useful information for further investigation. Telegram doesn't currently scrub metadata from PDF, DOCX, XLSX, MP4, MOV and some other filetypes, which offer creation and edit time metadata, often timezones, sometimes authors, and general technical information about the perosn or people who created a media file.
132
+
```
133
+
$ cd ./telepathy/telepathy_files/CHATNAME/media
134
+
$ exiftool * > metadata.txt
135
+
```
136
+
- Group and inferred channel memberlists offer a point of further investigation for usernames found. By using Maigret, you can look up where else a username has been used. While this is not accurate in all cases, it's been proven to be useful for handles that are often reused. In this case, remember to verify your findings to avoid false positives.
137
+
138
+
126
139
## A note on how Telegram works
127
140
128
141
Telegram chats are organised into three key types: Channels, Megagroups/Supergroups and Gigagroups. Each module works slightly differently depending on the chat type. Channels can have seemingly unlimited subscribers and are where an admin will broadcast messages to an audience, Megagroups can have up to 200,000 members, each of whom can participate (if not restricted), and Gigagroups sit somewhere between the two.
skipped 5 lines
134
147
Upcoming features include:
135
148
136
149
- [ ] Adding a time specification flag to set archiving for specific period.
137
-
- [x] The ability to archive comments on messages to channels.
138
150
- [ ] The ability to gather the number of reactions to messages, including statistics on engagement rate.
139
151
- [ ] Finding a method to once again gather complete memberlists (currently restricted by the API).
140
-
- [x] Introducing the ability to scan multiple targets at once.
141
152
- [ ] Improved statistics: including timestamp analysis for channels.
142
153
- [ ] Generating an entirely automated complete report, including visualisation for some statistics.
143
-
- [x] Making it easier to scan private groups which your account is a member of.
144
154
- [ ] Hate speech analytics.
145
-
- [x] Clean code, efficiency tweaks.
146
-
- [x] Add user lookup.
147
-
- [x] Add location lookup.
148
-
- [ ] Maximise compatibility of edgelists with Gephi.
155
+
- [x] Maximise compatibility of edgelists with Gephi.
149
156
- [ ] Include sockpuppet account provisioning (creation of accounts from previous exported lists).
150
-
- [ ] Listing who has admin rights in memberlists.
157
+
- [ ] Listing who has groupadmin rights in memberlists.
151
158
- [ ] Media downloaded in the background to increase efficiency.
152
159
- [ ] When media archiving is flagged, the location of downloaded content will be added to the archive file.
153
-
- [ ] Adding direct link to posts in the chat archive file
160
+
- [ ] Exploring, and potentially integrating, media cross checks based on https://github.com/conflict-investigations/media-search-engine.
- [ ] Introducing local chat retrival within the location lookup module.
163
+
- [ ] Adding trilateration option for location lookup to aid better location matching.
164
+
- [ ] Further code refactoring to ensure long-term maintainability.
165
+
- [ ] Progress bars for media downloads to give a better estimation of runtime.
166
+
- [ ] Adding additional alternative logins.
167
+
- [ ] Improved language support.
168
+
- [ ] Ensure inferred channel memberlists (based on repliers) contains each account only once.
169
+
- [ ] Correctly define destinction between reply (as in a chat) and comment (as in channel).
154
170
155
171
156
172
## feedback
skipped 8 lines
165
181
166
182
## Credits
167
183
168
-
All tools created by Jordan Wildon (@jordanwildon). Special thanks go to [Giacomo Giallombardo](https://github.com/aaarghhh) for adding additional features and code refactoring, and Alex Newhouse (@AlexBNewhouse) for his help with Telepathy v1.
184
+
All tools created by Jordan Wildon (@jordanwildon). Special thanks go to [Giacomo Giallombardo](https://github.com/aaarghhh) for adding additional features and code refactoring, [jkctech](https://github.com/jkctech/Telegram-Trilateration)forcollaborationonlocationlookupviathe'PeopleNearMe'feature,and Alex Newhouse (@AlexBNewhouse) for his help with Telepathy v1.Shoutoutalsoto[FrancescoPoldi](https://github.com/noneprivacy)forbeingasoundingboardandofferinghelpandadvicewhenitcomestobugfixes.
169
185
170
186
Where possible, credit for the use of this tool in published research is desired, but not required. This can either come in the form of crediting the author, or crediting Telepathy itself (preferably with a link).
Telepathy: An OSINT toolkit for investigating Telegram chats. Developed by Jordan Wildon. Version 2.2.22.
14
+
Telepathy: An OSINT toolkit for investigating Telegram chats. Developed by Jordan Wildon. Version 2.2.58.
15
15
16
16
17
17
## Installation
skipped 91 lines
109
109
$ telepathy -t 51.5032973,-0.1217424 -l
110
110
```
111
111
112
+
112
113
- **'--alt', '-a'**
113
114
114
-
Flag for running Telepathy from an alternative number. You can use the same API key and Hash but authenticate with a different phone number. Allows for running multiple scans at once.
115
+
Flag for running Telepathy from an alternative number. You can use the same API key and Hash but authenticate with a different phone number. Allows for running multiple scans at thesametime.
115
116
116
117
```
117
118
$ telepathy -t Durov -c -a
118
119
```
119
120
121
+
120
122
- **'--export', '-e'**
121
123
122
124
Exports all chats your account is part of to a CSV file. In a future release, this may assist with setting up multiple accounts following the same groups.
skipped 1 lines
124
126
```
125
127
$ telepathy -e
126
128
```
129
+
127
130
128
131
- **'--reply', '-r'**
129
132
skipped 4 lines
134
137
```
135
138
136
139
140
+
## Bonus investigations tips:
141
+
142
+
- Navigating to a media archive directory and running Exiftool may give you a whole host of useful information for further investigation. Telegram doesn't currently scrub metadata from PDF, DOCX, XLSX, MP4, MOV and some other filetypes, which offer creation and edit time metadata, often timezones, sometimes authors, and general technical information about the perosn or people who created a media file.
143
+
```
144
+
$ cd ./telepathy/telepathy_files/CHATNAME/media
145
+
$ exiftool * > metadata.txt
146
+
```
147
+
- Group and inferred channel memberlists offer a point of further investigation for usernames found. By using Maigret, you can look up where else a username has been used. While this is not accurate in all cases, it's been proven to be useful for handles that are often reused. In this case, remember to verify your findings to avoid false positives.
148
+
149
+
137
150
## A note on how Telegram works
138
151
139
152
Telegram chats are organised into three key types: Channels, Megagroups/Supergroups and Gigagroups. Each module works slightly differently depending on the chat type. Channels can have seemingly unlimited subscribers and are where an admin will broadcast messages to an audience, Megagroups can have up to 200,000 members, each of whom can participate (if not restricted), and Gigagroups sit somewhere between the two.
skipped 5 lines
145
158
Upcoming features include:
146
159
147
160
- [ ] Adding a time specification flag to set archiving for specific period.
148
-
- [x] The ability to archive comments on messages to channels.
149
161
- [ ] The ability to gather the number of reactions to messages, including statistics on engagement rate.
150
162
- [ ] Finding a method to once again gather complete memberlists (currently restricted by the API).
151
-
- [x] Introducing the ability to scan multiple targets at once.
152
163
- [ ] Improved statistics: including timestamp analysis for channels.
153
164
- [ ] Generating an entirely automated complete report, including visualisation for some statistics.
154
-
- [x] Making it easier to scan private groups which your account is a member of.
155
165
- [ ] Hate speech analytics.
156
-
- [x] Clean code, efficiency tweaks.
157
-
- [x] Add user lookup.
158
-
- [x] Add location lookup.
159
-
- [ ] Maximise compatibility of edgelists with Gephi.
166
+
- [x] Maximise compatibility of edgelists with Gephi.
160
167
- [ ] Include sockpuppet account provisioning (creation of accounts from previous exported lists).
161
-
- [ ] Listing who has admin rights in memberlists.
168
+
- [ ] Listing who has groupadmin rights in memberlists.
162
169
- [ ] Media downloaded in the background to increase efficiency.
163
170
- [ ] When media archiving is flagged, the location of downloaded content will be added to the archive file.
164
-
- [ ] Adding direct link to posts in the chat archive file
171
+
- [ ] Exploring, and potentially integrating, media cross checks based on https://github.com/conflict-investigations/media-search-engine.
- [ ] Introducing local chat retrival within the location lookup module.
174
+
- [ ] Adding trilateration option for location lookup to aid better location matching.
175
+
- [ ] Further code refactoring to ensure long-term maintainability.
176
+
- [ ] Progress bars for media downloads to give a better estimation of runtime.
177
+
- [ ] Adding additional alternative logins.
178
+
- [ ] Improved language support.
179
+
- [ ] Ensure inferred channel memberlists (based on repliers) contains each account only once.
180
+
- [ ] Correctly define destinction between reply (as in a chat) and comment (as in channel).
165
181
166
182
167
183
## feedback
skipped 8 lines
176
192
177
193
## Credits
178
194
179
-
All tools created by Jordan Wildon (@jordanwildon). Special thanks go to [Giacomo Giallombardo](https://github.com/aaarghhh) for adding additional features and code refactoring, and Alex Newhouse (@AlexBNewhouse) for his help with Telepathy v1.
195
+
All tools created by Jordan Wildon (@jordanwildon). Special thanks go to [Giacomo Giallombardo](https://github.com/aaarghhh) for adding additional features and code refactoring, [jkctech](https://github.com/jkctech/Telegram-Trilateration)forcollaborationonlocationlookupviathe'PeopleNearMe'feature,and Alex Newhouse (@AlexBNewhouse) for his help with Telepathy v1.Shoutoutalsoto[FrancescoPoldi](https://github.com/noneprivacy)forbeingasoundingboardandofferinghelpandadvicewhenitcomestobugfixes.
180
196
181
197
Where possible, credit for the use of this tool in published research is desired, but not required. This can either come in the form of crediting the author, or crediting Telepathy itself (preferably with a link).
Jordan Wildon
committed
with
GitHub
2 years ago
1 parent 4b63d57c