Explore documented systems, people, entities and public-interest stories. Search the full archive or narrow it by place, format and editorial status.
Argentina's armed forces social insurance institute committed military personnel credentials to public git repositories. A prison visits system was deployed with a placeholder JWT secret. The Ministry of Economy's gas subsidies API uses default postgres credentials.
ODINT geopolitical investigation mapping Russian influence, Wagner operations, and mineral extraction across Africa. 19 documented operational sites, key statistics, and strategic analysis.
published
Ghana's FDA adverse drug reporting system — which feeds WHO's global VigiBase — had its production database credentials committed to a public git repository. So did the Ghana Armed Forces recruitment portal's encryption key.
125 records
No records match those filters. Try a broader term or clear the filters.
ODINT investigation record INV-144187: Albanian Parliament — Members of Parliament — part of the Albania atlas.
ODINT investigation record INV-803685: Citizen records catalog — part of the Albania atlas.
ODINT investigation record INV-493898: Diella frontend source — part of the Albania atlas.
ODINT investigation record INV-117433: Albania archive on data.odint.io — part of the Albania atlas.
ODINT investigation record INV-970454: Parliament Images - 20,610 files | Albania — part of the Albania atlas.
ODINT investigation record INV-809224: Parliament Office Files - 1,600 documents | Albania — part of the Albania atlas.
Argentina's armed forces social insurance institute committed military personnel credentials to public git repositories. A prison visits system was deployed with a placeholder JWT secret. The Ministry of Economy's gas subsidies API uses default postgres credentials.
Ghana's FDA adverse drug reporting system — which feeds WHO's global VigiBase — had its production database credentials committed to a public git repository. So did the Ghana Armed Forces recruitment portal's encryption key.
Guatemala's Ministry of Agriculture committed GeoServer admin credentials, PostGIS database passwords, and three AI API keys to a public git repository, alongside root database access for the national science council.
Nigeria's federal payroll system (IPPIS) had its database credentials committed to a public git repository alongside an exposed adminer.php. The maritime agency, Lagos judiciary, and Rivers State tax authority were also exposed.
A nationwide OSINT audit of Burkina Faso exposed a wide-open government data lake, 4,611 CVs, 14 ministries on EOL software, and a single unauthenticated SQL endpoint returning 83,770 records.
Two extremist digital operations exposed: 88Streams (US neo-Nazi streaming) and Aryan Front/White Vanguard (UK).
A US web developer's domain transitioned through four operational phases into one of the largest Korean illegal escort directories — 186K+ daily visitors, dual-identity attribution, yhotte rotation network.
ODINT investigation revealing how Colombia's presidential office published an open military map showing exactly where former FARC guerrillas were reintegrating — and where they were being murdered.
ODINT investigation record INV-215326: Russian Vault Local Dump — part of the Russia atlas.
6,991 political prisoners documented via open API enumeration — Russia's repression machine mapped through its own publicly accessible data infrastructure.
ODINT geopolitical investigation mapping Russian influence, Wagner operations, and mineral extraction across Africa. 19 documented operational sites, key statistics, and strategic analysis.
Two Pakistani federal admin panels exposed during wartime — fsp.gov.pk Food Security Portal and ep.gov.pk Pakistan Post admin login with ASP.NET trace exposure.
Balochistan province deep intelligence: single admin vulnerability across two .gov.pk sites, 8 divisional commissioners, Gwadar Safe City CPEC surveillance project, budget documents 2020–2026, dual TLD impersonation risk.
Pakistan federal digital infrastructure during wartime: NADRA national identity API, NTC Zimbra single point of failure for all federal email, NITB 500+ digital initiatives, FBR IRIS 2.0, HEC .git/HEAD, post-war priority targets.
Pakistan Open Data Portal CKAN 2.8.3 — 1,471 government datasets, 36 user accounts including 2 sysadmins, 22 organizations fully dumped via unauthenticated API.
340+ named individuals extracted from Pakistani government and academic sources — QAU staff with phone/email, 8 Balochistan commissioners, 298 Gwadar Safe City candidates, CKAN accounts.
LUMS phpinfo.php exposes complete server stack — hostname, RHEL 8.10, PHP 8.1.34, SSH2 and LDAP extensions. Plus all server version disclosures across Pakistan OSINT operation.
Pakistan university intelligence — QAU 6.6 MB dump, PU 18,460 URLs, LUMS phpinfo.php, AIOU, UOS. Five universities deeply probed during Pakistan-Afghanistan war.
Pakistan wartime digital infrastructure status — 65% of government domains offline during Operation Ghazab Lil Haq. Full domain matrix, NADRA lockdown, and infrastructure collapse analysis.
Three Pakistani WordPress installations expose complete REST APIs without authentication — QAU, Government of Balochistan, and Balochistan S&IT Department. 13.4 MB of structured government data extracted.
During Pakistan's war with Afghanistan, ODINT extracted 46 MB from 12 live targets in 3 hours. The military went dark. The universities stayed wide open.
OSINT analysis of the Jamaat al-Muslimeen's digital footprint, institutional network, and structural continuity in Trinidad and Tobago.
ODINT investigations on the Jamaat al-Muslimeen, the Caribbean's leading per capita ISIS recruiter, and the persistence of extremist infrastructure in Trinidad and Tobago.
AKSHI Director General and Deputy arrested for corruption — the agency that built Albania's AI anti-corruption minister ran a criminal enterprise for tender manipulation.
Albania's decade of data exposure: 910K voter records, 637K salary records, Iranian exfiltrations, and ongoing Telegram leak channels.
Technical OSINT analysis of Diella, Albania's AI Minister. Azure infrastructure, AKSHI subdomain enumeration, bundle analysis.
Iranian MOIS-backed HomeLand Justice attacks Albania 2022-2024: ROADSWEEP ransomware, 100TB exfiltrated, intelligence agency compromised, Telegram leaks still active.
Albanian Parliament unauthenticated OData API: 236 MPs full PII, 54,545 Azure Blob documents, no authentication required.
ODINT investigation record INV-450475: Parliament PDFs — 30,455 documents | Albania — part of the Albania atlas.
ODINT investigation record INV-979063: Parliament API — aktet / mbledhjet / strukturat | Albania — part of the Albania atlas.
ODINT investigation record INV-707786: Parliament API — anetaret.json (236 MPs) | Albania — part of the Albania atlas.
ODINT investigation record INV-631421: Open Data Portal — Full Dump | Albania — part of the Albania atlas.
ODINT investigation record INV-930255: MP salary and benefits spreadsheets — part of the Albania atlas.
ODINT investigation record INV-356964: AKSHI Subdomains — Full Enumeration | Albania — part of the Albania atlas.
ODINT investigation into the February 2024 transnational assassination of Venezuelan military defector Ronald Ojeda Moreno in Santiago, Chile.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
ODINT's Ecuador cyber tour maps exposed government infrastructure, tax APIs, shared CMS credentials, public GitLab code, and 26.25 GB of evidence.
GAESA military conglomerate exposed — 2,052 domains scanned, 31,000+ payment records, unauthenticated APIs, and critical credential leaks across Cuban government infrastructure.
Expanded Venezuelan government infrastructure analysis — database credentials, election systems, and national infrastructure access.
572,103 voter records extracted from Venezuela's unauthenticated PSUV election GraphQL API — vote tallies, election employees, and voter-subsidy cross-referencing.
130+ military frequencies. A dead $390M satellite. A five-country spy pipeline. The most comprehensive OSINT map of Venezuela's military comms ever assembled.
Geospatial intelligence map covering conflict sites, military installations, border routes, critical infrastructure, and naval forces across Venezuela.
The largest open-source collection of Venezuelan sanctions-evasion vessels and drug trafficking aircraft, cataloging over 70 maritime vessels and 60+ aircraft.
ODINT investigation into locating a DEA Most Wanted fugitive using open-source intelligence.
ODINT investigation into the January 15, 2018 siege of El Junquito — the extrajudicial execution of Óscar Pérez and six associates by Venezuelan security forces.
ODINT investigation into the Kumarakapay massacre, rebuilt from the full publication source and excluding only material associated with KHTHON.
Interactive geospatial intelligence map combining KML placemarks, vessel tracking, and aircraft monitoring for Venezuela.
How a covert fiber optic ISP in Venezuela became a convergence point for Iranian manufacturing, Russian expertise, and SEBIN intelligence operations.
ODINT investigation into the Tumeremo massacre, rebuilt from the full publication source and excluding only material associated with KHTHON.
Government and Hezbollah digital infrastructure analysis — IRNA private IP leaks, 182 MFA embassy subdomains, khamenei.ir admin exposure, and Hezbollah hosting strategy.
1,430 political persecution cases arising from opposition to Russia's 2022 invasion of Ukraine — documented via open source intelligence. ODINT Russian Vault.
2,857 Russian cities indexed for political persecution — including occupied Ukrainian territories Crimea and Donbas. ODINT Russian Vault geographic intelligence.
6,991 political prisoners documented via open source intelligence — Russia's repression machine mapped through its own publicly accessible data. ODINT Russian Vault.
178 GB exfiltrated from Venezuela's exposed government APIs — staff GPS locations, OFAC sanctions cross-reference, and surveillance infrastructure analysis.
Interactive visualization of 6,924 Venezuelan DGCIM military intelligence personnel records.
Explore DGCIM military intelligence personnel data and network analysis from Venezuela.
Albania's Parliament API required zero authentication. 236 MPs' full PII. 54,545 documents. The AI anti-corruption minister was built by a corrupt agency.
Angola's foreign trade licensing system, commercial licensing authority, and civil service exam platform all committed production database credentials to public git repositories. The national identity provider's OAuth2 client secret was one of them.
Barbados's government infrastructure across 4 domains -- BRA Revenue Authority systems, CAIPO corporate registry platforms, and NIS social insurance repositories audited for credential exposure.
Belize's government infrastructure across 4.7 GB of collected data -- BTL telecommunications systems, Ministry of Finance platforms, and Customs Department repositories audited for exposed credentials.
Benin's government digital surface across 3 domains -- DGI revenue authority systems, BCEAO regional banking platforms, and SBEE electricity authority repositories audited for credential exposure.
Bolivia's government infrastructure across 27 domains -- YPFB hydrocarbon authority systems, SIN tax authority platforms, and Banco Central repositories audited for open access and credential exposure.
Brazil's government digital surface across 17 domains -- Receita Federal tax authority systems, INSS social security platforms, and federal ministry repositories audited for credential exposure and open version control.
ODINT's Colombia Cyber Tour tracks exposed presidential GIS systems, leaked peace-process intelligence, police AI infrastructure, and open-source datasets across Colombian government networks.
Dominica's government infrastructure across 4 domains -- IRD revenue systems, citizenship by investment program platforms, and DOWASCO water authority repositories audited for open access.
Dominican Republic Cyber Tour - Government digital infrastructure audit and exposed API analysis across Dominican federal systems.
Congo's Ministry of Higher Education and Research committed its production database password to a public git repository. Then again in a second subdomain. A Gmail App Password for its solidarity fund system appeared in two more. Four credential exposures, two passwords, four repos.
Audit of Ecuador's executive, military, police, telecom, tax, and emergency infrastructure, exposing public APIs, shared CMS credentials, outdated mail servers, and 26.25 GB of evidence across 55+ public domains.
Egypt's government digital surface across 29 domains -- Ministry of Finance e-services, customs authority platforms, and national ID registry systems audited for exposed credentials and public git repositories.
El Salvador's government digital surface across 5 domains -- BCR central bank systems, MINSAL health ministry platforms, and bitcoin wallet infrastructure repositories audited for credential exposure.
Ethiopia's government infrastructure across 51 domains and 20.6 GB of collected data -- telecommunications authority systems, development bank platforms, and federal ministry repositories audited for open access.
Fiji's government digital surface across 3 domains -- FRCS Revenue and Customs systems, RBF Reserve Bank platforms, and government ministry repositories audited for open version control and credential exposure.
A nationwide OSINT audit of Haiti's .gouv.ht infrastructure exposed a wide-open tax application, thousands of citizens' records, and a hijacked police domain. No door needed forcing.
Honduras's government digital surface across 4 domains -- SAR tax authority systems, SEFIN Finance Ministry platforms, and SANAA water authority repositories audited for open access and secret exposure.
Indonesia Cyber Tour - Government digital infrastructure audit across Indonesian federal and provincial systems.
Ivory Coast's government infrastructure across 5 domains -- BCEAO regional banking systems, CIE electricity authority platforms, and customs clearance repositories audited for open access and credential exposure.
Kenya's expansive government digital surface across 42 domains -- eCitizen integrations, revenue authority systems, judiciary portals, and national ID infrastructure audited for credential exposure.
Liberia's government digital surface across 16 domains -- LRA Revenue Authority systems, CBL central bank platforms, and NOCAL oil corporation repositories audited for exposed credentials and open version control.
Libya's government infrastructure across 13 domains -- NOC oil corporation systems, CBL central bank platforms, and GNU ministry repositories audited for open access and credential exposure.
Madagascar's government digital surface across 2 domains -- DGI revenue authority systems and JIRAMA electricity and water authority platforms audited for credential exposure and open version control.
Malawi's government infrastructure across 4 domains -- MRA Revenue Authority systems, RBM Reserve Bank platforms, and ESCOM electricity authority repositories audited for exposed credentials and open access.
An OSINT audit of the Mexican federal government exposed half a million people. The door was wide open.
Nicaragua's government digital surface across 3 domains -- DGI tax authority systems, BCN central bank platforms, and ENACAL water authority repositories audited for credential exposure.
Panama's Ministry of Women domestic violence complaint system committed full cloud storage credentials to a public repository. The Administrative Attorney General's case management database and Panama's investment promotion Twitter OAuth token were in the same pull.
Paraguay's government digital surface across 10 domains -- ANDE electricity authority systems, BNF banking platforms, and SET tax authority repositories audited for credential exposure and open version control.
Peru's government infrastructure across 24 domains -- SUNAT tax authority systems, Ministry of Health platforms, and judiciary service repositories audited for open access and credential exposure.
Russia Cyber Tour - Government digital infrastructure audit, state media network analysis, and critical infrastructure exposure mapping across Russian federal systems.
How a publicly accessible government database turned 689 dismissed public servants into permanent data points in an architecture of obedience.
Saint Kitts and Nevis's government digital surface across 6 domains -- IRD revenue authority systems, SIDF development fund platforms, and CBI citizenship program repositories audited for credential exposure.
Sierra Leone's government infrastructure across 6 domains -- NRA revenue authority systems, Bank of Sierra Leone platforms, and health sector repositories audited for open version control and credential exposure.
Somalia's government infrastructure -- Ministry of Finance systems, Somali National University platforms, and federal ministry repositories audited for open version control and exposed access controls.
South Africa's government digital surface across 24 domains -- SARS revenue authority systems, SASSA social grant platforms, and Home Affairs identity infrastructure audited for exposed version control.
South Sudan's government digital surface -- Ministry of Finance platforms, NBS statistics authority systems, and oil revenue management repositories audited for open access and credential exposure.
Tanzania's government infrastructure across 50 domains -- Tanzania Revenue Authority systems, Bank of Tanzania repositories, and TANESCO utility platforms audited for open version control and secret exposure.
Togo's government infrastructure across 4 domains -- OTR revenue authority systems, BCEAO regional banking platforms, and CEET electricity authority repositories audited for exposed credentials.
Uganda's government digital footprint across 36 domains -- National Water Authority systems, Electoral Commission portals, and Ministry of Finance platforms audited for credential exposure and public repository access.
Zambia's government infrastructure across 4 domains -- ZRA Revenue Authority systems, Bank of Zambia platforms, and ZESCO electricity authority repositories audited for open version control and credential exposure.
