Skip to content

2025.01

Choose a tag to compare

@github-actions github-actions released this 10 Sep 19:33
5078ac8

TL-OSINT VM — 2025.1

Prebuilt virtual machines for VirtualBox and VMware, plus a script-driven option to customize your own Kali-based OSINT environment.


What’s new

  • Refreshed Kali archive keyring and applied latest system updates
  • Added OSINT tools: Shodan CLI, Sherlock, PhoneInfoga, SpiderFoot, sn0int, Metagoofil, Sublist3r, steghide, stegseek, StegOSuite, exiftool, tor, torbrowser-launcher, translate-shell
  • Desktop additions: TraceLabs CTF Contestant Guide (PDF) and Self-Heal & Update shortcut
  • Firefox hardening: clear data on shutdown, block geolocation/mic/camera by default, stronger tracking protection, preloaded OSINT bookmarks
  • Self Hosting the VM due to heavy download

Customize your VM with our tools script

Use this if you prefer your own Kali image and then install/update OSINT tools + Firefox hardening on demand.

Download the raw file, not the Github "blob" page

# Inside Kali (or your Debian-based VM)
cd ~/Desktop # or any folder you prefer

# Fetch the script (Raw URL) 
wget https://raw.githubusercontent.com/tracelabs/tlosint-vm/main/scripts/tlosint-tools.sh

# Give the script executable permission
chmod +x tlosint-tools.sh

#Execute the script
./tlosint-tools.sh

Use this if you have downloaded the TraceLabs OSINT VM

# Inside TL OSINT VM
cd ~/Desktop 

#Execute the script
./tlosint-tools.sh

What the script does

  • Refreshes the Kali archive keyring and applies updates
  • Installs a curated OSINT toolset (Shodan CLI, Sherlock, PhoneInfoga, SpiderFoot, sn0int, Metagoofil, Sublist3r, steghide/stegseek, StegOSuite, exiftool, tor, torbrowser-launcher, translate-shell, etc.)
  • Adds TraceLabs CTF Contestant Guide (PDF) and a Self-Heal & Update shortcut to the Desktop
  • Applies Firefox hardening (delete cookies/history on shutdown, block geolocation/mic/camera prompts by default, stronger tracking protection, preload OSINT bookmarks)

Downloads

Primary: use the assets attached to this Release.

Mirror (Google):

Checksums (SHA256)

tl-osint-2025.1-virtualbox-amd64.ova  a6d841c19ed55e5d4338280724238ea5b80e57a33d9462efda24bce965d1666d
tl-osint-2025.1-vmware-amd64.ova     6f3323b01afff853a35bcfb7e98be751fd17922006f453da2627963975949289