Cracken + OSINTgram
Cracken runs OSINTgram from an Instagram session on your Tentacle. It collects a profile's followers, tagged posts, and publicly exposed contact details.
Connecting OSINTgram
- Connect with
An Instagram account username and password — both needed for login-based scraping
- Cadence
Runs on demand — installed per Tentacle, then invoked during an operation
- Requires
Linux or macOS Tentacle
What Cracken gets from OSINTgram
A public Instagram profile's follower and following lists
Tagged posts and photo captions
Comments and likes on the account
Exposed contact details (email, phone) the profile shows
What OSINTgram does not do
Covers Instagram only, and only through a logged-in session: it requires a logged-in Instagram username and password to run at all.
How Cracken uses OSINTgram
- 01
Install OSINTgram with Instagram credentials
- 02
Name the account to profile
- 03
Collect and correlate what is public
- 04
Confirm the Tentacle is ready
Frequently asked questions
Does OSINTgram need an Instagram account to work?
Yes — OSINTgram scrapes while logged in, so it needs an Instagram username and password, supplied when you install the tool.
Can OSINTgram read private Instagram profiles?
No. OSINTgram only collects from public profiles or ones the logged-in account already follows, so a private account with no such access returns nothing.
“I've been pretty impressed with how CrackenAGI is able to do its vulnerability discovery, enumeration, reconnaissance, as well as eventually being able to actually execute different exploitation paths.”
Attack with real OSINTgram context.
See how Cracken runs OSINTgram on a Tentacle you host, and proves what it finds end to end.