Skip to content

Back to the catalog

OSINT Wiretapper
hackers-arise.comarticle

OSINT Wiretapper

Hackers-Arise walks through WireTapper, an open-source wireless OSINT tool (github.com/h9zdev/WireTapper) that passively discovers and maps nearby Wi-Fi, Bluetooth, and cellular devices by correlating data from Wigle, Shodan, and OpenCelliD APIs. It also checks for leaked Wi-Fi credentials via a k-Anonymity query scheme to avoid exposing the user's own search, and offers a web dashboard (localhost:8080/map-w) with Wi-Fi/Bluetooth toggles and JSON export of discovered device locations.

TL;DR Install/usage guide for WireTapper, an OSINT tool that maps nearby Wi-Fi, Bluetooth, and cellular surveillance devices using Wigle, Shodan, and OpenCelliD.
Document

What it is

WireTapper is an open-source wireless OSINT tool (GitHub: h9zdev/WireTapper) that discovers and maps nearby radio devices — Wi-Fi, Bluetooth, cameras, routers, cell towers — by querying Wigle, Shodan, and OpenCelliD. The page is a walkthrough from hackers-arise; its value over the summary is the concrete setup, the API-key constraints, and the operational quirks that determine whether the tool actually returns real data.

What to do

Install:

kali > git clone https://github.com/h9zdev/WireTapper.git
kali > cd WireTapper
kali > python3 -m venv venv; source venv/bin/activate
kali > pip3 install -r WireTapper.txt

For environment-variable-based keys (recommended over editing app.py directly), also install:

kali > pip3 install python-dotenv

Run and open the dashboard:

kali > python3 app.py

The web interface is at http://localhost:8080/map-w. It loads slowly — the page says give it a few minutes before interacting. The top-of-dashboard switch toggles between Wi-Fi uplink and Bluetooth views. Results (names + coordinates) export to JSON for use in other tools.

Preconditions

  • API keys drive everything. Without valid keys, WireTapper generates dummy data only — you see the UI but not real device data. This is the single most important thing the summary omits: no keys means no real results.
  • Wigle requires a verified email on your account before the connection works.
  • Shodan is optional. Its API is paid; the tool runs fine without it (with reduced coverage).
  • Keys can be supplied by editing app.py directly or via app-env.py (environment variables).

Caveats

  • The page states WireTapper pulls from the three sources one at a time, not as a single concurrent aggregation — a nuance against the summary's "aggregates" framing.
  • The requirements file is named WireTapper.txt (not the conventional requirements.txt) — install exactly as shown.
  • This is passive OSINT built entirely on third-party datasets; it reflects what Wigle/Shodan/OpenCelliD already know about an area, not live local scanning, so freshness and coverage depend on those databases.

Organisations named here

  • OpenCelliD
  • WireTapper

Technologies named here

  • WiGLE
  • Shodan
  • Kali Linux
  • Python
  • Flock camera
  • OpenCelliD
  • python-dotenv
  • WireTapper

Techniques named here

  • k-Anonymity query
  • Open-source intelligence (OSINT)
  • Passive signal intelligence

Concepts named here

  • Privacy
  • Surveillance device exposure

Related in OSINT