
OSINT Wiretapper
Hackers-Arise walks through WireTapper, an open-source wireless OSINT tool (github.com/h9zdev/WireTapper) that passively discovers and maps nearby Wi-Fi, Bluetooth, and cellular devices by correlating data from Wigle, Shodan, and OpenCelliD APIs. It also checks for leaked Wi-Fi credentials via a k-Anonymity query scheme to avoid exposing the user's own search, and offers a web dashboard (localhost:8080/map-w) with Wi-Fi/Bluetooth toggles and JSON export of discovered device locations.
What it is
WireTapper is an open-source wireless OSINT tool (GitHub: h9zdev/WireTapper) that discovers and maps nearby radio devices — Wi-Fi, Bluetooth, cameras, routers, cell towers — by querying Wigle, Shodan, and OpenCelliD. The page is a walkthrough from hackers-arise; its value over the summary is the concrete setup, the API-key constraints, and the operational quirks that determine whether the tool actually returns real data.
What to do
Install:
kali > git clone https://github.com/h9zdev/WireTapper.git
kali > cd WireTapper
kali > python3 -m venv venv; source venv/bin/activate
kali > pip3 install -r WireTapper.txtFor environment-variable-based keys (recommended over editing app.py directly), also install:
kali > pip3 install python-dotenvRun and open the dashboard:
kali > python3 app.pyThe web interface is at http://localhost:8080/map-w. It loads slowly — the page says give it a few minutes before interacting. The top-of-dashboard switch toggles between Wi-Fi uplink and Bluetooth views. Results (names + coordinates) export to JSON for use in other tools.
Preconditions
- API keys drive everything. Without valid keys, WireTapper generates dummy data only — you see the UI but not real device data. This is the single most important thing the summary omits: no keys means no real results.
- Wigle requires a verified email on your account before the connection works.
- Shodan is optional. Its API is paid; the tool runs fine without it (with reduced coverage).
- Keys can be supplied by editing
app.pydirectly or viaapp-env.py(environment variables).
Caveats
- The page states WireTapper pulls from the three sources one at a time, not as a single concurrent aggregation — a nuance against the summary's "aggregates" framing.
- The requirements file is named
WireTapper.txt(not the conventionalrequirements.txt) — install exactly as shown. - This is passive OSINT built entirely on third-party datasets; it reflects what Wigle/Shodan/OpenCelliD already know about an area, not live local scanning, so freshness and coverage depend on those databases.
Organisations named here
- OpenCelliD
- WireTapper
Technologies named here
- WiGLE
- Shodan
- Kali Linux
- Python
- Flock camera
- OpenCelliD
- python-dotenv
- WireTapper
Techniques named here
- k-Anonymity query
- Open-source intelligence (OSINT)
- Passive signal intelligence
Concepts named here
- Privacy
- Surveillance device exposure
Related in OSINT
i8void/cybersleuth
Insights into Suspected DPRK Workers
