Telepathy

Telepathy is a versatile Telegram toolkit for OSINT analysts, enabling chat archiving, memberlist gathering, user location lookup, top poster analysis, message mapping, and more.

Last updated 6 days ago

Was this helpful?

Telepathy

Telepathy is a versatile Telegram toolkit for OSINT analysts, enabling chat archiving, memberlist gathering, user location lookup, top poster analysis, message mapping, and more.

URL

Version: Telepathy 2.3.4 (as of May 25)

Description

Introduction

The toolkit facilitates detailed insights into Telegram channels. It captures information such as the channel's description, total participant count, identifiable members, username, URL, type of chat, chat ID, access hash, the date of the first post, and any restrictions that might be applied. Telegram channels are designed to broadcast messages to a large audience, and they do not allow members to see each other or directly interact within the channel itself.

Telepathy is an open-source OSINT toolkit designed to analyze Telegram communications. It allows users to extract data from public or private Telegram groups and channels and perform searches by user ID or username. Telepathy provides detailed insights such as member lists, group dynamics, and engagement tracking. It also supports CSV export of group members, automatic message translation, and geolocation features for users with public profiles.

Summary

Telepathy’s user interface is designed to be intuitive for technically experienced users. Its output is tailored for in-depth data analysis. Being open-source, it allows modifications and enhancements to meet specific investigative needs.

Functions

Basic Chat Scan (`-t` option)

This feature performs a basic scan on a target Telegram chat (public or private with a link). Use Case: Ideal for initial reconnaissance or when only top-level details are needed.

Chat title and description
Number of participants
Chat type (group or channel)
First post date, chat ID, access hash, and applicable restrictions
In group chats, a member list (up to 5,000 members) is included in the scan results.

Title: Displays the official name of the Telegram channel or group. In this example, the tool retrieves the title "Bellingcat EN," representing the Bellingcat English-language channel.
Total Participants: The tool extracts the total number of participants or subscribers in the channel, which is 6,902 in this case. This metric is crucial for understanding the reach and influence of the channel.
Username: The username associated with the chat or channel, which is unique and often appears in the URL for direct access (e.g., t.me/bellingcat_en).
Chat Type: Identifies the type of entity, such as a public channel or private chat. In this instance, it identifies Bellingcat EN as a Channel.
Chat ID: A unique identifier assigned to the chat by Telegram, used for internal tracking and potential API interactions. In this case, the chat ID is 1137507325.
Access Hash: A cryptographic hash generated by Telegram, potentially used for API purposes, allowing access to specific data about the chat. The hash in this example is 5865663730330798864.
Scam Detection: Telepathy can flag whether a chat has been reported or detected as a scam. It confirms that Bellingcat EN is not flagged as a scam (Scam: False).
First Post Date: The tool retrieves the date and time of the first message posted in the channel, providing insight into how long the channel has been active. For Bellingcat EN, the first post was on October 8, 2018, at 21:54:20 UTC+00:00.
Restrictions: Indicates any restrictions applied to the chat, such as access limitations by region, age, or language. This particular channel has no restrictions.

Comprehensive Scan (-c option)

A more detailed version of the basic scan, the comprehensive scan archives all message history in the chat.

Use Case: Suitable for deeper analysis, such as investigating user interactions and engagement metrics in public Telegram channels and groups.

Forward counts
Reactions to messages
Replies to each message
Calculated engagement rates for posts based on reactions, forwards, and replies.

The file, bellingcatru_2024_10_03-02_32_archive.csv, contains a comprehensive set of data columns related to Telegram messages. Here's an overview of the columns and what they represent:

Unnamed: 0: Index column automatically created by the CSV format.
To: The name of the chat or channel.
Message ID: Unique identifier for each message.
Display_name: Display name of the user who posted the message.
User ID: Unique identifier for the user.
Message_text: The text content of the message.
Original_language: The original language of the message.
Translated_text: The translated text of the message, if applicable.
Translation_confidence: Confidence score of the translation.
Timestamp: Date and time when the message was posted.
Has_media: Indicates if the message contains media.
Reply_to_ID: Message ID that this message is replying to.
Replies: Number of replies to the message.
Forwards: Number of times the message was forwarded.
Views: Number of views the message received.
Total_reactions: Total number of reactions to the message.
Reply_ER_reach: Engagement rate for replies based on reach.
Reply_ER_impressions: Engagement rate for replies based on impressions.
Forwards_ER_reach: Engagement rate for forwards based on reach.
Forwards_ER_impressions: Engagement rate for forwards based on impressions.
Reaction_ER_reach: Engagement rate for reactions based on reach.
Reactions_ER_impressions: Engagement rate for reactions based on impressions.
Thumbs_up: Number of "thumbs up" reactions.
Thumbs_down: Number of "thumbs down" reactions.
Heart: Number of "heart" reactions.
Fire: Number of "fire" reactions.
Smile_with_hearts: Number of "smile with hearts" reactions.
Clap: Number of "clap" reactions.
Smile: Number of "smile" reactions.
Thinking: Number of "thinking" reactions.
Exploding_head: Number of "exploding head" reactions.
Scream: Number of "scream" reactions.
Angry: Number of "angry" reactions.
Single_tear: Number of "single tear" reactions.
Party: Number of "party" reactions.
Starstruck: Number of "starstruck" reactions.
Vomit: Number of "vomit" reactions.
Poop: Number of "poop" reactions.
Pray: Number of "pray" reactions.
Edit_date: Date and time when the message was edited.
URL: URL link to the message.
Media save directory: Directory path where media associated with the message is saved.

Forward Mapping (-f option)

This function creates an edge list showing which messages were forwarded to or from the target chat. It integrates with tools like Gephi for network visualization.

Use Case: Useful for tracking the spread of information and mapping how content circulates across different chats.

If the Bellingcat feed had included sufficient messages forwarded from other channels, here are some explanations of what the columns mean. An edgelist can be used to create a network graph to visualize the interactions and relationships between different entities on Telegram. Tools like Gephi can be used to visualize and analyze these connections. By examining the Timestamp column, you can analyze how interactions change over time. The Username column helps track specific users' behaviors and their interactions with other entities. The Label and Source_ID columns provide context about the nature of interactions, which can be useful for understanding engagement patterns within the network.

Source and Target: These columns represent the nodes in the network, with Source being the originator of the interaction and Target being the recipient.

Unnamed: 0: Index column automatically created by the CSV format.
Source: The name of the source entity (e.g., a user or channel initiating the interaction).
Target: The name of the target entity (e.g., a user or channel receiving the interaction).
Label: A descriptive label for the interaction or relationship.
Source_ID: The unique identifier for the source entity.
Username: The username of the source entity.
Timestamp: The date and time when the interaction occurred.

Media Archiving (-m option)

This flag archives all media files from the target chat, such as images, videos, and documents. Combined with a comprehensive scan, this function retrieves all available media.

Ideal for investigative scenarios where media content is crucial, but it requires caution due to the potential of downloading illegal or sensitive material.

User Lookup (-u option)\

Telepathy can search for specific users by their User ID or username. The account must have interacted with the user for a successful lookup unless searching by username, which does not require prior interaction.

This feature is handy for profiling or investigating specific users in connection with Telegram groups or channels.

Location Search (-l option)

Finds users near a specific location based on longitude and latitude coordinates. It works only if the user's Telegram profile has a public image.

Use Case: This can help geolocate users based on publicly available information, which may assist in regional investigations or geospatial analysis.

Alternative Account Usage (-a option)

Telepathy supports running multiple accounts simultaneously using alternative phone numbers. It allows users to perform parallel scans or bypass Telegram's rate limitations.

Use Case: Useful for large-scale investigations requiring multiple scans at once without being constrained by Telegram's API limitations

Chat Export (-e option)

Exports all chats your Telegram account is part of to a CSV file. In future versions, this feature may help with provisioning new accounts for automatic group joining.

Use Case: Helps maintain an overview of all Telegram groups and channels a user is part of, useful for organization or further analysis.

Reply Archiving (-r option)

Enables archiving of replies to messages in a target channel, with an additional list of users who have replied.

Use Case: Effective for tracking active users and understanding interaction patterns in channels with active discussions.

Message Translation (`-tr` option)

Automatically translates messages retrieved from a target chat into English, which is useful for multilingual channels.

Command Combinations

Comprehensive Scan with Forwards Analysis
- Command: telepathy -t <target> -c -f
- Description: Combines a comprehensive scan with forwards analysis.
Comprehensive Scan with Media Archiving
- Command: telepathy -t <target> -c -m
- Description: Combines a comprehensive scan with media archiving.
Comprehensive Scan with Reply Retrieval
- Command: telepathy -t <target> -c -r
- Description: Combines a comprehensive scan with reply retrieval.
Comprehensive Scan with Automatic Translation
- Command: telepathy -t <target> -c -tr
- Description: Combines a comprehensive scan with automatic translation.
Alternative Number with Comprehensive Scan
- Command: telepathy -t <target> -c -a [NUMBER]
- Description: Uses an alternative number for a comprehensive scan.

Cost

Free
Partially Free
Paid

Free, with enterprise-grade versions (Telepathy Pro & TelepathyDB) available at prose.ltd for advanced needs.

Level of difficulty

Requirements

Prerequisites

Python: Ensure that Python is installed on your system, as Telepathy is a Python-based tool. You can download Python from the official website.
For enhanced security, it's recommended to use a separate phone number (a "burner phone") to create a new Telegram account specifically for Telepathy operations. This number is required only during account creation.
VPN and Virtual Machines: To safeguard your privacy and security during investigations, consider using a VPN and running Telepathy within a virtual machine. These measures help protect your main Telegram account and system from potential risks.

Limitations

Telegram API Restrictions: Telepathy is subject to Telegram's API rate limits and terms of service. Excessive requests or actions that violate these terms can result in temporary or permanent bans, limiting how quickly and extensively you can collect data.
Access to Private Groups and Channels: The tool requires public access or an invitation link to analyze private groups and channels. Without proper access, investigating private communications is not possible.
Dependence on User's Telegram Account: Telepathy operates through your Telegram account. Any limitations or restrictions on your account will impact the tool's functionality. For example, features like user location lookup require your account to have a public profile picture, and some functions may only work if you've previously interacted with the target users or groups.
Performance and Scalability Issues: While installing the cryptg library can improve performance, especially for media downloads, Telepathy's efficiency depends on the volume of data and your hardware capabilities. Large-scale investigations may require significant time and resources.
Technical Knowledge Requirement: Setting up and effectively using Telepathy requires technical expertise, including familiarity with command-line interfaces, Python programming, and OSINT techniques. This may present challenges for less technically inclined users.
Potential Changes in Telegram API: Future modifications to the Telegram API or its policies could affect Telepathy's functionality or availability, as the tool relies on this third-party service.
Windows Compatibility Issues: Telepathy may encounter file management and error handling problems on Windows systems, hindering smooth operation and necessitating troubleshooting or updates.
Data Analysis Limitations: While the tool collects extensive data, analyzing and interpreting this information requires significant effort and expertise. Telepathy facilitates data collection but does not provide automatic, in-depth analytical insights; additional tools may be needed for complex analysis.

Ethical Considerations

Legal Compliance: Use Telepathy following all applicable laws and regulations regarding privacy and data collection. Unauthorized access to private data or misuse of collected information can lead to legal consequences.
Responsible Data Handling: Exercise caution when collecting and storing data, especially media files, to avoid inadvertently downloading illegal or sensitive content. It's essential to manage and secure all collected data responsibly, adhering to legal and ethical standards.
Respect for Privacy: Always respect individuals' privacy rights. Collect data only from sources to which you have the legal right and, if necessary, consent.

General Advice concerning the security of Telegram

While Telegram offers robust encryption features, it's crucial to remain vigilant about potential security threats, especially when using tools like Telepathy for investigations.

Centralized Servers and Data Jurisdiction: Telegram stores data on centralized servers. Depending on server locations and local laws, authorities may request access to user data. Users outside regions with strong privacy protections (like the GDPR in the EU) should take extra precautions to secure their data.
Risks from Compromised Clients:
- Infected Applications: Malicious or altered versions of the Telegram app can introduce malware or spyware to your device, bypassing encryption by accessing messages directly.
- Third-Party Clients: Unofficial clients not vetted by Telegram may lack proper security measures or be designed to capture user data.
- Phishing Attacks: Be wary of phishing attempts that trick you into downloading compromised software masquerading as legitimate Telegram updates or apps.
Mitigation Strategies:
- Enable End-to-End Encryption: For sensitive communications, use Telegram's "Secret Chats," which offer end-to-end encryption, ensuring messages are accessible only to intended recipients.
- Regular Updates and Vigilance: Update your Telegram app for the latest security patches. Also, stay alert for any unusual activity or requests that may indicate security issues.
- Verify Application Integrity: Advanced users can verify the reproducibility of the Telegram app build to ensure it matches the published source code, adding an extra layer of security.

By adhering to these practices, you can enhance your security posture while using Telepathy and conducting investigations on Telegram.

Guide

Tool provider

Jordan Wildon

Advertising Trackers

This tool has not been checked for advertising trackers yet.
This tool uses tracking cookies. Use with caution.
This tool does not appear to use tracking cookies.

Page maintainer

Martin Sona

Last updated 6 days ago

Was this helpful?

URL