vkontakte_scan (VKontakte & Active Directory Correlation Framework)

vkontakte_scan is an intelligence and corporate exposure assessment framework designed to map social connections on the VK (VKontakte) platform and correlate discovered entities against corporate Active Directory (AD) user indices. This tool is highly valuable for Red Teams, blue teams, and corporate insider-threat analysts seeking to identify social engineering surface vectors, corporate identity leakage, or unmonitored connections between employees and external targets.

ℹ️ Note: This tool respects ecosystem privacy boundaries; data contained within strictly private VK profiles is inaccessible.

⚙️ How It Works & Core Logic

The framework queries specified targets via the VK API to map friends, followers, and subscriptions. It then executes built-in integration points (via automated PowerShell routines) to match these names against local or enterprise Active Directory lists.

⚠️ Windows Encoding Notice (Cyrillic CP1251)

When extracting Active Directory data on Windows systems natively or via PowerShell pipelines, character encoding issues with Cyrillic text may arise in standard pipelines.

• If you notice broken characters during dynamic AD scans, review the pre-configured PowerShell invocation syntax located at:
  • get_target_Friends.py (Line 79)
  • get_target_Followers.py (Line 79)
  • get_target_Subscriptions.py (Line 82)
• Enterprise Best Practice: To ensure flawless parsing, dump your Active Directory target list into a plaintext configuration file beforehand and utilize the static text parsing options.

🚀 Obtaining VK API Tokens

To interact with the VK API, you must generate StandAlone application access tokens with elevated scope permissions (friends and photos):

1. Create a StandAlone application within the VK Developers Portal.
2. Construct your authorization URI manually by replacing {YOUR_APP_ID} and {scope_required} (remove brackets):

   [https://oauth.vk.com/authorize?client_id=](https://oauth.vk.com/authorize?client_id=){YOUR_APP_ID}&display=page&redirect_uri=[https://oauth.vk.com/blank.html&scope=](https://oauth.vk.com/blank.html&scope=){friends_or_photos}&response_type=token&v=5.52
   

3. Authenticate via your browser, and extract the generated token value directly from the access_token= string in the resulting address bar.

🛠️ Installation & Configuration

1. Clone the Repository:

   git clone [https://github.com/bret99/vkontakte_scan.git](https://github.com/bret99/vkontakte_scan.git)
   cd vkontakte_scan

2. Configure Access Tokens: Open access_tokens.py and supply your keys:

   access_token_friends = "your_vk_friends_token"
   access_token_photos = "your_vk_photos_token"

💻 Usage

Target Identification

The tool requires an explicit numeric VK User ID. To find a target's absolute ID:

• Locate the clean numeric marker in the standard URL profile pattern: https://vk.com/id{numeric_id}
• Alternatively, use your browser's Developer Tools (F12) over a target profile element to inspect the HTML and locate attributes such as data-from-id={numeric_id}.

Execution

Run the core interactive management matrix:

python3 vkontakte_scan.py

💡 Operational Optimization: For optimal intersection and correlation accuracy, bypass explicit prompts querying for City or ID matching filtering layouts unless granular infrastructure profiling is required.

💎 Support the Project

If this tool helps protect your infrastructure, consider supporting the developer!

Crypto Wallets

Asset	Network	Address
BTC	Bitcoin	bc1qjwl80sv06xj2yhumn6k6xemchryem923wwts5x
USDT / ETH	Ethereum (ERC20)	0xc01b996c7b08ccfad463f27e54f1e74e6ac6f9ff
USDT / SOL	Solana	D7a5CdLaDwkKehnH82y6VJEF3hADWuupuhWCXecHvEnt
TON	TON Network	UQBhPLwdFiJdh6sZ96sZfxrxD9Lu6NFtaUecWeoHSM-EPc0P
LTC	Litecoin	ltc1qkm58ks5kuc64rjwd74sfalc5xsn7h6sr4vt45w
SOL	Solana	D7a5CdLaDwkKehnH82y6VJEF3hADWuupuhWCXecHvEnt

---

📜 License

This project is licensed under the MIT License - see the LICENSE file for details.