UniqueSINT PART - 3

-

 Today in this blog we are going to look for Geolocation intelligence inshort we can call as GEOINT


Description : GEOsint is nothing but extracting information based on geographical data either through the posts that our victim posted in his/her social media or else from the ip address through active information gathering which means direct interaction with our target

 

Before going to the content i want to mention the situations where you need to check about GEOLOCATION

 

  • When you find location tags in the posts for example instagram,facebook etc
  • When you analyse the posts of your victim you might come accross post in which background is a monumental place or else any other well recognised tourist place 
 
 We will discuss several methods to extract important information from the imaginery location of the victim

Important keywords : 

  •   EXIFDATA : Exchangeable Image File Format and refers to the basic metadata that is generated and stored by your camera whenever you take a photo
  •  IPaddress : unique address that identifies a device on the internet or a local network 
 
  Use of exifdata in OSINT : Whenever we take a picture of something with our phone camera or else any device the image gets embedded with all the properties of your cam,place where it is taken,etc
 
You can find geo co-ordinates only when the person turns on location service in their mobile 
 
sites to check exif data of your image sample 
 
  • exifview 
  • geoexif : If you submit the image if the image contains co-ordinates it shows you on map 
Lets start our OSINT by situation :  

                                                        Think for suppose you have a victim maybe at social media platforms and you want to find where he is now to find the specific details that you are searching for you probably either get that with interaction or without interaction

In this situation we will proceed with direct interaction

Every computer/phone that is using internet must have IP address and it is like a Aadhar card to your device or else an unique id.. we need to extract this ip address

Techniques for getting ip address of our target is by IP logging 

websites for ip logging 

The main important part is to hide these linka from the victim so that he/she not suspect the link you send for that you either use URL shorteners or else use this below method that i recently observed
 
  • open this telegraph  
  • Now in another tab open this link 
  • There is a option to change the extension as jpg now copy the link
  • In telegraph website there you can see a prompt for link embedding < > it looks like this
  • Now insert the url that you copied from ip logger
  • send the telegraph link to the victim
  • Note : Dont send in telegram because it logs telegram BOTS that always works for telegram
Sometimes you may get emails or else you send email to your clients or friends you can use this method to log their IP address 

When someone sent you email you can extract their email address where it is originated from by analysing the email headers

To know complete info about email headers and how to extract them 

just follow this link emailheaderscheck
 
Websites to analyse email headers that you got
 
Situation : When you send an email you may embed them with ip loggers but how can you know whether the person ever opened your email for that follow the below websites
 
Another way to redirect the the tracking link from a valid link 

example : https://vk.com/away.php?to=(your tracking link and it redirects using this valid domain)

After getting their IP address we must try to know the co-ordinates of the ip

I prefer to use this service IPINFO
 
You got ip address co-ordinates and using this information we need find dig the information
 
You might think what can we do with co-ordinates and yes we can do some things that might reveal their youtube channel,their surroundings instagram and twitter ids
 
Twitter : 
 
              Twitter has a capability to search using this following syntax
 
     SYNTAX : geocode:latitude,longitude,radius you like
 EXAMPLE  : geocode:17.04523,89.08464,25km or else

https://twitter.com/search?q=geocode:(latitude),(longitude),2km&src=typed_query&f=live

Instagram : 

                  https://www.instagram.com/location_search/?latitude=()+longitude=()

Note : to use this service you must login to instagram and replace () this with the co-ordinates latitude and longitude consecutively
 
we will continue in next blog!


Comments

Post a Comment

Popular posts from this blog

UniqueSINT PART - 1

-
Image
                                                                                                                         In Information security there are many branches that we need to learn it is not mandatory to be expert on everything but its necessary to be aware on each branch and today in this blog we are going to learn one of the domain in Information Security   OPEN SOURCE INTELLIGENCE [ OSINT ]   Open-source intelligence (OSINT) is the collection and analysis of data gathered from open sources to produce actionable intellige...
Read more

UniqueSINT PART - 2

-
 This post is the continuation of the previous post UniqueSINT PART - 1 so lets start this blog   UniqueSINT PART - 2 In this blog we mainly focus on estimating whether the email or a phone number that we got during our investigation and also we can look at some tools and methods for estimating for the contact number too Email : example123@gmail.com The above email is our target email and we can start looking into various different social media sites that are mostly used in India such as : Twitter Instagram Snapchat Whatsapp Telegram Discord Twitter :               Twitter is a widely used social media by most of the persons so lets start checking our target email is linked to twitter or not and also we see method for checking the contact number linked to the twitter As mentioned in the previous post copy the victim email  Now analyse this link and try to copy this link too link : https://api.twitter.com...
Read more