Embed Size (px)
Citation preview
OSINT 101
March 30, 2019
Bill DeanLBMC Information Security
Senior Manager
What The Internet Knows
1
SEARCH ENGINES
Efficient Search Engine Usage
“Specialized” Search Engines
Social Networks
The “Deep” and “Dark” Web
Monitoring and Alerting
2
SEARCH ENGINES: GOOGLE
“ - ”
“ + ”
“ ”
“ * ”
“ and ” & “or”
Avoids pages that match a term
Requires a term to match exactly
Allows exact phrase searches
Wildcard
3
SEARCH ENGINES: GOOGLE OPERATORS
Intitle: Search for document title
Filetype: Finds files of a particular format (PDF, XLS, etc.)
Site: Locates terms within a domain
Define: Provides definition
Cache: Provides the Googled cached version of a page
Link: Finds links to a domain
4
SEARCH ENGINES: GOOGLEGoogle Advanced Search Tools – https://www.google.com/advanced_search
Google Images
Google Groups
Google News Archive
Google Blog Search
Google Scholar
Google Alerts
Google Search Histories
And more…5
SEARCH ENGINES: GOOGLE
6
SEARCH ENGINES: BING
Yahoo now uses Bing
Same operators as Google (almost)
Can search both at same time
• us.searchboth.net
7
OTHER VALUABLE SEARCH ENGINES
DuckDuckGo.com
Archive.org
iSeek.com
Livingatlas.arcgis.com/wayback
Mapillary.com
Globalfilesearch.com
Searchftps.net
8
INTERNET OF THINGS (IOT)Insecam.org
Openstreetcam.org
Shodan.io• Query Options:
Title: Search the content scraped from the HTML tag Html: Search the full HTML content of the returned page Product: Search the name of the software or product identified in the
banner Net: Search a given netblock (example: 204.51.94.79/18) Version: Search the version of the product Port: Search for a specific port or ports OS: Search for a specific operating system name Country: Search for results in a given country (2-letter code) City: Search for results in a given city Postal: Search for results within zip code*
SHODAN.IO
9
GOOGLE DORKS FOR CLOUD DRIVE SEARCH
site:s3.amazonaws.com filetype:pdf"text”
site:dl.dropbox.com "and”
site:drive.google.com "mp4”
site:onedrive.live.com "mp4”
site:docs.google.com "pptx" ”forensics”
site:scribd.com “iphone”
bit.ly/2fgc3ZH
10
THE “DEEP” WEB
“Surface” Web – Indexed Information
“Deep” Web – Non-Indexed Information
• www.pastebin.com
• http://netbootcamp.org/pastesearch.html
“Dark” Web
• thehiddenwiki.org (many engines)
• ahmia.fi
11
PEOPLE SEARCHING & SOCIAL NETWORKS
People-focused Search Engines
Social Networks (FB, Twitter, LinkedIn, etc.)
Geo-Locating Social Media Users
Determining Cell Phone Owners
12
PEOPLE SEARCHINGOne or more needed:
• Name
• Email Address
• Alias (avatar)
• Address
• Phone Number
• Picture
13
PEOPLE SEARCHING
www.ThatsThem.com
www.Pipl.com
www.PeekYou.com
www.FamilyTreeNow.com
www.FindPeopleSearch.com
www.Spokeo.com
Bing & Google
14
PUBLIC RECORDS
FamilyWatchdog.us
VoterRecords.com
15
FINDING USERNAMES
Knowem.com
Profilr.social
www.gotinder.com/@
16
SOCIAL NETWORKS: FACEBOOKWhy You’re Here… Don’t Liewww.Facebook.com/LiveMap (Gone)Regular Searching Finding the Facebook ID – http://FindMyFBID.com Finding the Facebook ID – http://FindFaceBookID.comhttps://IntelTechniques.com/osint/facebook.html
17
SOCIAL NETWORKS: FACEBOOK
18
SOCIAL NETWORKS: SNAPCHAT
19
Very Difficult to Get Data (Even from Devices) Somesnapcode.com Snapdex.com Map.snapchat.com
SOCIAL NETWORKS: TWITTER Twitter built-in searching
Search.twitter.com
TweetBeaver.com
Twicsy.com
SocialBearing.com
TwimeMachine.com
SleepingTime.org
AllMyTweets.net
20
SOCIAL NETWORKS: LINKEDIN
They will know you viewed them (unless you change your profile)
Searching peopleViewing someone’s posts (limited)Searching CompaniesBuilt-in PreservationUsing the Google site: Operator
21
SOCIAL NETWORKS: SEARCHING
Social-Searcher.comSocialMention.com Twoogel.com
22
PEOPLE SEARCHING: PHONE
Ivycall.comSync.me (Pre-Paid)SpyDialer.com
23
MONITORING & ALERTING
Google AlertsHaveIBeenPwned.comDehashed.comSpycloud.comGhostproject.frweleakinfo.com/databasesGetNotify.com
24
INTERNET SEARCHING: IMAGESTineye.com (Browser Plug-in Available)Yandex.comGoogle.comPhotobucket.comSearch.fotki.com imageedited.com
25
IMAGES: EXIF DATA
26
IMAGES: EXIF DATA
27
IMAGES: EXIF DATA
28
EXIF DATA: TOOLS
Exif.regex.info/exif.cgi
FindExif.com
Firefox Exif Viewer (Browser Plug-in)
Metapicz.com
Imageforensic.org
Privacy Concerns
29
