OSINT 101

March 30, 2019

Bill DeanLBMC Information Security

Senior Manager

What The Internet Knows

1

SEARCH ENGINES

Efficient Search Engine Usage

“Specialized” Search Engines

Social Networks

The “Deep” and “Dark” Web

Monitoring and Alerting

2

SEARCH ENGINES: GOOGLE

“ - ”

“ + ”

“ ”

“ * ”

“ and ” & “or”

Avoids pages that match a term

Requires a term to match exactly

Allows exact phrase searches

Wildcard

3

SEARCH ENGINES: GOOGLE OPERATORS

Intitle: Search for document title

Filetype: Finds files of a particular format (PDF, XLS, etc.)

Site: Locates terms within a domain

Define: Provides definition

Cache: Provides the Googled cached version of a page

Link: Finds links to a domain

4

SEARCH ENGINES: GOOGLEGoogle Advanced Search Tools – https://www.google.com/advanced_search

Google Images

Google Groups

Google News Archive

Google Blog Search

Google Scholar

Google Alerts

Google Search Histories

And more…5

SEARCH ENGINES: GOOGLE

6

SEARCH ENGINES: BING

Yahoo now uses Bing

Same operators as Google (almost)

Can search both at same time

• us.searchboth.net

7

OTHER VALUABLE SEARCH ENGINES

DuckDuckGo.com

Archive.org

iSeek.com

Livingatlas.arcgis.com/wayback

Mapillary.com

Globalfilesearch.com

Searchftps.net

8

INTERNET OF THINGS (IOT)Insecam.org

Openstreetcam.org

Shodan.io• Query Options:

Title: Search the content scraped from the HTML tag Html: Search the full HTML content of the returned page Product: Search the name of the software or product identified in the

banner Net: Search a given netblock (example: 204.51.94.79/18) Version: Search the version of the product Port: Search for a specific port or ports OS: Search for a specific operating system name Country: Search for results in a given country (2-letter code) City: Search for results in a given city Postal: Search for results within zip code*

SHODAN.IO

9

GOOGLE DORKS FOR CLOUD DRIVE SEARCH

site:s3.amazonaws.com filetype:pdf"text”

site:dl.dropbox.com "and”

site:drive.google.com "mp4”

site:onedrive.live.com "mp4”

site:docs.google.com "pptx" ”forensics”

site:scribd.com “iphone”

bit.ly/2fgc3ZH

10

THE “DEEP” WEB

“Surface” Web – Indexed Information

“Deep” Web – Non-Indexed Information

• www.pastebin.com

• http://netbootcamp.org/pastesearch.html

“Dark” Web

• thehiddenwiki.org (many engines)

• ahmia.fi

11

PEOPLE SEARCHING & SOCIAL NETWORKS

People-focused Search Engines

Social Networks (FB, Twitter, LinkedIn, etc.)

Geo-Locating Social Media Users

Determining Cell Phone Owners

12

PEOPLE SEARCHINGOne or more needed:

• Name

• Email Address

• Alias (avatar)

• Address

• Phone Number

• Picture

13

PEOPLE SEARCHING

www.ThatsThem.com

www.Pipl.com

www.PeekYou.com

www.FamilyTreeNow.com

www.FindPeopleSearch.com

www.Spokeo.com

Bing & Google

14

PUBLIC RECORDS

FamilyWatchdog.us

VoterRecords.com

15

FINDING USERNAMES

Knowem.com

Profilr.social

www.gotinder.com/@

16

SOCIAL NETWORKS: FACEBOOKWhy You’re Here… Don’t Liewww.Facebook.com/LiveMap (Gone)Regular Searching Finding the Facebook ID – http://FindMyFBID.com Finding the Facebook ID – http://FindFaceBookID.comhttps://IntelTechniques.com/osint/facebook.html

17

SOCIAL NETWORKS: FACEBOOK

18

SOCIAL NETWORKS: SNAPCHAT

19

Very Difficult to Get Data (Even from Devices) Somesnapcode.com Snapdex.com Map.snapchat.com

SOCIAL NETWORKS: TWITTER Twitter built-in searching

Search.twitter.com

TweetBeaver.com

Twicsy.com

SocialBearing.com

TwimeMachine.com

SleepingTime.org

AllMyTweets.net

20

SOCIAL NETWORKS: LINKEDIN

They will know you viewed them (unless you change your profile)

Searching peopleViewing someone’s posts (limited)Searching CompaniesBuilt-in PreservationUsing the Google site: Operator

21

SOCIAL NETWORKS: SEARCHING

Social-Searcher.comSocialMention.com Twoogel.com

22

PEOPLE SEARCHING: PHONE

Ivycall.comSync.me (Pre-Paid)SpyDialer.com

23

MONITORING & ALERTING

Google AlertsHaveIBeenPwned.comDehashed.comSpycloud.comGhostproject.frweleakinfo.com/databasesGetNotify.com

24

INTERNET SEARCHING: IMAGESTineye.com (Browser Plug-in Available)Yandex.comGoogle.comPhotobucket.comSearch.fotki.com imageedited.com

25

IMAGES: EXIF DATA

26

IMAGES: EXIF DATA

27

IMAGES: EXIF DATA

28

EXIF DATA: TOOLS

Exif.regex.info/exif.cgi

FindExif.com

Firefox Exif Viewer (Browser Plug-in)

Metapicz.com

Imageforensic.org

Privacy Concerns

29

QUESTIONS?

ANY QUESTIONS?

BDean@LBMC.com

(865) 862-3051

Bill DeanSenior Manager

30