How can you become more accurate with photo geolocation? Finding a country is good, finding a town is better, finding a street in a town is better still – but is it possible to get even more accurate than that?…
WhatsApp Dorks And Tricks
EDIT: As of this morning (22nd Feb) this dork no longer works. WhatsApp have modified their URLs so that they are no longer indexed by Google. The other dorks on this post still work though. A tweet by Jordan Wildon…
Where Was This Taken? Church Spires and Steering Wheels
In OSINT as in sport, there is definitely such a thing as home fixture advantage. We are always going to be able to identify the important little clues in an environment we are familiar with rather than one…
Seeking Sector035 – Quiztime 30th January 2020
January has been a busy month both personally and professionally so I haven’t been able to take part in as many Quiztime challenges as I’d like to. Fortunately I had time to try Sector035’s Thursday Quiz. Sector035 posted not one…
Website Forensics: How To Detect Editorial Changes
A few months ago I wrote about how you could use Carbon-14 to detect the timestamps for images published in webpages. By comparing the publication times of the images with the publication time of the page itself it is possible…
OSINT Techniques: Who’s Behind A WordPress Site?
WordPress is the base that 35% of the world’s websites are built on. If you’re ever going to investigate a website, then it’s really important to be able to know your way around a WordPress setup. In this tutorial I’m…
20 Questions – Quiztime 25th November 2019
How much information is there in a photograph? There is always more than you think. I learned recently that when miltary intelligence officers receive their training, they are given a photo that does not seem to contain much detail but…
Crypto Scam Investigation: Using Spiderfoot HX For OSINT Automation
Automation or Augmentation? Automation is an increasingly important part of OSINT. Even the simplest of investigations can require large amounts of different data types to be gathered and analysed quickly. Yet it is not accurate to suggest that all…
Spiderfoot HX: Investigating A Domain Used For Phishing
In my last Spiderfoot tutorial I wrote about how Spiderfoot HX could be used to gather information about a suspicious IP address and then analyse and visualise the data. In this guide I’m going to show how Spiderfoot HX can…
Using Spiderfoot HX To Investigate A Malicious IP Address
Using OSINT to identify and investigate sources of malicious internet activity is a key part of cyber security. There’s a huge range of open source information out there to help with this, and Spiderfoot HX gathers it very quickly. This…