WordPress is the base that 35% of the world’s websites are built on. If you’re ever going to investigate a website, then it’s really important to be able to know your way around a WordPress setup. In this tutorial I’m going to show how to identify user accounts on a WordPress-based website so that you …
OSINT Techniques: Who’s Behind A WordPress Site? Read More »
How much information is there in a photograph? There is always more than you think. I learned recently that when miltary intelligence officers receive their training, they are given a photo that does not seem to contain much detail but they are required to produce twenty pieces of intelligence from it: Who is in the …
Automation or Augmentation? Automation is an increasingly important part of OSINT. Even the simplest of investigations can require large amounts of different data types to be gathered and analysed quickly. Yet it is not accurate to suggest that all OSINT work is going to be automated as time progresses. Good OSINT practitioners will do …
Crypto Scam Investigation: Using Spiderfoot HX For OSINT Automation Read More »
Things have been busy lately but I finally managed to catch up with a few recent Quiztime challenges. This post will explain how I managed to solve Tilman Wagner’s challenge from 30th October but I have to say it was by far the hardest Quiztime challenge I have ever managed to solve. It is not …
Using Flight Tracking For Geolocation – Quiztime 30th October 2019 Read More »
I was originally going to write this guide as part of my post on OSINT for e-mail addresses, but really this is better as separate subject. PGP keys are used for a variety of purposes, but one of the main reasons they exist is to allow someone to verify and protect their online identity. They …
Carbon14 is a really useful Python tool for website investigations and verification. It allows investigators to work out when a webpage was created, and if it has potentially been altered since it was first published. Carbon14 checks the data attached to the images embedded in a webpage to be able to tell when they were …
I’ve written a few blogs about gap analysis before, but it’s an important skill for investigation and intelligence analysis work so I decided to write about it again. Daily Quiztime challenges are a good platform to demonstrate how this kind of methodology can be applied, and it is just as suitable for small scale OSINT …
Gap Analysis: Chrono and Geolocation In Berlin (Quiztime 7th October 2019) Read More »
How could you use open source information to trace a fugitive or a missing person? For this post I thought it would be an interesting exercise to see what information it would be possible to gather from Sector035’s recent Quiztime challenge. On the surface it was quite a straightforward photo geolocation question, but there is …
Digital Shadows: Seeking Sector035 – Quiztime 26th September 2019 Read More »
The WhoIs system used to be a goldmine for OSINT investigators. It was usually possible to find out the address, phone number, and e-mail address of the person who owned or at least registered the website. However the increasing use of privacy services by domain registrars, as well GDPR, has drastically reduced the usefulness of …
Spiderfoot is one of my favourite OSINT gathering tools. It automates a huge number of queries that would take a long time to do manually. It comes with a wide range of modules that will conduct automated searches for e-mail addresses, IP addresses, domains, phone numbers, usernames, and other types of data. This post will …
Getting Started With Spiderfoot – A Beginner’s Guide Read More »