Ever since I started blogging about image geolocation I’ve tried to write about methods and techniques that make solving these kind of puzzles more structured and systematic. In my professional career I was (until recently) a criminal investigator so it…
Tag: Tutorials & Guides
Protecting WordPress From XMLRPC Attacks
Over the weekend my site suffered from a spike in traffic that caused the WordPress interface and then the rest of the site to grind to a halt. This blog runs on a VPS that has about the same computing…
Using Hunchly With Elasticsearch and Kibana
Hunchly is an excellent OSINT tool designed to capture and record your browser activity as you go. Once activated it sits quietly in the background as you browse and saves copies of webpages as you view them. It also records…
Using Gap Analysis For Smarter OSINT – Quiztime 4th March 2020
In OSINT we make use of the wealth of information that is now available to us, but so often it becomes the case that there is too much information for us to process effectively. It’s easy to drown in a…
Who Stole My Stuff? Finding Out Who Is Behind A Website
The last blog post I wrote about Fake Twitter profiles is by far the most widely-read post I’ve ever published since I started this blog. It’s nice when people read your work but there was a little sour note with…
Geolocation: More Info, More Accuracy
How can you become more accurate with photo geolocation? Finding a country is good, finding a town is better, finding a street in a town is better still – but is it possible to get even more accurate than that?…
WhatsApp Dorks And Tricks
EDIT: As of this morning (22nd Feb) this dork no longer works. WhatsApp have modified their URLs so that they are no longer indexed by Google. The other dorks on this post still work though. A tweet by Jordan Wildon…
Website Forensics: How To Detect Editorial Changes
A few months ago I wrote about how you could use Carbon-14 to detect the timestamps for images published in webpages. By comparing the publication times of the images with the publication time of the page itself it is possible…
OSINT Techniques: Who’s Behind A WordPress Site?
WordPress is the base that 35% of the world’s websites are built on. If you’re ever going to investigate a website, then it’s really important to be able to know your way around a WordPress setup. In this tutorial I’m…
Crypto Scam Investigation: Using Spiderfoot HX For OSINT Automation
Automation or Augmentation? Automation is an increasingly important part of OSINT. Even the simplest of investigations can require large amounts of different data types to be gathered and analysed quickly. Yet it is not accurate to suggest that all…