osint 101 - tpia cpe files/osint 101-what the...osint 101. march 30, 2019. bill dean. lbmc...
TRANSCRIPT
![Page 1: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/1.jpg)
OSINT 101
March 30, 2019
Bill DeanLBMC Information Security
Senior Manager
What The Internet Knows
1
![Page 2: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/2.jpg)
SEARCH ENGINES
Efficient Search Engine Usage
“Specialized” Search Engines
Social Networks
The “Deep” and “Dark” Web
Monitoring and Alerting
2
![Page 3: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/3.jpg)
SEARCH ENGINES: GOOGLE
“ - ”
“ + ”
“ ”
“ * ”
“ and ” & “or”
Avoids pages that match a term
Requires a term to match exactly
Allows exact phrase searches
Wildcard
3
![Page 4: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/4.jpg)
SEARCH ENGINES: GOOGLE OPERATORS
Intitle: Search for document title
Filetype: Finds files of a particular format (PDF, XLS, etc.)
Site: Locates terms within a domain
Define: Provides definition
Cache: Provides the Googled cached version of a page
Link: Finds links to a domain
4
![Page 5: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/5.jpg)
SEARCH ENGINES: GOOGLEGoogle Advanced Search Tools – https://www.google.com/advanced_search
Google Images
Google Groups
Google News Archive
Google Blog Search
Google Scholar
Google Alerts
Google Search Histories
And more…5
![Page 6: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/6.jpg)
SEARCH ENGINES: GOOGLE
6
![Page 7: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/7.jpg)
SEARCH ENGINES: BING
Yahoo now uses Bing
Same operators as Google (almost)
Can search both at same time
• us.searchboth.net
7
![Page 8: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/8.jpg)
OTHER VALUABLE SEARCH ENGINES
DuckDuckGo.com
Archive.org
iSeek.com
Livingatlas.arcgis.com/wayback
Mapillary.com
Globalfilesearch.com
Searchftps.net
8
![Page 9: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/9.jpg)
INTERNET OF THINGS (IOT)Insecam.org
Openstreetcam.org
Shodan.io• Query Options:
Title: Search the content scraped from the HTML tag Html: Search the full HTML content of the returned page Product: Search the name of the software or product identified in the
banner Net: Search a given netblock (example: 204.51.94.79/18) Version: Search the version of the product Port: Search for a specific port or ports OS: Search for a specific operating system name Country: Search for results in a given country (2-letter code) City: Search for results in a given city Postal: Search for results within zip code*
SHODAN.IO
9
![Page 10: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/10.jpg)
GOOGLE DORKS FOR CLOUD DRIVE SEARCH
site:s3.amazonaws.com filetype:pdf"text”
site:dl.dropbox.com "and”
site:drive.google.com "mp4”
site:onedrive.live.com "mp4”
site:docs.google.com "pptx" ”forensics”
site:scribd.com “iphone”
bit.ly/2fgc3ZH
10
![Page 11: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/11.jpg)
THE “DEEP” WEB
“Surface” Web – Indexed Information
“Deep” Web – Non-Indexed Information
• www.pastebin.com
• http://netbootcamp.org/pastesearch.html
“Dark” Web
• thehiddenwiki.org (many engines)
• ahmia.fi
11
![Page 12: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/12.jpg)
PEOPLE SEARCHING & SOCIAL NETWORKS
People-focused Search Engines
Social Networks (FB, Twitter, LinkedIn, etc.)
Geo-Locating Social Media Users
Determining Cell Phone Owners
12
![Page 13: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/13.jpg)
PEOPLE SEARCHINGOne or more needed:
• Name
• Email Address
• Alias (avatar)
• Address
• Phone Number
• Picture
13
![Page 14: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/14.jpg)
PEOPLE SEARCHING
www.ThatsThem.com
www.Pipl.com
www.PeekYou.com
www.FamilyTreeNow.com
www.FindPeopleSearch.com
www.Spokeo.com
Bing & Google
14
![Page 15: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/15.jpg)
PUBLIC RECORDS
FamilyWatchdog.us
VoterRecords.com
15
![Page 16: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/16.jpg)
FINDING USERNAMES
Knowem.com
Profilr.social
www.gotinder.com/@
16
![Page 17: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/17.jpg)
SOCIAL NETWORKS: FACEBOOKWhy You’re Here… Don’t Liewww.Facebook.com/LiveMap (Gone)Regular Searching Finding the Facebook ID – http://FindMyFBID.com Finding the Facebook ID – http://FindFaceBookID.comhttps://IntelTechniques.com/osint/facebook.html
17
![Page 18: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/18.jpg)
SOCIAL NETWORKS: FACEBOOK
18
![Page 19: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/19.jpg)
SOCIAL NETWORKS: SNAPCHAT
19
Very Difficult to Get Data (Even from Devices) Somesnapcode.com Snapdex.com Map.snapchat.com
![Page 20: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/20.jpg)
SOCIAL NETWORKS: TWITTER Twitter built-in searching
Search.twitter.com
TweetBeaver.com
Twicsy.com
SocialBearing.com
TwimeMachine.com
SleepingTime.org
AllMyTweets.net
20
![Page 21: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/21.jpg)
SOCIAL NETWORKS: LINKEDIN
They will know you viewed them (unless you change your profile)
Searching peopleViewing someone’s posts (limited)Searching CompaniesBuilt-in PreservationUsing the Google site: Operator
21
![Page 22: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/22.jpg)
SOCIAL NETWORKS: SEARCHING
Social-Searcher.comSocialMention.com Twoogel.com
22
![Page 23: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/23.jpg)
PEOPLE SEARCHING: PHONE
Ivycall.comSync.me (Pre-Paid)SpyDialer.com
23
![Page 24: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/24.jpg)
MONITORING & ALERTING
Google AlertsHaveIBeenPwned.comDehashed.comSpycloud.comGhostproject.frweleakinfo.com/databasesGetNotify.com
24
![Page 25: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/25.jpg)
INTERNET SEARCHING: IMAGESTineye.com (Browser Plug-in Available)Yandex.comGoogle.comPhotobucket.comSearch.fotki.com imageedited.com
25
![Page 26: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/26.jpg)
IMAGES: EXIF DATA
26
![Page 27: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/27.jpg)
IMAGES: EXIF DATA
27
![Page 28: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/28.jpg)
IMAGES: EXIF DATA
28
![Page 29: OSINT 101 - TPIA CPE files/OSINT 101-What the...OSINT 101. March 30, 2019. Bill Dean. LBMC Information Security. Senior Manager. What The Internet Knows 1. SEARCH ENGINES Efficient](https://reader035.vdocuments.site/reader035/viewer/2022062415/5fbb3f0730fbdb4ba17a1bf5/html5/thumbnails/29.jpg)
EXIF DATA: TOOLS
Exif.regex.info/exif.cgi
FindExif.com
Firefox Exif Viewer (Browser Plug-in)
Metapicz.com
Imageforensic.org
Privacy Concerns
29