Posts

Reflections: OSINT tool, Privacy danger

Image
Hey everyone! It has been long since I wrote here (again) and I am really sorry for that. Good thing OSINT Dojo helps me stay on track with its ranking system. So, let’s jump in today’s topic: Reflections in OSINT and privacy. As previously noted, when conducting Open Source Investigations, you always need to have an out-of-the-box approach in each case. Each and every bit of breadcrumb can help you further investigate and reveal new ways to proceed. We people tend to pay attention to the things that interest ourselves in photographs and forget little details that might betray more than what we would want. If you see a reflection where it shouldn’t be in a photo, take advantage of it. Or I should rather say: search for reflections in photos! They are one of the most overlooked details in them. The lines following below are not only valuable to us as OSINT investigators, but also help us realize things that could leak personal information about us in general as potential target

A Cyber Investigator CTF walkthrough

Image
It has been long since I posted anything here but I have been REALLY busy lately. In this post I will try to walk you through some of the challenges in the Cyber Investigator CTF challenge by CyberSoc Wales. More specifically, I will speak about the four first challenges of the “Covert Operations” section. The Cyber Investigator CTF challenge is not strictly OSINT related and I think you will find it interesting to learn a little bit for other related fields also. But the section we will take a look at today, will be closer to an OSINT perspective. And it's the simplicity of the solutions that will show you that sometimes, you don't need to do some super crazy research to find stuff, rather than basic search and thinking. So, let’s go! Challenge: thermalentry Description: One of our undercover officers has been following a suspected financial crime kingpin and they keep visiting a lockup in a secluded area of London - we have no idea what is in there. A couple of nights a

Skype – A hidden OSINT goldmine

Image
I have previously posted about skype potential uses in OSINT investigations in one of my #DailyOSINT tweets, but I decided to provide a more in-depth guide to show everyone in the OSINT community the true potential of this application. I have seen no one talk about it in the OSINT community and I think it’s about time we understand the possibilities it provides. Skype is an application designed for communication and e-conferencing between its users. It is widely spread with a vast user base. Although it has begun losing popularity with the rise of alternative tools such as zoom etc, it still dominates its sector for a long time, and this means that your target is very likely to have a Skype account. Let’s look at some rough numbers: According to Statista , this is the percentage of U.S. internet users who use Skype as of January 2018, by age group: Also, according to the same site , the number of estimated Skype users registered worldwide from 2009 to 2024 is constantly grow

OSINT quiz 2020 walkthrough – Part 2

Image
Yesterday I published a blog post about the first challenge of the OSINT quiz 2020. Since @OSINTdojo requires a second post to be written about an OSINT challenge that I have solved previously, I decided to show you how to solve some more challenges of the quiz. If you haven’t already read the first part of my walkthrough, you can find it here . SPOILER ALERT! Below you will find solutions for the OSINT quiz 2020. If you would like to first give it a try yourself, don’t continue reading until you need a hint or did it yourself already. So, here we go. Continuing from where we left last time, let’s try solving the second challenge of the quiz: Question #2: “ Julia Bayer started the whole Quiztime geolocation movement back in 2017. She started out with the hashtag #MondayQuiz. But can you tell me what the last text was that she tweeted in 2017, while using the hashtag #MondayQuiz?” Answer: Just like the last time we are going to use some twitter dorks to solve this one: Clic

OSINT quiz 2020: A fun way to start your OSINT journey!

Image
While trying to reach the Ronin level on OSINTDojo , I need to create some writeups on solutions on OSINT quizzes I have completed. So, for today I am going to walk you through the first challenge of OSINTquiz 2020 , an OSINT quiz created by sector035 . This is the third of a series of OSINT quizzes made by sector035 and is supposedly the easiest of all. The other two were made back in 2019 and 2017 . If you are still in the beginning of your OSINT journey, then I advise you to start on this one, then move backwards to the one of 2019 and lastly to 2017. So, let’s go! To start the OSINT quiz of 2020, all you have to do is send an e-mail from any e-mail address with subject: “start” to this email address: osintquiz2020@gmail.com. Details on the quiz and how it is “played” will soon arrive and you will move on to perform a total of 18 challenges, until fully completing it. The whole process will run by sending answers and receiving new questions-challenges via e-mail. You can even req

Using OSINT to find missing persons – A Trace Labs Search Party OSINT CTF writeup

Image
Hello everyone. This writeup was meant to come out sooner, but sadly life sometimes postpones things… Anyway, last weekend Trace Labs held one of its monthly OSINT CTFs for finding missing persons, in which I have participated. It’s not the first time I did so, since I have participated twice as a solo team in the past, but this is the first time I participated as part of a team and having prepared really well for it. My team Dwayne “The Sock” Johnson, which consisted of myself, @jakecreps , @BOsintBlanc and @beige_hat came 2nd place and this was very exciting for us since it was the first time we have ever participated together. The following information is meant to help future contestants and of course any feedback is welcome (as always). Trace Labs Trace Labs is a nonprofit organization whose mission is to accelerate the family reunification of missing persons while training members in the tradecraft of open-source intelligence (OSINT) . Among its initiatives and in o