OSIntOps News

2022-05-09 14:13:00 Week in OSINT #2022- 18 - sector035 - Cheat Sheets

Twitter user Ginger T sent out a tweet about a new Shodan cheat sheet. It features a list of filters that can be used to search for internet connected devices and their contents. The same user also created cheat sheets for Sherlock, Infoga and PhoneInfoga on the website Cheatography. If you're into Shodan or one of the other tools, these might be handy overviews to keep around.
Handy overview of Shodan filters
Handy overview of Shodan filters

Shodan

(Phone)Infoga

Sherlock Open / Comment

2022-05-07 14:13:00 10 Lessons from Bellingcat’s Logan Williams on Digital Forensic Techniques
https://gijn.org/2022/05/05/10-lessons-from-bellingcats-logan-williams-on-digital-forensic-techniques/ Open / Comment

2022-05-06 14:13:14 Massacre in Tadamon: how two academics hunted down a Syrian war criminal

After a rookie militiaman secretly watched a video of 41 people being brutally killed, he knew he had to get the horrific images to the outside world
https://www.theguardian.com/world/2022/apr/27/massacre-in-tadamon-how-two-academics-hunted-down-a-syrian-war-criminal Open / Comment

2022-05-05 21:38:22 Sherloq is an open source digital image forensics toolkit and Forensics a simple photo forgery checker
VideoCleaner is a video cleaning and quality enhancement tool
SmartDeblur is a tool for restoring defocused and blurry images
Fotoshop, Upscaler, Waifu2x, Myheritage improving the quality of the photo and the sharpness of the faces in the photo
ExifTool is an open source program for reading, writing and managing the metadata of images, audio, video and other files
Cameratrace, Stolencamerafinder camera identification by image, search for other images from the same camera
Descarteslabs, Mapchecking, Suncalc fact-checking tools

... join my Medium Blog https://medium.com/@ibederov_en, Facebook https://www.facebook.com/ibederov.en/ or Telegram https://t.me/ibederov_en! Open / Comment

2022-05-05 14:12:59 Welcome to the OSINT [Open Source Intelligence] start.me of start.meeee
https://start.me/p/Pwy0X4/osint-inception
There is so many start.me pages scattered across the World Wide Web , lost in all the data on blogs, forums, twitter, discord, Telegram, Reddit, Google pages.

I decided to make a start.me for the OSINT community, in order to centralize all the best start.me pages in one place. I have also added comments, description, and social profiles of the various project owners. Open / Comment

2022-05-04 14:13:14 Advanced OSINT: The Art of Pivoting
This blog serves as a companion post to my talk at the 2022 National Cyber Crimes Conference called “Advanced OSINT: The Art of Pivoting”
The conference audience is law enforcement and prosecutors, but even you OSINT super-gurus catching this blog version online might find something of use hidden inside, so read on!
https://hatless1der.com/advanced-osint-the-art-of-pivoting/ Open / Comment

2022-05-03 14:13:14 How To Get Hacked By Accidentally Copy Pasting
This is why you should NEVER copy paste commands directly into your terminal. Ask any developer or Admin if they have ever copied a command line or code snippet from the web. The answer would probably be YES. You would assume that what you copied is what you paste, right? Well, nope!

https://www.wizer-training.com/blog/copy-paste Open / Comment

2022-05-02 09:08:01 Week in OSINT #2022- 16 - sector035 - ombal and TOCP



Last week some members of The OSINT Curious Project were guests at David Bombal's YouTube channel for an interview, where they talked about OSINT, how it's used within different areas of expertise, and share some stories from the battlefield. Well over an hour of tips, resources and information on how to get started with OSINT. Open / Comment

2022-05-01 09:08:00 Week in OSINT #2022- 16 - sector035 - ISearchFrom
http://isearchfrom.com/
Just a golden oldie that I think needs to be shared again. The website 'I Search From' can be used to target your Google searches by matching a specific location and language. Google will use this information to show 'localized' content within the search results, by which I was able to find a Chinese fish processing plant some years ago. Haven't heard from it yet? I do recommend you to have a look, play around with it, and compare the difference and quality of search results. Open / Comment

2022-04-30 09:08:00 Week in OSINT #2022- 16 - sector035 - Google Analytics

GA4 Article: https://support.google.com/analytics/answer/10089681

Google Universal Analytics (the famous UA codes) will be replaced by a new analytics platform, called Google Analytics 4 or GA4 for short. This already started somewhere in 2020, but here's a recent quote from Google's support page:

On July 1, 2023, standard Universal Analytics properties will no longer process data. You'll be able to see your Universal Analytics reports for a period of time after July 1, 2023. However, new data will only flow into Google Analytics 4 properties.

This means that it's important to extend the searching for analytics codes with a different code, that has a different prefix. It's of course possible to search for these tags by using websites like PublicWWW, NerdyData or even Shodan. Sadly enough I've seen that analytics specific platforms like DNSlytics still haven't been updated to use GA4. So be prepared to run manual searches for the time being, until they finally catch up!

How to find the codes?

To find the code, dive into the source code of a page, and look for:

googletagmanager.com

In case a global site tag has been used, this will point to a JavaScript that is called via the following piece of HTML code, where GA_MEASUREMENT_ID is the unique analytics code for this site or page:

When you dive into the source code, you can probably spot the analytics code, when you look at the last line of this code snippet:
×