Week in OSINT #2022-37

In this episode we talk about distressing content and drones, an interesting event and Instagram

Work kept me really busy last week, so I hardly had the time to finish this episode! Thank goodness I wake up early enough nowadays to spend some time going over all the interesting information everyone posts online. And this week I learned some new things again! For instance, that the new Instagram JSON information has changed in the recent few months. Yes, I actually kept a cheat sheet for myself, but what I wrote down there didn't match the current JSON output. Time to dive into all the additions and changes I guess. Another good reminder that all these social media platforms are constantly changing... Anyway, this week I have the following topics for you:

  • OpSec and OSINT
  • Distressing Content
  • Drone Wars
  • Instagram
  • OSINT With Bombal

Event: OpSec and OSINT

SANS will be hosting another live stream later this month. The topic will be OpSec and OSINT, and will feature UnleashedOsint, thegumshoo, dutch_osintguy and d_mashburn. With these experts it will no doubt be an interesting stream to watch!

Set a reminder for this date!
Set a reminder for this date!

Link: https://www.youtube.com/watch?v=CsPd8q4YFUo

Article: Distressing Content

A few years ago Nico Dekens shared an important article on vicarious trauma. Last week Theo Baxter shared his own article on the topic. In the current climate, there's a lot of content that has an emotional impact on everyone, so it is great to see another article on this topic. There is a lot of overlap, but Theo shares some personal experiences that might help you too. He does state he isn't an expert on the field, but his personal tips and techniques are a great addition to Nico's earlier blog.

Link: https://link.medium.com/JtnjumHqntb

Site: Drone Wars

Over on Twitter, OSINT Jobs notified me about the website 'Drone Wars'. They contain lots of information on drones, mostly from the UK, how they are used, and they even have a drone crash database. The website is actually an anti-drone platform, but the information they gather, especially on crashed drones, could be useful in other investigations.

Link: https://dronewars.net/drone-crash-database/

Tip: Instagram

Some time ago Instagram changed the way you can view the metadata within an Instagram account. It used to be really easy to find info by simply adding the ?__a=1 behind a URL, but now one has to dive into the developer tools of the browser. Gonzo shared this information, and also a small script that can be used to view the information from within the command prompt. But there's more...

The following URL that you can find within the eveloper tools will give metadata on any post on Instagram:

https://i.instagram.com/api/v1/media/{decimal post ID}/info/

Some interesting information that can be viewed, is mentioned here:

Entity/section Value
0 - taken_at Timestamp of creation of the media
0 - created_at Timestamp of IG post itself
media_id This timestamp is an IG timestamp that needs to be converted. It looks like the time that within the IG app a new post was bing started. Converter can be found here
device_timestamp Another timestamp, unknown format
pk Information on comments
user User information of poster
video_versions URLs to different video formats

To automate things, Gonzo shared a small Python script that will enable you to retrieve the user information. From there you can easily parse it to any tool you like.

Python script: https://gist.githubusercontent.com/GONZOsint/...

Media: OSINT With Bombal

Micah Hofmann was a guest at David Bombal again, and this time he talked about different platforms like Untapped and Strava. He also talks about some basic geolocation, GitHub and shows what you can do with Cyberchef. Another awesome video

Link: youtu.be/F6l2Bmh7Dq4

Have a good week and have a good search!

Previous Post Next Post