Hello, and welcome back after the big social networks
overview. I would like to cover some of my favorite
osint resources. When doing investigations. We
will talk about the most popular business, social network
out there called LinkedIn after that. We
will discuss paste bin, which is a website or rather
a web service that allows users to share
plaintext writings through.
Posts and I'll show you why the osint community also
loves it or from Recently not
So Much Anymore. And finally, I will
go over a couple of social networks with suggestions how
to conduct your search activities on
them. Okay, if you're not
familiar with LinkedIn then I will tell you
what it is. It is a social network dedicated to
Business and Professional interactions. A
user has a profile similar to his resume.
May where they present their skills employment history, maybe
some projects projects they worked on
and similar things. Companies can also have
their profile pages and that is also an
open source intelligence gold mine because usually
companies have a list of employees that
have LinkedIn profiles Associated to
their pages. And that is very great currently,
and we are in the middle of 2020.
Now LinkedIn has over.
We're dead 50 million members, that is a
lot of business. And just as a fun fact, or
side note, LinkedIn is owned by Microsoft and
Microsoft bought LinkedIn in 2016 for
twenty six point two
billion dollars paid in cash. Now
that we made a quick overview of the platform. Let's
talk about how can we search through Linkedin?
If you do not have a profile, then you're pretty much
convicted to Google and some other methods.
It's, which may or may not work. Since LinkedIn is
always evolving to protect its members. As
our LinkedIn member active LinkedIn member member. You
have the ability to control your privacy and
how will your profile look to the public? So
that is also a thing to consider. LinkedIn
has a search box where you can search for
profiles companies and posts. Currently, the
search box, when logged in allows you to use
some advanced search operators, like
40 are to include one or more terms together
than the operator not. And
ot to include exclude, a
particular term, then the use of quotations to
look up for exact search words and parentheses to
combine Search terms. As I have
previously mentioned LinkedIn does not allow for
you to preview someone's profile without logging in.
But currently you can use an open source
intelligence technique which
Which I would like to share with you. Also. Just a side note. One
of main LinkedIn features is whenever
you visit or view someone's profile. You
visit your visit gets
recorded and the profile you visited will
get notified about it. Here. We are in
our private browser yet. Again, we
need to access the profile link via our search engine.
I will use my favorite search engine start
page.com.
And I will use my own LinkedIn profile as an example. So
go to start page.
search for
Tino socage, or socket in English LinkedIn.
As you can see, it is almost the
first result.
Usually LinkedIn doesn't allow you to see even the public profiles
of a person without signing in
or by having an account. So to
kind of help yourself and see that profile, copy
the profile link right? Click.
Copy the link.
And go to the Google's mobile friendly tester site.
That is located on the Search. Google.com
slash test /
mobile friendly.
And paste that previously copied LinkedIn
profile link.
And test the URL.
Do a checkup if needed.
Now, it's fetching the data.
Okay.
Now, as a final step.
Take the HTML code on
the right, copy
it entirely to the clipboard.
Go to.
The HTML viewer site.
That is located on the code.
25 dot org slash
HTML
viewer.
For you can use any similar site that enables
you to check your HTML. Code live. There
are more than a few of them out there. As you can see, in
the left column called HTML input.
Face, the profile HTML.
Click run.
And voila.
In the right, column is the public LinkedIn
profile.
As you can see, at least on my LinkedIn profile, you
can get all kinds of information about
me or about your real Target.
Please don't let it be me.
And as just as additional information, I
have to mention regarding another thing
in regard to
LinkedIn. And with searching of LinkedIn. There
are a lot of scraping tools out there. And one
of the great resources web resources for
that is github.com., You
should really check it out.
Now to get back to Arlington, Slide. The
last thing to use as Search tool for LinkedIn is
simple, Google Dorking and that could also
be a gold mine. If you use it properly here.
I have put an example and
I want you to try it out. Use the Google search.
Operator site column. The
example goes side, column linkedin.com
space.
And for the search term, I have put
manager at to Yoda put in quotations. Try
it out and see how it goes.
Now we are going to cover pit bin as
I have mentioned before. Paste bin is a website or
a web service that allows users to share. Plaintext
writings through posts
to website, is mainly used by
programmers, to store pieces of source, code
or configuration information, but anyone
can use this service, the main premise behind
pastebin is to make it more convenient for people
to share a large amounts of text online.
So the first step here is Googled or hiking or the
use of search operators to get the results, you wish from
a site like pastebin. I have put down probably
the simplest one around the example
site column pastebin.com space,
search term login,
put in quotations. And this query
will search for the term login in
the whole pastebin.com site. I
suggest you tweak it to
Oh, the results down when talking about tools,
you can use to scrape the look up
and search for things on paste bin even even
through its paid API or application programming
interface, which is a software intermediary
that allows two applications to talk
to each other. Just to give you an example, API
is each time you use an app like Facebook.
When you send a message, or when you check the
weather on your phone through an application, you are using an API.
Now to tell you why it is, why
did just get complicated with paste bin? As
I Was preparing this video to show you a python script
that scrapes paste bin without the use of
an unpaid API. I have learned that paste
bin has removed, its search functionality as
well as the API and I have to say that the whole osint
Community, got a little sad over it.
It as it was a great threat defense resource.
Search option was really great and no search is
possible anymore, which also stands for
the API. You cannot whitelist any new IPS to
do scraping. Now, you are doomed to
using the paste bins. Twitter bot to check out
for the latest Pace, but I think probably Googled
or King will be the tool that will continue
to exist. At least for some time. This
is a typical example, have Samos and methods and
techniques.
Zeke gets shut down and you have to invent
workarounds to help you with your investigations.
And now for the other social networks and communities, I
will not go into details of each one rather.
I will give you tips on where to start with your
investigations on. The topic. First
is Instagram has since
Instagram is not to put aside because of its ever-growing.
Popularity is to G is
a photo-sharing service that is owned by Facebook since
search engines are my first top when starting any
kind of
Investigation, I would suggest simply doing
Google Dorking or Google hacking. Just
an example. I have again, put
down the site, operator. The thing about
Instagram is that it doesn't have a
search feature on its homepage. So it's not that simple. If
you want to use Instagram search database, you must
connect directly to an account of your interest.
Next is a social network called Snapchat, which
is mobile app. And Snapchat. Cut.
Next is a social network or
SnapChat, which is a mobile application and
Snapchats premise is that by default
any message or video. You send is made available
to the receiver for only a short time. Before it
becomes inaccessible. There is
a cool tool located on the map.
Snapchat.com. And we did you can see snaps
of events breaking news and more from
around the world. I know this sounded like
commercial but this is the official Snapchat description
of the tool.
Then there is a Tumblr. What Tumblr is? I
will read the official description because maybe that
represents its best tumbler. Lets
you effortlessly, share anything, post
text photos quotes, Links music
and videos from your browser, phone desktop,
email or wherever you happen to be. Essentially.
It looks like a microblogging platform
Tumblr, appears to have a
younger user demographics. O it
Is good to keep that in mind and
also Google Dorking is your friend here?
Then tick tock tick, tock is a
mobile app that allows users to create short videos
with various effects and audio content. The
application comes from China, where it got its big
popularity and then spread across the world here.
Also your friend
is Google Dorking and reverse image
look up about which we will talk in
the next session.
Then after that, there is an
online community called Reddit, which is
very similar to some social network. And that
is why I mention it. Here Reddit has
become such a big thing that it's discussions,
reviews. And other content are
even cited on the mainstream media. The site
itself has its search option which you
can use, but I have often found that playing
around with the URLs, gave me better results.
It's than the search box. Also a great approach
is to post something of interest for your investigation
on Reddit and you will probably get the
get an answer in a matter of minutes. Lastly.
I would mention dating websites
as an information resource. And of course, then
there is one of the biggest ones basically
Tinder is a service that connects you with people located
in your geographical vicinity. Some
people call it, a dating app. Some who
Bap, but the fact is that is that
it is very popular and you can also use it
to help you in your office investigations. I will not go
here in detail how to search and use it just to give
you an idea or an angle from which you can start your potential
investigations.
And now maybe you remember at the beginning of this section. I
have mentioned that sock puppets is one
of my favorite single tag teams in open source intelligence and
in the next video that is dedicated to
sock puppets are going to tell you all about it.
So, see you there.