WEBVTT - This file was automatically generated by VIMEO 1 00:00:06.300 --> 00:00:09.700 Hello, and welcome back after the big social networks 2 00:00:09.700 --> 00:00:12.600 overview. I would like to cover some of my favorite 3 00:00:12.600 --> 00:00:16.300 osint resources. When doing investigations. We 4 00:00:16.300 --> 00:00:19.500 will talk about the most popular business, social network 5 00:00:19.500 --> 00:00:22.200 out there called LinkedIn after that. We 6 00:00:22.200 --> 00:00:25.600 will discuss paste bin, which is a website or rather 7 00:00:25.600 --> 00:00:28.400 a web service that allows users to share 8 00:00:28.400 --> 00:00:30.000 plaintext writings through. 9 00:00:30.200 --> 00:00:33.700 Posts and I'll show you why the osint community also 10 00:00:33.700 --> 00:00:36.600 loves it or from Recently not 11 00:00:36.600 --> 00:00:39.200 So Much Anymore. And finally, I will 12 00:00:39.200 --> 00:00:43.100 go over a couple of social networks with suggestions how 13 00:00:42.100 --> 00:00:45.600 to conduct your search activities on 14 00:00:45.600 --> 00:00:48.900 them. Okay, if you're not 15 00:00:48.900 --> 00:00:51.100 familiar with LinkedIn then I will tell you 16 00:00:51.100 --> 00:00:54.500 what it is. It is a social network dedicated to 17 00:00:54.500 --> 00:00:57.300 Business and Professional interactions. A 18 00:00:57.300 --> 00:01:00.000 user has a profile similar to his resume. 19 00:01:00.100 --> 00:01:03.800 May where they present their skills employment history, maybe 20 00:01:03.800 --> 00:01:06.600 some projects projects they worked on 21 00:01:06.600 --> 00:01:09.400 and similar things. Companies can also have 22 00:01:09.400 --> 00:01:12.300 their profile pages and that is also an 23 00:01:12.300 --> 00:01:16.000 open source intelligence gold mine because usually 24 00:01:15.600 --> 00:01:18.300 companies have a list of employees that 25 00:01:18.300 --> 00:01:21.200 have LinkedIn profiles Associated to 26 00:01:21.200 --> 00:01:25.400 their pages. And that is very great currently, 27 00:01:24.700 --> 00:01:27.800 and we are in the middle of 2020. 28 00:01:27.800 --> 00:01:29.500 Now LinkedIn has over. 29 00:01:30.200 --> 00:01:33.200 We're dead 50 million members, that is a 30 00:01:33.200 --> 00:01:36.500 lot of business. And just as a fun fact, or 31 00:01:36.500 --> 00:01:39.900 side note, LinkedIn is owned by Microsoft and 32 00:01:39.900 --> 00:01:43.300 Microsoft bought LinkedIn in 2016 for 33 00:01:42.500 --> 00:01:45.300 twenty six point two 34 00:01:45.300 --> 00:01:49.100 billion dollars paid in cash. Now 35 00:01:48.100 --> 00:01:51.600 that we made a quick overview of the platform. Let's 36 00:01:51.600 --> 00:01:54.600 talk about how can we search through Linkedin? 37 00:01:54.900 --> 00:01:57.600 If you do not have a profile, then you're pretty much 38 00:01:57.600 --> 00:02:00.000 convicted to Google and some other methods. 39 00:02:00.100 --> 00:02:03.200 It's, which may or may not work. Since LinkedIn is 40 00:02:03.200 --> 00:02:06.500 always evolving to protect its members. As 41 00:02:06.500 --> 00:02:09.600 our LinkedIn member active LinkedIn member member. You 42 00:02:09.600 --> 00:02:12.800 have the ability to control your privacy and 43 00:02:12.800 --> 00:02:15.600 how will your profile look to the public? So 44 00:02:15.600 --> 00:02:18.500 that is also a thing to consider. LinkedIn 45 00:02:18.500 --> 00:02:21.400 has a search box where you can search for 46 00:02:21.400 --> 00:02:24.600 profiles companies and posts. Currently, the 47 00:02:24.600 --> 00:02:27.400 search box, when logged in allows you to use 48 00:02:27.400 --> 00:02:29.700 some advanced search operators, like 49 00:02:30.200 --> 00:02:33.700 40 are to include one or more terms together 50 00:02:33.400 --> 00:02:36.300 than the operator not. And 51 00:02:36.300 --> 00:02:39.000 ot to include exclude, a 52 00:02:39.600 --> 00:02:42.400 particular term, then the use of quotations to 53 00:02:42.400 --> 00:02:46.200 look up for exact search words and parentheses to 54 00:02:46.200 --> 00:02:49.200 combine Search terms. As I have 55 00:02:49.200 --> 00:02:52.200 previously mentioned LinkedIn does not allow for 56 00:02:52.200 --> 00:02:55.300 you to preview someone's profile without logging in. 57 00:02:55.900 --> 00:02:58.600 But currently you can use an open source 58 00:02:58.600 --> 00:03:00.000 intelligence technique which 59 00:03:00.100 --> 00:03:04.000 Which I would like to share with you. Also. Just a side note. One 60 00:03:03.200 --> 00:03:06.800 of main LinkedIn features is whenever 61 00:03:06.800 --> 00:03:10.100 you visit or view someone's profile. You 62 00:03:09.100 --> 00:03:12.400 visit your visit gets 63 00:03:12.400 --> 00:03:15.200 recorded and the profile you visited will 64 00:03:15.200 --> 00:03:18.300 get notified about it. Here. We are in 65 00:03:18.300 --> 00:03:21.400 our private browser yet. Again, we 66 00:03:21.400 --> 00:03:24.700 need to access the profile link via our search engine. 67 00:03:24.200 --> 00:03:28.500 I will use my favorite search engine start 68 00:03:27.500 --> 00:03:29.200 page.com. 69 00:03:31.100 --> 00:03:34.900 And I will use my own LinkedIn profile as an example. So 70 00:03:34.900 --> 00:03:36.100 go to start page. 71 00:03:37.100 --> 00:03:38.000 search for 72 00:03:39.100 --> 00:03:44.000 Tino socage, or socket in English LinkedIn. 73 00:03:48.500 --> 00:03:51.700 As you can see, it is almost the 74 00:03:51.700 --> 00:03:53.100 first result. 75 00:03:55.200 --> 00:03:59.200 Usually LinkedIn doesn't allow you to see even the public profiles 76 00:03:58.400 --> 00:04:01.500 of a person without signing in 77 00:04:01.800 --> 00:04:04.600 or by having an account. So to 78 00:04:04.600 --> 00:04:07.700 kind of help yourself and see that profile, copy 79 00:04:07.700 --> 00:04:10.300 the profile link right? Click. 80 00:04:11.500 --> 00:04:12.500 Copy the link. 81 00:04:14.500 --> 00:04:17.800 And go to the Google's mobile friendly tester site. 82 00:04:19.600 --> 00:04:24.700 That is located on the Search. Google.com 83 00:04:23.900 --> 00:04:26.900 slash test / 84 00:04:26.900 --> 00:04:28.900 mobile friendly. 85 00:04:32.200 --> 00:04:35.400 And paste that previously copied LinkedIn 86 00:04:35.400 --> 00:04:37.200 profile link. 87 00:04:42.500 --> 00:04:43.800 And test the URL. 88 00:04:50.300 --> 00:04:52.200 Do a checkup if needed. 89 00:05:00.200 --> 00:05:03.200 Now, it's fetching the data. 90 00:05:09.100 --> 00:05:09.600 Okay. 91 00:05:10.900 --> 00:05:12.800 Now, as a final step. 92 00:05:15.500 --> 00:05:18.500 Take the HTML code on 93 00:05:18.500 --> 00:05:22.600 the right, copy 94 00:05:22.600 --> 00:05:25.100 it entirely to the clipboard. 95 00:05:28.500 --> 00:05:29.300 Go to. 96 00:05:31.200 --> 00:05:33.300 The HTML viewer site. 97 00:05:34.800 --> 00:05:37.600 That is located on the code. 98 00:05:41.700 --> 00:05:46.000 25 dot org slash 99 00:05:44.000 --> 00:05:48.100 HTML 100 00:05:47.300 --> 00:05:49.000 viewer. 101 00:05:54.800 --> 00:05:57.400 For you can use any similar site that enables 102 00:05:57.400 --> 00:06:01.300 you to check your HTML. Code live. There 103 00:06:01.300 --> 00:06:04.400 are more than a few of them out there. As you can see, in 104 00:06:04.400 --> 00:06:07.400 the left column called HTML input. 105 00:06:08.700 --> 00:06:10.600 Face, the profile HTML. 106 00:06:17.900 --> 00:06:18.800 Click run. 107 00:06:20.500 --> 00:06:21.200 And voila. 108 00:06:23.100 --> 00:06:26.500 In the right, column is the public LinkedIn 109 00:06:26.500 --> 00:06:27.300 profile. 110 00:06:28.800 --> 00:06:31.800 As you can see, at least on my LinkedIn profile, you 111 00:06:31.800 --> 00:06:34.400 can get all kinds of information about 112 00:06:34.400 --> 00:06:37.400 me or about your real Target. 113 00:06:39.400 --> 00:06:40.300 Please don't let it be me. 114 00:06:52.100 --> 00:06:56.800 And as just as additional information, I 115 00:06:56.800 --> 00:07:00.200 have to mention regarding another thing 116 00:06:59.300 --> 00:07:02.100 in regard to 117 00:07:02.100 --> 00:07:05.800 LinkedIn. And with searching of LinkedIn. There 118 00:07:05.800 --> 00:07:08.400 are a lot of scraping tools out there. And one 119 00:07:08.400 --> 00:07:11.400 of the great resources web resources for 120 00:07:11.400 --> 00:07:14.500 that is github.com., You 121 00:07:14.500 --> 00:07:15.700 should really check it out. 122 00:07:19.900 --> 00:07:22.200 Now to get back to Arlington, Slide. The 123 00:07:22.200 --> 00:07:25.500 last thing to use as Search tool for LinkedIn is 124 00:07:25.500 --> 00:07:28.400 simple, Google Dorking and that could also 125 00:07:28.400 --> 00:07:32.000 be a gold mine. If you use it properly here. 126 00:07:31.200 --> 00:07:34.400 I have put an example and 127 00:07:34.400 --> 00:07:37.500 I want you to try it out. Use the Google search. 128 00:07:37.500 --> 00:07:40.300 Operator site column. The 129 00:07:40.300 --> 00:07:44.400 example goes side, column linkedin.com 130 00:07:43.600 --> 00:07:45.400 space. 131 00:07:46.700 --> 00:07:49.400 And for the search term, I have put 132 00:07:49.400 --> 00:07:53.600 manager at to Yoda put in quotations. Try 133 00:07:53.600 --> 00:07:55.100 it out and see how it goes. 134 00:07:59.600 --> 00:08:02.300 Now we are going to cover pit bin as 135 00:08:02.300 --> 00:08:05.400 I have mentioned before. Paste bin is a website or 136 00:08:05.400 --> 00:08:09.300 a web service that allows users to share. Plaintext 137 00:08:08.500 --> 00:08:11.600 writings through posts 138 00:08:11.300 --> 00:08:14.400 to website, is mainly used by 139 00:08:14.400 --> 00:08:17.700 programmers, to store pieces of source, code 140 00:08:17.700 --> 00:08:20.300 or configuration information, but anyone 141 00:08:20.300 --> 00:08:23.400 can use this service, the main premise behind 142 00:08:23.400 --> 00:08:26.500 pastebin is to make it more convenient for people 143 00:08:26.500 --> 00:08:29.100 to share a large amounts of text online. 144 00:08:30.100 --> 00:08:33.300 So the first step here is Googled or hiking or the 145 00:08:33.300 --> 00:08:36.400 use of search operators to get the results, you wish from 146 00:08:36.400 --> 00:08:39.700 a site like pastebin. I have put down probably 147 00:08:39.700 --> 00:08:42.800 the simplest one around the example 148 00:08:42.400 --> 00:08:46.500 site column pastebin.com space, 149 00:08:45.300 --> 00:08:48.900 search term login, 150 00:08:48.300 --> 00:08:51.600 put in quotations. And this query 151 00:08:51.700 --> 00:08:54.100 will search for the term login in 152 00:08:54.100 --> 00:08:57.400 the whole pastebin.com site. I 153 00:08:57.400 --> 00:08:59.300 suggest you tweak it to 154 00:08:59.400 --> 00:09:02.800 Oh, the results down when talking about tools, 155 00:09:02.800 --> 00:09:05.400 you can use to scrape the look up 156 00:09:05.400 --> 00:09:08.500 and search for things on paste bin even even 157 00:09:08.500 --> 00:09:12.000 through its paid API or application programming 158 00:09:11.700 --> 00:09:15.300 interface, which is a software intermediary 159 00:09:14.300 --> 00:09:17.400 that allows two applications to talk 160 00:09:17.400 --> 00:09:21.000 to each other. Just to give you an example, API 161 00:09:20.600 --> 00:09:24.000 is each time you use an app like Facebook. 162 00:09:24.900 --> 00:09:27.200 When you send a message, or when you check the 163 00:09:27.200 --> 00:09:30.800 weather on your phone through an application, you are using an API. 164 00:09:30.600 --> 00:09:33.400 Now to tell you why it is, why 165 00:09:33.400 --> 00:09:36.600 did just get complicated with paste bin? As 166 00:09:36.600 --> 00:09:39.600 I Was preparing this video to show you a python script 167 00:09:39.600 --> 00:09:42.300 that scrapes paste bin without the use of 168 00:09:42.300 --> 00:09:45.300 an unpaid API. I have learned that paste 169 00:09:45.300 --> 00:09:48.300 bin has removed, its search functionality as 170 00:09:48.300 --> 00:09:51.700 well as the API and I have to say that the whole osint 171 00:09:51.700 --> 00:09:54.100 Community, got a little sad over it. 172 00:09:54.200 --> 00:09:57.200 It as it was a great threat defense resource. 173 00:09:59.300 --> 00:10:02.400 Search option was really great and no search is 174 00:10:02.400 --> 00:10:05.200 possible anymore, which also stands for 175 00:10:05.200 --> 00:10:08.800 the API. You cannot whitelist any new IPS to 176 00:10:08.800 --> 00:10:11.600 do scraping. Now, you are doomed to 177 00:10:11.600 --> 00:10:14.400 using the paste bins. Twitter bot to check out 178 00:10:14.400 --> 00:10:17.900 for the latest Pace, but I think probably Googled 179 00:10:17.900 --> 00:10:20.700 or King will be the tool that will continue 180 00:10:20.700 --> 00:10:23.400 to exist. At least for some time. This 181 00:10:23.400 --> 00:10:26.900 is a typical example, have Samos and methods and 182 00:10:26.900 --> 00:10:27.400 techniques. 183 00:10:27.500 --> 00:10:30.800 Zeke gets shut down and you have to invent 184 00:10:30.800 --> 00:10:34.000 workarounds to help you with your investigations. 185 00:10:37.200 --> 00:10:41.000 And now for the other social networks and communities, I 186 00:10:40.100 --> 00:10:43.800 will not go into details of each one rather. 187 00:10:43.800 --> 00:10:46.400 I will give you tips on where to start with your 188 00:10:46.400 --> 00:10:50.000 investigations on. The topic. First 189 00:10:49.200 --> 00:10:52.600 is Instagram has since 190 00:10:52.600 --> 00:10:56.100 Instagram is not to put aside because of its ever-growing. 191 00:10:55.100 --> 00:10:58.200 Popularity is to G is 192 00:10:58.200 --> 00:11:02.600 a photo-sharing service that is owned by Facebook since 193 00:11:02.600 --> 00:11:05.400 search engines are my first top when starting any 194 00:11:05.400 --> 00:11:05.700 kind of 195 00:11:05.800 --> 00:11:09.100 Investigation, I would suggest simply doing 196 00:11:08.100 --> 00:11:12.000 Google Dorking or Google hacking. Just 197 00:11:11.700 --> 00:11:14.200 an example. I have again, put 198 00:11:14.200 --> 00:11:17.400 down the site, operator. The thing about 199 00:11:17.400 --> 00:11:20.300 Instagram is that it doesn't have a 200 00:11:20.300 --> 00:11:23.800 search feature on its homepage. So it's not that simple. If 201 00:11:23.800 --> 00:11:26.400 you want to use Instagram search database, you must 202 00:11:26.400 --> 00:11:29.800 connect directly to an account of your interest. 203 00:11:33.700 --> 00:11:36.900 Next is a social network called Snapchat, which 204 00:11:36.900 --> 00:11:42.200 is mobile app. And Snapchat. Cut. 205 00:11:41.100 --> 00:11:44.400 Next is a social network or 206 00:11:44.400 --> 00:11:48.100 SnapChat, which is a mobile application and 207 00:11:47.100 --> 00:11:50.600 Snapchats premise is that by default 208 00:11:50.600 --> 00:11:53.600 any message or video. You send is made available 209 00:11:53.600 --> 00:11:56.400 to the receiver for only a short time. Before it 210 00:11:56.400 --> 00:11:59.200 becomes inaccessible. There is 211 00:11:59.200 --> 00:12:02.900 a cool tool located on the map. 212 00:12:04.100 --> 00:12:07.700 Snapchat.com. And we did you can see snaps 213 00:12:07.700 --> 00:12:10.500 of events breaking news and more from 214 00:12:10.500 --> 00:12:13.700 around the world. I know this sounded like 215 00:12:13.700 --> 00:12:16.800 commercial but this is the official Snapchat description 216 00:12:16.800 --> 00:12:17.400 of the tool. 217 00:12:19.200 --> 00:12:22.300 Then there is a Tumblr. What Tumblr is? I 218 00:12:22.300 --> 00:12:25.300 will read the official description because maybe that 219 00:12:25.300 --> 00:12:28.700 represents its best tumbler. Lets 220 00:12:28.700 --> 00:12:32.000 you effortlessly, share anything, post 221 00:12:31.500 --> 00:12:35.100 text photos quotes, Links music 222 00:12:34.100 --> 00:12:37.600 and videos from your browser, phone desktop, 223 00:12:37.600 --> 00:12:41.500 email or wherever you happen to be. Essentially. 224 00:12:40.500 --> 00:12:44.300 It looks like a microblogging platform 225 00:12:43.500 --> 00:12:46.400 Tumblr, appears to have a 226 00:12:46.400 --> 00:12:48.600 younger user demographics. O it 227 00:12:48.800 --> 00:12:51.700 Is good to keep that in mind and 228 00:12:51.700 --> 00:12:54.100 also Google Dorking is your friend here? 229 00:12:55.900 --> 00:12:58.100 Then tick tock tick, tock is a 230 00:12:58.100 --> 00:13:01.600 mobile app that allows users to create short videos 231 00:13:01.600 --> 00:13:05.300 with various effects and audio content. The 232 00:13:05.300 --> 00:13:08.600 application comes from China, where it got its big 233 00:13:08.600 --> 00:13:12.500 popularity and then spread across the world here. 234 00:13:11.900 --> 00:13:14.600 Also your friend 235 00:13:14.600 --> 00:13:17.800 is Google Dorking and reverse image 236 00:13:17.800 --> 00:13:20.200 look up about which we will talk in 237 00:13:20.200 --> 00:13:21.200 the next session. 238 00:13:21.600 --> 00:13:24.200 Then after that, there is an 239 00:13:24.200 --> 00:13:27.200 online community called Reddit, which is 240 00:13:27.200 --> 00:13:30.800 very similar to some social network. And that 241 00:13:30.800 --> 00:13:34.000 is why I mention it. Here Reddit has 242 00:13:33.500 --> 00:13:37.200 become such a big thing that it's discussions, 243 00:13:36.200 --> 00:13:39.300 reviews. And other content are 244 00:13:39.300 --> 00:13:43.000 even cited on the mainstream media. The site 245 00:13:42.300 --> 00:13:45.300 itself has its search option which you 246 00:13:45.300 --> 00:13:48.500 can use, but I have often found that playing 247 00:13:48.500 --> 00:13:51.600 around with the URLs, gave me better results. 248 00:13:51.600 --> 00:13:54.700 It's than the search box. Also a great approach 249 00:13:54.700 --> 00:13:57.900 is to post something of interest for your investigation 250 00:13:57.900 --> 00:14:00.300 on Reddit and you will probably get the 251 00:14:00.400 --> 00:14:05.200 get an answer in a matter of minutes. Lastly. 252 00:14:04.200 --> 00:14:07.700 I would mention dating websites 253 00:14:07.700 --> 00:14:10.500 as an information resource. And of course, then 254 00:14:10.500 --> 00:14:13.800 there is one of the biggest ones basically 255 00:14:13.800 --> 00:14:16.600 Tinder is a service that connects you with people located 256 00:14:16.600 --> 00:14:19.300 in your geographical vicinity. Some 257 00:14:19.300 --> 00:14:21.500 people call it, a dating app. Some who 258 00:14:21.700 --> 00:14:24.400 Bap, but the fact is that is that 259 00:14:24.400 --> 00:14:27.100 it is very popular and you can also use it 260 00:14:27.100 --> 00:14:30.200 to help you in your office investigations. I will not go 261 00:14:30.200 --> 00:14:33.200 here in detail how to search and use it just to give 262 00:14:33.200 --> 00:14:36.600 you an idea or an angle from which you can start your potential 263 00:14:36.600 --> 00:14:37.600 investigations. 264 00:14:39.100 --> 00:14:42.400 And now maybe you remember at the beginning of this section. I 265 00:14:42.400 --> 00:14:45.200 have mentioned that sock puppets is one 266 00:14:45.200 --> 00:14:49.100 of my favorite single tag teams in open source intelligence and 267 00:14:48.100 --> 00:14:51.300 in the next video that is dedicated to 268 00:14:51.300 --> 00:14:53.900 sock puppets are going to tell you all about it. 269 00:14:55.100 --> 00:14:55.800 So, see you there.