1 00:00:00,170 --> 00:00:04,880 The last social media platform that I would like to cover is TikTok. 2 00:00:05,510 --> 00:00:13,910 Now, TikTok has over 1.3 billion users, and it's mainly used to watch TikTok videos or to share videos 3 00:00:13,910 --> 00:00:15,050 to the internet. 4 00:00:15,620 --> 00:00:22,610 Now, as always, the first thing that you want to do with every single social media account is to analyze 5 00:00:22,610 --> 00:00:23,990 the target profile. 6 00:00:24,350 --> 00:00:30,920 You want to find any useful information, for example, if they have a different username on this account, 7 00:00:30,920 --> 00:00:35,030 if they have a different display name, or if there is any link. 8 00:00:35,090 --> 00:00:41,060 Another thing that you want to do is to save the person's profile picture, because we might use it 9 00:00:41,060 --> 00:00:46,670 to search for it in search engines, which we will cover in a future section. 10 00:00:47,210 --> 00:00:55,220 Now, if you want to download a certain TikTok video and you want to extract the metadata or the timestamps, 11 00:00:55,220 --> 00:01:01,370 then you can basically play the video first, and then you want to have a look at the URL and you will 12 00:01:01,370 --> 00:01:06,760 see a video ID which you want, and then you want to convert it to binary, similar to what we have 13 00:01:06,760 --> 00:01:09,130 done in the LinkedIn Osint lecture. 14 00:01:09,130 --> 00:01:15,280 And after you convert this number to binary, you want to copy the first 32 digits and convert it to 15 00:01:15,310 --> 00:01:16,150 decimal. 16 00:01:17,170 --> 00:01:19,780 Now let's say that this is the target profile. 17 00:01:19,810 --> 00:01:23,650 And you would like to see when a certain video were made public. 18 00:01:23,650 --> 00:01:27,820 So let's say that this is the video that I would like to see when it were made public. 19 00:01:27,820 --> 00:01:36,200 So I'm going to click on it and I can look in here and see that it were made public and 2nd of October 20 00:01:36,200 --> 00:01:36,790 2021. 21 00:01:37,450 --> 00:01:43,060 But I would like to know at which time this video were made public. 22 00:01:43,510 --> 00:01:50,980 So in this case, I can just copy the video ID from the URL and then convert it to binary using this 23 00:01:50,980 --> 00:01:53,230 website that we have used before. 24 00:01:53,650 --> 00:01:56,290 So I'm going to say from decimal to binary. 25 00:01:56,290 --> 00:01:58,090 And then I'm going to say convert. 26 00:01:58,090 --> 00:02:01,780 And then I'm going to select this number and then copy it. 27 00:02:01,780 --> 00:02:05,080 And then go to my notepad and paste it in here. 28 00:02:05,380 --> 00:02:10,950 And then I would like to select the first 32 digits, which you see in here. 29 00:02:10,950 --> 00:02:18,150 And then I'm going to say copy and then convert from binary to decimal, and then paste the number or 30 00:02:18,150 --> 00:02:19,950 the first 32 digits. 31 00:02:19,950 --> 00:02:21,330 I'm going to say convert. 32 00:02:21,330 --> 00:02:24,120 And then I'm going to get a Unix timestamp. 33 00:02:24,570 --> 00:02:30,330 I'm going to copy it and then go to this converter that you will find its link in the resources of this 34 00:02:30,330 --> 00:02:30,990 lecture. 35 00:02:30,990 --> 00:02:34,230 And then I'm going to put the number in here and say convert. 36 00:02:34,230 --> 00:02:40,530 And as you can see, this is the time when I posted this video and made it online. 37 00:02:40,560 --> 00:02:45,660 Now let's say that you would like to find when a certain comment were made public. 38 00:02:45,810 --> 00:02:47,370 And this is very similar. 39 00:02:47,400 --> 00:02:52,170 All we have to do is just right mouse click on the comment and then select inspect. 40 00:02:52,830 --> 00:02:55,890 And then go to this arrow and click on it. 41 00:02:56,340 --> 00:02:59,970 And you want to select the complete field where the comment is. 42 00:03:00,000 --> 00:03:01,680 So I'm going to click in here. 43 00:03:01,770 --> 00:03:05,010 And if you looked at the HTML code you will see an ID. 44 00:03:05,400 --> 00:03:08,250 You can copy the ID and do the same. 45 00:03:08,250 --> 00:03:14,180 Convert it to binary and then copy the first 32 digits and convert it to decimal, and then take the 46 00:03:14,180 --> 00:03:17,840 number and convert it to a normal date and time. 47 00:03:17,840 --> 00:03:21,380 But in our case, what I like to do is just to go to this website. 48 00:03:21,380 --> 00:03:23,660 That will make my job much easier. 49 00:03:23,660 --> 00:03:29,630 So all I have to do just to paste the number, it could be the video ID or the comment ID, and then 50 00:03:29,630 --> 00:03:36,050 I can click on unfurl and you can see here we have two timestamps. 51 00:03:36,050 --> 00:03:41,660 And since we are investigating a TikTok account, I'm going to rely on this one. 52 00:03:42,050 --> 00:03:45,290 And we can see the date and time when this comment were made. 53 00:03:45,710 --> 00:03:52,940 I can obviously copy the video URL and put it in here, and it will also show me when this video were 54 00:03:52,940 --> 00:03:53,930 made public. 55 00:03:54,230 --> 00:03:55,430 As you can see here. 56 00:03:56,300 --> 00:03:59,150 Now let's say that we would like to download this video. 57 00:03:59,210 --> 00:04:05,600 So the manual method would be right mouse click in this white space and then select inspect. 58 00:04:06,350 --> 00:04:10,430 And then when I click on this arrow to select a certain element in the page. 59 00:04:10,430 --> 00:04:12,230 And we will select the video. 60 00:04:12,880 --> 00:04:14,860 And then we'll see a URL in here. 61 00:04:14,890 --> 00:04:18,610 Double click on it and then the URL will be selected. 62 00:04:18,640 --> 00:04:20,260 Ctrl C to copy. 63 00:04:20,260 --> 00:04:22,240 And then open a new tab. 64 00:04:22,240 --> 00:04:24,820 And then Ctrl V to paste. 65 00:04:25,240 --> 00:04:26,920 And then I'm going to say enter. 66 00:04:26,920 --> 00:04:32,500 And now I have the video right mouse click save video as. 67 00:04:32,590 --> 00:04:35,530 And then I can save it on my desktop. 68 00:04:36,700 --> 00:04:37,990 So let me play it. 69 00:04:39,100 --> 00:04:46,780 As you can see let's say that we would like to copy or find the link of all of these videos. 70 00:04:46,780 --> 00:04:53,110 So what I always like to do is right mouse click inspect and then go to network. 71 00:04:53,410 --> 00:04:55,540 And then I'm going to select media. 72 00:04:55,690 --> 00:04:59,020 And then I'm going to hover over all the videos. 73 00:04:59,020 --> 00:05:01,180 And then we will find the links in here. 74 00:05:01,540 --> 00:05:02,770 I'm going to do this. 75 00:05:03,250 --> 00:05:09,700 And you can see that now we are getting all the links of these videos. 76 00:05:09,700 --> 00:05:13,540 So let me for example double click on a certain link. 77 00:05:13,540 --> 00:05:16,150 Let's say this one double mouse click. 78 00:05:16,170 --> 00:05:22,800 This will open a new tab and I can immediately right mouse click and then save the video as and I can 79 00:05:22,830 --> 00:05:24,210 save it on my desktop. 80 00:05:24,450 --> 00:05:29,880 Now let's say that you don't like to use this manual method, and you would like to use a certain service 81 00:05:29,880 --> 00:05:33,600 for free to download all of the user TikTok videos. 82 00:05:33,600 --> 00:05:38,400 So all you have to do is just to go to a website called ticker CC, that I'll put its link into the 83 00:05:38,400 --> 00:05:44,790 resources of this video, and then I'm going to type the username of the TikTok profile and then say 84 00:05:44,790 --> 00:05:45,480 search. 85 00:05:45,480 --> 00:05:50,340 And this will extract all the videos from the target profile. 86 00:05:50,880 --> 00:05:55,740 And all I have to do is just to click in here to download the TikTok video. 87 00:05:55,740 --> 00:05:57,930 And now I have it on my desktop. 88 00:05:58,980 --> 00:06:06,510 Now, the reason why I'm showing you how to download a TikTok video manually is because in case this 89 00:06:06,510 --> 00:06:11,550 website got shut down, you'll still be able to download any TikTok video. 90 00:06:12,330 --> 00:06:18,990 The last thing that I would like to show you is how you can extract the metadata from any TikTok account. 91 00:06:19,010 --> 00:06:22,850 Now these are information that are not publicly displayed when you visit. 92 00:06:22,880 --> 00:06:28,070 A TikTok account and they are embedded within the source code of the page. 93 00:06:28,430 --> 00:06:33,170 So what we are going to do is just to extract this metadata and see what. 94 00:06:33,200 --> 00:06:34,700 Information we can get. 95 00:06:34,790 --> 00:06:39,350 Now let's say that I would like to extract the metadata of this TikTok account. 96 00:06:39,350 --> 00:06:43,070 So all I have to do is just right mouse click inspect. 97 00:06:43,190 --> 00:06:45,740 And here is the HTML code of this page. 98 00:06:45,950 --> 00:06:47,660 I want to scroll down a little bit. 99 00:06:47,660 --> 00:06:52,280 And here I'll see a script called Universal Data for rehydration. 100 00:06:52,400 --> 00:06:54,230 I'm going to click on this arrow. 101 00:06:54,320 --> 00:06:56,360 And here are the metadata. 102 00:06:56,870 --> 00:06:58,100 Double mouse click. 103 00:06:58,370 --> 00:07:00,470 And then I'm going to say copy. 104 00:07:01,100 --> 00:07:03,470 And then I'm going to open my notepad. 105 00:07:03,500 --> 00:07:07,790 Let me open a new file and paste the metadata in here. 106 00:07:07,790 --> 00:07:10,700 And then I'm going to save the file on my desktop. 107 00:07:11,540 --> 00:07:13,580 And I'm going to call it Z security. 108 00:07:14,270 --> 00:07:17,540 And then I'm going to change the file extension to JSON. 109 00:07:18,320 --> 00:07:19,790 And then I'll say save. 110 00:07:20,120 --> 00:07:21,890 Now let me open the file. 111 00:07:21,890 --> 00:07:27,610 It's on my desktop where it is, and I can open it with my Firefox or with my Chrome. 112 00:07:27,940 --> 00:07:31,420 So I'm going to open it with Firefox, with double mouse click. 113 00:07:31,480 --> 00:07:33,610 And then I'm going to say expand all. 114 00:07:34,210 --> 00:07:38,170 And as you can see here are the metadata of this account. 115 00:07:38,200 --> 00:07:40,750 What's really important is to scroll all the way down. 116 00:07:40,750 --> 00:07:45,400 You can see how much information there are there are in here which are not all important. 117 00:07:45,400 --> 00:07:50,110 And you will see at the bottom the number of the followers and the language. 118 00:07:50,140 --> 00:07:53,890 And you'll also see the region which I think is very important. 119 00:07:53,950 --> 00:07:56,080 Now I is for Ireland. 120 00:07:56,080 --> 00:08:02,680 So I'm going to say my country and you can see that I is for Ireland. 121 00:08:02,860 --> 00:08:07,900 Now this could be the country where the account has been created or where the videos are being uploaded 122 00:08:07,900 --> 00:08:08,560 from. 123 00:08:08,890 --> 00:08:13,330 Another thing that I would like to show you, which I think is really interesting, is when you go to 124 00:08:13,360 --> 00:08:16,450 the target profile and try to open the profile picture. 125 00:08:16,480 --> 00:08:21,160 So right mouse click Open Image in a new tab, you will find that it's very small. 126 00:08:21,190 --> 00:08:28,170 But if you have the metadata then you can click on this one, which is called Avatar Larger and open 127 00:08:28,170 --> 00:08:33,810 the link and you will see that this image is way better and has higher quality. 128 00:08:34,290 --> 00:08:35,970 Now let's recap. 129 00:08:35,970 --> 00:08:43,560 The first thing you want to do with any social media profile is to have a quick look at the target profile. 130 00:08:43,590 --> 00:08:49,680 See the username display name if it's different from other accounts or not, if there is any links, 131 00:08:49,680 --> 00:08:54,030 or if there is any description that could help us to get further information. 132 00:08:54,030 --> 00:08:59,160 And the second thing is that if there is any certain video that you would like to download and you want 133 00:08:59,190 --> 00:09:05,550 to find its timestamp, then you can extract the video ID, convert it to binary, and then convert 134 00:09:05,550 --> 00:09:11,100 it to Unix number and then convert it to a normal date and time, which might be important if you would 135 00:09:11,100 --> 00:09:17,040 like to present this video as an evidence in a certain court, you have also learned how to download 136 00:09:17,040 --> 00:09:23,250 videos, the manual method and the automatic method, and how to extract the metadata to find information 137 00:09:23,250 --> 00:09:28,530 like the region, or to download a high resolution of the profile picture.