Image OSINT

Reverse Image Searching

Google Imagesimages.google.com

Google images can be utilized to perform a reverse image search. Simply drag and drop an image into the search to find other instances and similar images to the one uploaded.

Google search operators can be used inline with the image search to further modify the results. For example related URLs can be redacted "-www -twitter.com -reddit.com"

TinEye can also be used for reverse image searching. TinEye can also be used with filters and by website / collection filter.

https://tineye.com/

Resources

Google Image Search: https://images.google.com

Yandex: https://yandex.com

TinEye: https://tineye.com

Exif Data

Exiftool

URL: https://github.com/exiftool/exiftool

exiftool <File>

Jeffrey's Image Metadata Viewer

Jeffrey's Image Metadata Viewer, a web based tool can be used to view EXIF information from images. This tool can be used to view information such as what device a picture was taken on and at what time and where.

The same tool links the GPS coordinates from images directly to Google maps so we can see exactly where the image was taken. For investigations the location and time information can be correlated with local CCTV to identify who may have taken the images.

Many websites such as Twitter and Facebook will remove many parts of EXIF data from uploaded images in order to help protect end users. An example would be GPS information which could be used by criminals, on social media platforms to identify where a particular person may live.

Resources

Online EXIF: http://exif.regex.info/exif.cgi

Sample Images: https://github.com/ianare/exif-samples