8/12/2019 On OSINT and the trade

1/27

a civilian approach to fight cyberwar

introducing

OSINT

8/12/2019 On OSINT and the trade

2/27

Founder, ClubHack

Mentor, ClubHack Magazine

Awarded as Microsoft Most

Valuable Professional 2012 inEnterprise Security.

Advisor eGov - Science &

Technology park, DSTEx- Head of Technology,Commonwealth Game(s)

Shameless Self Promotion

8/12/2019 On OSINT and the trade

3/27

rohit11

8/12/2019 On OSINT and the trade

4/27

Agenda for next 30min

Remember, it can save a lot of pain in future

What is

OSINT

Tools & Tricks Case Study

8/12/2019 On OSINT and the trade

5/27

Open Source Intelligence

Nothing to do with Open Source Software though

8/12/2019 On OSINT and the trade

6/27

OSINT: Open Source INTelligence

Is an information processing

discipline that involves finding,selecting, and acquiringinformation from publicly available

sources and analyzing it to produceactionable intelligence.

What is it?

8/12/2019 On OSINT and the trade

7/27

A l o t o

f i n

f o r m a t i o n o u t t h e r e

8/12/2019 On OSINT and the trade

8/27

S o u r c e s

Too much information everywhere !

8/12/2019 On OSINT and the trade

9/27

Cable Gating is not OSINT, its crime.

But wiki leaks is a OS info :D

Never Cross boundaries

8/12/2019 On OSINT and the trade

10/27

Tools & Tricks

Again not a rocket science

8/12/2019 On OSINT and the trade

11/27

T o o l s

Maltego

8/12/2019 On OSINT and the trade

12/27

T o o l s

LeakedIn

The primary purpose of leakedin.com isto make visitors aware about the risks ofloosing data.

This blog just compiles samples of datalost or disclosed on sites likepastebin.com.

8/12/2019 On OSINT and the trade

13/27

T o o l s

LeakedIn

8/12/2019 On OSINT and the trade

14/27

T o o l s

AnonPaste Monitor

8/12/2019 On OSINT and the trade

15/27

8/12/2019 On OSINT and the trade

16/27

T o o l s

Facebook Monitoring

8/12/2019 On OSINT and the trade

17/27

8/12/2019 On OSINT and the trade

18/27

T o o l s

More Tools

Metadata :

Foca , metagoofil ,exiftool

Online sites :

Shodanhq,Serversniff, netcraft, centralops,

FF extensions :

wappalyzer,Passive recon, Our Own Mantra

8/12/2019 On OSINT and the trade

19/27

8/12/2019 On OSINT and the trade

20/27

8/12/2019 On OSINT and the trade

21/27

T o o l s

Nostradamus Nostradamus A complete, powerful analytical tool

Analysis of Relationships, Graphical visualization of Relationships

Detection of Direct and Hidden networks, patterns, trends

GIS Analysis, Space-Time Analysis

Telephone Call Analysis, Contacts Analysis

GIS enabled Analysis; Movement & Location Analysis

Crime Pattern Analysis, Proactive Analysis

Multi-lingual Phonetic & Semantic Search & Query

Intelligence Accumulation

Completely web-based; includes online & real-time capabilities

Automated data capture. IP, GPRS, SMS enabled

Structured information access privileges

Client side Platform independent. No special requirement w.r.t. theUser PC

Efficient operations even with low communication capabilities

8/12/2019 On OSINT and the trade

22/27

T o o l s

Nostradamus Nostradamus Criminal Intelligence Analytical System

8/12/2019 On OSINT and the trade

23/27

Case Study

Lord of Dharamaraja

8/12/2019 On OSINT and the trade

24/27

L o r d s o f D

h a r m a r a j a

8/12/2019 On OSINT and the trade

25/27

L o r d s o f D

h a r m a r a j a

8/12/2019 On OSINT and the trade

26/27

If we have the will...

8/12/2019 On OSINT and the trade

27/27

Thanks

rohit@clubhack.com+91-92-CLUBHACK