+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Finding information about pictures - simple tutorial (/showthread.php?tid=5372217)
Finding information about pictures - simple tutorial - Mr. Robot - Aug 12, 2016
So just a simple tutorial guys for viewing meta data/exif data left in images when uploaded.
Sites like imgur remove the information so for this tutorial we are using HF search and we are searching "photobucket"
Then we change the search to Last Post [desc] and look for a closed member to try this out on as we don't want to harass/annoy any users but if you do come across an active user while trying this, I advise you to PM them and let them know.
Site we will be using
http://regex.info/exif.cgi
We will use this thread
https://hackforums.net/showthread.php?tid=2815266&highlight=photobucket
With this photobucket picture
http://s1130.photobucket.com/user/DarkWorm/media/IMG_2468.jpg.html
Using the exif tool we can see that the picture was taken with a "Canon PowerShot SX30"
Spoiler (Click to View)
![[Image: dxHEFpA.jpg]](https://i.imgur.com/dxHEFpA.jpg)
On other images we can find information such as iphone - we can see gps locations in your image properties on windows or if embedded properly, will only be visible using an exif viewer.
![[Image: E3Yv9jG.jpg]](https://i.imgur.com/E3Yv9jG.jpg)
Another thing we can do if we find images made in photoshop is actually find the users name on their computer and the location the file was worked on in such as c:\users\username\documents\photoshop\example\
This can be handy in doxing.
Last note on the photobucket thing, anyone who generally uploads to photobucket on HF should be careful as it can lead to other usernames you have used in the past.
(I have been too busy working on something else at the moment to make better tutorials than this basic shit but hope it helps someone out)
One advantage some sites have over imgur is the fact you can manipulate the data you share before uploading - such as hiding secret messages and files inside the pictures.
Here's a great example site of people who generally have gps on when taking pics
http://www.ippawards.com/2016-photographers-of-the-year/
We can also see some of those pictures have been edited in adobe lightroom. Hmm whats with that guys?
http://ippcdn2.ippawards.com/wp-content/uploads/2016/07/001-Siyuan-Niu-Grand-Prize-Winner.jpg
![[Image: jr7lFMZ.jpg]](https://i.imgur.com/jr7lFMZ.jpg)
![[Image: KoptEcG.jpg]](https://i.imgur.com/KoptEcG.jpg)
* - xthanos - Aug 12, 2016
What the fuck? That's so dope. I saw something like this in a movie. Damn you know your shit
* - minimalist - Aug 12, 2016
I've heard of people spoofing their EXIF data instead of wiping it completely to throw you doxers off. Good write-up nonetheless.
* - Mr. Robot - Aug 12, 2016
(Aug 12, 2016 05:16 AM)Lεgend Wrote: What the fuck? That's so dope. I saw something like this in a movie. Damn you know your shit
It's very simple stuff and I will get more into it later on but it can be very handy - especially now that people are using gps on pokemon go for everything.
If the metadata isn't removed, you can get their gps locations from the image(unless they specifically set it up so camera can't access their locale)
(Aug 12, 2016 05:18 AM)Minimalist Wrote: I've heard of people spoofing their EXIF data instead of wiping it completely to throw you doxers off. Good write-up nonetheless.
Absolutely, that's something I believe in completely and I have even bought photobucket accounts of users in the past and even asked them to host images for me.
* - Lante - Aug 12, 2016
I know for a fact that many services nowadays remove EXIF data upon uploading images, what could be nice to add to this thread is which sites do NOT strip off EXIF data so people who read this tutorial know where to look for 'vulnerable images' so to say. Facebook and Twitter remove it for example, a list of websites where it's useless to try might also increase the value of this thread ;)
* - Mr. Robot - Aug 12, 2016
(Aug 12, 2016 06:10 AM)Lante Wrote: I know for a fact that many services nowadays remove EXIF data upon uploading images, what could be nice to add to this thread is which sites do NOT strip off EXIF data so people who read this tutorial know where to look for 'vulnerable images' so to say. Facebook and Twitter remove it for example, a list of websites where it's useless to try might also increase the value of this thread ;)
Oh for sure, but I haven't checked all the services myself - I will have to go through some email services and check as well as kik and shit as that could be handy to know.
* - skelly76 - Aug 12, 2016
dishing out tutorials all day
* - Mr. Robot - Aug 12, 2016
(Aug 12, 2016 06:18 AM)Aerial Wrote: dishing out tutorials all day
Just feel like putting some stuff out there that people might not know, could help them.
RE: Finding information about pictures - simple tutorial - Mr. Robot - Jun 8, 2018
People should really be using this and protecting themselves.
RE: Finding information about pictures - simple tutorial - Smart Swag - Jun 8, 2018
nice tutorial
thanks for sharing.