[Mr. Robot]

So just a simple tutorial guys for viewing meta data/exif data left in images when uploaded.
Sites like imgur remove the information so for this tutorial we are using HF search and we are searching "photobucket"


Then we change the search to Last Post [desc] and look for a closed member to try this out on as we don't want to harass/annoy any users but if you do come across an active user while trying this, I advise you to PM them and let them know.

Site we will be using
http://regex.info/exif.cgi

We will use this thread
https://hackforums.net/showthread.php?ti...hotobucket

With this photobucket picture
http://s1130.photobucket.com/user/DarkWo...8.jpg.html

Using the exif tool we can see that the picture was taken with a "Canon PowerShot SX30"

Spoiler (Click to View)

On other images we can find information such as iphone - we can see gps locations in your image properties on windows or if embedded properly, will only be visible using an exif viewer.




Another thing we can do if we find images made in photoshop is actually find the users name on their computer and the location the file was worked on in such as c:\users\username\documents\photoshop\example\

This can be handy in doxing.

Last note on the photobucket thing, anyone who generally uploads to photobucket on HF should be careful as it can lead to other usernames you have used in the past.


(I have been too busy working on something else at the moment to make better tutorials than this basic shit but hope it helps someone out)


One advantage some sites have over imgur is the fact you can manipulate the data you share before uploading - such as hiding secret messages and files inside the pictures.

Here's a great example site of people who generally have gps on when taking pics
http://www.ippawards.com/2016-photograph...-the-year/

We can also see some of those pictures have been edited in adobe lightroom. Hmm whats with that guys?
http://ippcdn2.ippawards.com/wp-content/...Winner.jpg

[xthanos]

What the fuck? That's so dope. I saw something like this in a movie. Damn you know your shit

[minimalist]

I've heard of people spoofing their EXIF data instead of wiping it completely to throw you doxers off. Good write-up nonetheless.

[Mr. Robot]

What the fuck? That's so dope. I saw something like this in a movie. Damn you know your shit

It's very simple stuff and I will get more into it later on but it can be very handy - especially now that people are using gps on pokemon go for everything.
If the metadata isn't removed, you can get their gps locations from the image(unless they specifically set it up so camera can't access their locale)

---

I've heard of people spoofing their EXIF data instead of wiping it completely to throw you doxers off. Good write-up nonetheless.

Absolutely, that's something I believe in completely and I have even bought photobucket accounts of users in the past and even asked them to host images for me.

[Lante]

I know for a fact that many services nowadays remove EXIF data upon uploading images, what could be nice to add to this thread is which sites do NOT strip off EXIF data so people who read this tutorial know where to look for 'vulnerable images' so to say. Facebook and Twitter remove it for example, a list of websites where it's useless to try might also increase the value of this thread ;)

[Mr. Robot]

I know for a fact that many services nowadays remove EXIF data upon uploading images, what could be nice to add to this thread is which sites do NOT strip off EXIF data so people who read this tutorial know where to look for 'vulnerable images' so to say. Facebook and Twitter remove it for example, a list of websites where it's useless to try might also increase the value of this thread ;)

Oh for sure, but I haven't checked all the services myself - I will have to go through some email services and check as well as kik and shit as that could be handy to know.

[skelly76]

dishing out tutorials all day

[Mr. Robot]

dishing out tutorials all day

Just feel like putting some stuff out there that people might not know, could help them.

[Mr. Robot]

People should really be using this and protecting themselves.

[Smart Swag]

nice tutorial
thanks for sharing.