From Photo to Passport Number With Maltego OSINT Tools
Vložit
- čas přidán 26. 06. 2024
- OSINT is an essential tool for any investigator or ethical hacker. Today, we'll start with only a photo of an unknown subject, and string together OSINT tools to locate them on a US sanctions list.
Sign up for our e-mail alerts to stay updated when we go live & register to win free swag: info.varonis.com/securityfwd
Chapters:
0:00 Countdown
0:48 Intro
9:05 Starting With an Image
13:25 Pimeyes Facial Recognition Search
19:00 TinEye Image Search
21:17 Maltego
25:07 Starting Entity and Transforms
29:20 Aleph Search
36:00 Finding the Passport
40:29 Finding Diplomatic Papers
42:21 Closing Thoughts - Věda a technologie
This is awesome. I'm big into OSINT but I've always struggled with Maltego. Subbed. Short of buying a book on it, I think I could learn a lot from you guys
NEED URGENT ASSISTANCE
Uploaded a picture of my dog to PimEyes. Got a lot of pics back of pregnant women diddling themselves and three pics of guys doing the same thing.
Fascinating.
Were u diddling ur dog?
@@Rust_Rust_Rust Dolan Duck, I am but a simple tugboat moonlighting as a cruise ship. I am unable to diddle anything.
omg same, i was like wtf, it was cropped just to the dogs face too
As foreshadowed in Ted 2
Nice to see you again .
As a Mexican, I can unfortunately tell you that the one at minute 36 is not a passport number. It's a CURP, which is sort of a national id number but it's mostly useless on its own. You need it mostly for some government processes like healthcare, etc
OSINT is about finding, collecting and analyzing different types of data to get a bigger look at someone/something. That data is one more thing a bad person could use to their advantage, either for social engineering or otherwise.
@@Kas_Styles did you read what he said so ??
@@Kas_Styles This literally has nothing to do with what he said
@@pabloalfaro2595 there was another comment that I wrote (idk where it went. I know that sometimes Google/CZcams can be annoying with letting perfectly fine comments be hidden or something like that) which was related to the comment above.
@@Kas_Styles r/sheesh
nice stuff. Thanks guys
Super cool video, I'm new to OSINT. Just to correct some information about the info you found. In 36:08 the "passport number" you found actually is the national ID number (C.U.R.P Clave Unica de Registro Poblacional -> Unique Code of Poblational Registry), which is a a mix of letters from the subject's name.
Subject's name anda birth of date
@@user-ht5dr3wc6i a date of birth
Bright!
Great video
Thanks for watching!
excellent
7:44
OMG just start OSINT-ing already
Did you guys ever do a video on security for researchers?
Amazing
wow.. so does maltego tell you where those data leaks originate? if you have a video on more of these kind of tools i'd be interested. looking to get into security related IT jobs.
ah, how to stop microsoft from spying on you was a question raised in the chat.
I recommend you fully delete system32 or any part of it that says "windows" that'll do it.
Cool.
Hah love y guys :D
Inspect element trick no longer works on pimeyes. Guessed they upped their game! Any ideas on how to surpass that now?
Nice
You get more accurate results when you add quotes to the phrase.
Interesting
Aren’t you the brilliant dude that never blinks from Null Byte?
Yup the same guy lol
OSINT!!
Great content. Any chance you guys can cover VPNs?
varonis in latvian means HERO
Maltego is like Supersleuth
the essence of this video could have been boiled down to a 5-10min video
Let's see it
KODI ROCKS!
Thanks for watching!
@@SecurityFWD Anytime!
35 minutes and seeing some great content, but I do have one question releated to the specific example case you are using. Why are you searching just a partial name for the subject and not the full given name? Did I miss that reasoning?
There is no OCCRP Aleph Transform in my CE Maltego?? Is that only available for paid version?
same
Is Maltego basically MS Power BI for shady underworld data?
Maltego just compiles a bunch of ONIST tools into one place
so transform means search a source?
I am from Nayarit, he was the gobernor of this state.
*Stares blankly intensifies*
Are we exposed when we investigate any person or company? Can the person or company we are looking for find us or not?
What is the diff between this and truecallerpy and phoneinfoga
update* they now blur the background so u can no longer reverse search the image on google
Any other alternatives for pimeyes as its paid only now
Tineye
@@luciferMorningstar-ko9qc it's not as advance as Pimeyes but really good alternative.
Where can I find a freelancer who can do this type of work on a contract basis?
Send me inbox
Maltego classic has been discontinued, how can i use aleph then
Congratulations we answered your question in the livestream! czcams.com/video/mM_8cY_G5wA/video.html
My favorite is WMD. makes me laugh.
I'm no hacker, but why not search for the full name? It seems to me that theres gotta be a ton of Roberto Sandovals worlwide.
i'm no hacker either, but people often don't include their middle name online
why do they have german stickers on ther laptops?
Is this still a think?
Do you have an email address pls also. Can you use multego by inputting a mobile number? And can it give you the phone ip and IMEI?
It will not.
I never signed up on many websites and I always dissable the location and I never put too much of my real info and my accounts are privatised.
But you have your real name on your CZcams account?
But you signed up for Google and CZcams.
@@vincenthuaweitien do you think that's my real name? I didn't put any of my real details when I filled up,
What would you do with data that doesn't exist?
@@aldrineuri122It doesn't matter whether you used your real name or fake name.
Google is interested in your ISP, location, region, language, favorite CZcams video, search history, subscribed CZcams channels, chat history, time spent on CZcams, wifi/mobile/landline internet connection, and whether you used a laptop or smartphone to access CZcams, etc.
That's how Google advertisers can custom-made their advertisements for you and for me.
yandex reverse image search is even better
Yandex is owned by what used to be KGB, so no wonder
@@VoltageLP yea its great
Can you help me please 🙏
Not enough stickers on your laptop, mate.
You have to pay for maltego $500!
I know this is going to be odd and can come off as rude cause I can be wrong, but if these two are part of the LGBTQ that's crazy. You never get that kinda representation, I love it.
what makes you think that? i'm not hating; i haven't watched the video yet
edit: i guess the guy on the left sounds a bit gay but i don't know
edit edit: nevermind, he's 100% gay. that's cool
8:25 - *Heavy Breathing* Muhahahahahaha
What do you do with your stickers when you get a new laptop. Suddenly, you have none.
LOLOL!
trace where you got all of them from and get new ones
New laptop? Why??
There kinda feels like there should be a rainbow somewhere in this vid...
I'm the rainbow, happy pride
@@SecurityFWD thought so.
I see people blinking! The video is fake 😂😂😂😂😂😂😂
Get into the trap of doing
My 5 second solution? Ask a mexican
So much fluff in the video
So so so so so......
Y'all talk a lot
Can you make a video on how to hack a phone over wifi. Please.
I want to help ukrane
SecurityFWD These are some pretty serious hacks guys
SecurityFWD try to keep u
SecurityFWD up*
i just shit my self reading that bullshit lmao