OSINT-1 - TryHackMe - Searchlight - IMINT

Important Notes to read

• this blog will contain the most important notes from the first OSINT session explain by sameer fakhoury in the first CTF completion and training in BAU
• these notes are summary for the content in Searchlight - IMINT tryhackme room
• The flag format is: sl{flag} - this means thaPt every answer needs to be submitted within the brackets, sl{your answer}. No capitalization is needed.

Definitions

1. IMINT (Imagery Intelligence): Gathering and analyzing visual information from sources like satellites.
2. GEOINT (Geospatial Intelligence): Integrating geospatial data, including IMINT, to provide insights into the geographic context of intelligence.

• This room will introduce you to several topics within IMINT, among them: 
1. Mindset and Analytical Skills
2. Visual Data Extraction from Images/Videos
3. Tools for Geolocation and Contextual Analysis

Geolocation Challenges steps:

1. Search for clear location clues.
2. Figure out the country/region using driving customs, language, or architecture.
3. Spot road signs, nature, vehicle details for identification.
4. Check road quality (paved or gravel) to gauge infrastructure.
5. Identify distinctive landmarks to pinpoint the location.

• Task 2  Your first challenge!
• What is the name of the street where this image was taken?
1. using google lens - or from the same picture

1. sl{carnaby street}

Google Dorking:

• Google Dorking, also known as Google Hacking, is a technique that utilizes advanced search operators to uncover information on the internet that may not be readily available through standard search queries.
• Here are the 10 most commonly used Google search dorks:
1. site: - Restricts search results to a specific website or domain. Example: site:example.com
2. filetype: - Limits results to specific file types. Example: filetype:pdf
3. intitle: - Searches for keywords in the title of a web page. Example: intitle:openai
4. inurl: - Looks for keywords in the URL of a web page. Example: inurl:blog
5. intext: - Searches for keywords within the body text of a web page. Example: intext:chatbot
6. related: - Displays websites that are similar to a specified domain. Example: related:example.com
7. cache: - Shows the cached version of a webpage as it appeared when Google last indexed it. Example: cache:example.com
8. define: - Provides definitions of a word or phrase. Example: define:artificial intelligence
9. allintitle: - Requires all specified keywords to appear in the title of web pages. Example: allintitle:openai chatbot
10. allinurl: - Requires all specified keywords to appear in the URL of web pages. Example: allinurl:blog post

• Task 3  Just Google it!
• Which city is the tube station located in?
1. using google lens

1. sl{london}
• Which tube station do these stairs lead to?
1. focusing on the image carefully seeing a Circuskeyword

2. so I searched for → Circus London Underground

3. opening some images

1. sl{piccadilly circus}
• Which year did this station open?
1. opening → https://en.wikipedia.org/wiki/Piccadilly_Circus_tube_station#External_links

1. sl{1906}
• How many platforms are there in this station?
1. search for platforms in the same page → CTRL+F

1. sl{4}

• Task 4  Keep at it!
• Which building is this photo taken in?
1. open the image and found some text that may be useful

2. search for YVR CONNECTS

1. sl{vancouver international airport}
• Which country is this building located in?

1. search for the location of the airport

1. sl{canada}

• Which city is this building located in?

1. search for the city

1. sl{richmond}

• Task 5  Coffee and a light lunch
• A friend of mine contacted me asking if I could help them locate a coffee shop that is supposed to serve the best lunch there is. They told me the coffee shop is somewhere in Scotland, and he sent me these two pictures. Do you think you could locate it and answer the questions below for me?

• Which city is this coffee shop located in?
1. opening the coffee shop image and see a the name of the beside shop

2. I have many location in google map so I will search manually

3. open google map VR

4. going to see some near coffee shops


1. location → 1 Allan St, Blairgowrie PH10 6AB, United Kingdom
• Street Address: 1 Allan St
• City/Town: Blairgowrie
• Postal Code: PH10 6AB
• Country: United Kingdom
2. sl{blairgowrie}
• Which street is this coffee shop located in?
1. from the upper question
• sl{allan street}
• What is their phone number?
1. from the upper question
• sl{+447878 839128}
• What is their email address?
1. search for → The Wee Coffee Shop "email”

2. open this link → https://www.tripadvisor.com/Restaurant_Review-g191250-d2519557-Reviews-The_Wee_Coffee_Shop-Blairgowrie_Perth_and_Kinross_Scotland.html

3. going to the website → https://www.facebook.com/weecoffeeshop/about

1. sl{theweecoffeeshop@aol.com}
• What is their email address?
1. search for → The Wee Coffee Shop owners

1. Your surname is your family name
2. sl{cochrane}

browsers for image search

• One of the methods for geolocating an image is to do an image reverse search. This means that we are searching for the image itself online, and if the image has been indexed by search engines we may find the exact image or we can do a visual search or crop search to help us find similar images.
• I recommend adding this extension to ease the workflow for when you find images online that you want to do an image reverse on:

• we use a reverse image searching program → Yandex → Bing → Google
• why Yandexis better than google
• When you reverse image search with Google, Google tries to find the exact match of that image. With Yandex, it's almost as if Yandex knows what your image is of straight away and shows you other images of the same thing to reinforce the idea that it knows.
• Yandex uses AI to reverse image search, whereas it feels like Google is doing a simple "if IMG_0657 = [Position 1 of image database]: return" against all the images it has.

• Task 6  Reverse your thinking
• Which restaurant was this picture taken at?

1. use google lens

1. sl{katz's deli}

• What is the name of the Bon Appétit editor that worked 24 hours at this restaurant?

1. search for → Bon Appétit editor that worked 24 hours "Katz's Delicatessen”

1. sl{andrew knowlton}

• Task 7  Locate this sculpture
• What is the name of this statue?
1. use google image search

1. no benefit
2. search for the term → motorcycle elk sculpture

1. sl{rudolph the chrome nosed reindeer}
• Who took this image?
1. search for → rudolph the chrome nosed reindeer
2. going to → https://www.visitoslo.com/en/articles/outdoor-sculptures-in-oslo/

3. opening the website will have a map will multi locations of sculptures so I’ll try to search manually

1. sl{kjersti stensrud}

• Task 8  ...and justice for all
• What is the name of the character that the statue depicts?
1. I used google image but without any benefit
2. so I searched for → justice sculpture

1. sl{lady justice}
• where is this statue located?
1. from here I will use Yandex

2. going to this picture




3. I will search for → bryan united states courthouse

4. going to google map and search for Albert V. Bryan United States Courthouse → , view using VR

5. searching the location


1. sl{alexandria, virginia}
• What is the name of the building opposite from this statue?
1. going back to the VR location we will see the opposite building

1. sl{the westin alexandria old town}

Geolocating videos

• Geolocating videos aren't much different from geolocating images. A video is just a string of images, usually played at 24 frames(or images) per second. In other words, a video will hold a whole lot more images that can be analyzed, reversed and scrutinized by you.

• Task 9  The view from my hotel room

1. opening the video and extracting some important pictures and information
• picture one

• picture two

• picture three

• picture four

• picture five

2. search for → Riverside Point

3. use Image lens for picture one

4. going back to google map of Riverside Point I will make a relation with Marina Bay Sands Singapore

5. from the video we saw that the Riverside Point was at the right hand of the girl and there is water between them so I search in the red box location

6. going to see 360

1. as the video so I am close to the answer
7. so now I know the location of the building by analyzing the picture


8. search for → clarke quay singapore hotel

1. sl{novotel singapore clarke quay}