OSINT Tutorial Demonstrates Searching for Personal Data and Exposed Credentials
· 14:07 · Watch on YouTube ↗
Summary
The video walks through OSINT searches using Google operators, username and reverse-image lookup, and resources such as Migrat and the Google Hacking Database. It also demonstrates finding exposed passwords and hash matches, highlighting account-takeover risks.
Key points
- The presenter demonstrates Google search operators and targeted site and file-type queries to locate publicly indexed information, including personal data and credential files.
- The video shows searching for exposed passwords and matching password hashes with common-password lists, describing rainbow table attacks involving MD5 and SHA1.
- It presents exposed credentials as a possible route to account access; the demonstrations do not establish that the displayed credentials are valid or authorized for use.
- The Migrat script is demonstrated for checking whether a username appears on multiple services; the presenter cautions that some results may be impersonators.
- Google Lens is used for reverse-image searches to find other online profiles associated with an image.
- The presenter points to OSINT Framework and Exploit-DB's Google Hacking Database for additional search resources, including queries for password files and exposed devices.
Article Details
- Topics
- [00:00] OSINT searches for personal and organizational information
- [02:10] Google search operators for targeted searches
- [04:27] Searching for exposed credentials and password hashes
- [08:31] Username searches with Migrat and impersonation cautions
- [09:41] Reverse-image searches for identifying online profiles
- [11:19] OSINT Framework and Google Hacking Database resources