socketpuppets

Conference : https://twitter.com/InfoSecComm/status/1736409299524763868

Canthide finds All Locations by looking at a given Social Media account using AI and Exif Metadata.

Smart Phones not strip data by default but most of the social media platforms strips the data.

It is nice question. According to CantHide project if you modify your metadata to North Pole. CantHide will show your location on North Pole but it does not related to AI.

www.canthide.me

CantHide finds previous locations by looking at a given social media account.

Source code will be published soon. For the ML part, I create a PyTorch model to estimate Location from images. In the other hand, I check the metadata and use reverse image search.

Source code will be published soon. Yes, reverse image search + exiflooter + Model with Pytorch for estimate Location from photos.

- Find location from photos - Find other social media accounts. - Filter by date - Photoshop detection

Find All Locations by looking at a given Social Media account using AI and Exif Metadata.

Find All Locations by looking at a given social media account using AI and Exif Metadata.

- exiflooter can detect geolocation directly and display. if you use exiftool, you need to grep the output.

- exiflooter can show the location on OpenStreetMap. if you use exiftool, you need to get location and latitude and then copy paste to OpenStreetMap API.

- exiflooter can analyze directory for geolocation.

- exiflooter can remove metadata from directory of images.

- exiflooter works with pipe operation. If you want to give multiple urls to exiflooter, it checks all the urls for geolocation or remove metadata.

- for bug hunters you can combine with "waybackurls" which is get the urls from wayback machine. if you get all images from domain and send it to exiflooter. maybe you can gain some money. (bug bounty check READ.me https://github.com/aydinnyunus/exifLooter/blob/main/README.m...)

I added remove metadata from images on exifLooter https://github.com/aydinnyunus/exifLooter

I added remove metadata from images on exifLooter https://github.com/aydinnyunus/exifLooter

I added remove metadata from images on exifLooter https://github.com/aydinnyunus/exifLooter

I added remove metadata from images on exifLooter

https://github.com/aydinnyunus/exifLooter

Oh I type wrong. I mean adding remove parameter on my CLI tool like `exifLooter --remove --image=image.jpeg`

Why `exiftool -all= image.jpeg` is not enough ? or I think overwrite the metadata with the empty ones will be okay

Browser's does not strip the exif data but websites should remove the exif data. According to Bugcrowd’s Vulnerability Rating Taxonomy, severity of the vulnerability P3-P4 (medium-low) because the vulnerability leak GPS data of anybody.

Thank you for your idea. I can add new parameter like "exiftool --image image.jpeg --remove" to remove all metadata from the image.

How it is useful ? If victim takes the photo of herself/himself. This tool get the victim's location or metadata.

Yes. Added on READ.me

Thanks to fahrradflucht for contribution

There is an extension on Burp Suite do exactly your idea.

https://portswigger.net/bappstore/3996aa01e0474b1a990db586a7...