OSINT in Nigeria

Transcript

1. OPEN SOURCE INTELLIGENCE IN NIGERIA – Olakanmi Oluwole I.
2. ABOUT ME! Olakanmi Oluwole, Pentester and Software Engineer, Not a fulltime OSINT Analyst.
3. TOOLS FOR OSINT INVESTIGATIONS OSINT IN NIGERIA Open source intelligence in Nigeria and how we can do better OSINT Introduction to OSINT, Other categories of intelligence collection Popular OSINT tools and where to get them TABLE OF CONTENTS WHOGET DEMO Demo of OSINT tool for Nigerian Phone numbers 01 02 03 04
4. 
   Chris Kubecka, Down the Rabbit Hole: An Osint Journey Open Source Intelligence Gathering for Penetration Testing “So many African leaders in the Panama Papers. I should have responded to those Nigerian emails.”
5. OSINT 01 Introduction to OSINT, other categories of intelligence collection
6. OPEN SOURCE INTELLIGENCE Open Source Intelligence is data and information that is collected legally from open and publicly available resources.
7. THERE’S INFORMATION ALL AROUND US, WE JUST HAVE TO LOOK HARD ENOUGH
8. Forensic Investigators Private Investigators Fraud Investigators Law Enforcement intelligence Organizations Human Resources Professionals WHO USES OPEN SOURCE INTELLIGENCE? The Military IT Security Professionals and Cyber Criminals Tracing Agents and Commercial Enterprises
9. INTERNET Social Media, Blogs, Forums, Maps and Commercial Imagery SOURCE 1 DARK WEB Marketplaces, Discussion Forums, Directories, Blogs, e.t.c GOVERNMENT SOURCES Public records database, reports, documents and websites. MASS & MULTI MEDIA TV, Radio, Nwespaper, Magazines, Photos, Videos, e.t.c SOURCES OF OPEN SOURCE INTELLIGENCE SOURCE 2 SOURCE 4 SOURCE 3
10. HUMINT Also known as human intelligence, this is actually the gathering of real information from human sources. Interrogation might be classified under this. SIGINT Signals intelligence, is the method of intercepting signals or communications transmitted electronically like through radars, radios, or weapons systems GEOINT The selection of imagery and geospatial intelligence falls beneath the group of GEOINT, or geospatial intelligence. OTHER INTELLIGIENCE COLLECTION COMPONENTS
11. SMINT Social Media Intelligence is the use of information stored within social media platforms to further the knowledge of a person, group or incident. MASINT Measurement and Signature Intelligence is the utilization of intelligence to generate detailed reports of targets. As an example, the telemetry of missiles is discovered using MASINT. IMINT The creation of images through electronic means including radar or electro-optics just for collecting intelligence is termed imagery intelligence OTHER INTELLIGIENCE COLLECTION COMPONENTS…
12. TOOLS FOR OSINT INVESTIGATIONS Popular OSINT tools and where to get them 02
13. OSINT TOOLS WEBSITE ANALYSIS DomEye DNSlytics Whois MONITORING Followthatpage FluxGuard Web Alert App METADATA Jeffrey's EXIF Viewer VerEXIF Metadata Interrogator
14. OSINT TOOLS… IMAGE SEARCH Yandex Google TinEye PEOPLE SEARCH ThatsThem Locate Family Peekyou PHONE & EMAIL PhoneInfoGa 192.com World phone numbers Hunter emailrep.io
15. MAPS Google Maps Google Earth Mapillary OpenStreetMap Travel With Drone OpenRailwayMap MAP TOOLS Global Gazzetteer GeoLocateThis! Dual Maps AVIAITION RadarBox24 FlightAware Airportia Live ATC OSINT TOOLS…
16. YOUTUBE YouTube Metadata YouTube GeoFind Montage InVid FACEBOOK Facebook Graph Searcher Graph.tips Who posted what? Find Your Facebook ID TWITTER Twint List copy Spoonbill Account analysis TweetBeaver OSINT TOOLS…
17. INSTAGRAM Instalooter Instadp Storiesig Searchmy.bio Instasave IMAGE ANALYSIS Maritime Connector Marine Traffic Vessel Finder MARITIME Maritime Connector Marine Traffic Vessel Finder OSINT TOOLS…
18. WEBCAM EarthCam Windy WebcamTaxi Live railroad webcams VIDEO TOOLS Logo detector BROWSER ADD-ONS Image Search Options Google Translate RevEye Wayback Machine Storyful multisearch OSINT TOOLS…
19. SNAPCHAT Snap Map Snapcodes ARCHIVING Archive.today Internet Archive Conifer Video Vault REDDIT Pushshift search Reddit Investigator Redective Karma Decay r/whatisthisthing OSINT TOOLS…
20. 4CHAN 4chan Search Search4chan Archived.moe WIKIPEDIA xtools VIDEO DOWNLOADERS savefrom.net ddownr.com y2mate 4K (desktop) OSINT TOOLS…
21. MISC. INFORMATION World license plates International Encyclopedia of Uniform Insignia Weapons ID Database Railways of the World boardreader SOCIAL PRESENCE Instant Username Namechk NameCheckup KnowEm LINKEDIN Linkedin2username OSINT TOOLS…
22. JUST A FEW OUT OF THOUSANDS The listed tools are just a very few of the many OSINT tools out there. You can find others on Github, Security Blogs, Private companies, Intelligence Organizations, Dark Web e.t.c
23. OSINT IN NIGERIA Open Source Intelligence in Nigeria and how we can do better 03
24. A FEW INTERESTING READS A few interesting application of OSINT in NIGERIA • Using Open Source Intelligence to Track Boko Haram Tactics • Using Open Source Intellingence, Social Media Data to forecast #NIGERIADECIDES2019 • Tracking down Nigerian Scammer using OSINT • Investigating Nigerian Scammer running a Kenyan Scheme
25. WHERE TO FIND DATA IN NIGERIA • E-Library National Bureau of Statistic • Open Data for Africa – Nigerian Data Portal • CBN Statistics Database • EnergyData.info • Nigeria Market Data • Global Health Observatory by WHO • Knoema Datasets • Hum Data
26. OSINT PROBLEMS IN NIGERIA DATA COLLECTION • Data is poorly collected • Invalid/Inaccurat Data DATA PROCESSING • Lack of data leads to poor processing • Cost of data • Expertise in cleaning, organizing and analyzing deluges of raw data • Inconclusive reports
27. OSINT PROBLEMS IN NIGERIA… EXPLOITATION Are we taking advantage of the data and publicly accessible information?. PRODUCTION Most public information (and analysis of this information) is rarely viewed. Do we have a responsibility to share and publicize some of this information more widely if it is in the public interest?.
28. WHOGET 04 Demo of OSINT tool for Nigerian Phone numbers
29. WHOGET MODEL IntelTechniques.com OSINT Workflow Chart: Telephone #
30. WHAT’S CURRENTLY SUPPORTED? LOCALIZED INFORMATION Find the carrier, timezone, country of the number. SEARCH ENGINES Supports search engines such as Google, DuckDuckGo, etc. SOCIAL MEDIA PLATFORMS Serchrs through supported social media platforms such as Twitter, Facebook, etc • Anonymity using Tor
31. LIVE DEMO
32. QUESTIONS?
33. THANKS! Feel free to connect, Shoot me questions, Send me memes. @woleoflagos wole@lagosnomad.com l4seclabs.xyz