If
The Ex Lyrics

okramra

Isn't it always better to do the exif stripping in the CLI instead of doing it via a website, that way you aren't unneceserely risking your metadata being potentially logged by a third party?

Derek Edmondson

Lots of good info on meta data here, and I really enjoy your videos.

Julio Avalos

Actually, Imgur is pretty good about keeping its users safe. All metadata is scrubbed once an image is uploaded to its imageboard.

Reaper_ #91

Really interesting stuff.... looking forward to learning more from you! :D

Kyle Xy Xy

I didn't expect this.. OMG very helpful information.. I appreciate the content.. Thanks again :)

TheRobMozza

GEO/GPS is only listed in the metadata if the targets phone had their location enabled

Derek Edmondson

AGPS does not increase accuracy or precision. DGPS does that.
AGPS can speed up time to first fix, and the way that works is your carrier sends Almanac and Ephemeris Data to your phone in a high speed buddy. Without AGPS, time to first fix could take as long as 12.5 minutes.

Mohamed Elhefyan

That's crazy, I wonder if it's just as easy to find Metadata for computers too

t s

Thank you for the education on this. 👍🏼

0 Day

I think the same result you can achieve in Photoshop or Gimp. You need to "save as for web" and all metadata will be erased.

James Lowlry

Photoshopping a photo leaves metadata that is easily found though. It would be fine if you didn't care that people knew you edited it

Paul A

For Windows use 'GIMP', for Android use 'Photo Metadata Remover'

Null Byte

Thanks for the tip Paul A!

HarlemKitty

hey this is great! but when i try to get data in exif from any photo, is always says:



Corrupt data
The data provided does not follow the specification.

ExifLoader: The data supplied does not seem to contain EXIF data.



any ideas???

boss2nine

Woo hoo, i'm off to find some moon landing pics to put an end to that debate once and for all. 😉

Akshat Singh

sarcasm at its best

Alex González

Lmao

Abdul Seif

Sounds crazy and interesting 😂😂😂

flavio stefan giurgi

Theres no gps on the moon

I keep getting Notis from that one DBZ comment!

@Blue Red 2 cocks damn bro

Vishwas Dave

Good Day Sir,
Your videos is very helpful for me so I want to thank you for what you do and also need a help . Can you please suggest me a network adapter which can I use.

Steve

@Vishwas Dave No problem @ all, Dont buy a TP-Link TL-WN722N , you will see them very cheap everywhere dont be fooled. They falsely advertise the chipset because they realized no one wants that card unless its capable of packet injection and monitor mode and the V.2 and V.3 adapters chipset is not compatible with Kali. They might say in the description it is V.1 , an Atheros chipset, they're lying read the customer reviews. I will link the null-byte article for the best wifi adapters for 2019 . You should go to this youtube channels website. Go to www.wonderhowto.com and the click the Null-Byte tab and you find endless resources of information and a text write up with instructions for every video ever made on this channel + MORE. Null-byte has been around a while, this channel, not as long. So there are a lot of old tutorials on there that are great , and still relevant FYI. Here is the adapter article https://null-byte.wonderhowto.com/how-to/buy-best-wireless-network-adapter-for-wi-fi-hacking-2019-0178550/

Vishwas Dave

@Steve thanks for replying
Suggest some network adapter names

Steve

Making an assumption from the type of channel we're viewing I assume your looking for a wireless card capable of packet injection and promiscuous mode (monitor mode) ? What is your price range , tell me that and I can help you out .. If money is not an issue I would suggest one of the ALFA cards/adapters. When picking out an adapter for auditing wireless networks the most important things are the actual chipset and its compatibility with your operating system.

System Pwn3d

Just wondering why when I download image from browser and try exif I get this error:
Corrupt data
The data provided does not follow the specification.
ExifLoader: The data supplied does not seem to contain EXIF data.

x Streampunk

exif works to a degree but its preety limited.
i found that PNG files don't work, anything uploaded to social media doesnt work and images over text message don't work as it shrinks the file and removes exif data. its preety much limited to jpg, JPEG images sent over email and stuff from a physical device

Ray Akuma

Thats why i usually take a screenshot of a photo before sending it somewhere and have misleading data on my phone via VPN, Mock Locations, etc.

on the green

Since I joined I understood this yes back to school ooh noo!! With Null there's always something to study! Thank

Choù Tba

but when you download images from facebook or twitter , those are changing the exif data , how can we solve this problem ? #nullbyte

al d

We must eliminate the Faced book walled garden. .

Steve

@Lord Belcher IV Outside the box , i like it.. I mean not really but for most people.. Google is one of the best web hacking tools for recon there is when used properly.

Choù Tba

@Lord Belcher IV thank you =)

Lord Belcher IV

Maybe use TinyPic, (or even Google Images; drag 'n' drop), and see if the user uploaded it to another platform that leaves said EXIF data intact?

DXL Ultra

You can't. It's controlled via server side

016 CSE Haider Zaidi

Very informative video thanks

Jeremy Stanley

All the wierd creepy stalkers of the world thank you for making this video.🤣😂

Ronni Zag

Awesome video. Is there a way to change this exif information??

Manche De Pelle

Thanks my friend!!! 👍👍👍👍👍I will install the add-on for sure

Null Byte

Thanks Manche De Pelle!

DENNIS WAMBUA

For the GPS location must it be on for it to be recorded?

Neelesh Patel

What if we extract metadata of the photos of earth uploaded by nasa, what will be the geolocation and what device do they use to capture and also we'll know the pic is real or nasa is just messing around with us for years and years.
This is interesting I'll try this and all of us reading this too

Ueno54

I wanted to see if gthumb was actually stripping it and it seems to do just fine. Thanks for showing the website.

TheTubejunky

This is very useful if you've ever obtained a machine from a "yard sale" , "lost and found" , internet sale..ect..

Steve

@TheTubejunky Oh if they stole it and were stupid enough to leave the hdd inside.. I was telling someone earlier there is a game-show in the UK where they have you rob a bank and if you can spend all the money before your caught you get to keep it. They use real law enforcement , you can get detained and questioned even arrested. You lose if they get enough evidence to convict you. There are 7 other teams of two all doing the same, these people know who you are and also are a liability. They only see each other right after the robbery to split the money 8 ways, then everyone goes off on their own. They use real law enforcement and they work the case as if its real. The first thing they do when they detain or arrest a suspect is pull all of the metadata from every photo on their phone and social media. They identify associates , possible get away driver, they figure out the who what when and where all with the metadata and social media. I thought it was VERY interesting to get a glimpse into an investigation like that, digital forensics. 9 out of 10 times between social media and metadata maybe some light surveillance of the suspects they get them dead to rights. Someone up further in the comments said because of my thumb nail that I watched mr robot and I am paranoid, they've just never lost their freedom and have no idea how law enforcement conducts investigations. By using this 'website' if your caught and they get your history from your ISP , they can subpoena that website. Thats why I brought up the CLI utility 'mat' metadata-anonymization-toolkit, available from any distros default repos. Sometimes peoples ignorance is overwhelming. If you have to scrub your metadata chances are things are not on the up and up ,or , you have a cyber stalker or whatever the case. So I know exactly what you are saying. 🐑will be🐑, cant help that.

TheTubejunky

Tracking down the machines original owner so as to know if the device/machine was stolen.
Authorities use this technique all the time.

Steve

in what capacity ?

Mike Mclaughlin

Nice tool, I am using your walkthroughs to help show hundreds about osint in orem utah

Nico Perez

Que apps recomiendan para recordar las tareas futuras?

Ice Bank Mice Elf

Thx I needed this.

Devon

Hmm... Not sure that site has the same capabilities as the command line or Google Photos for instance. I uploaded a pic to the site and it showed no valuable data from the same pic that showed GPS data on both Google Photos and in the command line.

CHARAN REDDY

This works with screenshots too?

FRANK BERRY

I want to comment on the OSINT tool...it seems it doesn't work in all countries but only in the U.S. Am in Nigeria i tried it but couldn't get any info on the target. Want to ask if there's any such tool for all countries aside U.S

ayush kawad

hello your videos are truly helpful can you make a video on flooding or shutting down a wifi router

Turkish Fun

aircrack-ng

Neel Gohel

I was thinking to write the blog post about same trick last year..that how our phones might put our data like our geo info at risk ...by EXIF meta

Anthony Siena

Do you do this for a fee I need a couple pictures examined for date taken

HouseOfCarZ

Could you put al the osint videos in a playlist.

Steve

Just make a bash script for youtube-dl including the missing url(s).

Fextuccini

@Који Курац tnx bro

Fextuccini

Osint meaning?

Hector Ramos

Is their anyway to create the exif data for a random image ?

James Lowlry

Yeah just add the info you want

Gordo Quata

How do u find the website of an image ? For example if your friend took a screenshot of a picture and sent it to you . How would you find the website if you cant see it ? There must be a way .

Foresthillwolf

If there is an image in the site, single it out with cropping, and then reverse search that image alone, then it may give a link. Not the best way, but it will work

eireannsg

I noticed you were struggling against your computer. Tabs are jumping up and down. Maybe you should get a windows based system.

Agentcapture

Is there a hacking tool to look for photos based on a GPS location and a radius?

Foresthillwolf

I doubt it. You would need a massive database and a fast algorithm to search long lat tags of billions of images. If anyone has a tool like that, it's someone with a lot of resources like Google

Trinity Nielsen

Hey! when I type "apt install exif" it says "'apt' is not recognized as an internal or external command, operable program or batch file" and it says the same thing if I type in "man exif" Please help lol

Trinity Nielsen

@Gabriel Prado thank you so much! I'll try that out!

Gabriel Prado

Be sure that you are using a Linux operating system otherwise it won't work by any means. If you are a beginner I advice you to get Kali Linux,search in youtube videos on how to install it and be used to the tools there. Good luck bro!

Muhammad Ismail

Can metadata be retrieved from facebook, whatsapp or insta pictures, as I could not find any.

RaelDanger

@Null Byte Very relieved to hear this. I've been being cyber stalked for 3 years now. I freaked out when I discovered metadata exists. I'm an artist so I have to use social media to promote my art so posting photos is unavoidable.

Null Byte

No they strip the data

Kas S

Does chrome have the same 2 extensions?

ADRIE

Hi if i upload an image to jeffreys image metadata viewer will that photo be made public or stored in a server?

cdenver

Is there a way to do this with videos on a Tweet?

semakaleng smakie

@null bite may you please make a video on how can we hack Facebook and WhatsApp

Naman Vyas

Unable to locate package exif, please help

SellMySins

Haha I love it xD 'i can verify I'm not a robot '8:09

Victor Buch Hansen

Cool video as always. Are you running kali linux directly on you hdd?

Steve

Ideally you want to actually install kali to a fast drive. It really depends on what you want to do with kali. If you want to use cracking utilities or anything resource intensive it will be exponentially slower running from a flash drive. In all the videos with raspberry pi he uses his Mac and ssh, when you see this other laptop (lenovo) he is running kali from the internal drive. Its worth it to run it from an ssd , you can get a SATA3 120GB Kingston SSD from amazon for $19.00 right now.

Yogesh Gawas

Is there any way to remove this data from the image?

Steve

look for my comment on the top of the page , install mat 'apt install mat' and then 'mat somepic' mat is the Metadata Anonymization Toolkit. It strips and clean all that data from the image right from the terminal. Very easy.

Yogesh Gawas

@Cendar100 amazing, thanks a lot but Facebook images does not give much info on EXIF

Cendar100

I see 3 easy way :
- Open your image with an editor then "save as"
- Make à screenshot of it ;)
- Use an Hex editor


tested now on Windows : use "ExifDataView" (free from NirSoft) to view and find Hex value of my latidute/longitud, edit the image with the Hex editor "HxD" (free from mh-nexus)
search for the Hex value previously found with ExifDataView and I raplace it by Hex value "00"


Exemple:
GpsLatitude : 50° 46' 40.78"
Hex Value string : 00 00 32 00 00 00 01 00 00 00 2E 00 00 00 01 02 6E 32 30 00 0F 42 40

Replaced by : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


= GpsLatitude : 0° 0.0000'

コルトン

I can't wait to prank my friend with an unknown phone number!! :D

Meet Kafui

Thank you

Mohamed salem Eddah

nice bro 🕳❤

Mike

So photos on Facebook etc have the info stripped, correct?

Steve

Well now you can check , just use wget and download a photo from facebook and then just run it through exiftool and see what it dumps. If there is no metadata present the utility will let you know its clean.

ofdylan

4:39 you can find all of this information with a few clicks on Microsoft

Guitar Covers

He’s probably on adderall

Music Mafia

Firefox extension is not working either. I do the same what Kody does and nothing.

Bad Vadass

Thx a lot

lQ Certified

The location doesn’t pop up on my screen

John Starmore

the chrome extension itself is a security vulnerability . lol

Moha Med

You are the best

Gaurav Rajput

You teaches us about cyber security and you are thinking we are fool because you are using Bitly link that collect ip addresses

Alan Jacob

I guess the meta data doesn't exist when i pull photos from WhatsApp, Instagram or Facebook..so its not thaaat useful though

Omar Evaristo Cruz Diaz

Can we di this with pdf ?

Borut Kulovec

HI GREAT VIDEOS. I WOULD LIKE TO WRITTE SOMETHING ON EMAIL. CAN I..REGARDS

motowyznawca

How can I support you financially?

rené

Holy shit! this is interesting

The Dopefein

i dont have the exif tool on my system

Sofia Margaretha

How to find someone just by photo? Anyone can help me?

Beefy Tingle

11:13 😂😂

Charles Mills

So why is there so much more you can do when running Linux vs windows ???? I've downloaded the software and see Linux running programs that you could never run on Windows... Why is that??

Dolphin Threetwoone

How about if i send someone a screenshot is it possible for that person to check the Gps plz reply im too worried

40rcec0re

Thank u dude

DXL Ultra

Anonymous is dead, they are garbage

nikhil karale

Nullbyte please make android hacking video !

aaaa

Very good video

paul fensome

Null Byte You are obviously very talented when it comes to Computers and Intelligent to Learn & Remember so much Data & Code.
But are you Wise ?
I have three questions for you if you don't mind , a simple yes or No will do.
(1) Do you believe we went to the Moon
(2) Do you believe Satellites are Orbiting Earth over 200 miles high
(3) Do you believe in demons , Jinns

ZnPZ / FEAssn

Hehe nice try I have harder question...what is pourpose of our live? You can give 2 solution you think are good. All best

eireannsg

Thats boring, it was always easy to extract those data in little complicated ways. More interesting would be how to modify and change those data. e.g. I take a pic at home but I want people to think they were e.g. taken in Iceland or Hawaii

Parker Beck

Imgur strips exif data... or so I hear.

Devon

​@汚い外人 It doesn't appear that it was done retroactively though... "upon upload" -- so all old pics on the platform still have that data?

Ari Fanucchi

They do. It's easy enough to verify.

elvan morris

Hello bro your videos are quite cool but I think it's time you tell us how you managed to excape becoming an android robot , gezzzzzz YOU DON'T BLINK

Null Byte

there is no escape

JakeTheGreat 05

Glad to find out that he isnt a robot 😶

Frankky

i cant move it into the terminal some help?

Frankky

@Null Byte so i actually made it work to move it but when i type the command and put the picture in it says it is not readable or does not contain EXIF data.

Null Byte

What's the problem, have you tried just pointing to the file destination?

m.nageh

the most of online sites clear these info .......... so




nice try !

Xulw

Even iPhone X stores gps coordinates lol

md saad

Nice

Martin

hi there, what is the best firewall software for pc ?

Steve

Depends , what operating system , and whether its physical or virtual. If you running any gnu/linux distro it comes with UFW. You can buy bare-bones micro computers that only function as a firewall, most people use PFsense , I am not a fan. Another option is ipfire ipfire.org . Or you can go the route of modified firmware in your router if its compatible with openWRT or DD-WRT to setup a firewall and rules. That said even windows comes with its own firewall in 'Defender' thats what you see when you install an app and it asks you to make a firewall exception.

Mr. KD VFX

Hello, I need your help.
You have a photo. Find the owner of that port. can you help me?

Mr. KD VFX

@Null Byte Can you
Give me soy

I have yours gmail Is the address available?

Null Byte

Good idea Kavinda Dilshan, I've added it to the list of video ideas.

Kapadiya Raj

which linux are used in this video

Debra Gotenks

@SpaceTimeBeing Ubuntu DDE?

SpaceTimeBeing

He said ubuntu. This is from 2 years ago, you can use Ubuntu DDE if you like modern ui

Cyclonic Razor

im trying to learn really fast how to find exif data and track location cause someone is about to kill himself and i want to prevent it by sending help to his location oh god

Everything.

Hackers used this technique to find my Facebook account using my images from a different site. So I been blackmailed.

Katy

I'd assume they used reverse image search it allowes you to see what other context the picture was used in, where it appeared/posted. They could use what he explain to find your location.

Arun Madhavan

Loï

i think verefix has been hacked, take care uploading there

tejas sabale

if we have phone then how to get all id, password, data social media account and also how to get old call and sms history and data which deleted.

Red Cloud

surely lots of popular websites protect against this?

Null Byte

Some like Facebook strip the data