Obtain Valuable Data from Images During Recon Using EXIF Extractors [Tutorial]

[@x.a.k.i5858]

Hey again null your videos have really helped me though my career and I just want to express my gratitude so tha ks ever soo much

[@eddietolbert6801]

What do you do for a living

[@leathercheerio1]

She's a substitute gym teacher.

[@nolanhartough]

Same

[@WhileyisaEskiboy]

It's about time you got the recognition on KZbin you deserve I have been watching you since well I cannot remember haha but I think it was about 50k and you replied to my message, really happy for you and all the subs and thank you as always love your approach and also thanks for teaching myself so many things

[@boss2nine]

Woo hoo, i'm off to find some moon landing pics to put an end to that debate once and for all. 😉

[@bluered3401]

So what can you conclude

[@paula3582]

@@bluered3401 The earth is flat

[@virus5867]

I don’t think exit data was a thing during the moon landing

[@bluered3401]

@@paula3582 unlike my girlfriend's torso😂

[@unknown-yo2tx]

@@paula3582 lol

[@johngrear6506]

Be aware of the security issues of giving add-ons access to your computer. As usual there's potentially a big price to pay for a little bit of convenience. Better use command line tools which provide the same info only when you need/want it.

[@Jacob-ABCXYZ]

Or build your own extensions and tools

[@TheTubejunky]

This is very useful if you've ever obtained a machine from a "yard sale" , "lost and found" , internet sale..ect..

[@DDBAA24]

in what capacity ?

[@TheTubejunky]

Tracking down the machines original owner so as to know if the device/machine was stolen. Authorities use this technique all the time.

[@DDBAA24]

@@TheTubejunky Oh if they stole it and were stupid enough to leave the hdd inside.. I was telling someone earlier there is a game-show in the UK where they have you rob a bank and if you can spend all the money before your caught you get to keep it. They use real law enforcement , you can get detained and questioned even arrested. You lose if they get enough evidence to convict you. There are 7 other teams of two all doing the same, these people know who you are and also are a liability. They only see each other right after the robbery to split the money 8 ways, then everyone goes off on their own. They use real law enforcement and they work the case as if its real. The first thing they do when they detain or arrest a suspect is pull all of the metadata from every photo on their phone and social media. They identify associates , possible get away driver, they figure out the who what when and where all with the metadata and social media. I thought it was VERY interesting to get a glimpse into an investigation like that, digital forensics. 9 out of 10 times between social media and metadata maybe some light surveillance of the suspects they get them dead to rights. Someone up further in the comments said because of my thumb nail that I watched mr robot and I am paranoid, they've just never lost their freedom and have no idea how law enforcement conducts investigations. By using this 'website' if your caught and they get your history from your ISP , they can subpoena that website. Thats why I brought up the CLI utility 'mat' metadata-anonymization-toolkit, available from any distros default repos. Sometimes peoples ignorance is overwhelming. If you have to scrub your metadata chances are things are not on the up and up ,or , you have a cyber stalker or whatever the case. So I know exactly what you are saying. 🐑will be🐑, cant help that.

[@interstellar10]

Nice job! I've been searching around various Exif tools & methods for OSINT investigations, but found your info very useful and easy to follow. Thanks!

[@tonymontana7566]

Wow I never got in to investigation work I thought that the information was possible to get but wow the information that you pulled up confirmed my thoughts great videos very informative

[@JulioAvalos3000]

Actually, Imgur is pretty good about keeping its users safe. All metadata is scrubbed once an image is uploaded to its imageboard.

[@jeremystanley9395]

All the wierd creepy stalkers of the world thank you for making this video.🤣😂

[@mikemclaughlinror]

Nice tool, I am using your walkthroughs to help show hundreds about osint in orem utah

[@kylexyxy1919]

I didn't expect this.. OMG very helpful information.. I appreciate the content.. Thanks again :)

[@TheRobMozza]

GEO/GPS is only listed in the metadata if the targets phone had their location enabled

[@derekedmondson9909]

Lots of good info on meta data here, and I really enjoy your videos.

[@louiem5985]

AWESOME tool!!!! This is always good to have as one of your tools. Been building my tools kit in case I ever need it. For mac's they have the exif if you download it with brew. Keep up the great job!!!!

[@RayAkuma]

Thats why i usually take a screenshot of a photo before sending it somewhere and have misleading data on my phone via VPN, Mock Locations, etc.

[@systempwn3d991]

Just wondering why when I download image from browser and try exif I get this error: Corrupt data The data provided does not follow the specification. ExifLoader: The data supplied does not seem to contain EXIF data.

[@UenoLocker54]

I wanted to see if gthumb was actually stripping it and it seems to do just fine. Thanks for showing the website.

[@houseofcarz1528]

Could you put al the osint videos in a playlist.

[@fextuccini6224]

Osint meaning?

[@fextuccini6224]

@Који Курац tnx bro

[@DDBAA24]

Just make a bash script for youtube-dl including the missing url(s).

[@コルトン-o4d]

I can't wait to prank my friend with an unknown phone number!! :D

[@paula3582]

For Windows use 'GIMP', for Android use 'Photo Metadata Remover'

[@NullByteWHT]

Thanks for the tip Paul A!

[@choutba1725]

but when you download images from facebook or twitter , those are changing the exif data , how can we solve this problem ? #nullbyte

[@alexjepson1691]

If the data has been overwritten there is no way.

[@dxlultra1020]

You can't. It's controlled via server side

[@lordbelcheriv6115]

Maybe use TinyPic, (or even Google Images; drag 'n' drop), and see if the user uploaded it to another platform that leaves said EXIF data intact?

[@choutba1725]

@@lordbelcheriv6115 thank you =)

[@DDBAA24]

@@lordbelcheriv6115 Outside the box , i like it.. I mean not really but for most people.. Google is one of the best web hacking tools for recon there is when used properly.

[@cw3drones]

This is very interesting. I’m a commercial drone pilot and I take imagery for mapping and 3D modeling. Some of these maps take dozens or hundreds of photos. In order to establish accuracy I use ground control points (GCPs). The GCPs create fixed points of reference with lat/long or DSM or similar measurements to a specific location on the earth’s surface. The mapping or modeling application uses to the location information to affix the image taken from the air to a point in the ground. That’s an oversimplified explanation but I think you get the idea. So. Do you know of any application that can extract the exfil data from multiple images? Ideally the data would be extracted into an excel file or a text file. Thanks in advance for any information you could share. - EM

[@Jacob-ABCXYZ]

If you have a tool to get one photo at a time, pipe the output to a CSV. Then you can automate this as easily as installing python and typing Import os While True: Os.system(commands you want)

[@millywerz]

Song is Lakey Inspired Me 2

[@parkerbeck3580]

Imgur strips exif data... or so I hear.

[@fanuchman]

They do. It's easy enough to verify.

[@devon9308]

​@@kitanaigaijin It doesn't appear that it was done retroactively though... "upon upload" -- so all old pics on the platform still have that data?

[@baidysall9591]

Is there a way to extract the same type of data on video recording? If yes what tools do we use? Thanks so much for the awesome videos

[@Kas_Styles]

Does chrome have the same 2 extensions?

[@okramra]

Isn't it always better to do the exif stripping in the CLI instead of doing it via a website, that way you aren't unneceserely risking your metadata being potentially logged by a third party?

[@TheDeltaops1]

Thanks for the video, well done. Could the metadata show that a photo has been photoshopped?

[@neelgohel335]

I was thinking to write the blog post about same trick last year..that how our phones might put our data like our geo info at risk ...by EXIF meta

[@derekedmondson9909]

AGPS does *not* increase accuracy or precision. DGPS does that. AGPS can speed up time to first fix, and the way that works is your carrier sends Almanac and Ephemeris Data to your phone in a high speed buddy. Without AGPS, time to first fix could take as long as 12.5 minutes.

[@ronnizag]

Awesome video. Is there a way to change this exif information??

[@frankberry184]

I want to comment on the OSINT tool...it seems it doesn't work in all countries but only in the U.S. Am in Nigeria i tried it but couldn't get any info on the target. Want to ask if there's any such tool for all countries aside U.S

[@denniswambua4471]

For the GPS location must it be on for it to be recorded?

[@AndyBradley1984]

Really interesting stuff.... looking forward to learning more from you! :D

[@Manche-De-Pelle]

Thanks my friend!!! 👍👍👍👍👍I will install the add-on for sure

[@NullByteWHT]

Thanks Manche De Pelle!

[@alekssssii]

@@NullByteWHT im new here and i was wahtching your video, but i dont understand , did you use cmd or what, because that terminal app i dont know what it is

[@girlnight7540]

when i try installing the exif thing this shows up (im a total begginer with coding so i have no idea whats that):apt : The term 'apt' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the s pelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:1 + apt install exif + ~~~ + CategoryInfo : ObjectNotFound: (apt:String) [], CommandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

[@JasonSanders]

4:19 grabbing the cats butt wut lol

[@adrie9672]

Hi if i upload an image to jeffreys image metadata viewer will that photo be made public or stored in a server?

[@darielondieki7156]

Where do I get this tool my friend is missing and something fishy been happening and the stories are not adding up

[@devon9308]

Hmm... Not sure that site has the same capabilities as the command line or Google Photos for instance. I uploaded a pic to the site and it showed no valuable data from the same pic that showed GPS data on both Google Photos and in the command line.

[@tejassabale7392]

if we have phone then how to get all id, password, data social media account and also how to get old call and sms history and data which deleted.

[@0day694]

I think the same result you can achieve in Photoshop or Gimp. You need to "save as for web" and all metadata will be erased.

[@jameslowlry4601]

Photoshopping a photo leaves metadata that is easily found though. It would be fine if you didn't care that people knew you edited it

[@paulfensome1404]

Null Byte You are obviously very talented when it comes to Computers and Intelligent to Learn & Remember so much Data & Code. But are you Wise ? I have three questions for you if you don't mind , a simple yes or No will do. (1) Do you believe we went to the Moon (2) Do you believe Satellites are Orbiting Earth over 200 miles high (3) Do you believe in demons , Jinns

[@znpz]

Hehe nice try I have harder question...what is pourpose of our live? You can give 2 solution you think are good. All best

[@anthonysiena3728]

Do you do this for a fee I need a couple pictures examined for date taken

[@hector10908]

Is their anyway to create the exif data for a random image ?

[@jameslowlry4601]

Yeah just add the info you want

[@dolphinthreetwoone4418]

How about if i send someone a screenshot is it possible for that person to check the Gps plz reply im too worried

[@MuhammadIsmail-in6vf]

Can metadata be retrieved from facebook, whatsapp or insta pictures, as I could not find any.

[@NullByteWHT]

No they strip the data

[@RaelDanger]

@@NullByteWHT Very relieved to hear this. I've been being cyber stalked for 3 years now. I freaked out when I discovered metadata exists. I'm an artist so I have to use social media to promote my art so posting photos is unavoidable.

[@haiderzaidi27]

Very informative video thanks

[@ofdylanYT]

4:39 you can find all of this information with a few clicks on Microsoft

[@guitarcovers3518]

He’s probably on adderall

[@harlemkitty3114]

hey this is great! but when i try to get data in exif from any photo, is always says: Corrupt data The data provided does not follow the specification. ExifLoader: The data supplied does not seem to contain EXIF data. any ideas???

[@cdenver]

Is there a way to do this with videos on a Tweet?

[@fabiograssedonio3134]

I need to recover exif data of a received photo on WA. How can I do? Thanks

[@xstreampunk242]

exif works to a degree but its preety limited. i found that PNG files don't work, anything uploaded to social media doesnt work and images over text message don't work as it shrinks the file and removes exif data. its preety much limited to jpg, JPEG images sent over email and stuff from a physical device

[@muhammadshahabchohan8797]

#Null Byte for life .... #Kody for life

[@DaveVishwas21]

Good Day Sir, Your videos is very helpful for me so I want to thank you for what you do and also need a help . Can you please suggest me a network adapter which can I use.

[@DDBAA24]

Making an assumption from the type of channel we're viewing I assume your looking for a wireless card capable of packet injection and promiscuous mode (monitor mode) ? What is your price range , tell me that and I can help you out .. If money is not an issue I would suggest one of the ALFA cards/adapters. When picking out an adapter for auditing wireless networks the most important things are the actual chipset and its compatibility with your operating system.

[@DaveVishwas21]

@@DDBAA24 thanks for replying Suggest some network adapter names

[@DDBAA24]

@@DaveVishwas21 No problem @ all, Dont buy a TP-Link TL-WN722N , you will see them very cheap everywhere dont be fooled. They falsely advertise the chipset because they realized no one wants that card unless its capable of packet injection and monitor mode and the V.2 and V.3 adapters chipset is not compatible with Kali. They might say in the description it is V.1 , an Atheros chipset, they're lying read the customer reviews. I will link the null-byte article for the best wifi adapters for 2019 . You should go to this youtube channels website. Go to www.wonderhowto.com and the click the Null-Byte tab and you find endless resources of information and a text write up with instructions for every video ever made on this channel + MORE. Null-byte has been around a while, this channel, not as long. So there are a lot of old tutorials on there that are great , and still relevant FYI. Here is the adapter article null-byte.wonderhowto.com/how-to/buy-best-wireless-network-adapter-for-wi-fi-hacking-2019-0178550/

[@richieboy4754]

Bro can I send u a couple images so u can see if there's any hidden data or text in them ?

[@alienatedasthete]

It's not working it keeps saying the data supplied does not seem to contain Exif data I tried other tools to like exiv2 I have a similar error can somone help?

[@namanvyas9433]

Unable to locate package exif, please help

[@charanreddy8856]

This works with screenshots too?

[@humanbeing7938]

does this only work on jpeg images?

[@Ankitraj-fy2nz]

Can we find screenshot image location .

[@mohamedelhefyan2146]

That's crazy, I wonder if it's just as easy to find Metadata for computers too

[@Martin-ot7xj]

hi there, what is the best firewall software for pc ?

[@DDBAA24]

Depends , what operating system , and whether its physical or virtual. If you running any gnu/linux distro it comes with UFW. You can buy bare-bones micro computers that only function as a firewall, most people use PFsense , I am not a fan. Another option is ipfire ipfire.org . Or you can go the route of modified firmware in your router if its compatible with openWRT or DD-WRT to setup a firewall and rules. That said even windows comes with its own firewall in 'Defender' thats what you see when you install an app and it asks you to make a firewall exception.

[@BasavarajBanakar]

'/storage/emulated/0/DCIM/Camera/IMG_20190619_201044.jpg' is not readable or does not contain EXIF data! This I got Any solution plz

[@enne953]

Sorry i dont know

[@piotrek19]

Try copying the image to a different folder.

[@BasavarajBanakar]

I got other method

[@DDBAA24]

This is not a bad thing, this mean your image is clean .. Some devices and services protect you from metadata extraction by default. Any photo from an Apple device should be loaded with metadata if your looking for a good example to study. Judging by your post your using adb or busybox/termux to navigate to your DCIM and use exif, exif doesn't always work with droid.

[@Handlehandle333]

Thx I needed this.

[@hongame_5694]

Do you have a website

[@ayushkawad6507]

hello your videos are truly helpful can you make a video on flooding or shutting down a wifi router

[@SniperPotatoXL]

aircrack-ng

[@iyogeshjha]

How python help to find a person just with a picture (info life location, name, pH no)

[@MrKDVFX]

Hello, I need your help. You have a photo. Find the owner of that port. can you help me?

[@NullByteWHT]

Good idea Kavinda Dilshan, I've added it to the list of video ideas.

[@MrKDVFX]

@@NullByteWHT Can you Give me soy I have yours gmail Is the address available?

[@Policecamlaw]

How do u find the website of an image ? For example if your friend took a screenshot of a picture and sent it to you . How would you find the website if you cant see it ? There must be a way .

[@foresthillwolf7998]

If there is an image in the site, single it out with cropping, and then reverse search that image alone, then it may give a link. Not the best way, but it will work

[@eireannsg]

I noticed you were struggling against your computer. Tabs are jumping up and down. Maybe you should get a windows based system.

[@neeleshpatel9312]

What if we extract metadata of the photos of earth uploaded by nasa, what will be the geolocation and what device do they use to capture and also we'll know the pic is real or nasa is just messing around with us for years and years. This is interesting I'll try this and all of us reading this too

[@musicmafia993]

Firefox extension is not working either. I do the same what Kody does and nothing.

[@beefytingle221]

11:13 😂😂

[@DDBAA24]

Uploads to verexiff .. verexiff logs IP forwards to ISP , ISP forwards to FBI , then you go bye bye. 'sudo apt install mat' The syntax 'mat somephoto' . mat stands for the, Metadata - anonymisation- toolkit , you can pass -c check the files metadata or -d display , a list of all the harmful metadata of a file with/without removing them. Just by running 'mat thisphoto' will completely Sanitize the file, all metadata gets scrubbed from the image , unrecoverable . I was just joking about the first part of this comment, but when we have a tool for it , that works so well then I dont have to go to the net and upload something. I happen to use it on a daily , so when you brought up how to stay safe I had to mention 'mat'.

[@dionysus3774]

Wat? 😲

[@DDBAA24]

@Stefan J Have you ever heard of a subpoena ?

[@troeteimarsch]

@Steve just zero bytes 0 to a301 of your imagefile

[@supersoaka1621]

Thanks for thisss

[@mountaindtrix]

i dont have the exif tool on my system

[@dewaynewhite5318]

My friend👋👋👋👋

[@punitdarji1871]

Is it necessary sticking stickers?

[@yegorpl9973]

You re not a hacker if have no stickers. Go get some now

[@punitdarji1871]

@@yegorpl9973 Lol!! 😂😂 I am not a hacker

[@a---------------]

this guy doesnt blink

[@ZYNewski]

So photos on Facebook etc have the info stripped, correct?

[@DDBAA24]

Well now you can check , just use wget and download a photo from facebook and then just run it through exiftool and see what it dumps. If there is no metadata present the utility will let you know its clean.

[@omarcruz1811]

Can we di this with pdf ?

[@victorman931]

Cool video as always. Are you running kali linux directly on you hdd?

[@DDBAA24]

Ideally you want to actually install kali to a fast drive. It really depends on what you want to do with kali. If you want to use cracking utilities or anything resource intensive it will be exponentially slower running from a flash drive. In all the videos with raspberry pi he uses his Mac and ssh, when you see this other laptop (lenovo) he is running kali from the internal drive. Its worth it to run it from an ssd , you can get a SATA3 120GB Kingston SSD from amazon for $19.00 right now.

[@lqcertified3739]

The location doesn’t pop up on my screen

[@elvanmorris3708]

Hello bro your videos are quite cool but I think it's time you tell us how you managed to excape becoming an android robot , gezzzzzz YOU DON'T BLINK

[@NullByteWHT]

there is no escape

[@skysk3l3t0n]

i cant move it into the terminal some help?

[@NullByteWHT]

What's the problem, have you tried just pointing to the file destination?

[@skysk3l3t0n]

@@NullByteWHT so i actually made it work to move it but when i type the command and put the picture in it says it is not readable or does not contain EXIF data.

[@mnageh-bo1mm]

the most of online sites clear these info .......... so nice try !

[@kapadiyaraj9937]

which linux are used in this video

[@debragotenks]

@@SpaceTimeBeing_ Ubuntu DDE?

[@rockystho]

Hey! when I type "apt install exif" it says "'apt' is not recognized as an internal or external command, operable program or batch file" and it says the same thing if I type in "man exif" Please help lol

[@gabrielprado413]

Be sure that you are using a Linux operating system otherwise it won't work by any means. If you are a beginner I advice you to get Kali Linux,search in youtube videos on how to install it and be used to the tools there. Good luck bro!

[@rockystho]

@@gabrielprado413 thank you so much! I'll try that out!

[@harrydamour7564]

My friends 🙋‍♂️

[@YanisAllad]

No he's MY FRIEND

[@harrydamour7564]

@@YanisAllad ☹

[@yogeshgawas58]

Is there any way to remove this data from the image?

[@Cendar100]

I see 3 easy way : - Open your image with an editor then "save as" - Make à screenshot of it ;) - Use an Hex editor tested now on Windows : use "ExifDataView" (free from NirSoft) to view and find Hex value of my latidute/longitud, edit the image with the Hex editor "HxD" (free from mh-nexus) search for the Hex value previously found with ExifDataView and I raplace it by Hex value "00" Exemple: GpsLatitude : 50° 46' 40.78" Hex Value string : 00 00 32 00 00 00 01 00 00 00 2E 00 00 00 01 02 6E 32 30 00 0F 42 40 Replaced by : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 = GpsLatitude : 0° 0.0000'

[@yogeshgawas58]

@@Cendar100 amazing, thanks a lot but Facebook images does not give much info on EXIF

[@DDBAA24]

look for my comment on the top of the page , install mat 'apt install mat' and then 'mat somepic' mat is the Metadata Anonymization Toolkit. It strips and clean all that data from the image right from the terminal. Very easy.

[@MohaMed-BMM355]

You are the best

[@borutkulovec3695]

HI GREAT VIDEOS. I WOULD LIKE TO WRITTE SOMETHING ON EMAIL. CAN I..REGARDS

[@NOOTSMAZDAS]

Glad to find out that he isnt a robot 😶

[@motowyznawca8049]

How can I support you financially?

[@sagay3766]

Make the video on social media video exif plzzz

[@sofiamargaretha8786]

How to find someone just by photo? Anyone can help me?

[@emperorreload]

This guy doesn't blink at all

[@mikemcguire1160]

Readily available freeware for viewing images on a variety of platforms, IrfanView, will dump the EXIF tags with no problem, and offers to copy them to the clipboard if desired. What you will find there is whatever the manufacturer of the camera decided to put there, if it hasn't been through some processing program that rewrote the file. If it has, it will be what the coder of the program decided to put there, which may or may not be bogus.

[@znpz]

Sup mate try play with "cicada"

[@jP-nr5wo]

ZnPZ / FEAssn do you realize how old cicada is?? The original post is archived, because it’s from 2012.

[@thecleaner23]

Thank you