_TL;DR ꓘ_amerka has new cool features, right now you can search for Flickr and Instagram photos, printers and cameras from Shodan and Tweets (FIST). Everything is clearly presented in form of interactive map with icons and popups. https://github.com/woj-ciech/kamerka Introduction My main target was to create something helpful to geolocate places from pieces of information and last project ( ꓘamerka) wasn’t so good as I expected so major changes were needed. Social media are mine for various information including pictures, people make photos of everything — streets, parks, government buildings and lot of them are not aware about possibility to include location to the photo. Of course there is also big part of tagged pictures on purpose, for advertising purposes or just simply to brag. These people can help even without noticing it, some photos may point to location you were looking for, maybe my skills in will improve :) @quiztime - Gathering intelligence by observing specific territory ( )- See what’s going on in your city- Confirming latest dump from Wikileaks — part 2- Take virtual trip to any city Other usage: https://www.bellingcat.com/news/uk-and-europe/2018/11/06/open-source-monitoring-nato-trident-juncture-exercises/ Photo by on Matthew Henry Unsplash Flickr Flickr is one of the platform for sharing pictures and it’s more about nice views and artistic frames. 100 latest photos are retrieved with accuracy=16 but it still shows photos far away, so radius parameter in this case does not work properly. However, geolocation is the most accurate from every other service, which screen below confirms. root@kali:~/# python kamerka.py — lat 42.9708746 — lon -71.1272902 — flickr Example Flickr photo with geolocation Flickr API documentation — https://www.flickr.com/services/api/ Instagram I couldn’t register my application in official Instagram API, which then allows to search by coordinates, but I found another way with help of unofficial API, more details what to change and how to use it on github. Process of finding photos in this API is not very accurate, first it looks for known venues and then display photo from this address. First 5 newest photos of each venues are retrieved. In less crowded cities venues can be further than in given radius. Remember last article and cameras near secret Amazon warehouse from Wikileaks dump? It turns out that there are couple interesting photos nearby. root@kali:~/# python kamerka.py — lat xx,x — lon yy,y — instagram Photo from Instagram near “secret” Amazon warehouse Instagram API — https://github.com/LevPasha/Instagram-API-python Shodan Printers were added to the tool and same as camera — green icon means public access and red — response different than 200. Moreover, if camera contains screenshot, it will be also added to the popup. root@kali:~/# python kamerka.py — lat 45.504 — lon -73.5747 — camera — printer Map of printers and cameras You need to have paid subscription to use Shodan module Shodan API — https://developer.shodan.io/ Kudos for someone who will be able to find open camera pointing on open printer and record printing. Twitter There are a few pictures with geolocation on Twitter but still I’ve wanted to have it in place, though. By gathering tweets on specific location you can track society moods or some big events and protests. It’s fun to watch what people tweet in what places. Unfortunately you cannot escape from ads, so there are couple advertisements tweets and job offers. First 10 pages are searched and each page contain 100 possible geolocated tweets. If tweet has picture included, Twitter icon, on map, goes green. Tweets still could contain photos even if there is no picture in the popup. It’s because people add link to their Instagram photo so it’s worth to check full tweet, which link is at the end of every popup. root@kali:~/# python kamerka.py — lat -35.2826088 — lon 149.1231722 — twitter Tweets in Canberra Twitter API — https://dev.twitter.com/overview/documentation Everything combined At first sight it seems very blurry and messy but everything is interactive so if you zoom to specific point it becomes easily readable and you will have lot of fun playing with this.It’s recommended to open pictures in new window for better visibility. Oakland Miami Conclusion This tool creates a lot of opportunities for intelligence and geolocation purposes and at the same time giving you lot of joy. I tried to anonymize everything, so there is no usernames nor timestamps, because it’s more about places and things and not people. Of course I had no time to explore every city in the Earth but I strongly encourage you to take a look and try to find something cool.

Amazon

Instagram

Target

Twitter

Too Long; Didn't Read

Questions about cloud security? Get answers here.

Hunting with ꓘamerka 2.0 aka FIST (Flickr, Instagram, Shodan, Twitter)

Too Long; Didn't Read

Companies Mentioned

Wojciech

About Author

TOPICS

THIS ARTICLE WAS FEATURED IN...

Hunting with ꓘamerka 2.0 aka FIST (Flickr, Instagram, Shodan, Twitter)

Too Long; Didn't Read

Companies Mentioned

Wojciech

About Author

TOPICS

THIS ARTICLE WAS FEATURED IN...

RELATED STORIES