Cybersecurity Vault β€Ί Become a Digital Detective
Advanced

Become a Digital Detective πŸ•΅οΈ

Let's use AI to find clues hidden across the internet and solve a mystery!

Ready for a mission? We're about to play the ultimate game of digital cops and robbers. To be a great cyber defender (a 'cop'), you first have to learn the tricks of the attackers (the 'robbers'). We'll learn how to find digital "breadcrumbs" left on public websites. This is called Open Source Intelligence (OSINT), and it’s our training ground for becoming a master digital detective.

First, let's gear up. This is your Mission Hub. Click a tool to select it and jump right into the action!

πŸ”Ž

Username Hunter

See where a username appears online.
πŸ“Έ

Photo Inspector

Find secret data hidden in images.
πŸ—ΊοΈ

The Case File

Combine the clues to solve the mystery.

πŸ•΅οΈ Watch & Find Challenge

Watch the first 2 minutes of this video about OSINT. Can you find the answer to this question: What is one example of a "digital breadcrumb" you can find online?

Tool #1: The Username Hunter

Let's start by thinking like an attacker. Our first tool hunts for a single username across thousands of websites. This is how 'robbers' build a profile on a target. We'll investigate a fictional user, 'PixelPirate99', to see just how much information is out there. Type their name into your AI-powered hunter and see where they've been online!

Terminal output will appear here...

πŸ›‘οΈ Safety Check: The Detective's Code

Being a digital detective is about understanding how to protect yourself and others. The number one rule is to only investigate your OWN accounts to see your digital footprint. Using these tools on friends or strangers without their permission is a major invasion of privacy and is not cool or ethical. We're learning this to be safer, not to be sneaky! Remember the code: Protect yourself, respect others.

Level Up: The Real Tool

Our tool is a safe simulation. The real tool used by cybersecurity pros is a Python script called Sherlock. With a parent's help, you can run the real thing!

Why use a command-line tool? It's faster, more powerful, and you can even build it into your own programs! It's the difference between driving a car and building the engine.

πŸ‘¨β€πŸ‘©β€πŸ‘§

Pro Tip for Parents & Advanced Explorers

That link goes to GitHub, a library for code that programmers use. To a pro, this page is a treasure map! A great first step together is to open a terminal (or PowerShell on Windows) and run this command: git clone https://github.com/sherlock-project/sherlock.git. You just downloaded a real cybersecurity tool like a pro!

After cloning, type cd sherlock to enter the new directory. Then, run pip install -r requirements.txt to install the tools it needs. Now you're ready to run a real investigation with python3 sherlock.py --help!

πŸ’» Interactive Code Corner: How It Thinks

The AI simulation you just ran? It's following a plan just like this one, but for hundreds of websites at once. The Sherlock tool isn't magic. It's just a clever script that checks a list of websites. Try changing the username below and see how the "plan" changes!

Checking: https://www.reddit.com/user/PixelPirate99
Checking: https://www.tiktok.com/@PixelPirate99
Checking: https://github.com/PixelPirate99

See? It's just a fast, organized checklist. You'll learn how to build tools like this in our Python track! πŸš€

Tool #2: The Photo with a Secret 🀫

Here's another 'robber' trick: finding secrets hidden in plain sight. Think of a digital photo like a postcard. You see the picture on the front, but on the back, there's a secret message written in invisible ink! This 'ink' is called EXIF data, and it can tell you exactly where and when the photo was taken. Learning to read this invisible ink helps us, the 'cops', understand how important it is to protect our own photos.

Ask our AI to inspect a "suspect photo." Just describe the photo, and the AI will show you the hidden data.

Metadata will appear here...

Powerful, right? This shows you the data that's being broadcast unless you take steps to control it. This is why many social media sites automatically strip this data from photos you upload. But not all of them do! It's a great reason to turn off location tagging for your phone's camera.

πŸ”¬ Advanced Challenge: The EXIF Experiment

Ready to be a real digital scientist? With a parent's permission:

  1. Take a non-personal photo (of a book, your shoe, anything!). Make sure your phone's camera has location services ON for this experiment.
  2. Use a free online EXIF viewer to see the metadata. Can you find the GPS coordinates?
  3. Now, upload that photo to a test social media account, and then re-download it to your computer.
  4. Check the EXIF data on the downloaded picture. Is it still there?

You just performed your own digital forensics experiment to see how different platforms handle your private data! That's awesome.

Pro-Tip: Web-based EXIF viewers are great, but cybersecurity pros often use command-line tools like ExifTool. Why? It's faster, can be used in scripts to analyze thousands of images at once, and it works offline, which is better for privacy.

🚨 CASE FILE: The 'GlitchCat7' Cypher 🚨

An anonymous digital artist known as 'GlitchCat7' is planning a secret pop-up art installation. They've left a trail of digital breadcrumbs for followers to find the location. Your mission is to crack the code before the official announcement.


SUBJECT: Anonymous artist using the handle 'GlitchCat7'.

EVIDENCE: One photo posted by the suspect.

YOUR MISSION DASHBOARD:

  • πŸ† Objective 1: Use the Username Hunter to find 'GlitchCat7's other hangouts. Enter their name into the tool above.
  • πŸ“Έ Objective 2: Use the Photo Inspector on the suspect's photo. In the prompt box, type: "Analyze the art photo posted by GlitchCat7."
  • πŸ—ΊοΈ Objective 3: Connect the clues! Use the location from the photo and the posts you found to solve the case below.

FILE YOUR FINAL REPORT:

πŸ“š Learn More & Keep Exploring

  • Cyber Puzzles: Ready for more? With a parent, check out PicoCTF. It's a free game that turns cybersecurity into a series of awesome challenges.
  • Command-Line Hacking: For a real challenge, try the Bandit Wargame. It teaches you real Linux commands in a safe, game-like environment.
  • Pro Tools: The OSINT Framework is a massive map of tools real detectives use. Explore it with a parent to see just how deep the rabbit hole goes!