Home β€Ί The Digital Detective Agency
🎣 Module 04 · Intermediate

The Digital Detective Agency

What if you could solve mysteries using clues everyone else misses? Welcome to the world of OSINT, where you'll learn to see the internet like a super-sleuth! πŸ•΅οΈβ€β™€οΈ

πŸ›‘οΈ WHITE HAT OATH: A true detective protects people. Never use these skills to track, scare, or share private information about real people. We build shields, not spyglasses!
πŸ•΅οΈ

Your First Case: The Hidden Clues

Imagine you're a detective! πŸ•΅οΈ There are two big ideas you need to know. The first is OSINT, which stands for Open Source Intelligence. That’s a fancy way of saying "finding clues that are hiding in plain sight." Think of it as looking at a public photo and noticing a tiny detail in the background that solves a puzzle.

The second is Social Engineering. This is when a trickster tries to *fool* you into giving them a clue, like your password. Today, we're going to learn how to spot these tricks by becoming super-sleuths!

Photo_Details.txt

Camera: Phone_XYZ
Time: 4:32 PM
Lens: f/1.8
πŸ“ GPS: 123 Main Street

πŸ•΅οΈ Security Clearance Quiz

If you post a picture of your dog online, what invisible data might be hiding inside the image file, giving away your location?

The dog's breed.
EXIF metadata (GPS coordinates and time).

So, how do these two ideas connect? Simple. A social engineer (the trickster) first uses OSINT (the public clues) to learn about their target. They might see you post a photo of your dog, learn its name from the caption, and then use that name as a guess for your password! That's why we learn to defend against bothβ€”by thinking like a detective. 🧠

πŸ“Ί This video shows you just how powerful OSINT can be!

πŸ›‘οΈ Safety Check

Awesome detective work requires awesome safety habits. With a parent, go to your phone's camera settings right now and make sure "Location Tags" or "GPS Tags" are turned OFF. This stops your photos from sharing your location with the world!

⚑ DIGITAL DETECTIVE CASE FILE

Case #001: The Mystery Landmark

Your turn, detective! Let's use a real OSINT technique called a "Reverse Image Search" to identify this mystery location.

  1. Right-click on the image below and select "Save image as..." to save it to your computer.
  2. Open a new tab and go to Google Images. Click the little camera icon (πŸ“· "Search by image").
  3. Upload the file you just saved.
  4. What is the famous name of this bridge? Type your answer below!

Anatomy of an Attack

Tricksters use different kinds of social engineering to get information. Here are the most common:

  • Phishing: Using fake emails or websites to trick you into entering your password.
  • Vishing: Voice phishing! This is when someone calls you and pretends to be from a bank or tech support to get your info.
  • Pretexting: Making up a story (a "pretext") to get you to do something, like "I'm from the prize department, I just need your address to mail your new game console!"

🚨 Spot the Phish! Can you find the red flags? 🚨

From: Amazom Support <[email protected]>

Subject: URGENT: Your Acount is Locked!

Dear Customer,

We detected a problem with your acount. To fix, please click here to verify your details immediately: http://bit.ly/login-amazom

Professionals use frameworks to organize their OSINT tools. Check out osintframework.com to see a map of the tools real investigators use. You don't need to use them, but just seeing the map shows you how big this world is!

πŸ”§ Code Lab: Scrubbing a Photo

Here's how a programmer might write a simple Python script to automatically remove that hidden GPS data (EXIF) from a photo!

from PIL import Image

def scrub_exif(image_path):
    # Open the image
    image = Image.open(image_path)
    
    # Get pixel data without the extra info
    data = list(image.getdata())
    image_without_exif = Image.new(image.mode, image.size)
    image_without_exif.putdata(data)
    
    # Save the clean image
    image_without_exif.save("scrubbed_photo.jpg")
    print("EXIF data removed! ✨")

scrub_exif("my_dog_photo.jpg")

πŸ‘¨β€πŸ‘©β€πŸ‘§ Parent Corner: Talk About Your Digital Footprint

Parents, this is a great moment to learn together. Ask your young detective to show you how they checked for a photo's hidden data (its "EXIF data"). You can use a safe online tool to upload a photo (not a personal one!) and see what info is attached. Then, work together to check the location and privacy settings on your family's phones and apps. It's a 5-minute conversation that builds great digital safety habits!

πŸ“š Learn More