Open-Source Intelligence

OSINT

Open-source intelligence: LSB steganography, decoy flags, EXIF and metadata deception, recovering force-pushed git history, and geolocation from imagery.

2 write-ups

Westbound Kestrel Maritime is being extorted by an actor called nulltide. He claims to have planted a marker inside an encrypted export. We get phish.eml and offline copies of four of his sites (blog, file locker, git repo, vault). The README warns:…
Golden Hour "Stop pointing" refers to git refs: a force-push moves a branch to new commits, but the old commits are still on GitHub. "Walked away from" refers to an old LinkedIn handle and earlier commit history. "Locked" is the client-side encrypted…