Information is the life blood of the social engineer.  “There is no such thing as bad data”, is the SE Mantra.  Our guest this month, Nick Furneaux, well known forensics expert in the UK discusses his new area of research into API Manipulation. Date Nov 12, 2012

Download

Episode 039:  Information Gathering on Steroids Nov 12, 2012

 

Our new poll will be part of a study in trust. If you want to participate in the study, please email us at [email protected] for more details.  WE NEED HELP!!

Check out Spy Associates for some awesome social engineering gear.

Want daily security news? Join the great guys (except for JadedSecurity) at the ISD Podcast (ISD Podcast discontinued February 2013).

And don’t forget to start registering for our class in DerbyCon called Advanced Submission Techniques

View on iTunes

Get Involved

Got a great idea for an upcoming podcast? Send us a quick message on the contact form!

Enjoy the Outtro Music? Thanks to Clutch for allowing us to use Emily Dickinson as our new SEPodcast Theme Music

And check out a schedule for all our training at Social-Engineer, LLC.

Check out the Innocent Lives Foundation to help unmask online child predators.

Show Notes

Ep. 111
Our guest this week is a notorious forensics guru from the UK, Nick Furneaux.  Nick discusses with us the magic of API manipulation.  He gave us some free “posh” tips for making websites dump the data we want as social engineers.  Try these things below:

Download and install the Firefox addon – JSONView

Try:-

https://api.twitter.com/1/users/lookup.json?screen_name=BarackObama

https://api.twitter.com/1/users/lookup.json?screen_name=MittRomney

http://code.google.com/apis/ajax/playground/

The last one will find all tweets within 2 miles of the GPS coors (central london) that contains the words London Riot.  Replace as desired!

http://search.twitter.com/search.json?q=london%20riot&geocode=51.50733,%20-0.12768,2ml&include_entities=true&result_type=mixed

This type of data mining can lead to searchable and impressive results for any social engineer.

Follow Nick on his twitter account, NickFX

Nick’s recommended reading list: Open Source Intelligence Techniques: Resources for Searching and Analyzing Online Information by Michael Bazzell

Till next month

BACK TO PODCASTS