https://github.com/aydinnyunus/exifLooter

ExifLooter finds geolocation on all image urls and directories also integrates with OpenStreetMap
https://github.com/aydinnyunus/exifLooter

bug-bounty bugbounty cyber-security exif exif-metadata exiftool golang hack hacking image metadata metadata-extraction osint redteam security

Last synced: 3 months ago
JSON representation

ExifLooter finds geolocation on all image urls and directories also integrates with OpenStreetMap

• Host: GitHub
• URL: https://github.com/aydinnyunus/exifLooter
• Owner: aydinnyunus
• License: apache-2.0
• Created: 2022-07-30T12:51:43.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2024-07-14T13:38:18.000Z (6 months ago)
• Last Synced: 2024-08-02T15:47:45.925Z (6 months ago)
• Topics: bug-bounty, bugbounty, cyber-security, exif, exif-metadata, exiftool, golang, hack, hacking, image, metadata, metadata-extraction, osint, redteam, security
• Language: Go
• Homepage:
• Size: 9.37 MB
• Stars: 414
• Watchers: 9
• Forks: 23
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
[![Contributors][contributors-shield]][contributors-url]

[![Forks][forks-shield]][forks-url]

[![Stargazers][stars-shield]][stars-url]

[![Issues][issues-shield]][issues-url]

[![MIT License][license-shield]][license-url]

[![LinkedIn][linkedin-shield]][linkedin-url]






  

  

Exif Looter


  


    


    Explore the docs »

    


    


    ·

    Report Bug

    ·

    Request Feature

  


  Table of Contents

  


    


      Getting Started

      


        
Installation

      

    

    


      Usage

         


            
Analyze specific image

            
Analyze specific directory

           
Pipe with other tools

           
Remove metadata from Images

           
Get Open Street Map URL

         

   

    
Reports

    
Roadmap

    
Contributing

    
License

    
Contact

  


## Getting Started

General information about setting up Exif Looter locally

## Installation

```bash

go install github.com/aydinnyunus/exifLooter@latest

```

ExifLooter depends on [exiftool](https://exiftool.org/), so make sure it is on

your PATH.

---

On [Kali Linux](https://www.kali.org/tools/exiflooter/)

```bash

sudo apt install exiflooter

```



## Usage

### Analyze Image

After you have install requirements , you can simply analyze the image via:

```shell

   $ exifLooter --image image.jpeg

```

![Image](images/2022-07-30_16-24.png)

![Image](images/2022-07-30_16-25.png)

### Analyze Directory

If you want to specify directory use this command:

```shell

   $ exifLooter -d images/

```

### Pipe

If you want to pipe with other tools use this command:

```shell

   $ cat urls | exifLooter -p

   $ cat urls | exifLooter --pipe

   $ cat subdomains | waybackurls | grep "jpeg\|png\|jiff\|jpg" >> urls; cat urls | exifLooter --pipe

```

### Remove Metadata

Remove Metadata from Images

```shell

   $ exifLooter --remove --image image.jpeg

   $ exifLooter --remove --directory images/

```

### Open Street Map

Get Open Street Map URL from GPS Location

![Image](images/2022-07-31_16-17.png)

```shell

   $ exifLooter --open-street-map --image image.jpeg

   $ exifLooter --open-street-map --directory images/

```

![Image](images/2022-07-31_16-12.png)

## Reports

Bugcrowd’s Vulnerability Rating Taxonomy

 

![P3](images/2022-07-30_16-29.png)

![P4](images/2022-07-30_16-29_1.png)

**Example Hackerone Report** : https://hackerone.com/reports/906907 $200

**Example BugCrowd Report** : https://medium.com/@souravnewatia/exif-geolocation-data-not-stripped-from-uploaded-images-794d20d2fa7d $500

## Roadmap

See the [open issues](https://github.com/aydinnyunus/exifLooter/issues) for a list of proposed features (and known issues).

## Contributing

Contributions are what makes the open source community such an amazing place to learn, inspire, and create. Any

contributions you make are **greatly appreciated**.

1. Fork the Project

2. Create your Feature Branch (`git checkout -b feature/AmazingFeature`)

3. Commit your Changes (`git commit -m 'Add some AmazingFeature'`)

4. Push to the Branch (`git push origin feature/AmazingFeature`)

5. Open a Pull Request

## License

Distributed under the Apache License 2.0 License. See `LICENSE` for more information.

## Contact

[](https://linkedin.com/in/yunus-ayd%C4%B1n-b9b01a18a/) [](https://github.com/aydinnyunus/exiflooter) [](https://instagram.com/aydinyunus_/) [](https://twitter.com/aydinnyunuss)

[contributors-shield]: https://img.shields.io/github/contributors/usestrix/cli.svg?style=for-the-badge

[contributors-url]: https://github.com/aydinnyunus/exifLooter/graphs/contributors

[forks-shield]: https://img.shields.io/github/forks/usestrix/cli.svg?style=for-the-badge

[forks-url]: https://github.com/aydinnyunus/exifLooter/network/members

[stars-shield]: https://img.shields.io/github/stars/usestrix/cli?style=for-the-badge

[stars-url]: https://github.com/aydinnyunus/exifLooter/stargazers

[issues-shield]: https://img.shields.io/github/issues/usestrix/cli.svg?style=for-the-badge

[issues-url]: https://github.com/aydinnyunus/exifLooter/issues

[license-shield]: https://img.shields.io/github/license/usestrix/cli.svg?style=for-the-badge

[license-url]: https://github.com/aydinnyunus/exifLooter/blob/master/LICENSE.txt

[linkedin-shield]: https://img.shields.io/badge/-LinkedIn-black.svg?style=for-the-badge&logo=linkedin&colorB=555

[linkedin-url]: https://linkedin.com/in/aydinnyunus

[product-screenshot]: data/images/base_command.png

[latest-release]: https://github.com/aydinnyunus/exifLooter/releases