广告即情报——探索广告情报在精确定位个人位置方面的能力.pdf

1、Ads as Intel:Exploring ADINT Capability to Pinpoint Personal LocationsSasha ZyuzinSANS OSINT SUMMIT 2025February 251Well And who is notwatching you nowadays?2History0103050204Plan for the next 30 minCapabilitiesLimitationsMethodologyCosts06Potential3History014The beginning of it all5Methodology 026S

2、tart with something easy1)Use auditory analysis service2)Prepare an email samplerandom_or_nonexistent_email_random_or_nonexistent_email_random_or_nonexistent_email_random_or_nonexistent_email_X3)Analyze first chosen sample7Start with something easy5)Add targets email to the samplerandom_or_nonexiste

3、nt_email_random_or_nonexistent_email_random_or_nonexistent_email_random_or_nonexistent_email_Xtarget_6)Analyze new chosen sample8Compare the results:?9Ads-wiseTarget zone(a ton of people)People from here probably dont travel to DC10How to find our target?99.9%probability none of these people will be

4、 in DCAnd our target is in DCDone-we can now view the ads statsmiddleofnowhere_email_middleofnowhere_email_middleofnowhere_email_middleofnowhere_email_middleofnowhere_email_11How to track the location?112How to track the location?1213How to track the location?123141)Use trackersHow to improve it eve

5、n more?2)Use more trackers3)Use open cameras4)Stay creative Not only loggers(like pixels),but also metrics!You can profile the userThere are services that allow you to get contact information of the site visitorsMight be a challenge to find needed location15Capabilities0316 depend on a source1.Inter

6、ests2.Age3.Gender4.City5.Busyness6.Device type,OS,7.Income8.History of site visits9.Recent searches 10.Birthday11.Trips abroad12.Categories of incoming calls 13.Message senders names14.Family15.Wow you actually read this17What if you automate it?Map of movements1.Live map of move