ExifTool
OSINT — Image & Media · Beginner
Read and write metadata in images, PDFs, and media files.
Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.
What to learn
- EXIF fields
- GPS privacy
- Batch processing
ExifTool — metadata & image OSINT
Media forensics (authorized images)
1. Extract metadata
`exiftool image.jpg` — GPS, device model, software, timestamps.
2. Strip for privacy
`exiftool -all= image.jpg` before publishing photos internally.
3. Correlate
Match device serials or GPS to other OSINT; pair with reverse image search for provenance.
Case study: Bellingcat and newsroom OSINT routinely use EXIF and shadow analysis — always verify with independent sources.
Example commands (lab VMs only)
- exiftool photo.jpgShow all metadata
- exiftool -gps:all photo.jpgGPS only