{"id":1110,"date":"2020-11-07T09:58:40","date_gmt":"2020-11-07T09:58:40","guid":{"rendered":"https:\/\/osintme.com\/?p=1110"},"modified":"2020-11-07T14:55:28","modified_gmt":"2020-11-07T14:55:28","slug":"introducing-the-google-account-finder-and-its-creator-sylvain-hajri","status":"publish","type":"post","link":"https:\/\/osintme.com\/index.php\/2020\/11\/07\/introducing-the-google-account-finder-and-its-creator-sylvain-hajri\/","title":{"rendered":"Introducing the Google Account Finder and its creator, Sylvain Hajri"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Some time ago when researching Google email addresses and accounts, while at the same time seeking new investigative tools, I came across a browser based Google Account Finder<\/a>.<\/p>

The tool was built by Epieos<\/a>, a relatively new French player on the OSINT scene.<\/p>

Having primarily used Linux command line based open source tools for email and user name research, I was intrigued by the ease of searching enabled by the Google Account Finder.<\/p>

By simply probing an email address we can obtain a lot of useful information associated with the entire Google account. To illustrate, I used a Gmail address recently reported<\/a> to be involved in romance scams.<\/p>

So this is the information you can pull using the Google Account Finder:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Not everything will be readily accessible here (my guest elaborates on that), but there are some pivot points that can be explored further.<\/p>

To understand all of it better, I reached out to the person who is behind the company and the Google Account Finder – Sylvain Hajri.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
I understand the value of both website based and script based tools, but I want to give access to these tools to everybody, not only the technical people.<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t
Sylvain Hajri<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t
@navlys_<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Hello Sylvain. To begin with, what\u2019s your background, how did you end up in OSINT?<\/span><\/b><\/p>

I have been involved in the wider OSINT community for at least 8 years. I have been working<\/span><\/span>\u00a0in infosec \/ cyber security industry, <\/span><\/span>including<\/span><\/span> for the past year I have <\/span><\/span>operated<\/span><\/span> my own company in the OSINT domain<\/span><\/span>,<\/span><\/span> mainly to keep myself updated with what\u2019s happening but also to try some new things.<\/span><\/span><\/p>

The main reason to delve into OSINT was my own OPSEC \/ privacy: identifying what information other people can find on me. We\u2019re talking around 2010 or so, the time when the Facebook graph search was still working!<\/span><\/p>

I also studied cybersecurity in France, so I learned a lot about networks, routers, servers, general IT stuff. And I also studied offensive security, OSINT is a big part of that. I then went to work for Orange, the telecommunications company. I got involved in CTFs, I worked as a consultant and specialised in red team <\/span>at digital.security<\/span>, preparing spear phishing campaigns <\/span>and physical intrusions attacks<\/span> as part of penetration testing efforts.<\/span><\/p>

So now I have my own OSINT company. Which I have to say I am finding challenging right now, things are difficult during the covid-19 restrictions. Training sessions in businesses don\u2019t happen as often as they used to. You can do them remotely but I always prefer to do training in real life, especially when you can do a bit of travel while you\u2019re at it.<\/span><\/p>

Is this how you got the idea for the Google Account Finder?<\/span><\/b><\/p>

No, the idea for it came earlier, as result of the collaboration with a friend online <\/span><\/span>I met <\/span><\/span>within<\/span><\/span> the OSINT community <\/span><\/span>@FrOsint<\/span><\/a> (a community which I co-founded, by the way). <\/span><\/span>I<\/span><\/span>n December 2019 or so I read a\u00a0<\/span><\/span>post by Sector035<\/a><\/span><\/span><\/span>\u00a0on Google IDs, so his write up prompted me to think about it more intensively.<\/span><\/span><\/p>

I decided to build on and improve the methodology he outlined by creating a website based tool. This is a much better solution for training purposes, especially when dealing with a less technical audience.<\/span><\/p>

A website-based tool offers simplicity and usability, portability too. Yes, you can use command line tools and scripts. Sometimes they work better and are more accurate, they pull more detailed information.<\/span><\/p>

As somebody who has trained journalists and generally people from outside of our line of work, I understand the value of both website based and script based tools, but I want to give access to these tools to everybody, not only the technical people.<\/span><\/p>

How would you describe the primary use case for the Google Account Finder?<\/span><\/b><\/p>

I have used it for red teaming. You can find and collaborate a lot of information too, like a individual\u2019s name with their profile photo <\/span>(<\/span>which you can <\/span>use<\/span> for<\/span> reverse image search)<\/span>and email address. Google Reviews are also handy to profile people and their activity online, what shops or services they go to, what they enjoy, it can be handy for preparing spear phishing attacks for pentesting purposes.<\/span><\/p>

The Last Update timestamp \u2013 you can link accounts that are active during the same timeline. Funny enough, when it comes to these details and how useful they can be without knowing what Google does with them, I am as blind to it as everybody else.<\/span><\/p>

Maybe that timestamp is the last time when you accepted the terms and conditions from Google? Google sends timestamp updates to each account whenever that happens, but this is not very precise. I don\u2019t know exactly.<\/span><\/p>

I only grab the information and display it, I don\u2019t analyse anything.\u00a0Creativity is all though. You can use the tool for other things.<\/span><\/p>

For example, you can check which companies use Google\u2019s G-Suite for their email infrastructure. Even when an address has a custom domain name instead of the \u201c@gmail.com\u201d domain with it, it can still be powered by Google and be successfully queried by the tool.<\/span><\/p>

What was your most interesting find when doing OSINT with the Google Account Finder?<\/span><\/b><\/p>

Honestly, I don\u2019t use it much!<\/span><\/p>

I have several projects that I am currently working on, including the development of a new tool. I don\u2019t really have the time for conducting investigations, so I mainly concentrate on developing the tools now.<\/span><\/p>

But I also focus on gathering feedback, so I heard some good stories about interesting finds!<\/span><\/p>

The most interesting stuff with a wealth of information can be found in publicly accessible Google Calendars. But these are pretty rare to find, the ratio of open calendars is I would say 1 to 1000, maybe even lower than that.<\/span><\/p>

By the way, the new tool I am developing will be focused on phone numbers and their reputation, presence on social media, identifying burner phone numbers, etc. So stay tuned for it!<\/span><\/p>

Let me ask you about something that can often be a ball and chain for OSINT investigators \u2013 GDPR\u2026<\/span><\/b><\/p>

I\u2019m good with GDPR because I don\u2019t log anything or store any\u00a0 data anywhere.<\/span><\/p>

I use only publicly available sources, nevertheless I still had people contacting me, demanding that I remove their information from public search. The people who want their records removed need to go to Google or mobile phone providers, not to me.<\/span><\/p>

OSINT tools, including the Google Account Finder, are based on what people upload or share and what is already publicly available.<\/span><\/p>

I provide automation to manual searches. I understand the people who may be annoyed, I want to protect privacy too, including my own.<\/span><\/p>

These tools can offer a good lesson in showing people what information is available and what can be seen by the outsiders. Like reviews that allow you to know your favourite places or calendars being made public and left open; but as I mentioned, these are rare.<\/span><\/p>

It\u2019s been great talking to you Sylvain, thank you for your time. Is there anything you would like to add as we wrap this up?<\/span><\/b><\/p>

Thanks for the interest in Google Account Finder, I hope it\u2019s useful.<\/span><\/p>

You can follow me on Twitter on @navlys_<\/a> and also follow the news of my company @epieos<\/a>. <\/span>W<\/span>e want to make OSINT as accessible as possible <\/span>and produce some new exciting projects.<\/span><\/p>

So follow us and don\u2019t forget to give feedback and ideas for the Google Account Finder!<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Google accounts can contain a lot of valuable information, some of which can be easily obtained from the linked Gmail address. This is now made even easier, thanks to the Google Account Finder.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[90],"tags":[23,117,114,39,58,45],"class_list":["post-1110","post","type-post","status-publish","format-standard","hentry","category-conversations-debriefs","tag-browser","tag-email","tag-google","tag-interview","tag-opsec","tag-profiling"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/posts\/1110","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/comments?post=1110"}],"version-history":[{"count":34,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/posts\/1110\/revisions"}],"predecessor-version":[{"id":1152,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/posts\/1110\/revisions\/1152"}],"wp:attachment":[{"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/media?parent=1110"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/categories?post=1110"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/osintme.com\/index.php\/wp-json\/wp\/v2\/tags?post=1110"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}