HowToOSINT - How to Geolocate with Overpassturbo

大学を卒業した方、もしくは現在大学生の方、大学って広すぎて大変ですよね😭

しかし、時々他の教室や研究室を覗き見てみたい方もいるはず!

私は暇なとき何の意味もなく学校中をうろうろしたことがあります(笑)

そこで今回はある大学のキャンパスでのクイズです。

結構年季が入っていて、地下室もあるし、心理学の地下室研究所かな?などと想像心を掻き立てられることです。

f:id:yzdPjRJp19tOiOG:20220412143332j:plain

https://twitter.com/twone2/status/1491509064832012290

解決策1

さて、クイズの主題はまずどこにあるのか探すことです。

ツイートにボン大学とあるので学部を検索してみます。

Search: university of bonn faculty

www.uni-bonn.de

この大学には7つの大学があり、とりあえず上から順にブルートフォースしてみました。

調べたのは"プロテスタント神学部"、"カトリック神学部"、"農学部"の順です。

Street Viewで

学部内、周辺地域を徘徊すると発見↓

f:id:yzdPjRJp19tOiOG:20220412144130j:plain

https://www.google.de/maps/@50.7258535,7.0887977,3a,15y,263.8h,88.28t/data=!3m6!1e1!3m4!2e0!9m2!1b1!2i38

Location: Rheinische Friedrich-Wilhelms-Universität Bonn の農学部

 

個人的にはただブルートフォースしただけでかなり力がついた自信があったので終了したが、他にもいい方法があったので紹介させていただきます。

 

解決策2

地下室を検索する。以下ツイート:

そういや地下室あったなw、と気づいた時にはすでに遅し。

ここから探した方が効率よかったですね。

www.geographie.uni-bonn.de

解決策3

3つ目は効率よくジオロケーションするために、マニア向けのツール"Over Pass Turbo"を使います。このツールは使い方が少し難しいので、プログラミングをやったことある方でないと厳しいと思います。

ツールの使い方は下記に記しておきます。

f:id:yzdPjRJp19tOiOG:20220412150743j:plain

https://overpass-turbo.eu/

場所は真ん中の研究所です。いや〜すごいですね(・Д・)

1件1件見て行ったのがバカらしくなってきましたよ、、、

コードは下記ツイートから↓

 

資料1: Getting Started With Overpass Turbo – Part 1 – NixIntel

資料2: Getting Started With Overpass Turbo – Part 2 – NixIntel

Quiztime - Fish Stone Statues and Geolocation

How many people can look at this statue and come to this answer?
This Quiztime was very difficult and even the versatile OSINT community could not solve it without hints. I did not get to the end, but I will present half of my personal investigation and the other half of the solution by others at the end.

f:id:yzdPjRJp19tOiOG:20220406204057j:plain

https://twitter.com/kollege/status/1483526186525470729?s=20&t=bt5ubQkG48FSfjeudg0TNw

Resolution

At first, I didn't think the quiz would be that difficult. As usual, I was scrolling through the screen, giving parameters in the image search. Most people would intuit that it was a coelacanth when they saw the image. However, I searched all over Europe and could not find it. Here I had already spent four hours in image search.

My eyes were getting tired, so I looked at other people's posts and found that, unusually, the problem had not yet been solved. Could it be a coelacanth? I wondered and searched again with the help of other people's hints. Apparently, European sea bass and walleye are suspect.

But still we couldn't find it. I didn't know because I had never seen any structure around the statue, except for the fish. I gave up at this point and asked the person who gave me this quiz to give me a hint.

He said he had made a transatlantic crossing, and since the Quiztime organizers are based in Germany, I wondered if he had gone to the US either on vacation or on business. I looked at as many of the contributors' social networking sites as I could here. I found the following posts.

It turned out that he had gone to the United States, after all.
So far I had found out, but I did not proceed further.
Suddenly, other respondents said they could guess New York from the tiles, railings, and piers. Could they be locals?

Well, I got another hint: "Look south," apparently.

Well, I got another hint: "Look south", apparently. When I say south of New York City, I might be talking about Manhattan.

And finally, a fierce competitor who had found out the location appeared.
The location turned out to be "Whitehall St-South Ferry subway station" - on the platform.

How was it? If you are confident, please give it a try.

Quiztime - Logo Verification Challenge

Each person should have something important to offer.
However, it would be sad if they suddenly disappeared one day.
Today's quiz was not about geolocation, but about the feelings people put into it and the events that changed its history.
Below is the quiz by @twone2 :

f:id:yzdPjRJp19tOiOG:20220407074755j:plain

https://twitter.com/twone2/status/1509427049253027843?s=20&t=5WXxjzNv7CwCfKZMMDY1tQ

The question is: "What is the (current) story behind this logo?

I did an image search and found Stadt Köln.

de.wikipedia.org

Apparently, part of the logo that has been a symbol of Köln for many years is being erased.The reason for this is that they are trying to get rid of old customs that don't fit in with the modern world.Naturally, some people are against it, and the city is busy responding.

www1.wdr.de

www.zeit.de

The two spire of Köln Cathedral have been removed, and the new logo has completely removed the tower and is all red. It seems to be an unacceptable fact for especially enthusiastic Catholics.

f:id:yzdPjRJp19tOiOG:20220407081106j:plain

https://www.welt.de/regionales/nrw/article237969451/Neues-Logo-fuer-Koeln-Dom-nicht-mehr-dabei.html

Quiztime - Architectural Model Challenge

The OSINT quiz has a number of quizzes that geolocate distinctive buildings.
This time, the quiz is to figure out a certain model and locate the building.
We ask you to take it easy ...

f:id:yzdPjRJp19tOiOG:20220405175126j:plain

https://twitter.com/LarsWienand/status/1503798847453155330?s=20&t=BIDnrYMpMWrhIGC187Aang

Geolocation

There are a total of three words in the image.
The meanings are as follows :
・SAAL (Room)
・TRIBÜNE (theater)
・STANDORT (location)

Apart from the word, when I saw this picture I thought it resembled some architecture, either a concert venue or the Capitol Building.

More similar looks like the Parliament building, so I decided to search around Germany since it is in German. When I was looking for it, I noted that, as far as I could tell from the images, it was small in size for a parliament building. Therefore, I narrowed down my search again to only regional parliaments and only three seats from the front, and found a summary site for 16 German states, which I looked at in order, and Rhineland-Palatinate seemed suspicious.

www.deutschland.de

www.landtag.rlp.de

I looked at the answers of other respondents and apparently they were correct, but I could not find a model of the quiz that was given and the three words in the image did not make sense.

f:id:yzdPjRJp19tOiOG:20220406182203j:plain

https://www.google.com/maps/place/Landtag+Rheinland-Pfalz/@50.0053641,8.2718062,180m/data=!3m1!1e3!4m12!1m6!3m5!1s0x0:0x60f0bc0296f082ff!2sDeutschhaus!8m2!3d50.0052915!4d8.2718623!3m4!1s0x47bd970398be2e5d:0x308d83462a1c37f5!8m2!3d50.005401!4d8.271727?hl=de

 

Quiztime - Archiving Challenge

There are resources available to help you find information that is outdated or has been erased. That is the Internet Archive. Using the archive, it is possible to obtain old information or exclude Web sites that have already been deleted. At OSINT, the archive is essential for detailed verification of past and present information and can be the smoking gun.
This quiz has three questions. You must identify a property that was discussed some time ago, locate it, and, as in the previous SOCMINT quiz, find the finder.

f:id:yzdPjRJp19tOiOG:20220405170949j:plain

https://twitter.com/twone2/status/1486381876914933771?s=20&t=BIDnrYMpMWrhIGC187Aang

SOCMINT

First, I did a search based on 'private compact courtyard garden', which seems to be the key word in this case.
Apparently the finder is an architect named @LukeMNeve.

Archive

I found information about the property in the reply from the tweet I just sent.

f:id:yzdPjRJp19tOiOG:20220405171805j:plain

https://www.rightmove.co.uk/properties/119110382#/?channel=RES_BUY

However, it seems that the property information has already been erased now, so I tried to find the information before it was erased using wayback machine, an archive site. I found the information on the 24th, one day before it was posted.

f:id:yzdPjRJp19tOiOG:20220405171944j:plain

https://web.archive.org/web/20220124180617/https://www.rightmove.co.uk/properties/119110382#/?channel=RES_BUY

However, I found that it was deleted, but I could see it without using the archive as usual, so I guess I didn't need to.

Geolocation

The "See Map" section of the previous site shows the location. The location is Sheffield, England.

f:id:yzdPjRJp19tOiOG:20220405173812j:plain

Sheffield, England

f:id:yzdPjRJp19tOiOG:20220405173901j:plain

https://www.google.com/maps/place/4+Fulmer+Rd,+Sharrow,+Sheffield+S11+8UF,+UK/@53.3656821,-1.5028399,42m/data=!3m1!1e3!4m5!3m4!1s0x4879821342d0b5a9:0xa5db094d5499c6d5!8m2!3d53.3656823!4d-1.5027593

Answer:

(1) @LukeMNeve

(2) Sheffield, England

(3) Pinner Road, Hunters Bar

Quiztime - Lake Geolocation and SOCMINT Challenge

This quiz is a quiz to find out the location of the lake, but as the name suggests, it is a SOCMINT quiz that uses social networking services. If you are interested, please look it up on your own. This quiz showed me that my OSINT skills are still immature.

f:id:yzdPjRJp19tOiOG:20220405160718j:plain

https://twitter.com/fiete_stegers/status/1507984802661732352?s=20&t=BIDnrYMpMWrhIGC187Aang

Geolocation

What can be seen from the photo is almost nil due to the foggy cover. What we can tell is that it is located to the north because of the low sun, what looks like an apartment building to the right, and the small obstacle in the lake is probably a bollard.

f:id:yzdPjRJp19tOiOG:20220405161716j:plain

I tried to find an apartment with what looked like a hole on top and nine windows below it, along with a lake with deep fog.
The search operators were "germany foggy lake + apartment", "germany apartment near lake", "germany white cube apartment", and so on.
I searched for about 8 hours with all the operators, converting into German as well, but finally could not find it.

SOCMINT

My spirit was already exhausted at this point and I honestly wanted to give up. But the quiz in this tweet was posted by @fiete_stegers, but this time it was also a quiz posted by a journalist named @daniel_bouhs as a guest. So I did a Google search of this person's username and found his Instagram account.

f:id:yzdPjRJp19tOiOG:20220405162253j:plain

https://www.instagram.com/daniel_bouhs/

We obtained more detailed images, but the hashtag #rummelsburgerbucht for similar views in other images revealed the location.

f:id:yzdPjRJp19tOiOG:20220405163246j:plain

detaile image

f:id:yzdPjRJp19tOiOG:20220405163344j:plain

#rummelsburgerbucht

f:id:yzdPjRJp19tOiOG:20220405163526j:plain

Rummelsburger See

www.google.com

f:id:yzdPjRJp19tOiOG:20220405163807j:plain

White Apartment??

The white apartment building in the example was also identified, but it turned out to be an apiary, not an apartment building, which explains why the search did not turn up anything.

 

Location: 52.50027929062069, 13.471440979249726

Quiztime - Chronolocation Challenge PART2

Today will be Chronolocation Challenge PART 2.
However, the difference from the last time was to figure out the orbit of the moon, not the sun, to find the time.

f:id:yzdPjRJp19tOiOG:20220405144351j:plain

https://twitter.com/bayer_julia/status/1503468410012852230?s=20&t=eCVgT-plB6CFPw3VoE69Bw

Geolocation

I'll start with the geolocation, but since it's a Google Lens shot, I'll just show the location.

f:id:yzdPjRJp19tOiOG:20220405145105j:plain

https://www.google.com/maps/@52.481761,13.4341321,3a,75y,125.38h,87.81t/data=!3m7!1e1!3m5!1sD_oG66aUbBoWL5hEg8Qd5Q!2e0!6shttps:%2F%2Fstreetviewpixels-pa.googleapis.com%2Fv1%2Fthumbnail%3Fpanoid%3DD_oG66aUbBoWL5hEg8Qd5Q%26cb_client%3Dmaps_sv.tactile.gps%26w%3D203%26h%3D100%26yaw%3D341.39136%26pitch%3D0%26thumbfov%3D100!7i13312!8i6656?hl=en

Chronolocation

From what can be determined from the image, it was taken in the morning or evening, and the moon is considered to be near full.I searched for the time of the full moon in Germany, and the following site has detailed information:

www.timeanddate.com

The contributor of this quiz, @bayer_julia, asks "what time was the photo taken? And since this quiz was posted on March 15, I checked back in the near future. Since the next full moon is 3 days later on the 18th, and the first quarter before that is the 10th, I estimated that the photo was taken between the 10th and 18th, roughly a week.

f:id:yzdPjRJp19tOiOG:20220405150938j:plain

https://www.timeanddate.com/moon/phases/germany/berlin

At first, I tried to move it appropriately in the "Night Sky" column. Since the moon was in the east, I thought that sunset would be a good time. I thought the most appropriate time would be a little after sunset at 18:05 on the 12th, so I tried using mooncalc, a lunar version of suncalc.

f:id:yzdPjRJp19tOiOG:20220405153648j:plain

https://www.mooncalc.org/

Since it looked a little to the right of the photographer, I decided that 18:30 was appropriate for the time anyway.
Then today, I received the answer to the quiz from the submitter and was told that it was a day and a bit later than my answer.
If so, the answer would be a little after 19:00 on March 13?
I will update again if I receive a response in the future.

f:id:yzdPjRJp19tOiOG:20220405154627j:plain

https://www.mooncalc.org/#/52.4817,13.4341,19/2022.03.13/19:00/1/1