Hidden in Plain Site: Leverage Commented Code and Web Metadata for Website Research

Channel:
United States SANS Cyber Defense
Subscribers:
23,700
Published on ● Video Link: https://www.youtube.com/watch?v=RM6mJhK_e1E


Duration: 0:00
519 views
6

This presentation explores how commented code and various forms of metadata, such as image names, <meta> tags, and robots.txt files, embedded within a webpage’s source code, can serve as valuable resources for digital investigators. I will introduce a free browser add-on that automatically collects this hidden information, streamlining the investigative process. While this technique is essential for any web investigation, it is particularly effective when analyzing corporate websites in China and archived versions on the Wayback Machine. This is due to the use of older web technologies, less rigorous development practices, and inconsistencies generated by bilingual website management, making these sites potentially rich in overlooked data.

View upcoming Summits: http://www.sans.org/u/DuS

SANS Open-Source Intelligence Summit 2025
Hidden in Plain Site: Leverage Commented Code and Web Metadata for Website Research
Cristopher Uglea, Founder, No Nonsense Intelligene



Other Videos By SANS Cyber Defense


2025-06-18Agentic AI and Security
2025-06-17The Myth: Only Developers Need To Know Python
2025-04-08Pros of ADINT | SANS OSINT Summit 2025
2025-04-08OSINT Resources — What Motivates You? | SANS OSINT Summit 2025
2025-04-08Why Are Security Certificates Useful? | SANS OSINT Summit 2025
2025-04-08Next Era of OSINT | SANS OSINT Summit 2025
2025-03-12Hidden in Plain Site: Leverage Commented Code and Web Metadata for Website Research
2025-03-12Tracing Code Lineage: Using OSINT to Illuminate the Origins of Open Source Software
2025-03-12Investigating Fentanyl Supply Chains: An OSINT Analysis of Chinese Biotechnology Companies
2025-03-12Chinese Social Media Intelligence
2025-03-12Mastering Email OSINT: Techniques for Uncovering Online Footprints
2025-03-12Matt Edmondson's Freestyle AI talk
2025-03-12Beyond Google Lens: How Real Estate Sites Can Assist Geolocation Efforts
2025-03-12Creating Social Network Graphs Using GEPHI
2025-03-12Social Media Discussion with the @OSINTMillennial
2025-03-12Fireside Chat with Jason Barrett
2025-03-12Navigating the Balance Between Public Information and Internal Threat Protection
2025-03-12Hunt Them Where They Play
2025-03-12Ads as Intel: Exploring ADINT's Capability to Pinpoint Personal Locations
2025-03-12Crowdsourced Intelligence: The Role of the OSINT Community in Global Investigations
2025-03-12Shadow Hunting: Advanced OSINT Skills to Navigate the Breach Data Labyrinth