An Intro To Recon-ng Pushpin

Recon-ng is a full-featured Web Reconnaissance framework written in Python. Complete with independent modules, database interaction, built in convenience functions, interactive help, and command completion, Recon-ng provides a powerful environment in which open source web-based reconnaissance can be conducted quickly and thoroughly.

Performing reconnaissance is to obtain information by visual observation or other detection methods, about the activities and resources of an enemy or potential enemy, or about the meteorologic, hydro-graphic, or geographic characteristics of a particular area.

Using recon-ng with the pushpin convenience module will allow to pull data from popular services, like Flickr, twitter, YouTube, etc, and correlate that data with the geolocation coordinates, and pull up a map pinpointing the terrain around the target. It’s some scary stuff if you are the target of opportunity!

When you take a picture or tweet, your smartphone automatically embeds coordinates into the picture or tweet.

Google photos creates storyboards with geolocations and timestamps. It’s a lot of fun (see my article on my Google GPS footprint). That same data can betray you. It will map where you sleep for 8 hours night after night, letting those who have access to know where you live. It will map where you spend your time from 8am-5pm, calling that place work. Said bad-guy will know when to rob your house, make your life a living hell, and where and when to be to avoid you. A horrible tool in the hands of a stalker or corporate spy.

Locations services can be a good thing. Like finding a restaurant nearby that has good reviews (using Yelp) or proving where you are. It can also be a bad thing, collectively, it can show physical weakness to a company via a crowdsourced collection of written information, pictures, and videos. It even helps the bad guys with extra information when they want to socially engineer a target.

Recon-ng is available here.
Here is how to disable location services for IOS
Here is how to disable location services for Android