Skip to content

Update EXIF geolocation reproduction steps #262

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
songwenlei wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update EXIF geolocation reproduction steps #262

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions EXIF_Geo_Data_Not_Stripped/exif_geo.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,9 +7,9 @@ When a user uploads an image in example.com, the uploaded image’s EXIF Geoloca
2. There are lot of images having resolutions (i.e 1280 * 720 ) , and also whith different MB’s . <br>
3. Go to Upload option on the website <br>
4. Upload the image<br>
5. see the path of uploaded image ( Either by right click on image then copy image address OR right click, inspect the image, the URL will come in the inspect , edit it as html )</br>
6. open it (http://exif.regex.info/exif.cgi)</br>
7. See wheather is that still showing exif data , if it is then Report it.
5. Capture the URL of the image served by the application, then download that processed copy.</br>
6. Open the downloaded copy in [Metadata Viewer](https://metadataremover.ai/metadata-viewer) to inspect its EXIF, GPS, IPTC, and XMP fields.</br>
7. Check whether sensitive metadata remains. Preserve the original sample and confirm important values with a second parser such as [ExifTool](https://exiftool.org/) before reporting.

# Reports (Hackerone)

Expand Down