Learn
LoginRegister
← All tools

ExifTool

Tool manual · Kali & common usage

OSINT · Beginner · OSINT lane

BeginnerOSINT — Image & Media
Authorized usage only. Capture and inspect traffic only on systems and networks you own or have written permission to analyze.

What is ExifTool?

ExifTool reads/writes metadata in images and documents.

Extract GPS/camera/author metadata from files you may analyze.

Official website: ExifTool · Documentation

When do you use it?

  • You need Read and write metadata in images, PDFs, and media files.
  • You are following a CYNARKS lab or authorized engagement that calls for ExifTool.
  • You already tried simpler checks and need this tool’s deeper capability.

Who uses it?

  • OSINT analysts
  • Investigators (lawful use)
  • Red teamers (authorized recon)

How do you use it? (typical flow)

  1. Install ExifTool using the steps below (prefer Kali package or official installer).
  2. Confirm you have authorization for the target (lab VM, own system, or written scope).
  3. Run --help / man (or the Help section) to see current flags for your version.
  4. Start with a safe example from Basic commands against localhost or an authorized lab target.
  5. Record what you ran, what you observed, and any follow-up (filter, report, remediation).

Help & manual (like man / --help)

Every serious tool has a built-in way to look up flags. Learn these first so you are not stuck memorizing every option.

  1. 1. Help

    exiftool -h

  2. 2. Man

    man exiftool

Kali Linux

sudo apt install libimage-exiftool-perl — classic Kali OSINT tool.

1. Installation

OSInstallation
Kali Linuxsudo apt install libimage-exiftool-perl — classic Kali OSINT tool.
Allhttps://exiftool.org/install.html

2. Basic commands

  1. 1. Show all metadata

    exiftool photo.jpg

    Show all metadata

  2. 2. GPS only

    exiftool -gps:all photo.jpg

    GPS only

  3. 3. Show help

    exiftool --help

    List flags for your installed version (same habit as man/--help).

  4. 4. Short help

    exiftool -h

    Alternate help flag when supported.

  5. 5. Strip metadata before publish

    -all=

    Strip metadata before publish

Options / flags

OptionPurpose
-all=Strip metadata before publish

5. Useful features

  • EXIF fields
  • GPS privacy
  • Batch processing

6. Practical examples

  1. Example 1: Show all metadata

    exiftool photo.jpg

    Show all metadata

  2. Example 2: GPS only

    exiftool -gps:all photo.jpg

    GPS only

  3. Example 3: Show help

    exiftool --help

    List flags for your installed version (same habit as man/--help).

  4. Example 4: Short help

    exiftool -h

    Alternate help flag when supported.

  5. Example 5: Strip metadata before publish

    -all=

    Strip metadata before publish

7. Important notes

  • Forensics and privacy audits — not for stalking.
  • Authorized targets only — labs, systems you own, or written permission.
  • Prefer reading --help / man / official docs for your installed version; flags change over time.

Related course: ethical hacking penetration testing · soc analyst blue team · Commands: /osint