A classic hands-on OSINT exercise goes "from pixel to person": starting from one social-media photo and a username, reconstruct who someone is. What two tasks does it set, and which free tools does it hand you?

Two tasks: a location analysis (GEOINT) on the photo, and username tracking across platforms — using free tools like geospy.net, Google Reverse Image Search, and namevine.com.

Task 1: Location analysis (GEOINT). You're given a photo the person posted and asked a deceptively simple question: can you identify the exact location (say, one they claim is in Barcelona)? The tools provided are geospy.net, an AI-based location estimator that reads architectural and environmental cues, and Google Reverse Image Search, which finds other places the image (or similar ones) appears. The twist is that careful analysis can show the scene is somewhere else entirely.

Task 2: Username tracking. The second task: follow the person's handle across different platforms to see where else they are active. The recommended tool here is namevine.com, which checks a username's availability and presence across many services at once, instantly revealing the reuse of a single identity.

Why it's framed as a game. Turning the investigation into an interactive exercise drives home the core lesson by hands-on experience rather than abstract theory: with nothing but free, public tools, a single photo and a reused username are enough to start unravelling a real person. There is no hacking step anywhere in the workflow.