Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

MAC OS X provides a tool to analyze image/jpeg EXIF metadata, including GPS coordinates of the photo, the camera it was taken on and so on.


[quote]MDLS(1) BSD General Commands Manual MDLS(1)

NAME
mdls -- lists the metadata attributes for the specified file

SYNOPSIS
mdls [-name attributeName] [-raw [-nullMarker markerString]] file ...

DESCRIPTION
The mdls command prints the values of all the metadata attributes associated with the files provided as an argument.

The following options are available:

-name Print only the matching metadata attribute value. Can be used multiple times.

-raw Print raw attribute data in the order that was requested. Fields will be separated with a ASCII NUL character, suitable for piping to xargs(1) -0.

-nullMarker Sets a marker string to be used when a requested attribute is null. Only used in -raw mode. Default is "(null)".

SEE ALSO
mdfind(1), mdutil(1) xargs(1)

Mac OS X June 3, 2004 Mac OS X
[/quote]

See kMDItemLatitude and kMDItemLongitude objects.

[code]$ mdls IMG_2368.jpg
kMDItemAcquisitionMake = "Apple"
kMDItemAcquisitionModel = "iPhone 7"
kMDItemAltitude = 1741
kMDItemAperture = 1.695993715632365
kMDItemBitsPerSample = 32
kMDItemColorSpace = "RGB"
kMDItemContentCreationDate = 2017-09-10 12:36:23 +0000
kMDItemContentModificationDate = 2017-09-10 12:36:23 +0000
kMDItemContentType = "public.jpeg"
kMDItemContentTypeTree = (
"public.jpeg",
"public.image",
"public.data",
"public.item",
"public.content"
)
kMDItemCreator = "10.3.1"
kMDItemDateAdded = 2017-09-10 12:36:23 +0000
kMDItemDisplayName = "IMG_2368.jpg"
kMDItemEXIFVersion = "2.2.1"
kMDItemExposureMode = 0
kMDItemExposureProgram = 2
kMDItemExposureTimeSeconds = 0.0007518796992481203
kMDItemFlashOnOff = 0
kMDItemFNumber = 1.8
kMDItemFocalLength = 3.99
kMDItemFSContentChangeDate = 2017-09-10 12:36:23 +0000
kMDItemFSCreationDate = 2017-09-10 12:36:23 +0000
kMDItemFSCreatorCode = ""
kMDItemFSFinderFlags = 0
kMDItemFSHasCustomIcon = (null)
kMDItemFSInvisible = 0
kMDItemFSIsExtensionHidden = 0
kMDItemFSIsStationery = (null)
kMDItemFSLabel = 0
kMDItemFSName = "IMG_2368.jpg"
kMDItemFSNodeCount = (null)
kMDItemFSOwnerGroupID = 935
kMDItemFSOwnerUserID = 20037
kMDItemFSSize = 2122637
kMDItemFSTypeCode = ""
kMDItemGPSDateStamp = "2017:09:06"
kMDItemGPSDestBearing = 6.521270561542825
kMDItemHasAlphaChannel = 0
kMDItemImageDirection = 6.521270221689634
kMDItemISOSpeed = 20
kMDItemKind = "JPEG image"
kMDItemLastUsedDate = 2017-09-11 13:53:31 +0000
kMDItemLatitude = 45.46824166666666
kMDItemLogicalSize = 2122637
kMDItemLongitude = 25.47102166666667
kMDItemOrientation = 0
kMDItemPhysicalSize = 2125824
kMDItemPixelCount = 12192768
kMDItemPixelHeight = 3024
kMDItemPixelWidth = 4032
kMDItemProfileName = "Display P3"
kMDItemRedEyeOnOff = 0
kMDItemResolutionHeightDPI = 72
kMDItemResolutionWidthDPI = 72
kMDItemSpeed = 0.01376021798365123
kMDItemTimestamp = "11:04:53"
kMDItemUseCount = 3
kMDItemUsedDates = (
"2017-09-10 22:00:00 +0000"
)
kMDItemWhiteBalance = 0[/code]

[code]$ mdls -name kMDItemLatitude -name kMDItemLongitude IMG_2368.jpg
kMDItemLatitude = 45.46824166666666
kMDItemLongitude = 25.47102166666667[/code]