From a Google Image to a Live Device: Building OSINT Signatures with Modat Magnify

Open Google Images. Search for any random industrial device login page. See that cute little dashboard, probably controlling a pump, a meter, or a chunk of a factory? It's just sitting there, like a vacation photo.

Here's the twist: that screenshot is basically a fingerprint. Copy it, turn it into a signature, and search for it on the real internet — and a surprising number of these devices are live, exposed, and waiting.

In this blog, I'll do exactly that using Modat Magnify. No exploits, no drama — just a screenshot, a signature, and a live device on the other end.

And this is just the start. Consider this part one of a little series — let's see how far this "screenshot to live device" trick can actually go.

Alright, let's start the journey. The toolkit for today is refreshingly basic: Google, Modat Magnify, a bit of curiosity, and a dash of imagination. That's it. No expensive licenses, no secret hacker forums. Step one — head over to Google Images and search for "industry devices login page" .

The results are… a lot. Dashboards, login screens, vendor logos, branding we recognize and some we definitely don't. It's like opening a catalog nobody meant to publish. Let's slow down and actually look at what we're seeing here, because somewhere in this wall of screenshots is exactly the kind of fingerprint we need.

Scrolling through this wall of dashboards, one image catches my eye — a clean little login box that says "Hubbox Local Panel," branded under "Hubbox Industrial Technology."

Now, "Hubbox Local Panel" isn't just a random label — it's text. And text on a login page is gold for us, because it's exactly the kind of unique string that might show up in the page's HTML when Magnify crawls it.

So let's take this phrase, head over to Modat Magnify, and drop it into a search. No setup, no configuration — just paste the keyword and see what comes back.

Let's find out if "Hubbox Local Panel" is just sitting on someone's desk, or sitting wide open on the internet.

Searching the exact phrase

web.html~"Hubbox Local Panel"

web.html~"Hubbox Local Panel"

returns no results.

Trimming the query to just

web.html~"Hubbox"

web.html~"Hubbox"

returns multiple results across different devices and ports under the same vendor. One result stands out — title field shows HUBBOX

with the page itself being a "HUBBOX Editor" login panel.

Refining the query to

web.title="Hubbox"

web.title="Hubbox"

returns exactly one result — a single live, internet-facing HUBBOX Editor instance.

Starting from a Google Images screenshot, we've gone from a generic phrase to a working fingerprint to a live exposed device.

Second image worth a look:

a generic-looking "IoT Device Management" login screen. Generic is good — generic text shows up everywhere.

Querying

web.html~"iot device management"

web.html~"iot device management"

returns a large result set — hundreds of services across multiple countries, ports, and stacks (Nginx, Next.js, Apache, the usual suspects).

Refining to

web.title="iot device management"

web.title="iot device management"

narrows it down considerably, but still returns a healthy number of live results — each one a real device sitting on the internet with that exact title.

So from a single, fairly generic phrase pulled off a screenshot, Magnify hands back a list of exposed device management panels — proof that even "boring" UI text can be a usable fingerprint.

A simple Google Image search, it turns out, can get you a lot further than you'd expect.

Impact

None of this required scanning, exploitation, or even a Modat Magnify account beyond a free search. Two random screenshots from Google Images — one branded, one generic — were enough to generate working fingerprints and pull back live, internet-facing OT/IoT management panels.

That's the actual risk here: exposure isn't hidden behind clever recon. It's sitting in product marketing screenshots, documentation pages, and stock photos — indexed, searchable, and fingerprintable by anyone with five minutes and mild curiosity.

Conclusion

Starting point: a Google Images search. End point: live OT devices, some still showing default login screens.

This was just the warm-up. Part 2 will push the same method further — picking up where "Hubbox" and "IoT Device Management" left off, and seeing what else a screenshot can lead to.