This is a guest post by Steve Hall (https://twitter.com/shall_1). Thanks for writing it Steve! Update - 2022-03-171. Micah updated the MindMap file to version 2. Little less cluttered and more focused. It is in the same GitHub location and called "OSINT_Maps2.xmind"2. I've moved from MindMaps to Obsidian for documentation. Check out the blog post https://webbreacher.com/2022/03/15/obsidian/... Continue Reading →
Introducing OSINT YOGA
I absolutely love all of the public projects where people share their favorite OSINT bookmarks with others. You've most likely seen some of them. [UPDATE] Bruno Mortier (@digintelosint) created an excellent resource of resources page at https://start.me/p/ZME8nR/osint where a bunch of these sites are catalogued. Head over there and check them out! If you haven't... Continue Reading →
SEC487: 6 Days of OSINT
SEC487 SANS Institute OSINT course www.sans.org/sec487
Dark Web Report + TorGhost + EyeWitness == Goodness
In this post I use a python tool (EyeWitness), TOR, TorGhost, and the Dark Web Reports from Hunchly to automate viewing the Dark Web resources.
Shodan and DOUBLEPULSAR / WannaCry
What is WannaCry? In March 2017, Microsoft issued the MS17-010 bulletin (https://technet.microsoft.com/en-us/library/security/ms17-010.aspx) patching (and warning) of a broad set of vulnerabilities in many of its operating systems from Windows XP to Windows 10 and 2016. This vulnerability could be exploited via the DOUBLEPULSAR attack released by ShadowBrokers and supposedly attributed to the NSA. For more... Continue Reading →
The Secrets of LinkedIn
For those of you that have been the targets of SPAM or phishing or perhaps for those of you that are cyber defenders, how many times have you heard "I have no idea how the attacker got my personal email address." I have a secret to share with you. [Come a little closer to the... Continue Reading →
WhatsMyName Project
What Is It? I've created the WhatsMyName project on Github (https://github.com/WebBreacher/WhatsMyName) to help with #OSINT searches by using target user names. Here's how it works: We understand that people use the same username across multiple web sites. For example, I am "WebBreacher" on both the Github and BitBucket web sites. Some web sites make it... Continue Reading →
My 3 Favorite OSINT Videos
There are three quick and impactful videos that I like pointing people towards when they ask about how their personal data can be used against them. All are free on YouTube. Enjoy! Data to Go https://www.youtube.com/watch?v=_YRs28yBYuI https://www.youtube.com/watch?v=_YRs28yBYuI Amazing mind reader reveals his 'gift' https://www.youtube.com/watch?v=F7pYHN9iC9I https://www.youtube.com/watch?v=F7pYHN9iC9I See how easily freaks can take over your... Continue Reading →