cyb_detective

@cyb_detective@infosec.exchange

Every day I write about #osint (open source intelligence) tools and techniques. Also a little bit about forensics, hacking, and cybersecurity.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

cyb_detective, to OSINT

DISBOARD

Discord servers search engine. Search across a few hundred thousand servers.

disboard.org

Tip by twitter.com/osintcombine

#osint #socmint

cyb_detective, to random

Tor link list 2024

  • markets
  • wikis
  • catalogues
  • search engines
  • news
  • webmails

and more.

https://github.com/darknet-book/tor-guide

#tor #darknet

cyb_detective, to OSINT

UNREDACTED MAGAZINE #006 (Feb 2024)

After a full year of downtime, twitter.com/IntelTechniques finally publish a new issue:

  • wireless security
  • hunting apps for #osint
  • polyglot passwords
  • the home address dilemma and driver's licenses

and more.

https://inteltechniques.com/issues/006.pdf

cyb_detective, to infosec

TweetFeed

List of IOCs shared today by the #infosec community at Twitter:

  • domains
  • URLs
  • IPs
  • SHA256/MD5 hashes

https://tweetfeed.live/

Creator twitter.com/0xDanielLopez

cyb_detective, to random

A short four minute post on how to use OverPass Turbo effectively without knowing the query language:

https://medium.com/

cyb_detective, to random

Don't miss the latest issue of my Substack newsletter, featuring three articles on how to use AI tools and Overpass Turbo queries for #geoint.

https://cybdetective.substack.com/p/2-2024-overpass-turbo-simple-tricks

cyb_detective, to OSINT

Katana is one of the fastest and most convenient tools to get a list of URLs of target domain. Here's a quick 4-minute guide to its main features that can be useful for #osint:

https://medium.com/

cyb_detective, to random

Do you know about Shodan Exploit Search tool? https://exploits.shodan.io/

You can also use this filter on netlas.io to find sites and devices with vulnerabilities that have exploit links:

cve.exploit_links:*

(view pic)

cyb_detective, to random

OpenStreetMap (OverPass Turbo) TagInfo database

  • 694 tags for different objects (buildings, trees, streams etc)
  • 5684 keys
  • 45 relations (routes, streets etc)

https://taginfo.openstreetmap.org/tags

Tip by twitter.com/PretendNotToBe

cyb_detective, to random

One way to find driving videos from around the world is to use a keyword search (driving, dashcam, road video etc) in YouTube Geofind. Helps you find street panoramas where Google Street View doesn't work.

https://mattw.io/youtube-geofind/location

cyb_detective, to OSINT

Crew Data

Search across 120000+ seafarers CV (with last/first names, vessel's names, salaries and other interesting details).

https://crewdata.com/search.php

#osint #geoint

cyb_detective, to random
cyb_detective, to Bash

LEAKEY

#bash script which checks and validates for leaked credentials (45 types).

https://github.com/rohsec/LEAKEY/

Creator twitter.com/rohsec

cyb_detective, to Cybersecurity

Mind map of enumeration tools for different protocols: HTTP/HTTPs, SMD, LDAP, RPC, SMTP, FTP and others.

Thanks for tip twitter.com/hackinarticles

#cybersecurity

cyb_detective, to random

Awesome GPTs (Agents) for Cybersecurity

  • code assistants
  • source code analyzers
  • experts and advizors
  • smart contract audit tools

and much more.

https://github.com/fr0gger/Awesome-GPT-Agents

Contributor twitter.com/fr0gger_ Thanks for tip twitter.com/NandanLohitaksh

cyb_detective, to privacy

LADDER

A tool to enhance web browsing experience:

  • bypass paywalls and remove ads
  • no tracking and logs
  • modify URL parameters, http-headers and HTML code of web pages

and more.

https://github.com/everywall/ladder

#privacy #cybersecurity

cyb_detective, to random

If you like Google Dorks for finding file directories, database backups, and vulnerable admin/login panels, I recommend you also try searching for them with IP search engines (Netlas, Shodan, Fofa) using uri: and http.title filters.

A lot of examples:
https://github.com/netlas-io/netlas-cookbook#files-backups-and-logs-directories-search

cyb_detective, to random

dehashed.com is a tool for searching for data leaks (search by email, password, phone, username, domain etc)

DeHashed API tool allows to automate this process and search large lists of input data.

https://github.com/hmaverickadams/DeHashed-API-Tool
(paid API key required)

Creator twitter.com/thecybermentor

cyb_detective, to ai

Fuyu-8B Multimodal Demo

#AI model that can visually analyze images very well.

Sometimes it can correctly identify the location where the picture was taken. For example, it correctly identifies Yerevan and Tokyo. But it confuses Pataya with Bangkok.

https://huggingface.co/spaces/adept/fuyu-8b-demo

cyb_detective, to random

WhatsApp OSINT Tools

(little update in Social Media OSINT tools list from twitter.com/cqore)

https://github.com/cqcore/Social-Media-OSINT

cyb_detective, to OSINT

In the Neltas Cookbook, you can find a section about using Netlas for different #osint tasks. Examples of queries can be used in other IP search engines as well.

https://github.com/netlas-io/netlas-cookbook#using-netlasio-for-osint-open-source-intelligence

cyb_detective, to OSINT

HTML <meta> tags may contain a lot of useful information for the #osint. For ex, the name of the author of the document (or company name).

You can search for keywords in meta tags using IP search engines and the http.meta filter.

Read more:
https://github.com/netlas-io/netlas-cookbook#search-author-name-in-meta-tags

cyb_detective, to OSINT

APIs for OSINT

As a reminder, I have a Github repo with over a hundred APIs for automating dozens of different #osint tasks: collecting information about people, companies, etc.

https://github.com/cipher387/API-s-for-OSINT/

If you don't know how to use APIs, read this:

https://github.com/netlas-io/netlas-cookbook

cyb_detective, to random

MAILTO ANALYZER

.mbox files analyzer will show your email address exposure on various services.

Helps you find all the sites you are registered.

The tool does not transfer data to third-party servers.

https://github.com/soxoj/mailto_analyzer

Creator @soxoj

cyb_detective, to OSINT

Geolocating a 5G base from a picture. Delving deeply into the OSINT and GEOINT investigation process

https://medium.com/@ronkaminskyy/geolocating-a-5g-base-from-a-picture-28d456a58062

Author twitter.com/ronkaminskyy

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • tacticalgear
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • Durango
  • cubers
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • ngwrru68w68
  • kavyap
  • GTA5RPClips
  • provamag3
  • ethstaker
  • InstantRegret
  • Leos
  • normalnudes
  • everett
  • khanakhh
  • osvaldo12
  • cisconetworking
  • modclub
  • anitta
  • tester
  • megavids
  • lostlight
  • All magazines