C.I.T. Security

Влетаем в ХАКИНГ и пентест — нашли крутую платформу PwnPad, которая поможет разобраться во всей базе инфобеза.

Что умеет:

• Перехватывает данные, подбирает скорость передачи и получает доступ к консоли устройства.
• Прослушивает «шину» между компонентами — так можно подобрать пароли и ключи.
• Поддерживает дампинг памяти и извлечение данных.
• Анализирует всю логику работы устройств для поиска уязвимостей в софте.
• Умеет юзать глюки в питании процессора, чтобы обходить проверки пароля или даже запускать «мертвый код»
• Взламывает и восстанавливает пароли для крипто-ключей.

Б Е С П Л А Т Н О

Познаём хакинг — PwnPad

#софт #хакинг #пентестинг

🛜 Крутой VPN | Смс 💣 бомбер | Telegram Stars со скидкой 🌟

Изучаем ХАКИНГ за пару месяцев — принесли сразу пачку ресурсов, на которых прокачать навыки взлома ОС, угона данных, обхода любой (!) защиты и промпт-хакинга.

Смотрим и забираем тонну БЕСПЛАТНОЙ практики. Внутри каждого сайта есть детальные гайды, уроки, челленджи, игры и даже лайфхаки:

• Hack The Box
• TryHackMe
• PortSwigger
• CTFtime
• HackerLab
• CryptoHack
• Standoff365
• TaipanBute CTF
• pwn.college
• Kontra

Надеваем крутые чёрные очки и работаем.

#хакинг #обучение #подборка

🛜 Крутой VPN | Смс 💣 бомбер | Telegram Stars со скидкой 🌟

Sightline

A free online tool for searching for objects on a map.

Based on Overpass Turbo, but uses natural language for searching.

https://sightline-maps.vercel.app/

Github repo: https://github.com/ni5arga/sightline

#geoint #openstreetmaps

7 Aerial Imagery and Photography sources

NAIP Imagery
Open Aerial Map
Vintage Aerial
The National Archives Catalog
Canada’s National Air Photo Library
NOAA Data Access Viewer
Public Domain Aerial Photography

https://gisgeography.com/aerial-imagery-sources/

By GisGeography #geoint

25 Satellite Maps To See Earth in New Ways

List of online tools (mostly free or partly free) by GisGeography

https://gisgeography.com/satellite-maps/

#geoint

OSINT Conferences and meetups

List of #osint conferences and meetups that have taken place recently or are planned for the near future.

https://github.com/ubikron/OSINT-Conferences

* OsintifyCon will be tomorrow and online

Temporal Analysis Engine

Free online tool.

Extract and visualize temporal metadata from any URL. Discover creation dates, modification history, and hidden timestamps in html/js code.

+ crt sh certificates search and Wayback Machine snapshots analysis


https://meta.narka.io/time

Github OSINT

User & Organization Discovery
Repository Intelligence Gathering
Advanced Code Search Techniques
Metadata & Historical Analysis
Quick Investigation Commands
GitHub Account Creation Date Detection Methods

By d4rk_intel

https://d4rkintel.substack.com/p/github-osint

THE OSINT VAULT (tools collection)

Public Records & Registry Search
File & Metadata Analysis
Corporate Records & Research Funding
Vehicle & Property Lookup
Video & Image Analysis
Business Intelligence Tools

https://theosintvault.io/

Multipurpose OSINT Frameworks (Part 2)

Photon https://github.com/s0md3v/Photon
pulsar https://github.com/FooBallZ/pulsar
Racoon https://github.com/evyatarmeged/Raccoon
recon https://github.com/pownjs/recon
Recon https://secapps.com/tools/recon
ReconDog https://github.com/s0md3v/ReconDog
Recon-ng https://github.com/lanmaster53/recon-ng
reconspider https://github.com/bhavsec/reconspider
RED_Hawk https://github.com/Tuhinshubhra/RED_HAWK
rengine https://github.com/yogeshojha/rengine
Scumblr https://github.com/Netflix/Scumblr
Scrummage https://github.com/matamorphosis/Scrummage
Sifter https://github.com/s1l3nt78/sifter
Sn0int https://github.com/kpcyrd/sn0int
Sn1per https://github.com/1N3/Sn1per
Spiderfoot https://github.com/smicallef/spiderfoot
theHarvester https://github.com/laramies/theHarvester
ThreatIngestor https://github.com/InQuest/ThreatIngestor
TIDoS Framework https://github.com/0xInfection/TIDoS-Framework
uDork https://github.com/m3n0sd0n4ld/uDork
URLextractor https://github.com/eschultze/URLextractor
xray https://github.com/evilsocket/xray
Vault https://github.com/abhisharma404/vault

Multipurpose OSINT Frameworks (Part 1)

Amass https://github.com/OWASP/Amass
aquatone https://github.com/michenriksen/aquatone
Belati https://github.com/aancw/Belati
BlackWidow https://github.com/1N3/BlackWidow
Bluto https://github.com/darryllane/Bluto
DangerZone https://github.com/woj-ciech/Danger-zone
datasploit https://github.com/DataSploit/datasploit
FinalRecon https://github.com/thewhiteh4t/FinalRecon
gasmask https://github.com/twelvesec/gasmask
gobuster https://github.com/OJ/gobuster
gOSINT https://github.com/Nhoya/gOSINT
Harpoon https://github.com/Te-k/harpoon
Inquisitor https://github.com/penafieljlm/inquisitor
IntelOwl https://github.com/intelowlproject/IntelOwl
Int-Rec-Pack https://github.com/NullArray/IntRec-Pack
lazyrecon https://github.com/nahamsec/lazyrecon
Maryam https://github.com/saeeddhqan/Maryam
Metabigor https://github.com/j3ssie/metabigor
mihari https://github.com/ninoseki/mihari
Omnibus https://github.com/InQuest/omnibus
OneForAll https://github.com/shmilylty/OneForAll
OSINT Search https://github.com/am0nt31r0/OSINT-Search
OSINT-SPY https://github.com/SharadKumar97/OSINT-SPY
Osmedeus https://github.com/j3ssie/Osmedeus
osrframework https://github.com/i3visio/osrframework

General Webint Tools and Toolkits:

Central Ops http://centralops.net
Domain Tools https://www.domaintools.com
DShield API https://isc.sans.edu/api
Gaijin.at https://www.gaijin.at/en/tools
HackerTarget https://hackertarget.com/ip-tools
_IntelligenceX https://intelx.io
Kloth http://www.kloth.net/services
Maltego https://www.maltego.com
Many Tools https://manytools.org
Mitaka https://chrome.google.com/webstore/detail/
mitaka/bfjbejmeoibbdpfdbmbacmefcbannnbg |
https://addons.mozilla.org/en-US/firefox/addon/mitaka |
https://github.com/ninoseki/mitaka
MXToolbox https://mxtoolbox.com
Network Tools http://network-tools.com
NirSoft http://www.nirsoft.net
RiskIQ https://community.riskiq.com
Robtex https://www.robtex.com
Security Trails https://securitytrails.com
Sputnik https://chrome.google.com/webstore/detail/
sputnik/manapjdamopgbpimgojkccikaabhmocd |
https://addons.mozilla.org/en-US/firefox/addon/sputnik-
osint | https://github.com/mitchmoser/sputnik
Spyse_ https://spyse.com
ViewDNS https://viewdns.info
Web Wiz https://network-tools.webwiz.net
You Get Signal http://www.yougetsignal.com

Exploit Search Engines:

CVE Circl.lu https://cve.circl.lu
CVE Details https://www.cvedetails.com
CVE Mitre http://cve.mitre.org
Exploit-db https://www.exploit-db.com
Exploit Search http://exploitsearch.com
NMMapper https://www.nmmapper.com
Rapid7 https://www.rapid7.com/db
Shodan Exploits https://exploits.shodan.io
Sploitus https://sploitus.com
Vulmon https://vulmon.com
Vulnerability Assessment
Platform
https://vulners.com/landing
WPScan Wordpress
Vulnerability Database
https://wpvulndb.com

🔹 Facebook Recover Lookup (Used to check if a given email or phone number is associated with any Facebook account or not.) — https://www.facebook.com/login/identify?ctx=recover

🔹 CrowdTangle Link Checker (Shows the specific Facebook posts, Instagram posts, tweets, and subreddits that mention this link.) — https://apps.crowdtangle.com/chrome-extension

🔹 Social Searcher (Allows you to monitor all public social mentions in social networks and the web.) — https://www.social-searcher.com/

🔹 Lookup-id.com (Helps you find the Facebook ID of anyone's profile or a Group.) — https://lookup-id.com/

🔹 Who posted this (Facebook keyword search for people who work in the public interest. It allows you to search keywords on specific dates.) — https://whopostedwhat.com/

🔹 Facebook Search (Allows you to search on Facebook for posts, people, photos, etc., using some filters.) — https://www.sowsearch.info/

🔹 Facebook Graph Searcher (To search someone on Facebook.) — https://intelx.io/tools?tab=facebook

🔹 Facebook People Search (Search on Facebook by victim's name.) — https://www.facebook.com/directory/people/

🔹 DumpItBlue+ (Helps to dump Facebook stuff for analysis or reporting purposes.) — https://chrome.google.com/webstore/detail/dumpitblue%2B/igmgknoioooacbcpcfgjigbaajpelbfe/

🔹 Export Comments (Easily exports all comments from your social media posts to Excel file.) — https://exportcomments.com/

🔹 Facebook Applications (A collection of online tools that automate and facilitate Facebook.) — https://khalil-shreateh.com/khalil.shtml/social_applications/facebook-applications/

🔹 SocialAnalyzer (A free tool of social media monitoring and analysis.) — https://chromewebstore.google.com/detail/socialanalyzer-social-sen/efeikkcpimdfpdlmlbjdecnmkknjcfcp

🔹 AnalyzeID (Looking for sites that supposedly may have the same owner, including FaceBook App ID match.) — https://analyzeid.com/

🔹 SOWsearch (A simple interface to show how the current Facebook search function works.) — https://www.sowsearch.info/

🔹 Facebook Matrix (Formulas for Searching Facebook.) — https://plessas.net/facebookmatrix

🔹 StalkFace (Toolkit to stalk someone on Facebook.) — https://stalkface.com/en/

🔹 Search is Back (Find people and events on Facebook Search by location, relationships, and more!) — https://searchisback.com/

🔹 FB-Search (Busca por teléfono o correo.) — https://fb-search.com

🔹 FB-Posts-scraper (Python tool for crawling posts.) — https://github.com/rugantio/fbcrawl

🔹 FB-Video-downloader — https://fdown.net

LinkedIn

🔹 Employees (Legal Note: Scrape = ToS) — CrossLinked: https://github.com/m8r0wn/crosslinked

🔹 Email pattern (Legal Note: 25 free/month) — Hunter: https://hunter.io

🔹 Photo URL (Legal Note: Public only) — LinkedIn-sniper: https://github.com/DisK0nn3cT/LinkedIn-sniper

Instagram

🔹 Photos + metadata (Risk: Low) — Instaloader: https://github.com/instaloader/instaloader

🔹 Anonymous stories (Risk: Low) — StoriesIG: https://storiesig.app

🔹 Profile analysis (Risk: Medium) — SOLG: https://github.com/solg-oss

🔹 World map (Risk: Low) — Picuki: https://picuki.com

Twitter/X

🔹 Download all tweets (Note: docker run -it --rm twint -u user --since 2024-01-01) — Twint-docker: https://github.com/twintproject/twint

🔹 Network analysis (Note: RT graph) — Network Tool: https://networktool.org

🔹 Deleted tweets (Note: Aggregated API) — Deleted Tweet Finder: https://deletedtweetfinder.com

🔹 Sentiment (Note: CSV bulk) — Sentiment140: http://sentiment140.com