#informationgathering — Public Fediverse posts

I'm sure we've all heard but the situation regarding #informationgathering, #privacy, and #Discord is somehow worse than we thought.

https://www.therage.co/persona-age-verification/

I'm sure we've all heard but the situation regarding #informationgathering, #privacy, and #Discord is somehow worse than we thought.

https://www.therage.co/persona-age-verification/

#OSINT with the new #ChatGPT Search Engine .

The goal was to find as much information as possible about myself, my family members, and partners, using only my #HamRadio callsign (SV1SJP) as the starting point.

ChatGPT Search Engine seems promising :))
https://sv1sjp.github.io/articles/chatgptsearch/

#cybersecurity #InformationGathering #airesearch

Continuing the tour of my @github projects, the #TacticalExploitation toolkit deserves to be mentioned. It's now a bit old, but I believe the concept still applies, and very much so.

https://github.com/0xdea/tactical-exploitation

"The Other Way to Pen-Test" -- @hdm & @Valsmith

I've always been a big proponent of a tactical approach to #PenetrationTesting that doesn't focus on exploiting known software #vulnerabilities, but relies on #OldSchool techniques such as #InformationGathering and #BruteForce. While being able to appreciate the occasional usefulness of a well-timed 0day, as a veteran penetration tester I favor an exploit-less approach. Tactical exploitation provides a smoother and more reliable way of compromising targets by leveraging process vulnerabilities, while minimizing attack detection and other undesired side effects.

Since a few years, I've meant to give a talk on this very subject, with the working title of "Empty Phist Style - Hacking Without Tooling" (inspired by @thegrugq). Sooner or later it will happen.

Continuing the tour of my @github projects, the #TacticalExploitation toolkit deserves to be mentioned. It's now a bit old, but I believe the concept still applies, and very much so.

https://github.com/0xdea/tactical-exploitation

"The Other Way to Pen-Test" -- @hdm & @Valsmith

I've always been a big proponent of a tactical approach to #PenetrationTesting that doesn't focus on exploiting known software #vulnerabilities, but relies on #OldSchool techniques such as #InformationGathering and #BruteForce. While being able to appreciate the occasional usefulness of a well-timed 0day, as a veteran penetration tester I favor an exploit-less approach. Tactical exploitation provides a smoother and more reliable way of compromising targets by leveraging process vulnerabilities, while minimizing attack detection and other undesired side effects.

Since a few years, I've meant to give a talk on this very subject, with the working title of "Empty Phist Style - Hacking Without Tooling" (inspired by @thegrugq). Sooner or later it will happen.

#Letdown, #horrified and #disgusted - #parents and #young #people respond to #NHSEngland's #plans to #force #trans #youth to #medically #detransition.

#Plans for "additional #support" were #paired with an #informationgathering #process, which could lead to #safeguarding #referrals.

#Women #Transgender #LGBTQ #LGBTQIA #UK #TransKids #Tories #TERFS #NHS #Healthcare #Gatekeeping #Hate #Bigotry #Violence #Genocide #Discrimination #Transphobia #TERFIsland #WorkingAsIntended

https://www.linkedin.com/pulse/let-down-horrified-disgusted-parents-young-people-respond-wareham-fwude

#Letdown, #horrified and #disgusted - #parents and #young #people respond to #NHSEngland's #plans to #force #trans #youth to #medically #detransition.

#Plans for "additional #support" were #paired with an #informationgathering #process, which could lead to #safeguarding #referrals.

#Women #Transgender #LGBTQ #LGBTQIA #UK #TransKids #Tories #TERFS #NHS #Healthcare #Gatekeeping #Hate #Bigotry #Violence #Genocide #Discrimination #Transphobia #TERFIsland #WorkingAsIntended

https://www.linkedin.com/pulse/let-down-horrified-disgusted-parents-young-people-respond-wareham-fwude

SecurityOnline: ggshield v1.19.1 releases: Detect secret in source code, scan your repo for leaks https://securityonline.info/ggshield-detect-secret-in-source-code-scan-your-repo-for-leaks/ #WebInformationGathering #InformationGathering #ggshield #Defense

SecurityOnline: OSINT Toolkit: full stack web application built for security analysts https://securityonline.info/osint-toolkit-full-stack-web-application-built-for-security-analysts/ #WebInformationGathering #InformationGathering #OSINTToolkit

SecurityOnline: OSINT Toolkit: full stack web application built for security analysts https://securityonline.info/osint-toolkit-full-stack-web-application-built-for-security-analysts/ #WebInformationGathering #InformationGathering #OSINTToolkit

SecurityOnline: OSINT Toolkit: full stack web application built for security analysts https://securityonline.info/osint-toolkit-full-stack-web-application-built-for-security-analysts/ #WebInformationGathering #InformationGathering #OSINTToolkit

SecurityOnline: OSINT Toolkit: full stack web application built for security analysts https://securityonline.info/osint-toolkit-full-stack-web-application-built-for-security-analysts/ #WebInformationGathering #InformationGathering #OSINTToolkit

SecurityOnline: legitify v1.0.2 releases: Detect and remediate misconfigurations, security and compliance issues across all your GitHub assets https://securityonline.info/legitify-detect-and-remediate-misconfigurations-security-and-compliance-issues-across-all-your-github-assets/ #DetectGitHubassetsmisconfigurations #InformationGathering #legitify

SecurityOnline: uncover v1.0.6 releases: Quickly discover exposed hosts on the internet https://securityonline.info/uncover-quickly-discover-exposed-hosts-on-the-internet/ #InformationGathering #discoverexposedhosts #uncover

SecurityOnline: DivideAndScan v1.0.3 releases: efficiently automate port scanning routine https://securityonline.info/divideandscan-efficiently-automate-port-scanning-routine/ #InformationGathering #automateportscanning

SecurityOnline: ggshield v1.18.1 releases: Detect secret in source code, scan your repo for leaks https://securityonline.info/ggshield-detect-secret-in-source-code-scan-your-repo-for-leaks/ #WebInformationGathering #InformationGathering #ggshield #Defense

Теги та ключові слова: OSINT, інформаційний збір, автоматизація, аналітика візуального змісту, геопросторові дані, соціальні мережі, кібер OSINT, технології, джерела даних.

Гештеги в Twitter:
1. #OSINT
2. #InformationGathering
3. #Automation
4. #VisualContentAnalytics
5. #GeospatialData
6. #SocialMedia
7. #CyberOSINT
8. #Technology
9. #DataSources
10. #DigitalIntelligence
11. #MachineLearning
12. #OpenSourceIntelligence
13. #BigData
14. #DigitalForensics
15. #ResearchTools

#CEOs should map their #collaboration process out to see where they’re short of ideas — most likely in the #InformationGathering stage — then treat that part of #StrategyMaking as a process of #exploring and #discovering what they don’t know, and embrace the volume and complexity of the #ideas they receive. https://hbr.org/2023/03/leaders-need-to-get-comfortable-collaborating-on-strategy #DesignStrategy #BusinessStrategy #DecisionMaking #innovation via @HarvardBiz

#CEOs should map their #collaboration process out to see where they’re short of ideas — most likely in the #InformationGathering stage — then treat that part of #StrategyMaking as a process of #exploring and #discovering what they don’t know, and embrace the volume and complexity of the #ideas they receive. https://hbr.org/2023/03/leaders-need-to-get-comfortable-collaborating-on-strategy #DesignStrategy #BusinessStrategy #DecisionMaking #innovation via @HarvardBiz

Need a quick way to find related domains?

I did, so I wrote a quick #OSINT tool that abuses the SecurityTrails domain search suggestion API to grab a list of domains that start with [string].

I call it DomainDouche, since it's clearly using their API in a very unintended way and they probably wouldn't like it.

Grab it while it still works :)

https://github.com/n0kovo/DomainDouche

#infosec #tool #domains #enumeration #recon #reconnaissance #InformationGathering #attacksurface #pentesting #redteam

Need a quick way to find related domains?

I did, so I wrote a quick #OSINT tool that abuses the SecurityTrails domain search suggestion API to grab a list of domains that start with [string].

I call it DomainDouche, since it's clearly using their API in a very unintended way and they probably wouldn't like it.

Grab it while it still works :)

https://github.com/n0kovo/DomainDouche

#infosec #tool #domains #enumeration #recon #reconnaissance #InformationGathering #attacksurface #pentesting #redteam