(Page 2)

Sign in Subscribe

Hands-on with Nessus

Hands-on with Nessus

Last night, while doing some online training for Security+ I learned about Nessus Essentials. I have heard about Nessus for years on security podcasts, but always thought it was a paid-for enterprise tool. During my course, I learned about configuring Nessus Essentials. I was excited when I learned that this

All-In-One OSINT for websites

All-In-One OSINT for websites

This is a great tool that quickly reveals a lot of information about websites. Simply enter a domain name and click Analyze. The results include: * IP Info * SSL Chain * DNS Records * Cookies * Crawl Rules * Headers * Quality Metrics * Server Location * Associated Hosts * Redirect Chain * TXT Records * Server Status * Open Ports * Traceroute

Support OUR Rescue

Support OUR Rescue

I have recently discovered this organization and it is amazing. The work they do domestically and internationally is great. They are passionate about the work they do and genuinely care about the lives they help impact. They work in three areas: Operations They are on the ground assisting local law

Privacy and Security best practices

Privacy and Security best practices

There are several simple ways that you can increase your security. Here are just a few products that have been vetted by leaders in the industry. Even though many of these products have a FREE plan, they can be trusted. Secure Email Options: ProtonMail FREE Proton Mail is an email

OSINT Podcasts

There are many good lists of OSINT podcasts out there among the various StartMe pages related to OSINT. The problem is, that many of the podcasts mentioned haven’t released any episodes recently. This doesn’t mean that they aren’t still a valuable resource. Here are two lists of

Doing OSINT 4 good

Doing OSINT 4 good

For many years now, I have been interested in using my technical skills to help with investigations of illegal activity. During my 10 years in Law Enforcement, I wanted to get into computer crime investigation. Unfortunately, there weren't any openings, so I decided to volunteer to help out in that

Tailscale for OPSEC

Tailscale for OPSEC

Tailscale is an amazing tool. It allows you to connect all of your machines, without opening ports, etc. One great feature is the ability to use a machine on your tailnet as an "exit node". This means if you have a VPS in Canada, you can enable the exit node

The Harvester

I recently discovered a tool called TheHarvester that conducts recon on domain names. The tool gathers names, emails, IPs, subdomains, and URLs by using multiple public resources. There are several passive modules you can use during your information gathering, however, some require an API key. You need to be sure

Kali Anonsurf

I recently watched a YouTube video hosted by David Bombal, with OccupyTheWeb. They were talking about how to take steps to remain anonymous while doing pen testing or OSINT. OTW mentioned a tool called Anonsurf that provided a layer of anonymity by forcing all traffic to go through TOR (The

Conducting recon with Omnisci3nt

Conducting recon with Omnisci3nt

After seeing a post on LinkedIn by DailyOSINT about a tool called "Omnisci3nt" I decided to check it out. It just took a few minutes to get it up and running. git clone https://github.com/spyboy-productions/omnisci3nt.git cd omnisci3nt pip3 install -r requirements.txt python3 omnisci3nt.py It

Emails for Privacy and OPSEC

Emails for Privacy and OPSEC

There are several reasons why you would want to have a virtually unlimited amount of alias email addresses. First of all, for privacy, giving out your personal email address will likely ensure a ton of spam emails. It's a good idea to have a personal email address that you only

Genealogy Fever

Genealogy Fever

I love genealogy and researching my family history. I feel myself wanting to dive back into my research. I have been passionate about genealogy for a while, but a few years ago, I discovered something amazing. While researching WikiTree, I connected with a distant cousin in Canada, who informed me

Researching phone numbers with Phunter

Researching phone numbers with Phunter

This morning I saw a post on LinkedIn that mentioned a program called Phunter for researching phone numbers. When I hear of a new tool, I always need to check it out. I downloaded it and began to test it out. This tool has several options: The Target function seems

Learning the ropes in OSINT

Learning the ropes in OSINT

I have been reading blogs, watching videos and taking a few courses on My OSINT Training. I downloaded Obsidian and then grabbed the Obsidian template from Micah Hoffman over at My Osint Training. At first glance, the template from Micah is a bit overwhelming. I decided to find a target,

Getting familiar with Sherlock

Getting familiar with Sherlock

After having completed the free OSINT courses at My OSINT Training I decided to look into some of the less expensive paid courses. I discovered a course on Sherlock, led by Micah Hoffman It was a fairly short course, but very helpful. Sherlock is a tool designed to run locally

Great OSINT Training

Great OSINT Training

As I began learning more about OSINT, I discovered some great FREE training. The website My OSINT Training was created by Micah Hoffman and Griffin Glynn This site has some great FREE training, as well as more advanced paid courses. There is a wide variety of courses, including Social Media,

OSINT tool of the week

OSINT tool of the week

As I have been digging through OSINT blogs, websites, podcasts, etc. I have found some really great tools. The most recent tool I have found was created by Micah Hoffman it's called Whatsmyname.app The way it works is amazing and saves a lot of time. You add a username

OSINT tips with Whoxy

OSINT tips with Whoxy

I have been diving into several blogs and videos to learn about OSINT. I have found some great resources that I will share at the end of this post. I have been familiar with WHOIS for many years. Typically, I use it in the command line to research client's domains

Why OSINT feels like a great fit

Why OSINT feels like a great fit

As a young kid, I was always fascinated by locks. There was something about the way a lock worked that interested me. I really enjoyed, and still do enjoy learning how things work. I also developed an interest in computers at a young age. When I was in the 5th

Have you heard of a Nagra CCR?

Have you heard of a Nagra CCR?

A Nagra CCR is a Credit Card Recorder created by Nagra Kudelski in Romanel (Switzerland) around 2013. It is a covert surveillance tool that has been restricted and can only be purchased by the Law Enforcement and intelligence community. This is an amazing piece of technology. It makes you think

Easy encryption with PicoCrypt

Easy encryption with PicoCrypt

There are many good encryption tools out there, like Hat.sh and Cryptomator What I don't like about Hat.sh is that for the average user, it is web-based, and if the project shut down, they wouldn't be able to decrypt their files. They could always self-host the program, but

Better privacy with MySudo

Better privacy with MySudo

How closely do you guard your cell phone number? Most people just give their number out, never thinking of the security risks. The truth is, you should protect your cell phone number, and not give it to just anyone. Here are a few risks associated with giving out your number:

Setting up a Socks Proxy

Setting up a Socks Proxy

I watched this video on setting up a Socks Proxy. Like a VPN, a proxy can allow you to emerge in different geographical locations. The difference is that the proxy traffic is not encrypted, therefore it is often a faster connection. Using Linode, I set up a ShadowSocks server, which

My Goals for 2024

My Goals for 2024

With each new year, we all set new goals. Many of those goals don't last more than a few months, but it is still important to set them. If you think about it, we could draw a line in the sand and set these goals anytime we like, but something

How Privacy.com saved me $28k

How Privacy.com saved me $28k

I have been happily using Privacy.com for the past 4 years or so and I am always sharing it with friends and family. Here are several reasons that I love this great privacy tool. * I never need to share my primary debit card * I can control how much each