Th3_Gazza

[Epieos @epieos]

☀️ During this summer, @epieos has selected 5️⃣ #OSINT documentaries that you will love and must watch.

🎥 These are classics!

Feel free to share your favorite #films on #OSINT in the comments👇

📜 Other enthusiasts have created lists in the past :

• Aware Online - https://t.co/vA8mSM2l3D

• @OSINTtechniques - https://t.co/Jw4vC878dR

• @navlys__ - https://t.co/KxSVUbfWGJ

[Kimberley Mitnick @kminx]

Today marks a year since your passing. To dwell on the difficult times when remembering and honoring you is simply not befitting.

To know Kevin as I did was a privilege. A relationship like none other.

Globally, Kevin’s story and body of work inspired many individuals to pursue a career in cybersecurity when the industry was in its infancy. For people entering the world of cybersecurity today, his work continues to draw people in. His stories are readily available in books, movies, recorded demos, and speeches.

Yes, he was a public figure in cybersecurity and to the tech community and beyond, but to know him personally was different from the public persona people knew him as.

Over the past 12 months, I have reflected on and mourned the gravity of the loss. Not many truly knew the real Kevin. As his wife and mother to our dear son Morty Mitnick, I cherish all my memories.

I’ve laughed many times when I’ve shared stories with loved ones. Kevin was an anomaly in many senses. He enjoyed his privacy yet was a public speaker and thrived in social settings—his love of magic, performing on stage and behind the camera, was oh so evident. He loved traveling around the world and hanging out with his friends, yet he had a huge fear of flying.

Kevin was known for many titles over his lifetime. Those titles meant little to him. What mattered were the people in his life. He cared.

He cared about the people who stood by him during his difficult upbringing and childhood years, his trials and tribulations, and those who were close to him after his ‘vacation’ (a term he coined and laughed wholeheartedly at).
Kevin worked restlessly to rehabilitate his reputation. His desire to educate and help protect the everyday person on the street to global organizations was admirable. Sprinkling in levity, sharing his favorite hacks over the years and teachings from his pentesting engagements delighted many.

Kevin mastered the art of storytelling. He captivated and drew people in a way that so few people can do. It is no wonder why he excelled and was legendary in his social engineering skills.  The ability to break down complex concepts in cyber for the everyday person to understand and for them to care is never to be underestimated.  

It shocked countless people that he continued to hack and keynote till the very end. On calls with clients, I shared that Kevin would be joining in on the red team engagements (his favorite kind). Not just leading the team in devising ways to get in but also participating in the engagements - getting in and exfiltrating their assets that were agreed flags. He loved seeing the evolution of security products and services being implemented and still finding a way to bypass their security controls. More importantly, he took pride in writing the deliverable and handing over the report – the sheer number of hours he poured into writing reports was commendable. Raising the bar and improving the security posture for our clients was deeply important to him.

Today is a day I celebrate the Kevin I knew. He was an undeniably loyal, adventurous man with an insatiable ability to continually evolve and learn. He was detail-oriented and a larger-than-life figure who always found ways to laugh despite any obstacle in his way. Your one-of-a-kind laugh will forever be in my heart and mind.

I will carry on the Mitnick legacy, but more importantly, I aim to raise Morty with love. Seeing Morty's smile is the greatest gift of all.

[Cyber Detective💙💛 @cyb_detective]

I continue to advise https://t.co/kSddRN6dtw on new features. They now have a module to search 3000+ sites by nickname (search a specific country or strictly for dating sites (or other categories).

Also not to be missed is a module to view the history of a Twitter username.

[Epieos @epieos]

🚨 Update ! Now on @epieos you can find a #Dropbox account linked to an email address.

🔸 Email
🔸 Name
🔸 Username
🔸 Photo
🔸 Paired account
… and more on https://t.co/IANKCFcIkW.

🎁 This module, normally reserved for law enforcement agencies, is now #free for the next 24 hours for all registered @epieos users.

[Th3_Gazza @Th3_Gazza]

@visegrad24 https://t.co/bDfLRonZ0U

Probably the same person

[Dave Kennedy @HackingDave]

Most folks don’t know that @kevinmitnick remained highly technical even up until the end. I worked with him on a number of pentests through the years and we always helped one another.

I’ve never seen someone so driven and persistent. Kevin loved hacking - to an obsession. He didn’t care if he lost money on an engagement - if he didn’t get in he would spend however long it took to own every aspect of the organization. To this day I’ve never met someone like him on how focused and persistent he was on engagements for his clients.

When he didn’t know something or a new technique came out - he would spend hours or days learning it and trying it out. We worked together on putting multiple things both public and private together for engagements or just curiosity.

He did extremely well in life after all his hardships and he told me the only reason he kept his consulting company open was because he loved hacking so much and that’s all he wanted to do. Didn’t care about the money or credibility- his mind worked in such unique ways.

People who say Mitnick wasn’t technical really had no idea what they were talking about or didn’t know him. He was an incredible hacker until his final days. I mean shit, before he went into ICU, he asked me for some of my password cracking dumps we have because he just got a massive GPU rig and was going to give me access.

We would sit there for hours at times screen sharing and working obstacles together. He recognized where he was weak knowledge wise and brought in friends to help and I was always willing to help. He taught me a lot - not just on social engineering of what people think of him - Kev was a legit hacker and I learned a lot of things from him.

We shared zero days, custom payloads, new research and techniques. Was always a blast and his excited laugh when he would finally get to his objectives and the rush of all of the hard work and culmination he had gone through.

Kev was legit, not that this needed to be said - but seeing him first hand, one of the best mentalities and persistence I’ve ever witnessed. He was elite.

[Hacking Articles @hackinarticles]

Best of Credential Dumping (Part 1)

NTDS.dit
https://t.co/pxcrnb9dpG

DCSync Attack
https://t.co/CRha6QEJQl

LAPS
https://t.co/RkRBoudP8R

Domain Cache Credential
https://t.co/9W3EIxoJXI

#infosec #cybersecurity #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #linux #cybersecurityawareness #bugbounty #bugbountytips

[Thomas Roccia 🤘 @fr0gger_]

My friend @dfirence created an awesome app called Mitre Assistant where you can visualize all the techniques used by a threat actor and more! Check this out! 👇#infosec

https://t.co/47BLJzvqLf

[Cyber Detective💙💛 @cyb_detective]

Surveillance under Surveillance

World map of surveillance camera locations (mostly Europe and neighbor countries)

For some cameras detailed information is given: geo coordinates, type, mount, timestamp etc

https://t.co/nLW8EWQDf7

[Ginger T @cqcore]

It's Saturday afternoon and I have finally got by Telegram #OSINT page on GitHub where I want it. I'm also in the process of writing a blog on how I built my Telegram OSINT VM. So watch out for that.
https://t.co/g89lOyfncw

[Antonio Cocomazzi @splinter_code]

Think if Ransomware operators gonna publish exfiltrated data with a 10 hours video on YouTube 😵‍💫
Infinite storage space at no costs 🥳

[Brendan O’Leary @olearycrew]

Excited to start this five part series on reconnaissance for pentesting and bug bounty hunting. We'll dive deep into types of recon, tools to use (PD's and others), and how you should think about passive vs. active recon.

Stay tuned every Thursday!

https://t.co/6OUPunulPJ

[Daily OSINT @DailyOsint]

How to find a #google account through a phone number?

https://t.co/coRO8RMNhE

@aware_online

#OSINT #phone #reconnaissance #training #investigation #intelligence #infosec #cybersecurity #ThreatIntel #blog

[straightblast @straight_blast]

Here is my RCE exploit code and writeup for (CVE-2021-21974) VMware ESXi OpenSLP heap-overflow discovered by @_wmliang_. Thank you again for your write-up.
[PoC] https://t.co/MCf3TV6IjH
[writeup] https://t.co/LoKlsYVyAJ

[Clandestine @akaclandestine]

OSINT Tools Library | Flashpoint https://t.co/lPlPrOfDBA

[Offensive OSINT @the_wojciech]

I built a real-time intelligence gathering tool and it's accessible online. Open Source Surveillance has 18 features including social media, cameras, #IoT, #ICS, transportation and more. #osint #intelligence #infosec #privacy