Vivek | Cybersecurity

Cyber Attack Breakdowns | Threat Intel & OSINT Tradecraft | Free Cyber Resources | Follow for Actionable Threat Insights

[Vivek | Cybersecurity @VivekIntel]

OSINT Roadmap: Beginner → Expert 🕵️‍♂️

├── Phase 1: Foundations (1-2 weeks)
│ ├── What is OSINT & Ethics/Legal
│ │ ├── OSINT definition, types (SOCMINT, GEOINT, etc.)
│ │ ├── Laws (GDPR, Privacy, Ethics)
│ │ └── OPSEC for investigators
│ ├── Mindset & Critical Thinking
│ │ ├── Occam's Razor, Bias avoidance
│ │ └── Mind Mapping (GitMind, XMind)
│ └── Basic Tools Setup
│ ├── Browser (Firefox + containers)
│ ├── VPN + Proxies
│ └── Note-taking (Notion/Obsidian)

├── Phase 2: Basic Techniques (2-4 weeks)
│ ├── Google Dorks & Advanced Search
│ │ ├── Operators, site:, intitle:, etc.
│ │ └── Custom search engines
│ ├── Username & Email Search
│ │ ├── WhatsMyName, Namechk, Holehe
│ │ └── Email verification tools
│ ├── People Search & Background Check
│ │ ├── Pipl, Spokeo, TruePeopleSearch (free alternatives)
│ │ └── Social Media Profiling
│ └── Image & Reverse Search
│ ├── Google Lens, TinEye, Yandex
│ └── Metadata extraction (ExifTool)

├── Phase 3: Intermediate Skills (4-6 weeks)
│ ├── Recon Tools Mastery
│ │ ├── Maltego (Community), Recon-ng, SpiderFoot
│ │ ├── Shodan, Censys, Zoomeye
│ │ └── TheHarvester, Amass
│ ├── Social Media OSINT
│ │ ├── Twitter/X, Instagram, LinkedIn, Facebook
│ │ └── Geolocation from posts
│ ├── Domain & IP Intelligence
│ │ ├── WHOIS, DNS enumeration
│ │ └── Passive DNS (SecurityTrails)
│ └── Data Analysis Basics
│ ├── Excel/Google Sheets for OSINT
│ └── Basic scripting (Python basics)

├── Phase 4: Advanced Techniques (6-8 weeks)
│ ├── Geospatial & Imagery OSINT
│ │ ├── Google Earth, Sentinel Hub
│ │ └── Satellite imagery analysis
│ ├── Dark Web & Threat Intel
│ │ ├── Tor browsing, Dread
│ │ └── Leak sites monitoring
│ ├── Automation & Custom Tools
│ │ ├── Python scripting for OSINT
│ │ └── APIs integration (https://t.co/Si2T81eO6n, etc.)
│ └── Adversary Simulation
│ ├── Purple Teaming with OSINT
│ └── Report Writing & Presentation

├── Phase 5: Professional & Career Level
│ ├── Case Studies & Real Projects
│ │ ├── Bellingcat style investigations
│ │ └── CTFs (Trace Labs, OSINT CTF)
│ ├── Certifications
│ │ ├── TCM Security Practical OSINT
│ │ ├── SANS FOR578 (if possible)
│ │ └── Free certs from Basel Institute
│ └── Continuous Learning
│ ├── Communities (OSINT Curious, Discord)
│ ├── Newsletters (My OSINT News)
│ └── Tools updates (OSINT Framework)

[Vivek | Cybersecurity @VivekIntel]

Anthropic just open-sourced a reference framework for AI-powered vulnerability discovery and remediation 🤖💀

The workflow:

Recon → Find → Verify → Triage → Report → Patch

Features:
• Threat modeling
• Autonomous vulnerability hunting
• Crash verification
• Finding deduplication
• Exploitability analysis
• AI-generated patches with validation

Built around Claude Code and sandboxed agents using gVisor.

🔗 https://t.co/ZFOtXZPEn8

Interesting signal: AI is moving beyond code generation into autonomous security research and vulnerability management.

#CyberSecurity #AppSec #AI #LLM #VulnerabilityManagement #DevSecOps #ClaudeAI

[Vivek | Cybersecurity @VivekIntel]

One of the largest free cybersecurity knowledge repositories on GitHub 💀🔥

The Art of Hacking (h4cker)

26K+ stars and thousands of curated resources covering:

• Ethical Hacking
• OSINT
• DFIR
• AI Security
• Cloud Security
• Exploit Development
• Reverse Engineering
• Certifications
• Home Labs & Cyber Ranges

Organized into domains, certifications, labs, and AI-focused learning paths.

🔗 https://t.co/Ir57bRkHC8

If you're building a cybersecurity roadmap, this repo can save hundreds of hours of searching.

#CyberSecurity #OSINT #DFIR #Pentesting #ThreatIntel #AIsecurity #Infosec

[Vivek | Cybersecurity @VivekIntel]

HACK.SKILLS: 100+ offensive security skills packaged for AI agents 💀🔥

Highlights:
• 101 security skills
• Web, API & Auth testing
• Active Directory
• Linux/Windows PrivEsc
• Mobile Security
• Reverse Engineering
• Binary Exploitation
• Cryptography
• AI/LLM Security
• Digital Forensics

Instead of scattered cheat sheets, the project organizes security knowledge into structured, searchable skill modules that AI agents can load on demand.

🔗 https://t.co/L7UL7WcbK6

Think of it as a cybersecurity knowledge base optimized for AI-assisted security research and learning.

#CyberSecurity #OSINT #BugBounty #Pentesting #RedTeam #AppSec #LLM #AI

[Vivek | Cybersecurity @VivekIntel]

New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute https://t.co/90u0K8NsGo

[Vivek | Cybersecurity @VivekIntel]

Cyber espionage campaign targeted stock exchange executive’s Outlook account https://t.co/3B7JWNdMBd

[Vivek | Cybersecurity @VivekIntel]

📚 Microsoft's AI For Beginners is still one of the best free AI learning resources available.

What you get:
• 12-week curriculum
• 24 lessons
• Hands-on labs & quizzes
• PyTorch & TensorFlow
• Computer Vision
• NLP
• Transformers & LLMs
• Reinforcement Learning
• AI Ethics

Perfect for students who want to learn AI from fundamentals instead of jumping straight into prompts and AI tools.

⭐ 47k+ GitHub stars
🔗 https://t.co/di4IHEDgHN

#AI #MachineLearning #DeepLearning #PyTorch #TensorFlow #LLM #ArtificialIntelligence #Students

[Vivek | Cybersecurity @VivekIntel]

Microsoft just released Coreutils for Windows 💀🔥

Now Windows users can install native Linux-style commands like:

• ls
• cat
• cp
• mv
• rm
• pwd
• grep
• find

Install:
winget install Microsoft.Coreutils

Built on Rust-based uutils and packaged by Microsoft to make Linux, macOS, WSL, containers, and Windows workflows more consistent.

🔗 https://t.co/MEleQgMum8

Still in preview, but a big step toward reducing shell friction on Windows.

#Windows #Linux #PowerShell #DevOps #SysAdmin #OpenSource #RustLang

[Vivek | Cybersecurity @VivekIntel]

🤖 AI-Powered Nmap with ShellGPT

ShellGPT lets you run complex Nmap scans using plain English instead of memorizing flags.

Examples:
• Host discovery
• Port scanning
• Service & OS fingerprinting
• NSE vulnerability scans
• SMB/HTTP/SSH enumeration
• Scan result analysis with AI

Workflow:
Natural Language ➜ AI Generates Nmap Command ➜ Execute ➜ AI Analyzes Results

Useful for learning Nmap faster, automating recon workflows, and accelerating defensive security assessments.

🔗 https://t.co/qUzUgzuTvJ

#CyberSecurity #Nmap #OSINT #Pentesting #RedTeam #AI #ShellGPT

[Vivek | Cybersecurity @VivekIntel]

Havoc Framework: Modern Open-Source C2 for Red Teams 💀🔥

Havoc is a post-exploitation Command & Control framework built for adversary emulation and red team operations.

🔥 Key Features:
• Cross-platform Qt Client
• Golang Teamserver
• Custom Payload Generation
• HTTP/HTTPS Listeners
• SMB Support
• External C2 Integration
• Python API & Modules
• Token Vault
• Sleep Obfuscation Techniques
• AMSI & ETW Bypass Research
• Custom Agent Support

🔗 https://t.co/fUTdsLPoH2

Designed to be modular, extensible, and operator-focused.

#RedTeam #CyberSecurity #ThreatEmulation #C2 #Pentesting #InfoSec #PurpleTeam #SecurityResearch

[Vivek | Cybersecurity @VivekIntel]

CISA warns of active attacks exploiting Android, Linux bugs https://t.co/FhqIeQuWbg

[Vivek | Cybersecurity @VivekIntel]

AI agents can now manipulate your organization. Are you ready? https://t.co/NizFRpSt1T

[Vivek | Cybersecurity @VivekIntel]

Russia's FSB Says Foreign Spies Infected Officials' Phones With Malware https://t.co/2c7Jay1vqW

[Vivek | Cybersecurity @VivekIntel]

Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures https://t.co/UW7oQn8PRZ

[Vivek | Cybersecurity @VivekIntel]

Claude-Red: Turn Claude into a Red Team Operator 🤖💀

A massive collection of offensive security skills that transforms Claude into a context-aware specialist for:

🎯 Web App Pentesting
🎯 Active Directory Attacks
🎯 Cloud Security
🎯 Mobile Pentesting
🎯 OSINT & Recon
🎯 Wireless Attacks
🎯 Exploit Development
🎯 Fuzzing & Vulnerability Research
🎯 AI Security Testing

🔗 https://t.co/QraHdkdU0A

100+ structured red team playbooks, methodologies, and attack workflows — loaded on demand.

#RedTeam #Pentesting #CyberSecurity #OSINT #bugbounty #ThreatResearch #InfoSec #AI

[Vivek | Cybersecurity @VivekIntel]

Tomnomnom Hacks — A Goldmine for Bug Hunters & Pentesters 💀🔥

A massive collection of lightweight recon, fuzzing, automation, and web hacking tools.

⚡ Popular Tools:
• assetfinder – Subdomain Discovery
• waybackurls – Historical URL Collection
• qsreplace – Parameter Fuzzing
• unfurl – URL Parsing
• kxss – XSS Reflection Detection
• inscope – Scope Filtering
• html-tool – HTML Parsing
• filter-resolved – Live Host Filtering

🔗 https://t.co/cgbAIt8e8R

Simple. Fast. Built for real-world recon workflows.

#bugbounty #WebSecurity #Recon #Pentesting #CyberSecurity #OSINT #InfoSec

[Vivek | Cybersecurity @VivekIntel]

OGI (OpenGraph Intel): Open-Source Link Analysis & OSINT Framework 💀🔥

⚡ Features:

• Visual Link Analysis Graphs
• 20+ Built-in OSINT Transforms
• DNS, WHOIS & SSL Enrichment
• Social Media Intelligence
• AI-Powered Investigator
• Graph Analysis & Entity Mapping
• Real-Time Collaboration
• Plugin & Transform Marketplace
• Import/Export (CSV, JSON, GraphML)
• Self-Hosted & Docker Ready

🔗 https://t.co/DsflgbzMVn

Perfect for OSINT Analysts, Threat Hunters, CTI Teams, SOC Analysts, and Investigators.

#OSINT #ThreatIntelligence #CyberSecurity #DFIR #Investigation #OpenSource #InfoSec

[Vivek | Cybersecurity @VivekIntel]

📸 Osintgram: Instagram OSINT Framework for Investigators

🔥 Features:

• Profile Intelligence Gathering
• Followers & Following Analysis
• Hashtag Enumeration
• Photo & Story Collection
• Tagged User Discovery
• Caption & Comment Extraction
• Profile Picture Download
• Email & Phone Enumeration
• Docker Support
• Interactive Recon Shell

Perfect for OSINT Analysts, Threat Intelligence Researchers, Investigators, and Cybersecurity Professionals.

🔗 https://t.co/Aiub55dw8M

⚠️ Works only on public profiles or accounts you follow.

#OSINT #ThreatIntelligence #CyberSecurity #DigitalInvestigation #InstagramOSINT #InfoSec

[Vivek | Cybersecurity @VivekIntel]

One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens https://t.co/20PpYFmOsh