BK

Humans are scary. I prefer to talk to computers :)

[Jacob Soo @_jsoo_]

Off-By-One Year 3.
We are as surprised as you are. But yes, the entire crew at @starlabs_sg and friends are back organising it.

[Cyber Detective💙💛 @cyb_detective]

Cloudflare Radar URL Scanner

Online service for in-depth analysis and collection of information about URL (public scan free):

Security
Network
Links
Behavior
Content
Indicators
Related public scans

https://t.co/XT8ZV5URyi

[starlabs @starlabs_sg]

Please be careful of fake STAR Labs SG employee. Another one spotted again

https://t.co/SrVQ6K83lv

[Cyber Detective💙💛 @cyb_detective]

APIs for #OSINT

Automate gathering info about:

- phone numbers
- address/zip codes
- leaks
- crypto wallets/transactions
- emails/nicknames
- vulnerabilities (new section, tip by @synfinner)

and more.

https://t.co/og3Ggxo4vE

[Cyber Detective💙💛 @cyb_detective]

TweetFeed

List of IOCs shared today by the #infosec community at Twitter:
- domains
- URLs
- IPs
- SHA256/MD5 hashes

https://t.co/wCq2B3V6bn

Creator @0xDanielLopez

[Cyber Detective💙💛 @cyb_detective]

DNS History

A tool to track the history of DNS servers associated with a particular domain. Data since 2002 year for 2.2 billion nameservers.

https://t.co/RU4UZe1zqd

[Web Security Academy @WebSecAcademy]

🔔 New topic alert: Web LLM attacks 🔔

Stay ahead in application security - dive into the world of LLMs to discover their weaknesses and understand how to exploit them.

Read our latest learning materials and try your hand at the new interactive labs.

https://t.co/Trvc0x2Wj0

[starlabs @starlabs_sg]

The owner of this account never interned with us. This is probably the 3rd time we saw people doing this.

[starlabs @starlabs_sg]

Our team members have spotted another fake account imposing as our team member.
This is the fake account:
https://t.co/djZSgc7SeE

This one belongs to our team member.
https://t.co/6UeyOfZuCe

[Inti De Ceukelaire @intidc]

🤘 SCOOP: QR codes on festival wristbands introduce risks of theft and privacy exposure. Full article at the end of this thread! 🧵

[Ronnie Salomonsen bsky @r0ns3n.dk @r0ns3n]

Don't @ Me: URL Obfuscation Through Schema Abuse | Mandiant https://t.co/mgEtDOOlYv

[HackGit @hack_git]

OSCP-Reporting

Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP Exam and Lab Reporting / Note-Taking Tool

https://t.co/pzR2M34wqU

#cybersecurity #infosec #pentesting

[JS0N Haddix @Jhaddix]

This is an absolutely dope mindmap for attacking AD.

https://t.co/zUyjR9yrpJ

Source: https://t.co/rnh7cBPjm6

[Cyber Detective💙💛 @cyb_detective]

My #socmint tools threads:

Reddit
https://t.co/z5MDFyg5r6

Twitch
https://t.co/Ydal5cBAPM

Github
https://t.co/U7NCZS8qon

Facebook
https://t.co/0YtTVheonn

Telegram
https://t.co/Q8tcVALBBn

YouTube
https://t.co/J5spgHqcVH

[Cyber Detective💙💛 @cyb_detective]

ALERTX

Very fast #go tool for search subdomains. For example, it fin 111 https://t.co/reBWKLaovV subdomains in 0.003 seconds.

https://t.co/9GRrvHbFwF

Creator @pdiscoveryio

[fofr @fofrAI]

I asked Midjourney v5 to '/describe' some logos, to see how it would create prompts for them, and to see what it would create in response.

Starbucks

[Mike Takahashi @TakSec]

Google Dork - SSRF Prone Parameters

inurl:http | inurl:url= | inurl:path= | inurl:dest= | inurl:html= | inurl:data= | inurl:domain= | inurl:page= inurl:& site:example[.]com

Find endpoints for SSRF testing

#bugbountytips

[𝕊𝕖𝕔𝕥𝕠𝕣𝟘𝟛𝟝 @Sector035]

Whoop! Here we are again with another episode of Week in #OSINT!

H/T: @Harisfromcyber @GONZOs_int @cqcore @LocateCIO

https://t.co/4bkV4kDx8L

[Cyber Detective💙💛 @cyb_detective]

FUZZ4BOUNTY

Wordlists for BugBounty Hunting:

Wordpress
Drupal
PhpUnit
Apache Tomcat
Nginx
CGI

and more.

https://t.co/YQVmfqMDlF

Contributor @0xPugazh

[Cyber Detective💙💛 @cyb_detective]

n0kovo_subdomains

Wordlist for subdomain enumeration of 3,000,000 lines, crafted by harvesting SSL certificates from the entire IPv4 space. Shortened versions of the list are also available: 1 000 000, 500 000, 200000 and 50000 lines

https://t.co/PavaswPx4v

Contributor @n0kovo