osint
7 posts found
Web Endpoint Reconnaissance: A 10-Point Attack Surface Checklist
A 10-point external reconnaissance audit checklist covering HTTP headers, DNS hygiene, TLS configuration, and perimeter exposure using open-source OSINT tooling…
WebCheck: Self-Host Your Website OSINT Instead of Renting It
Website OSINT in one URL: DNS, TLS, headers, WHOIS, tech fingerprint, all passive. Run the WebCheck fork on your own box so targets never leave your network.
North Korea’s $11M Crypto Job Interview Scheme: How Remote Hiring Became an Attack Vector
Seven U.S. intelligence agencies tied a $11M cryptocurrency theft to North Korean recruitment fraud. Fake job interviews, credential harvesting, and cryptocurre…
bgscan vs WebCheck-OSINT: Two Ways to Run an Engagement Recon Pass
bgscan sweeps networks from a BubbleTea TUI, chaining ICMP, TCP, HTTP, DNS, and tunnel probes into one run. WebCheck-OSINT dissects a single site from a self-ho…
Mobile Security Hardening: A Red Team Checklist
A practical mobile security checklist for red team operators. Covers device encryption, network traffic inspection, certificate pinning bypass, SIM swap attacks…
Building a Containerized Reconnaissance Lab
Learn how to build a secure, ephemeral OSINT lab using Docker. We deploy WebCheck and Huntkit with strict network isolation and VPN routing for private reconnai…
The Evolution of OSINT: Navigating Cloud Sprawl and AI Reconnaissance
An expert interview exploring how cloud infrastructure and AI agents are revolutionizing Open Source Intelligence (OSINT) and offensive security.