| Cyber Security Geek👨💻 | Sr. Security Consultant@Big4 | Microsoft/Google Security | Cloud Security | Sentinel Architect | Chronicle | Kusto(KQL) detective |
India (Hindustan)
Joined November 2020
- Tweets4.4K
- Following388
- Followers1K
- Likes665
InfoSec Pandey🥷🏻 🇮🇳 🕉️ retweeted
Ambiguous URLs are behind many SSRF, CORS, and redirect flaws, but most bypasses are scattered and undocumented.
This cheat sheet consolidates payloads, encodings, and IP tricks into one place to assist your testing.
Check it out: portswigger.net/web-security…
Awesome #AI #OSINT
Github repo by Ubikron:
AI image search/identification
ChatGPT based online tools
AI GEOINT
Google Dorks AI tools
Contacts search/leads generation
AI generated content detection
Multitask AI tools
Articles and videos
github.com/ubikron/Awesome-A…
EthnoGuessr
A free online game in which you have to guess the average portrait of a people shown to you and indicate their habitat on the map.
A new game every day (hint for today's game: there are no Eskimos there!)
hbd.gg/play/
#geoint #games
WhereIsThisPhoto
Another online service for approximate geolocation of photos using AI. Partly free.
whereisthisphoto.com/
#osint #geoint
Wayback Machine Alternatives
Many of the tools in the list are primarily aimed at preserving pages. However, you can try searching for data saved by others using Google: "keyword site:pagefreezer.com" (similarly for other tools domains).
link-assistant.com/news/wayb…
How to Watch Deleted YouTube Videos: 5 Verified Methods
1: The Digital Forensic Method (Reverse Image Search)
2: The Wayback Machine
3: Alternative Video Archives
4: Search by Video I
5: Recovering Metadata from Playlists
picknar.com/how-to-watch-a-d…
Free 21-day courses on OSINT automation (Python and Linux)
Python for OSINT github.com/cipher387/python-…
Linux for OSINT github.com/cipher387/linux-f…
Argus Labs
Free online tool for graph based investigation
No data is stored on third-party servers; only the browser's local storage is used.
Import gtaphs from other tools (Maltego, OSINTracker, Predicta Graph etc)
argus-labs.fr/en/community
Awesome AI Security
- Learning resources
- Frameworks and standards
- AI for offensive cyber
- AI for defensive cyber
- Safety and sandboxing for AI tools
- Detection & scanners
github.com/ottosulin/awesome…
Contributor Otto Sulin
#ai #cybersecurity
OSINT BOOKS
Github repo with list of books about Open Source Intelligence, investigations techniques, online privacy etc
github.com/ubikron/OSINT-Boo…
Global #Threat #Map
Interactive Threat Map
Event Feed
Country Intelligence
Intel Dossiers
Military Bases
Auto-Pan Mode
globalthreatmap.up.railway.a…
#SOAR #ATLAS
A huge, incredibly huge collection of maps
- live maps (weather, fire, clouds)
- historic maps (worldwide, countries, towns)
- local conflicts and disasters maps
- satellite maps
- ability to upload your own maps
soaratlas.com/
Introduction to Investigative Journalism: Deep Internet Research: Leveraging Open-Source Research and Verification Techniques:
- Planning and Conducting Your Investigation
- People Search
- Public Records and Databases
- Google Dorking
- Dark Web
gijn.org/resource/introducti…
#DinDoor, #DenoRAT, and #NightshadeC2: Analyzing TAG-150's Evolving Tradecraft:
esentire.com/blog/dindoor-de…
InfoSec Pandey🥷🏻 🇮🇳 🕉️ retweeted
CL.TE request smuggling works when front-end and back-end disagree on where your request ends. The attacker hides a second request in the body of the first.
Here's a demo 👇
Practice with PortSwigger's Web Security Academy.
InfoSec Pandey🥷🏻 🇮🇳 🕉️ retweeted
How to deliver reflected XSS via HTTP request smuggling vulnerability! 👇
Try this Practitioner lab now: portswigger.net/web-security…