Want to mess with your network monitoring team today? Change you MAC to be 00:20:91:... That is NSA's OUI. Thx
Micah
21.1K posts
Helping people grow skills and achieve their goals.
Always #OSINTCurious - BlueSky: @webbreacher.com
linkedin.com/in/micahhoffma…
Joined August 2012
- Did you know that the CIA released a free PDF on how to analyze #osint? Well, it wasn't JUST for OSINT. It discusses bias and how to keep an open mind when performing analyses. Worth a download and read. PDF is here: sec487.info/e3
- The whatsmyname.app #username #OSINT web site now has over 280 sites that you can check for a username from within your browser. - Export results to a file. - All checks from your browser. - Free - Fast
- Doing #OSINT within @shodanhq? As an auth'd user, visit images.shodan.io and use these filters: - screenshot.label:desktop - screenshot.label:ics - screenshot.label:loggedin - screenshot.label:login - screenshot.label:terminal - screenshot.label:windows Use in combination!
- Hey #OSINT and #cyber people. If you are using colored boxes to note certain areas of interest/similarity in your image analysis, consider using an additional technique as well. Not everyone can see those boxes that you can see. Check out my blog post webbreacher.com/2022/03/16/rep…
- #OSINT and Web App Pentest Tip: Use Chrome's built-in UserAgent Switcher (not extension!) to change your browser UA at will. Images attached.
- Are you a bored OSINTer today? Nothing much going on? How about looking at people's public Google Calendars? That could be fun! Enjoy and add this technique to your #osint arsenal! google.com/search?q=inurl…
- Are you new to #OSINT, #threatintel, #recon and need to better understand what to do with the data you gather? Hop on over to webbreacher.com/2018/06/24/int… and learn about yoga.osint.ninja.
- After an amazing 10 years, I'm excited to let you know that I've resigned from my day job at Booz Allen. Starting in December, I will be doing #OSINT and #cyber consulting through my new @SpotInfosec business (spotlight-infosec.com).
- I was today-years-old when I learned that I could copy #metadata from one file (like a phone's photo) to another (thispersondoesnotexist.com image) using the command-line command: exiftool -TagsFromFile fromFile.jpg toFile.jpg #osint #sockpuppet Credit to photo.stackexchange.com/questions/8529…
GIF - My son offered to make my coffee this morning which seemed odd at the time as he never has done this before. My coffee tasted good until I saw this. Luckily I’ve been building up an immunity to iocaine powder. Whew. 😏
- Well the #osint cat is out of the bag. Some of you have already been contacted by @SANSDefense to be beta testers for THE NEW OSINT CERT!!! May I present, the GIAC GOSI (GIAC Open Source Intelligence) certification for the #sec487 class!











