People search engines are all the rage at this moment in history. New ones appear online and go offline just as fast. These are the sites like thatsthem.com where you put in a first and last name and you get a list of addresses and other information. What if I told you that there are people search engines to find out where someone lives or who lives at what address completely free and ran by the government? Would you believe me?
Had a busy week again so far, so this post isn't anything to crazy! I'll be using up my shodan API credits early next week though, so expect some good stuff coming :] That said, here we go! So some of the most common things I find and for whatever reason I find really interesting … Continue reading OSINT Escapades #12
This one will be short and sweet as I've been busy. I've been finding a bunch of these half broken phishing sites meant to harvest credentials. I don't know why someone would use these when you can just use Social Engineering Toolkit (SET) to clone a site. Next up are two web application I've never … Continue reading OSINT Escapades #10
Yo, here we are with another quick entry of interesting findings publicly exposed on the internet. This post will not have anything that will blow your mind but I promise you won't be disappointed. Before I show 'em off, here is the google dork I used to find them: "Index Of" site:*.35.* -com -ru So … Continue reading OSINT Escapades #7
Bonjour and welcome to another entry of OSINT Escapades. First up we have another phone conference password, but not for such a sensitive organization. Next up we have another hacked site, which funnily enough, I found at least 4 different "hacker groups" compromised the site and defaced it. I just picked a random one to … Continue reading OSINT Escapades #6
Howdy and bienvenue to another entry of OSINT Escapades! I'll be honest, today's findings I've plucked from my troves of treasures are not as exciting as the last entry but still interesting nonetheless! Up first, we have another elastic search database, this one containing some order information and looks to be based in china. Next … Continue reading OSINT Escapades #5
'Tsup and welcome. Time for another entry of OSINT Escapades. Not much to discuss this episode so lets jump right into it! First up we have an elastic search database from china which is not odd right. Except it contains information about Americans including their bank account balance?! Next up we have a log of … Continue reading OSINT Escapades #4
Time for another round of interesting finds on the internet. Hopefully I'll go through my findings more and compile more of these posts soon. Before I jump in, wanted to include an awesome tool I've been using along with shodan; LeakLooker Highly recommend! Been finding some really interesting databases that I will definitely share some … Continue reading OSINT Escapades #2
Better late than never I suppose. Technique: Not so much a technique this week but a quick little wordlist to get more value from the tool listed below. This is a wordlist for /aspnet_client/system_web/ Link Tool: IIS-Shortname-Scanner A personal favorite of mine because I think there is still more value in this vulnerability that hasn't … Continue reading Technique, Tool and Lecture #2
Thursday is upon us! From now on I will do my best to post a new Technique, Tool and Lecture (TTL) or what I call the Tender Loving Care (TLC) of Hackers every Thursday! Without Further ado: Technique: OS Command Execution with Web Application Firewall Bypass using wildcards aka globbing patterns Link I have yet … Continue reading Technique, Tool and Lecture #1
