A Pentester's Guide - Part 1 (OSINT - Passive Recon and Discovery of Assets)
To kick off this series on offensive security techniques, I am going to begin with what I consider to be the most important aspects of pentesting. Passive Recon and OSINT. Now, do not let the word ‘passive’ fool you. This is no light recon; you can uncover vast amounts of information through passive recon, without ever doing anything intrusive. Define Passive My definition of the word "passive" is
『2019 OSINT Guideã€ã‚’翻訳ã—ã¦ã¿ãŸ +α - ã‚»ã‚ュリティコンサルタントã®æ—¥èªŒã‹ã‚‰
OSINT（Open Source Intelligence）ã¯ã€å…¬é–‹æƒ…å ±ã‹ã‚‰æ§˜ã€…ãªæƒ…å ±ã‚’é›†ã‚る技術ã§ã™ã€‚ 最近ã§ã¯ã€@Sh1ttyKidsæ°ãŒOSINT技術を活用ã—ã¦æ—¥æœ¬ã®ã‚¢ãƒ³ãƒ€ãƒ¼ã‚°ãƒ©ãƒ³ãƒ‰ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ã®æƒ…å ±ã‚’ã¾ã¨ã‚ã¦ã„ã¾ã™ã€‚ www.recordedfuture.com 年始ã«ã‹ã‘ã¦ã€ã™ã“ã—OSINT技術を調査ã—ã¦ã„ãŸã®ã§ã€ã”å‚考ã«ãªã‚Œã°å‚考ã§ã™ã€‚ 翻訳：2019 OSINT Guide 『2019 OSINT Guideã€ã¨ã¯ã€Tekæ°ã«ã‚ˆã‚Šæ›¸ã‹ã‚ŒãŸ2019年１月ã«æ›¸ã‹ã‚ŒãŸè¨˜äº‹ã§ã™ã€‚ www.randhome.io 米国ã®ã‚»ã‚ュリティクラスタã§ã¯è©±é¡Œã«ãªã£ã¦ãŠã‚Šã€OSINT技術ã®æ¦‚è¦ã‚’眺ã‚ã€ã¾ãŸæœ€å…ˆç«¯ã®ãƒ„ールãªã©ãŒç´¹ä»‹ã•ã‚Œã¦ã„ã‚‹ã®ã§ã€ä¸€èªã®ä¾¡å€¤ã¯ã‚ã‚‹ã¨æ€ã„ã€ä½œè€…ã®è¨±å¯ã‚’å¾—ã¦ã€ç¿»è¨³ã‚’è¡Œã„ã¾ã—ãŸã€‚ scientia-security.github.io RANDç ”ç©¶æ‰€ã®ãƒ¬ãƒãƒ¼ãƒˆã‹ã‚‰è¦‹ã‚‹OS
OSINT 用検索エンジンã‚ã‚Œã“ã‚Œ | ninoseki.github.io
|-------------------------|------------------------------------------------------------------------------------------------------| | asn | The Autonomous System Number that identifies the network the device is on. | | before | Only show results that were collected before the given date (dd/mm/yyyy. | | city | Show results that are located in the given city. | | country | Show results that are loca
Buscador OSINT VMã§å§‹ã‚ã‚‹OSINT入門
ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ï½žã€æœ€è¿‘インターãƒãƒƒãƒˆã®æ²»å®‰ãŒæ‚ªãã¦ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚’ã‚„ã‚‹ã®ãŒè¾›ããªã£ã¦ããŸã®ã§æ”¹åã‚’ã—ãŸã„インターãƒãƒƒãƒˆå¤ªéƒŽã§ã™ã€‚ ãã‚“ãªã‚ã‘ã§ã€ä»Šå›žã¯ã‚µã‚¯ãƒƒã¨OSINTã®è©±ã‚’ã—ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ※注æ„：本投稿ã§è¨˜è¿°ã—ãŸæ‰‹æ³•ã‚’用ã„ã¦ãƒˆãƒ©ãƒ–ルãªã©ãŒç™ºç”Ÿã—ãŸå ´åˆã€å½“社ã¯ä¸€åˆ‡ã®è²¬ä»»ã‚’è² ã„ã‹ãã¾ã™ã€‚æœ¬æƒ…å ±ã®æ‚ªç”¨ã¯ã—ãªã„ã§ãã ã•ã„。 OSINTã¨ã¯ "Open Source Intelligence"ã®ç•¥ç§°ã§ã€å…¬é–‹æƒ…å ±ã‹ã‚‰æƒ…å ±ã‚’åŽé›†ã—ã¦ãã®æƒ…å ±ã‚’å½¹ç«‹ã¦ã‚‹ã“ã¨ã‚’指ã—ã¾ã™ã€‚ Wikipediaã«ã¯ã€"è«œå ±æ´»å‹•"ã®åˆ†é‡Žã®ã²ã¨ã¤ã¨æ›¸ã‹ã‚Œã¦ã„ã¦ãªã‚“ã ã‹ã‚«ãƒƒã‚³ã‚¤ã‚¤æ„Ÿã˜ã§ã™ã€‚ オープン・ソース・インテリジェンス（英: open-source intelligence）ã¨ã¯ã€è«œå ±æ´»å‹•ã®åˆ†é‡Žã®ã²ã¨ã¤ã§ã€ä»–ã® HUMINT（ヒューミント）や SIGINT（シギント）ã¨å‘¼ã°ã‚Œã‚‹åˆ†é‡ŽãŒä¸»ã¨ã—ã¦ã€Œç§˜å¯†ã®æƒ…å ±ã‚’é•æ³•è¡Œ
Hacking Cryptocurrency Miners with OSINT Techniques
NOTE: All the methods I have explained are at your own risk Sponsored by https://swordeye.io swordeye.ioOpen Source Intelligence(OSINT) is one of the first techniques to gather information before the attack. There have been many hacking cases using OSINT in the past. Along with the developing IoT devices, we can collect lots of critical data on the public web. We will be gathering critical data fo
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - jivoi/awesome-osint: :scream: A curated list of amazingly awesome OSINT
A Guide to Open Source Intelligence Gathering (OSINT)
_roku_OSINT
IntelTechniques Resources
Penetration Testing Your WordPress Site - WordPress Security
{{#tags}}- {{label}}
{{/tags}}