d1r7b46 things

  If you are just coming into cybersecurity, pump the brakes and let's chat about how to not get sued.. or worse. The Background - this message on LinkedIn from last night: Let's break this down: NMAP could be considered OSINT.  OSINT - is the collection and analysis of data gathered from open sources (covert and publicly available sources) to produce actionable intelligence. See Wikipedia page for categories. Doing NMAP scans on "potential clients" without permission is against NMAP terms and conditions. Unauthorized port scanning, for any reason, is strictly prohibited. You could face legal action if you perform unauthorized scanning & assessments, and jail time  absolutely if you knowingly access without permission.   In the comments, a student from WGU was advocating for OP: The breakdown on this one:  His is misinformed. At first, I was frustrated that these two individuals, people who appear smart and passionate to network, seemed to be missing ...

  Hey all! Quick one here. Twint does not currently work without some modifications. I fought with it for several nights and hope now you won't have to.  I came across Twint during the TCM Security OSINT course and promptly was like "I'm gonna install that and play with it!" A week later, I've learned some things about installing it and have yet to play with it. This post serves to document what I had to do to get it to work. It may or many not work for you but it's worth a shot if you meet the following specifications:  Kali Linux 2022.3 ( with updates ) The following software selection 1 pipenv I decided to install Twint via pipenv (s/o to Gray on the TCM Discord for suggestion/direction and some of the work here is theirs). It did not install via pip so I decided to install it via sudo, although if I was not on an easily burnable virtual machine I would have looked for another method (like homebrew  or something).  Code: sudo -H pip ins...

Stitching Together a Useful Sock Puppet Account After finishing up TCM Security's OSINT module last week I wanted to expand upon a few topics with a little more detail. I'm starting with sock puppets since I struggled to find a comprehensive blog which had been produced in the last 6 months, especially knowing that new tools come out often/social media platforms change up so much.  In the cybersecurity world, a sock puppet account is a fake account that is utilized in OSINT and other investigations to do research and even converse with targets.  I have some significant experience with sock puppets and although that may make me sound like a weirdo, bear with me.  I have created a number of sock puppet accounts to chat with romance scammers, I've also done reconnoissance for a number of pentests, competed in OSINT CTFs, and am just naturally cautious about people online so have utilized sock puppets in a multitude of ways for my own research.  This takes us t...