Are you a Cybersecurity Analyst or beginner in the field?. Join our WhatsApp community through the link below and connect with like minded individuals today!. Retweet to get this to someone it will benefit!.

- Detecting Malicious Code Changes – Monitoring repositories for changes with Repo Hunt. - Tracking Developer Footprints – Investigating commit histories with GHunt. Don’t forget to like and follow for more😇.

Hard-on with OSINT p.5. 𝗖𝗼𝗱𝗲 & 𝗥𝗲𝗽𝗼𝘀𝗶𝘁𝗼𝗿𝘆 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲.- Leaked API Keys & Secrets – Finding exposed credentials with GitLeaks. - Searching open GitHub repositories for sensitive data using GitHub Dorking.

- DNS Hijacking Detection – Checking for DNS changes with DNSTwist. - Certificate Transparency Logs – Searching for newly issued SSL certificates using CertSpotter. Don’t forget to like and follow for more😇.

Hands-on with OSINT P.4. 𝗗𝗼𝗺𝗮𝗶𝗻 & 𝗦𝘂𝗯𝗱𝗼𝗺𝗮𝗶𝗻 𝗘𝗻𝘂𝗺𝗲𝗿𝗮𝘁𝗶𝗼𝗻.- Subdomain Enumeration – Discovering subdomains using Subfinder. - Brute Force DNS Records – Resolving domains using MassDNS.

Hunting Dark Web Activity – Searching TOR hidden services using OnionSearch. - Passive DNS Lookups – Identifying related infrastructure with PassiveTotal. Don’t forget to like and follow for more😇.

Hands-on with OSINT P.3. 𝗡𝗲𝘁𝘄𝗼𝗿𝗸, 𝗗𝗮𝗿𝗸 𝗪𝗲𝗯 & 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲.- Using AlienVault OTX for real-time threat intelligence. - Investigating domain name changes with SecurityTrails.

- Analyzing Phishing Domains – Investigating suspicious URLs with . - Fake Account & Bot Detection – Detecting inauthentic social media accounts using Botometer. Don’t forget to share & follow for more😇.

Hands-on with OSINT P.2. 𝗦𝗼𝗰𝗶𝗮𝗹 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝗶𝗻𝗴 & 𝗣𝗵𝗶𝘀𝗵𝗶𝗻𝗴 𝗥𝗲𝗰𝗼𝗻.- User Account Enumeration – Check breached passwords with Have I Been Pwned (HIBP). - Extracting social media profiles using Holehe.

- Infrastructure Fingerprinting – Gather TLS certificate data with Censys to uncover related assets. - Finding Exposed Cloud Storage – Use Grayhat Warfare to identify open Amazon S3 buckets. Don’t forget to share & follow for more.

Hands-on with OSINT p.1. 𝗔𝘁𝘁𝗮𝗰𝗸 𝗦𝘂𝗿𝗳𝗮𝗰𝗲 𝗠𝗮𝗽𝗽𝗶𝗻𝗴.- Using Shodan to map exposed services & misconfigured assets. - Leveraging Amass for passive & active reconnaissance of domains & subdomains. Cc: Rajneesh Gupta

Cybersecurity Analyst vs. Ethical Hacker vs. Security Engineer . Do you agree?. What would you add or subtract from this infographic?🤔

Recon & Attack Surface Mapping.- ZoomEye – Discover exposed online infrastructure.- GrayHatWarfare – Search public S3 buckets.- LeakIX – Find misconfigured web servers.- DNSDumpster – Map DNS data & exposure.- FullHunt – Full view of external attack surfaces.

Cybersecurity Search Engines II. Threat Intelligence.- Pulsedive – Analyze IOCs & threat feeds.- PolySwarm – Scan files & URLs for malware.- Fofa – Cyber mapping & threat tracking.- AlienVault – Threat detection & correlation tools.- Onyphe – Big data for cyber risk analysis. 🧵

Search Techniques & Dorking.DorkSearch – Use Google dorks to uncover vulnerabilities. DNS & Domain Info.- Security Trails – Get in-depth DNS & domain intelligence.

Cybersecurity Search Engines III. OSINT / Internet Scanning.- Shodan – Scan the internet for connected devices.- WayBackMachine – Retrieve archived website content. 🧵

Source Code & Git Search.- SearchCode – Explore open source code repositories.- Grep App – Hunt through GitHub repositories for secrets. Vulnerability & Exploit Databases.- ExploitDB – Access known exploits and PoCs.- Vulners – CVE and vulnerability intelligence database.

Cybersecurity Search Engines I. Leaked Data & Credentials.- Dehashed – Find leaked credentials from data breaches.- IntelligenceX – Search Tor, I2P, & deep web leaks. 🧵

𝗧𝗼𝗽 𝟮𝟭 𝗗𝗮𝗿𝗸 𝗪𝗲𝗯 𝗥𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀 𝗳𝗼𝗿 𝗢𝗦𝗜𝗡𝗧 𝗣𝗿𝗼𝗳𝗲𝘀𝘀𝗶𝗼𝗻𝗮𝗹𝘀. By: Ethical Hacking Academy