The InfoSec & OSINT Show

Latest Episodes:

20 - Robert Baptiste (Elliot Anderson) & Mobile App Hacking Aug 14, 2020

Show notes

This week Robert Baptiste, aka Elliot Anderson (@fs0c131y) joins us to chat about his research into TikTok, how he bypassed limitations in the Indian government’s Covid tracing app to figure out how many sick people were in their parliament building as well as his new endeavor fighting disinformation with Predicta Lab.

19 - Tommy Devoss (Dawgyg) & Bug Bounty Hunting on Steroids Aug 07, 2020

Show notes

This week Dawgyg (Tommy DeVoss) hangs out to chat about his approach to bug bounty hunting, which led him to be one of eight million dollar hackers on the HackerOne platform. We discuss his approach to recon, how he finds unique bugs, how to get into bug hunting and more.

18 - Simon Bennetts & Headless Automated Scanning with ZAP Jul 31, 2020

Show notes

This week Simon Bennetts joins me to talk about how to automate web app scanning via ZAP. We discuss API integration, headless scanning, Github action scans, the HUD and more.

17 - Matthias Wilson & Using OSINT Against Nigerian Scammers Jul 24, 2020

Show notes

This week Matthias Wilson joins me to discuss how he uses various OSINT techniques to track down Nigerian advance payment scammers while having a bit of fun. Matthias also shares how he's combined OSINT and social engineering techniques during physical engagements.

16 - Ty Miller & Security Automation Jul 17, 2020

Show notes

This week Ty Miller of Threat Intelligence fame joins us to talk about security automation. Whether you're tasked with incident response, pen testing or gathering threat intelligence, automation can enable you to scale and maximize resources. We talk about chaining various open source tools together to give you an initial baseline level of information as well as Evolve, their commercial alternative.

15 - Chris Dale & Breaking up Recon from the Pen Test Jul 10, 2020

Show notes

This week River Security's Founder and SANS instructor Chris Dale joins us to explain why recon should be separated from the pen test in order to improve efficiency and increase the quality of the outcome. He also explains his recon process as well as the tools he uses to map out the target's attack surface.

14 - Andrew van der Stock & the Future of OWASP Jul 03, 2020

Show notes

This week OWASP's new executive director Andrew van der Stock hangs out to talk about the future of several flagship projects like the Application Security Verification Standard (ASVS) and the Top 10 as well as how OWASP should adapt in order to continue growing in light of Covid.

13 - Advanced Passive Recon with the Amass Scripting Engine Jun 26, 2020

Show notes

This week we discuss several passive recon techniques to further enumerate the attack surface as well as how we can tie the output from the rest of our recon tools together into a central location via the Amass scripting engine. This allows us to easily combine our results into a single database to track changes over time as well as visualize data points discovered from all of our recon tools.

12 - Brute force more effectively with custom wordlists Jun 19, 2020

Show notes

This week we discuss how pen testers and bug bounty hunters can get better brute force results by creating a custom wordlist based on what they're trying to enumerate. The lists that come with popular tools are often dated. We can generate more targeted wordlists based on current trends with BigQuery as well as unique terms used in the target web app itself.

11 - Hacking from the command line with Bash and Vim Jun 12, 2020

Show notes

This week we talk about how to use the Bash shell to help automate OSINT and pen testing tasks that are run often. We also discuss how to automate parts of the recon process by using vim as a visualization tool to find anomalies.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected