The InfoSec & OSINT Show

Latest Episodes:

10 - Server Side Request Forgery Attacks and Bypasses Jun 05, 2020

Show notes

This week we cover a couple of new OSINT tools and techniques like Snapchat maps, Signal face obfuscation, web cam indexes and httpx. We also do a deep dive into Server Side Request Forgery (SSRF) attacks and how to bypass common defenses.

9 - Automating Recon - Mapping Your Target Effectively May 29, 2020

Show notes

This week we cover a couple of new tools like ffuf, recursebuster, subjack and cloud_enum. We discuss how to combine and recursively scan the output. Then we throw this into a Bash script to automate the initial attack surface mapping to help us find juicy vulns with minimal effort

8 - Domain and Network Recon using Amass - Mapping the Attack Surface May 28, 2020

Show notes

This week we do a deep dive into Amass, the OWASP domain enumeration and network mapping tool. This is essential for figuring out your target's attack surface both for offensive and defensive security.

7 - GitHub Reconnaissance - Finding the needle in the Haystack May 15, 2020

Show notes

This week we do a deep dive into GitHub reconnaissance. GitHub can be a goldmine for finding leaked credentials and expanding the attack surface by finding new subdomains and API endpoints. This is important both from an OSINT or red team standpoint to figure out where to focus your attacks as well as for the blue team to know what information has been leaked.

6 - Hunting Open Elasticsearch Databases for Fun and Profit May 08, 2020

Show notes

This week I discuss the latest InfoSec news including hiding XSS payloads in polymorphic images, exploiting remote code execution on Salt servers, using open source intelligence to track down Russian operatives, tracking Ransomware, DNS over HTTPS, Zoom security improvements and the latest data breaches. We also discuss several techniques to track down open noSQL servers like Elasticsearch.

5 - Asset Inventory for Red Teamers and OSINT Investigators May 01, 2020

Show notes

This week I discuss the latest InfoSec news including Covid-19 tracking apps, an iOS no-click 0-day, phishing the WHO, hacking Microsoft Teams and and a SQL Injection in the Sophos firewall. We also discuss several techniques on mapping out the attack surface for your target.

4 - Infosec News & Website Attribution Apr 24, 2020

Show notes

This week I discuss the latest InfoSec news including automated grocery shopping delivery time slot bots, IBM 0-days, thieves returning stolen cryptocurrency, the Webkinz breach and more, as well as some tips on how to track down who is behind a website.

3 - InfoSec News & Reverse Image Search Apr 17, 2020

Show notes

This week I discuss the latest InfoSec news including Cloudflare, Git and infected Ruby Gems, ransomware news, the latest data leaks, as well as optimizing your reverse image search capabilities.

2 - InfoSec News & Cyber Attribution with Canary Tokens Apr 07, 2020

Show notes

This week I discuss the latest InfoSec news including Zoom, Twitter, Marriott, GoDaddy, the SBA and CloudFlare as well as cyber attribution and how to implement canary tokens to figure out who's attacking you.

1 - Zoom Security Risks & Anonymous LinkedIn Searches Apr 02, 2020

Show notes

This week I discuss the security risks video conferencing software such as Zoom presents, some tips on separating your work and personal digital lives as well as an OSINT tip on how to search LinkedIn anonymously.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected