Deep dig/osint etc

• Alphabet in binary code

• OSINT tools for deeper digging

• Official Guidance：Understanding Surge

  Official Guidance：Understanding Surge

• Google Dorks Cheat Sheet 2022 [Free PDF]

  This Google Dorks cheat sheet covers everything you need to know about how to use the Google hacking technique to reach hidden search results and data.

• GeekWire - Information, Cyber, Network Security News

  Information Security, Cyber Security, Network Security, Threats, Vulnerability, Exploit, Cybercrime News and more from around the world.

• 15 useful Google Operators - Search more effectively on Google

  15 useful Google Operators for your investigations | Search more effectively with search engine Google with these 15 operators

• edgydorkslist

• Google Dorks List and Updated Database in 2022 - AOFIRS

  How to Use Google Dorks? To use a Google Dork, you simply type in a Dork into the search box on Google and press “Enter”. Here are some of the best Google Dork queries that you can use to search for information on Google. Google Dork Queries Examples: site:.edu “phone number”– This Dork searches for websites on .edu domains that contain the words “phone number”. student “phone number” – This Dork searches for websites on .edu domains that contain the words “student” and “phone number”. inurl:edu “login” – This Dork searches for websites on .edu domains that contain the words “login”. This Dork searches for school websites that contain student login information. “powered by vbulletin” site:.edu – This Dork searches for websites on .edu domains that contain the words “powered by vbulletin”. This Dork searches for school websites that are running on the vbulletin forum software. “powered by vbulletin” site:.gov – This Dork searches for websites on .gov domains that contain the words “powered by vbulletin”. This Dork searches for governmental websites that are running on the vbulletin forum software. “powered by vbulletin” site:.mil – This Dork searches for websites on .mil domains that contain the words “powered by vbulletin”. This Dork searches for military websites that are running on the vbulletin forum software. “powered by vbulletin” inurl:.edu – This Dork searches for websites on .edu domains that contain the words “powered by vbulletin”. This Dork searches for school websites that are running on the vbulletin forum software. “powered by vbulletin” inurl:.mil – This Dork searches for websites on .mil domains that contain the words “powered by vbulletin”. This Dork searches for military websites that are running on the vbulletin forum software. inurl:.com “powered by vbulletin” – This Dork searches for websites on .com domains that contain the words “powered by vbulletin”. This Dork searches for websites that are running on the vbulletin forum software. inurl:.edu “register forum” – This Dork searches for websites on .edu domains that contain the words “register forum”. This Dork searches for school websites that allow you to register for a forum. inurl:.gov “register forum” – This Dork searches for websites on .gov domains that contain the words “register forum”. This Dork searches for governmental websites that allow you to register for a forum. Scraper API provides a proxy service designed for web scraping. With over 20 million residential IPs across 12 countries, as well as software that can handle JavaScript rendering and solving CAPTCHAs, you can quickly complete large scraping jobs without ever having to worry about being blocked by any servers. Google Search Operators : cache: [cache:www.google.com web] will show the cached content with the word “web” highlighted. This functionality is also accessible by clicking on the “Cached” link on Google’s main results page. The query [cache:] will show the version of the web page that Google has in its cache. For instance, [cache:www.google.com] will show Google’s cache of the Google homepage. link: [link:www.google.com] will list webpages that have links pointing to the Google homepage. related: [related:www.google.com] will list web pages that are similar to the Google homepage. info: [info:www.google.com] will show information about the Google homepage. define: The query [define:] will provide a definition of the words you enter after it, gathered from various online sources. The definition will be for the entire phrase entered (i.e., it will include all the words in the exact order you typed them). Eg: [define:google] stocks: If you begin a query with the [stocks:] google search operator, It will treat the rest of the query terms as stock ticker symbols and will link to a page showing stock information for those symbols. For instance, [stocks: intc yhoo] will show information about Intel and Yahoo. (Note you must type the ticker symbols, not the company name.) site: If you include [site:] in your query, Google will restrict the results to those websites in the given domain. For instance, [help site:www.google.com] will find pages about help within www.google.com. [help site:com] will find pages about help within .com urls. Note there can be no space between the “site:” and the domain. allintitle: If you start a query with [allintitle:], Google will restrict the results to those with all of the query words in the title. For instance, [allintitle: google search] will return only documents that have both “google” and “search” in the title. intitle: If you include [intitle:] in your query, Google will restrict the results to documents containing that word in the title. For instance, [intitle:google search] will return documents that mention the word “google” in their title, and mention the word “search” anywhere in the document (title or no). Putting [intitle:] in front of every word in your query is equivalent to putting [allintitle:] at the front of your query: [intitle:google intitle:search] is the same as [allintitle: google search]. allinurl: If you start a query with [allinurl:], Google will restrict the results to those with all of the query words in the url. For instance, [allinurl: google search] will return only documents that have both “google” and “search” in the url. Note that [allinurl:] works on words, not url components. In particular, it ignores punctuation. Thus, [allinurl: foo/bar] will restrict the results to page with the words “foo” and “bar” in the url, but won’t require that they be separated by a slash within that url, that they be adjacent, or that they be in that particular word order. There is currently no way to enforce these constraints. inurl: If you include [inurl:] in your query, Google will restrict the results to documents containing that word in the url. For instance, [inurl:google search] will return documents that mention the word “google” in their url, and mention the word “search” anywhere in the document (url or no). Putting “inurl:” in front of every word in your query is equivalent to putting “allinurl:” at the front of your query: [inurl:google inurl:search] is the same as [allinurl: google search]. Google Dorks Updated Database: Nina Simone intitle:”index.of” “parent directory” “size” “last modified” “description” I Put A Spell On You (mp4|mp3|avi|flac|aac|ape|ogg) -inurl:(jsp|php|html|aspx|htm|cf|shtml|lyrics-realm|mp3-collection) -site:.info Bill Gates intitle:”index.of” “parent directory” “size” “last modified” “description” Microsoft (pdf|txt|epub|doc|docx) -inurl:(jsp|php|html|aspx|htm|cf|shtml|ebooks|ebook) -site:.info parent directory /appz/ -xxx -html -htm -php -shtml -opendivx -md5 -md5sums parent directory DVDRip -xxx -html -htm -php -shtml -opendivx -md5 -md5sums parent directory Xvid -xxx -html -htm -php -shtml -opendivx -md5 -md5sums parent directory Gamez -xxx -html -htm -php -shtml -opendivx -md5 -md5sums parent directory MP3 -xxx -html -htm -php -shtml -opendivx -md5 -md5sums parent directory Name of Singer or album -xxx -html -htm -php -shtml -opendivx -md5 -md5sums filetype:config inurl:web.config inurl:ftp “Windows XP Professional” 94FBR ext:(doc | pdf | xls | txt | ps | rtf | odt | sxw | psw | ppt | pps | xml) (intext:confidential salary | intext:"budget approved") inurl:confidential ext:(doc | pdf | xls | txt | ps | rtf | odt | sxw | psw | ppt | pps | xml) (intext:confidential salary | intext:”budget approved”) inurl:confidential ext:inc "pwd=" "UID=" ext:ini intext:env.ini ext:ini Version=... password ext:ini Version=4.0.0.4 password ext:ini eudora.ini ext:ini intext:env.ini ext:log "Software: Microsoft Internet Information Services _._" ext:log "Software: Microsoft Internet Information ext:log "Software: Microsoft Internet Information Services _._" ext:log "Software: Microsoft Internet Information Services _._" ext:mdb inurl:_.mdb inurl:fpdb shop.mdb ext:mdb inurl:_.mdb inurl:fpdb shop.mdb ext:mdb inurl:_.mdb inurl:fpdb shop.mdb filetype:SWF SWF filetype:TXT TXT filetype:XLS XLS filetype:asp DBQ=" _ Server.MapPath("_.mdb") filetype:asp "Custom Error Message" Category Source filetype:asp + "[ODBC SQL" filetype:asp DBQ=" _ Server.MapPath("_.mdb") filetype:asp DBQ=" _ Server.MapPath("_.mdb") filetype:asp “Custom Error Message” Category Source filetype:bak createobject sa filetype:bak inurl:"htaccess|passwd|shadow|htusers" filetype:bak inurl:"htaccess|passwd|shadow|htusers" filetype:conf inurl:firewall -intitle:cvs filetype:conf inurl:proftpd. PROFTP FTP server configuration file reveals filetype:dat "password.dat filetype:dat "password.dat" filetype:eml eml +intext:"Subject" +intext:"From" +intext:"To" filetype:eml eml +intext:"Subject" +intext:"From" +intext:"To" filetype:eml eml +intext:”Subject” +intext:”From” +intext:”To” filetype:inc dbconn filetype:inc intext:mysql*connect filetype:inc mysql_connect OR mysql_pconnect filetype:log inurl:"password.log" filetype:log username putty PUTTY SSH client logs can reveal usernames filetype:log “PHP Parse error” | “PHP Warning” | “PHP Error” filetype:mdb inurl:users.mdb filetype:ora ora filetype:ora tnsnames filetype:pass pass intext:userid filetype:pdf "Assessment Report" nessus filetype:pem intext:private filetype:properties inurl:db intext:password filetype:pst inurl:"outlook.pst" filetype:pst pst -from -to -date filetype:reg reg +intext:"defaultusername" +intext:"defaultpassword" filetype:reg reg +intext:"defaultusername" +intext:"defaultpassword" filetype:reg reg +intext:â? WINVNC3â? filetype:reg reg +intext:”defaultusername” +intext:”defaultpassword” filetype:reg reg HKEY* Windows Registry exports can reveal filetype:reg reg HKEY_CURRENT_USER SSHHOSTKEYS filetype:sql "insert…

• Network monitoring tools every admin should know

  Network monitors are an absolute must-have for any network administrator. But which tool, out of the thousands, should you consider for your tool kit? Jack Wallen offers up his five favorites.

• CIDR Report

  Original Concept: Tony Bates, Revised by: Philip Smith, Further Revised: Geoff Huston This report was generated at Sun Mar 14 01:14:37 2021 AEST. This lists the "Top 30" ASes who if they aggregated their announced prefixes could make a significant contribution to the reduction of the current size of the Internet routing table. Plot: AS count Plot: Average announcements per origin AS Report: ASes ordered by originating address span Report: ASes ordered by transit address span Report: Autonomous System number-to-name mapping (from Registry WHOIS data)

• IPv6 CIDR Report

  This lists the "Top 30" ASes who, if they aggregated their announced prefixes, could make a significant contribution to the reduction of the current size of the IPv6 Internet routing table. This report is generated from an analysis of the BGP routing table withinAS131072, and was produced at Tue Jun 22 07:46:13 2021 AEST. Plot: AS count Plot: Average announcements per origin AS Report: ASes ordered by originating address span Report: Autonomous System number-to-name mapping (from Registry WHOIS data)

• World Imagery Wayback

  Wayback imagery is a digital archive of the World Imagery basemap, enabling users to access different versions of World Imagery captured over the years. Each record in the archive represents World Imagery as it existed on the date new imagery was published. Wayback currently supports all updated versions of World Imagery dating back to February 20, 2014.

• NEXRAD Data Inventory Search | National Centers for Environmental Information

  The National Centers for Environmental Information (NCEI) archives all of the National Weather Service Radar Data from the WSR-88D NEXRAD Radars. NCEI is the world's largest active archive of weather data. NCEI produces numerous climate publications and responds to data requests from all over the world.

• PeeringDB

  The Interconnection Database

• What is OSINT? 8 top open source intelligence tools

  OSINT (open source intelligence) is the practice of collecting information from published or otherwise publicly available sources. These tools will help you find sensitive public info before bad guys do.

• Binary decoder: Online binary to text translator

  Computers store instructions, texts and characters as binary data. All Unicode characters can be represented soly by UTF-8 encoded ones and zeros (binary numbers). Find out what your data looks like on the disk.

• tlds-alpha-by-domain

• Internet Exchange Directory | PCH

  JavaScript Required - This page requires JavaScript to work. You are viewing a static copy which is only small subset of the entire IXP Directory. Please use a browser with JavaScript enabled to view the complete, up to date and dynamic directory.

• Web archive tools - OSINT tools voor website archieven - Aware Online

  Web archive tools ★OSINT-onderzoek naar website archieven ★ Een overzicht van handige OSINT-tools voor webpagina's en accounts op sociale media. Lees verder!

• Email search tool – Investigating email addresses – Aware Online

  Email search tool ★ Use our custom OSINT tool for email investigations ★ Find linked accounts on social media. Discover how!

• OSINT Map: A MindMap for Your Investigations

  This is a guest post by Steve Hall ( Thanks for writing it Steve! I recently attended SANS Denver (SEC487) because I wanted to round out my knowledge on some of the OSINT I had been doing. The clas…

• Website Investigation Techniques | OSINT by Bob Brasich

  Website investigation best practices and a website investigation training tool by Bob Brasich @NetBootCamp.

• Website Investigations: Process & Techniques

  Website investigations follow a basic, logical flow. The launching point tends to be a domain or an IP address. The endpoint is usually identification of the operator or finding enforcement options. But, what happens in between these points varies by investigator and website.This post outlines a standardized process that guides new hires through website investigations

• IP Address Lookups: The Clues are Inside the Attributes

  Finding out who’s in control of an IP address isn’t always as straight forward as you may think. Sometimes there’s more than one ISP mentioned in the record and that makes a difference when you need to know who’s in charge.The process of sifting through an IP address record is like taking apart a Russian

• osint ip look up at DuckDuckGo

  DuckDuckGo. Privacy, Simplified.

• Tools List (Awesome and Fantastic Tools) Available on dCode

  Tools (Exhaustive List) available on dCode. Pages for each tool are sorted and classified by categories.

• hash decoder at DuckDuckGo

  DuckDuckGo. Privacy, Simplified.

• WhatsMyName Web

• All IP of locality (region, city)

  Find out information about yourself Information exfiltration from cache and web archives Bypassing the prohibition of displaying source HTML code, bypassing social content lockers Advanced search engines usage Information about phone numbers Web Application Vulnerability Scanners Web Server Vulnerability Scanners Subdomains and hidden files Getting Information on MAC Addresses Analysis of executable files Enter a geographic name to get all the IP addresses associated with it. The search is case insensitive.

• Subdomain discovery

  Find out information about yourself Information exfiltration from cache and web archives Bypassing the prohibition of displaying source HTML code, bypassing social content lockers Advanced search engines usage Information about phone numbers Web Application Vulnerability Scanners Web Server Vulnerability Scanners Subdomains and hidden files Getting Information on MAC Addresses Analysis of executable files This service finds a large number of subdomains for a target web site. To search for site subdomains used data sources: Ask, Archive.is, Baidu, Bing, Censys, CertDB, CertSpotter, Commoncrawl, CrtSH, DnsDB, DNSDumpster, Dnstable, Dogpile, Entrust CT-Search, Exalead, FindSubdomains, GoogleTER, Hackertarget, IPv4Info, Netcraft, PassiveTotal, PTRArchive, Riddler, SecurityTrails, SiteDossier, Shodan, ThreatCrowd, ThreatMiner, Virustotal, WaybackArchive, Yahoo.

• Extract all strings from executable file

  Find out information about yourself Information exfiltration from cache and web archives Bypassing the prohibition of displaying source HTML code, bypassing social content lockers Advanced search engines usage Information about phone numbers Web Application Vulnerability Scanners Web Server Vulnerability Scanners Subdomains and hidden files Getting Information on MAC Addresses Analysis of executable files How to find out which lines are in the .exe file or in the .dll file? Just upload your executable file on this service and it will show you all the lines that appear in the file.

• Geotagging service

  Find out information about yourself Information exfiltration from cache and web archives Bypassing the prohibition of displaying source HTML code, bypassing social content lockers Advanced search engines usage Information about phone numbers Web Application Vulnerability Scanners Web Server Vulnerability Scanners Subdomains and hidden files Getting Information on MAC Addresses Analysis of executable files Modern smartphone embed GPS coordinates in each photo they take. Those photos you’re taking have location data embedded in them — at least by default. Many modern digital cameras also do this.

• List all metadata of a file

  Find out information about yourself Information exfiltration from cache and web archives Bypassing the prohibition of displaying source HTML code, bypassing social content lockers Advanced search engines usage Information about phone numbers Web Application Vulnerability Scanners Web Server Vulnerability Scanners Subdomains and hidden files Getting Information on MAC Addresses Analysis of executable files Metadata within a file can tell a lot about you. Cameras record data about when and where a picture was taken and what camera was used. Office documents like pdf or Office automatically add author and company information to documents and spreadsheets. Maybe you don't want to disclose this information on the web.

• Disclosure of real IP of sites are behind Cloudflare, Incapsula, SUCURI and other WAF

  Find out information about yourself Information exfiltration from cache and web archives Bypassing the prohibition of displaying source HTML code, bypassing social content lockers Advanced search engines usage Information about phone numbers Web Application Vulnerability Scanners Web Server Vulnerability Scanners Subdomains and hidden files Getting Information on MAC Addresses Analysis of executable files This service finds real IP of sites are hidden behind Cloudflare, Incapsula, SUCURI and any other web application firewalls (WAF).

• Service to find hidden IP's behind the CloudFlare network

  Find out information about yourself Information exfiltration from cache and web archives Bypassing the prohibition of displaying source HTML code, bypassing social content lockers Advanced search engines usage Information about phone numbers Web Application Vulnerability Scanners Web Server Vulnerability Scanners Subdomains and hidden files Getting Information on MAC Addresses Analysis of executable files CloudFail is a tactical reconnaissance tool which aims to gather enough information about a target protected by Cloudflare in the hopes of discovering the location of the server. Using Tor to mask all requests, the tool as of right now has 3 different attack phases.

• Service bypassing blocking view source page

  Find out information about yourself Information exfiltration from cache and web archives Bypassing the prohibition of displaying source HTML code, bypassing social content lockers Advanced search engines usage Information about phone numbers Web Application Vulnerability Scanners Web Server Vulnerability Scanners Subdomains and hidden files Getting Information on MAC Addresses Analysis of executable files On some sites the call to the context menu of the mouse is blocked, for this reason it is not always possible to quickly view the source code. Sometimes on these sites, the CTRL+u key combination can work, with which you can open the source code.

• Simultaneous search in several web archives

  This service allows you to search for a saved page from several web archives at once. You just need to enter the address of the page you are interested in and you will be given links to view this page if it is no longer available, as well as to view the different versions this page has had in the past.

• Find out the location and Internet service provider by IPv6

  Find out information about yourself Information exfiltration from cache and web archives Bypassing the prohibition of displaying source HTML code, bypassing social content lockers Advanced search engines usage Information about phone numbers Web Application Vulnerability Scanners Web Server Vulnerability Scanners Subdomains and hidden files Getting Information on MAC Addresses Analysis of executable files Here you can enter an IP and get the following information: Also, you can enter the addresses of web sites and for them the same information will be displayed.

• All IP of Autonomous System (AS)

  Find out information about yourself Information exfiltration from cache and web archives Bypassing the prohibition of displaying source HTML code, bypassing social content lockers Advanced search engines usage Information about phone numbers Web Application Vulnerability Scanners Web Server Vulnerability Scanners Subdomains and hidden files Getting Information on MAC Addresses Analysis of executable files Autonomous System (AS) is a term that refers to a group of gateways (routers, routers) that are in the same administrative control, that is, belong to the same organization.

• Google hacking - Wikipedia

  Google hacking, also named Google dorking,[1][2] is a computer hacking technique that uses Google Search and other Google applications to find security holes in the configuration and computer code that websites use. Google hacking involves using advanced operators in the Google search engine to locate specific strings of text within search results. Some of the more popular examples are finding specific versions of vulnerable Web applications. A search query with intitle:admbook intitle:Fversion filetype:php would locate all web pages that have that particular text contained within them. It is normal for default installations of applications to include their running version in every page they serve, for example, "Powered by XOOPS 2.2.3 Final".

• OSINT Framework

  (T) - Indicates a link to a tool that must be installed and run locally (D) - Google Dork, for more information: Google Hacking (R) - Requires registration (M) - Indicates a URL that contains the search term and the URL itself must be edited manually I originally created this framework with an information security point of view. Since then, the response from other fields and disciplines has been incredible. I would love to be able to include any other OSINT resources, especially from fields outside of infosec. Please let me know about anything that might be missing!

• Offensive Security’s Exploit Database Archive

  The Exploit Database - Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, Security Articles, Tutorials and more.

• DomainTools | Cyber Threat Intelligence | Threat Investigation Platform

  Turn domain and DNS data into threat intelligence with DomainTools. Connect network indicators to investigate, profile and map attacker infrastructure.

• Court Records Directory

  Locate free court records. Descriptions of trial courts and court types in all U.S. states. Find out which courts handle common case types. Where to find court records and where to search court records. Directories of court locations for every county and state in the country.

• The Complete OSINT Tutorial to Find Personal Information About Anyone - Ehacking

  This article discusses the complete OSINT investigation tutorial with top tools like Maltego, theHarvester. And, the manual techniques to find personal information about anyone

• TCP/IP Protocol Flashcards | Quizlet

  Start studying TCP/IP Protocol. Learn vocabulary, terms, and more with flashcards, games, and other study tools.

• ipdb.me - an internet numbers search engine

  ipdb.me is an easy to use internet investigation tool.

• URL encoding

  URL encoding / decoding can be done. It determines the optimal one from the character encoding of 107, and prevents garbled characters.

• SOLDIERX.COM | Nobody Can Stop Information Insemination

  We like to do a joke every year for April Fools', but after discussion with some of the crew we've decided to cancel this year as many other sites are doing on account of COVID-19. We hope we'll be able to come up with something extra funny in 2021. Good luck and stay safe people. VulnTrack provides monitoring and alerting of security vulnerabilities and exploits based on a provided rule set. In version 1.1 VulnTrack-gtk has been replaced with vulntrack-cli, which is works on both Windows and Linux. Includes new features such as Acknowledge, Remove, and showing vulnerabilities with known exploits available. The database comes pre populated with all exploits from 2017 to 4/24/19. As always, any feedback or feature requests are greatly appreciated.

• PHP Live! - PHP and MySQL Powered Live Chat Solution

  Open Source Live Chat Solution powered by PHP and MySQL. Chat with your website visitors today!