Recently I’ve been setting up a web application built with Docker. The setup posed a little challenge since it was necessary to run the app on the internet but at the same time I didn’t want it to be directly accessible on the web for anyone to poke around. It’s possible to limit access to […]
SSH Tunnels For Docker Applications Read More »
The last blog post I wrote about Fake Twitter profiles is by far the most widely-read post I’ve ever published since I started this blog. It’s nice when people read your work but there was a little sour note with this post after it was pointed out to me that someone had been posting it
Who Stole My Stuff? Finding Out Who Is Behind A Website Read More »
WordPress is the base that 35% of the world’s websites are built on. If you’re ever going to investigate a website, then it’s really important to be able to know your way around a WordPress setup. In this tutorial I’m going to show how to identify user accounts on a WordPress-based website so that you
OSINT Techniques: Who’s Behind A WordPress Site? Read More »
I was originally going to write this guide as part of my post on OSINT for e-mail addresses, but really this is better as separate subject. PGP keys are used for a variety of purposes, but one of the main reasons they exist is to allow someone to verify and protect their online identity. They
Using PGP Keys For OSINT Read More »
Remaining anonymous is often an important concern for OSINT practitioners. There are many types of OSINT, and many different reasons why we do not necessarily want our subjects to know we are trying to find out about them. A recruiter may not want a company to know that they are trying to lure away one
Opsec for OSINT – Why You Need To Deal With Browser Fingerprinting Read More »
