OSINT

Fingerprinting Exposed Siemens S7 PLCs with Netlas

Stuxnet targeted Siemens PLCs. Today, thousands of industrial devices are still exposed online and reveal more than expected. See what Netlas finds.

Hunting Exposed LLM Infrastructure with Netlas

Discover how exposed AI gateways, configuration files, and leaked API keys create security risks and how to hunt them using Netlas.

Discovering Data Exposure with Netlas

How to discover exposed configuration files, API keys, database credentials, bearer tokens, and debug outputs using Netlas response data.

How to find unprotected databases with Netlas.io: Chapter 2

Continue to study the importance of database security using the examples of Netlas searches. This time you’ll even see hacked databases!

Mastering Online Camera Searches

A guide on how to find exposed webcams anywhere in the world. Techniques, tools, and best practices. Examples of searching for the most popular devices.

Using Uncover with Netlas.io module

Configure the Netlas module in ProjectDiscovery Uncover and search for exposed hosts to support passive reconnaissance and attack surface discovery.

Mapping Dark Web Infrastructure

Explore how investigators trace dark web infrastructure through clues and errors that exposed AlphaBay, Hansa, and other hidden services.

The $1.5B Bybit Hack & How OSINT Led to Its Attribution

Insights on the record-breaking Lazarus heist: how social engineering, AWS token hijacking, and Safe{Wallet} code injection enabled the Bybit hack.

SOCMINT: Intelligence in the Social Media Era

How does Social Media Intelligence differ from OSINT? A review of the most popular SOCMINT tools, their true capabilities, and a few real-world cases.

theHarvester: a Classic Open Source Intelligence Tool

Learn practical OSINT techniques, installation tips, and real-world use cases for theHarvester to enhance your cybersecurity reconnaissance workflow.

Google Dorking in Cybersecurity: Techniques for OSINT & Pentesting

Explore Google dorking techniques to boost your OSINT and penetration testing. Learn automation tricks, best practices, and top analogues.

ASN Lookup Explained: Tools, Methods & Insights

Autonomous System investigation requires correlating WHOIS, BGP, and enrichment data to uncover ownership, routing, and infrastructure details.