Sa Ul retweeted
🚀 Version 2.0.24 live : New unlimited username & email search, the OneQuery API, and Noimosiny as a new data partner.
🆓 Free, unlimited username and email search
Powered by Consensus (OSINT Experts Society's open-source tool), it combines 19 lookup projects (Maigret, WhatsMyName, Sherlock, Holehe and more) into one search, and standardised results. Over 9,000 sites supported.
🔌 OneQuery API - Every Major OSINT API-Data Provider in one.
Run a single API-Query across 100+ premium data services (Epieos, FaceCheck.ID, PIPL, OSINT Industries, IntelX, Dehashed and more). One standard response. Included in a standard subscription. We do the heavy lifting.
🤝 Noimosiny joins as a data partner
Reverse email lookup across 250+ platforms, including ones most sources miss (TikTok, Strava, Etsy, AliExpress). Now a module in Email Intelligence.
👉 Try the free search: usersearch.com
👉 API : lnkd.in/e6rDDsW2
👉 Consensus project: osint.ngo/tools
#OSINT #OSINT4Good #DigitalInvestigation #CyberSecurity #OpenSource #API #UserSearch
Sa Ul retweeted
Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information, follow PHP’s announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
ALT Critical vulnerability alert for PHP Core with CVE-2026-109618 and CVE-2026-109619, CVSS score 9.2, urging immediate patch and threat hunting.
Sa Ul retweeted
Les comparto este repositorio que indexa metadatos de publicaciones sobre filtraciones en DarkForums y Breach (antes BreachForums) para investigación OSINT.
Sin data filtrada ni URLs de descarga.
¿Qué pueden correlacionar con esta información?
1. Detectar filtraciones antiguas presentadas como nuevas e identificar hilos duplicados entre foros.
2. Autores y participantes activos: analizar usernames,
3. Periodos de actividad y posibles campañas: identificar patrones temporales y coincidencias entre publicaciones.
Cambios de nombre: explorar posibles vínculos entre alias utilizados durante distintas campañas
En mi repositorio también encontrarán otros dos recursos relacionados con estos foros: correos electrónicos e IPs con información de geolocalización.
El índice contiene publicaciones hasta el 16 de octubre. Si hay tiempo, procuraré actualizarlo mensualmente.
github.com/Ivancastl/LeakSco…
#OSINT #ThreatIntel #CTI #Ciberseguridad
Sa Ul retweeted
👋 Hola a todos 👋
📢 Ya están disponibles en el Youtube de C1b3rwall (youtube.com/c/c1b3rwall) las conferencias que se retransmitieron en streaming en las distintas salas del Congreso 2026:
✅ Auditorio
✅ Sala de Congresos
✅ Aulas 3 y 5
¡¡Disfruta!!
Sa Ul retweeted
A Claude Code skill bundle for bug hunting and external red-team work - 51 skills, 15 slash commands, 574+ disclosed-report patterns curated across 24 vulnerability classes, plus enterprise identity + infrastructure attack matrices. github.com/elementalsouls/Cl…
Sa Ul retweeted
🌐‼️ Même les hackers se font doxxer par leur propre connerie !
Un chercheur OSINT mexicain @ivancastl a pris une fuite de mi-avril 2026 sur DarkForums (gros forum cybercriminel) et l’a transformée en outil de cartographie...
➡️ 312 600 enregistrements au total
➡️ 79 900 adresses IP uniques
➡️ Carte Leaflet interactive qui zoome direct sur les pays, villes, FAI et même les VPN foireux !!
Tu tapes un username et la carte te montre où ce gars se connectait depuis sa box résidentielle Totalplay, ALTAN REDES, ou un ProtonVPN mal configuré. Clusters en France (1,3k IPs), Allemagne, Pays-Bas… tout y passe
👉 Même les hackers font des erreurs.
Et l’erreur est très souvent humaine !
Des vendeurs de malware, de logs stealer ou de dumps cartes bleues qui se croyaient intouchables sur le darkweb ont fait la connerie classique : se connecter sans anonymisation digne de ce nom. Un VPN oublié, une connexion juste pour poster vite fait depuis leur FAI perso, et leur vraie IP + username finissent sur une carte publique 👌
La majorité des IPs pointent vers des connexions résidentielles ou des configs approximatives
Pour ceux qui veulent vérifier il a balancé le hash SHA-256 complet du JSON :
`77E12E11465CDAC07F3F24B968FD1EA2B089BCA01208510DD380FF9C07E0B33D`
L’outil est limité à ~3000 requêtes par jour. Le lien est temporaire dans son post du 11 mai
👉 Moralité : Même sur le darkweb, l’anonymat parfait, c’est mort. La technique la plus pointue ne sert à rien si l’humain merde. Un oubli, une flemme, une box résidentielle et ta "vie cachée" devient un point rouge clignotant sur une carte !
#CyberSécurité #OSINT
Sa Ul retweeted
Telegram OSINT (part of OSINT Master Toolkit by @zhetikal77)
Guides
Tools lists
Search engines
Channels directories
cyberz7.github.io/Ghostint-T…
#socmint
Sa Ul retweeted
From early Nirvana to Phish, a Chicago fan’s secret recordings of 10,000 shows are now online. blockclubchi.co/4t6zW7R
Sa Ul retweeted
How I Investigate a Phone Number in Minutes 📱🔎
Most people jump straight to paid tools,
but the smartest OSINT approach actually starts with something simple: Google search.
When I’m investigating a phone number, the first thing I do is generate 𝐚𝐥𝐥 𝐩𝐨𝐬𝐬𝐢𝐛𝐥𝐞 𝐧𝐮𝐦𝐛𝐞𝐫 𝐟𝐨𝐫𝐦𝐚𝐭𝐬 so search engines can surface every trace tied to it.
Of course, it won’t always give results,
but sometimes it reveals 𝑚𝑜𝑟𝑒 𝑡h𝑎𝑛 𝑦𝑜𝑢 𝑒𝑣𝑒𝑟 𝑒𝑥𝑝𝑒𝑐𝑡𝑒𝑑 ⚡
One of my favorite tools for this is a phone variant generator that creates multiple versions of the same number instantly.
Real case:
I once analyzed a suspicious contact number
After generating variants and searching them, I uncovered forum posts, a marketplace listing, and a linked account that revealed the identity behind it 🧠
My quick method:
🔎 Search the number on Google first
📂 Try all format variations
💾 Save each version different formats reveal different results
Best tool for generating variants → no-nonsense-intel.com/phone-…
In the next post, I’ll show you the next steps to investigate a phone number and what to do after the initial search 📱
__________
P.S. ♻️ Repost if you found this helpful.
If you liked this post and would like to learn more methods and techniques to discover information about people, check out my OSINT Mastery course cybersudo.org/osint-mastery
Sa Ul retweeted
Instagram Stories delete after 24 hours ⏱️
But Story Saver lets you download public Stories and Highlights instantly - no account, no app, just paste the username and go.
Essential for preserving evidence before it disappears.
Free to use: storysaver.net
🚨 Launching: The OSINT Tools Library
A curated, investigator-first directory of tools used in real cases.
→ Tools.OSINTNewsletter.com
We’re building the largest and best maintained OSINT tools resource and need your help.
Reply and tag a tool we should add 👇
Sa Ul retweeted
During the Month of March, Hackers-Arise is Offering 50% off to residents of Mexico!
For your 50% off coupon, email [email protected]
@three_cube
Sa Ul retweeted
🚨 Launching: The OSINT Tools Library
A curated, investigator-first directory of tools used in real cases.
→ Tools.OSINTNewsletter.com
We’re building the largest and best maintained OSINT tools resource and need your help.
Reply and tag a tool we should add 👇
Sa Ul retweeted
DarkGrid – open-source global threat intelligence dashboard (3D globe + OSINT feeds) github.com/kaal22/darkgrid
Sa Ul retweeted
Fraud is no longer a peripheral threat, it is at the centre of polycriminality, intersecting with organized crime, human trafficking and cybercrime.
🔎 The 2026 INTERPOL Global Financial Fraud Threat Assessment, released today at the #GlobalFraudSummit, highlights:
🔵 The increased use of AI to plan and execute fraud campaigns
🔵 The systematic integration of sextortion into scams
🔵 The use of specialized money laundering groups
🔵 The globalization of trafficking-fuelled scam centres
The good news? Law enforcement authorities are collaborating more effectively.
Read more: interpol.int/News-and-Events…
Sa Ul retweeted
💻C1b3rwall Academy es una acción formativa gratuita en colaboración con la Universidad de Salamanca c1b3rwallacademy.usal.es/
🪙Consta de módulos sobre ciberseguridad como IA, OSINT, criptomonedas...
🥇A la conclusión de cada módulo se obtiene un certificado oficial.
Sa Ul retweeted
ShadowBroker is a real-time OSINT dashboard that tracks everything on one map.
- Aircraft, ships, and satellites
- Earthquakes and conflict zones
- CCTV networks and GPS jamming
- Breaking geopolitical events
All live. All open source.
The world has never been this visible to anyone with a browser.
github- github.com/BigBodyCobain/Sha…
