In his final moments, Henry Nowak told police officers nine times “I can’t breathe” and four times that he had been stabbed. In response police officer dragged him across the gravel, handcuffed and read him his rights. It was the last thing Henry heard before he died.

🛡️ 𝗛𝗮𝗰𝗸𝗲𝗿 𝗦𝗲𝗮𝗿𝗰𝗵 𝗘𝗻𝗴𝗶𝗻𝗲𝘀 (𝗢𝗦𝗜𝗡𝗧) 🌐 Infra • Shodan — Find exposed devices shodan.io • Censys — Internet-wide asset view censys.io • FOFA — Asset discovery fofa.info • ZoomEye — Attack surface mapping zoomeye.org 📧 Identity • Hunter — Find emails hunter.io • HaveIBeenPwned — Breach check haveibeenpwned.com • Dehashed — Leaked credentials dehashed.com 💻 Web / Code • URLScan — Analyze websites urlscan.io • Grep.app — Search code grep.app • crt.sh — SSL cert lookup crt.sh 🔐 Vulns • Vulners — Vulnerability DB vulners.com • GreyNoise — Filter attack noise viz.greynoise.io • FullHunt — Attack surface fullhunt.io 📡 OSINT • WiGLE — WiFi mapping wigle.net • IntelX — Deep data search intelx.io • LeakIX — Exposed data leakix.net • SecurityTrails — DNS/IP data securitytrails.com 💡 Tip: SpiderFoot — automate recon spiderfoot.net #OSINT #CyberSecurity

RT @TheMsterDoctor1: # Bypass 403 (Forbidden) 1. Using "X-Original-URL" header ``` GET /admin HTTP/1.1 Host: target.com ``` T…

#APIs are everywhere. tl;dr: 🔎 API vuln types 🚧 Mitigation techniques 🛸 Conspiracy theory Check out this guide to hacking APIs in 2021 by @hakluke and @Farah_Hawaa ⬇️ labs.detectify.com/2021/08/1…