Cyber Attack Breakdowns | Threat Intel & OSINT Tradecraft | Free Cyber Resources | Follow for Actionable Threat Insights

Joined November 2024
937 Photos and videos
Pinned Tweet
OSINT Roadmap: Beginner β†’ Expert πŸ•΅οΈβ€β™‚οΈ β”œβ”€β”€ Phase 1: Foundations (1-2 weeks) β”‚ β”œβ”€β”€ What is OSINT & Ethics/Legal β”‚ β”‚ β”œβ”€β”€ OSINT definition, types (SOCMINT, GEOINT, etc.) β”‚ β”‚ β”œβ”€β”€ Laws (GDPR, Privacy, Ethics) β”‚ β”‚ └── OPSEC for investigators β”‚ β”œβ”€β”€ Mindset & Critical Thinking β”‚ β”‚ β”œβ”€β”€ Occam's Razor, Bias avoidance β”‚ β”‚ └── Mind Mapping (GitMind, XMind) β”‚ └── Basic Tools Setup β”‚ β”œβ”€β”€ Browser (Firefox containers) β”‚ β”œβ”€β”€ VPN Proxies β”‚ └── Note-taking (Notion/Obsidian) β”œβ”€β”€ Phase 2: Basic Techniques (2-4 weeks) β”‚ β”œβ”€β”€ Google Dorks & Advanced Search β”‚ β”‚ β”œβ”€β”€ Operators, site:, intitle:, etc. β”‚ β”‚ └── Custom search engines β”‚ β”œβ”€β”€ Username & Email Search β”‚ β”‚ β”œβ”€β”€ WhatsMyName, Namechk, Holehe β”‚ β”‚ └── Email verification tools β”‚ β”œβ”€β”€ People Search & Background Check β”‚ β”‚ β”œβ”€β”€ Pipl, Spokeo, TruePeopleSearch (free alternatives) β”‚ β”‚ └── Social Media Profiling β”‚ └── Image & Reverse Search β”‚ β”œβ”€β”€ Google Lens, TinEye, Yandex β”‚ └── Metadata extraction (ExifTool) β”œβ”€β”€ Phase 3: Intermediate Skills (4-6 weeks) β”‚ β”œβ”€β”€ Recon Tools Mastery β”‚ β”‚ β”œβ”€β”€ Maltego (Community), Recon-ng, SpiderFoot β”‚ β”‚ β”œβ”€β”€ Shodan, Censys, Zoomeye β”‚ β”‚ └── TheHarvester, Amass β”‚ β”œβ”€β”€ Social Media OSINT β”‚ β”‚ β”œβ”€β”€ Twitter/X, Instagram, LinkedIn, Facebook β”‚ β”‚ └── Geolocation from posts β”‚ β”œβ”€β”€ Domain & IP Intelligence β”‚ β”‚ β”œβ”€β”€ WHOIS, DNS enumeration β”‚ β”‚ └── Passive DNS (SecurityTrails) β”‚ └── Data Analysis Basics β”‚ β”œβ”€β”€ Excel/Google Sheets for OSINT β”‚ └── Basic scripting (Python basics) β”œβ”€β”€ Phase 4: Advanced Techniques (6-8 weeks) β”‚ β”œβ”€β”€ Geospatial & Imagery OSINT β”‚ β”‚ β”œβ”€β”€ Google Earth, Sentinel Hub β”‚ β”‚ └── Satellite imagery analysis β”‚ β”œβ”€β”€ Dark Web & Threat Intel β”‚ β”‚ β”œβ”€β”€ Tor browsing, Dread β”‚ β”‚ └── Leak sites monitoring β”‚ β”œβ”€β”€ Automation & Custom Tools β”‚ β”‚ β”œβ”€β”€ Python scripting for OSINT β”‚ β”‚ └── APIs integration (Hunter.io, etc.) β”‚ └── Adversary Simulation β”‚ β”œβ”€β”€ Purple Teaming with OSINT β”‚ └── Report Writing & Presentation β”œβ”€β”€ Phase 5: Professional & Career Level β”‚ β”œβ”€β”€ Case Studies & Real Projects β”‚ β”‚ β”œβ”€β”€ Bellingcat style investigations β”‚ β”‚ └── CTFs (Trace Labs, OSINT CTF) β”‚ β”œβ”€β”€ Certifications β”‚ β”‚ β”œβ”€β”€ TCM Security Practical OSINT β”‚ β”‚ β”œβ”€β”€ SANS FOR578 (if possible) β”‚ β”‚ └── Free certs from Basel Institute β”‚ └── Continuous Learning β”‚ β”œβ”€β”€ Communities (OSINT Curious, Discord) β”‚ β”œβ”€β”€ Newsletters (My OSINT News) β”‚ └── Tools updates (OSINT Framework)
16
297
1,411
55,200
Cybersecurity is no longer an IT issue. It is a business survival issue.
1
85
πŸ›‘οΈ CompTIA Security Study Notes & Training Material πŸ“š Topics Covered: β€’ Security Fundamentals β€’ Threats, Attacks & Vulnerabilities β€’ Network Security β€’ Identity & Access Management (IAM) β€’ Cryptography & PKI β€’ Security Architecture β€’ Secure Network Design β€’ Risk Management & Governance β€’ Incident Response β€’ Security Operations β€’ Compliance & Policies β€’ Security Tools & Technologies CompTIA Security is one of the most recognized entry-level cybersecurity certifications and provides the foundation for SOC Analyst, Security Analyst, Network Security, and Blue Team roles. It focuses on practical security concepts, threat detection, risk management, and incident response. πŸ“₯ Drive Folder: drive.google.com/drive/folde… #CompTIA #SecurityPlus #cybersecurity #infosec #BlueTeam #NetworkSecurity #securityanalyst #RiskManagement #IncidentResponse
1
1
5
198
πŸ”΅πŸ›‘οΈ Free SOC Analyst Certifications & Training Programs 1.🎯 Coursera β€” Security Operations Center (SOC) Fundamentals πŸ”— coursera.org/learn/security-… β†’ Learn SOC operations, security monitoring, incident management, alert handling, and security operations fundamentals. 2.🌐 Cisco SOC Analyst (CCST) πŸ”— netacad.com/career-paths/cyb… β†’ Covers networking, threat detection, security monitoring, incident response, and SOC analyst fundamentals. 3.🧠 TryHackMe SOC Level 1 πŸ”— tryhackme.com/path/outline/s… β†’ Hands-on training in SIEM, log analysis, threat intelligence, phishing investigations, and SOC workflows. 4.πŸ”΅ LetsDefend SOC Analyst Path πŸ”— app.letsdefend.io/path/soc-a… β†’ Real-world SOC investigations, alert triage, malware analysis, incident response, and threat hunting. 5.πŸ“Š Splunk Fundamentals 1 πŸ”— splunk.com/en_us/training/fr… β†’ SPL queries, dashboard creation, log analysis, data ingestion, alerting, and SIEM operations. Skills You'll Build β€’ πŸ“ˆ SIEM Operations β€’ πŸ“‹ Log Analysis β€’ 🚨 Alert Triage β€’ 🎯 Threat Hunting β€’ πŸ” Incident Investigation β€’ 🦠 Malware Analysis β€’ 🌐 Threat Intelligence β€’ πŸ›‘οΈ Security Monitoring β€’ πŸ“Š Detection Engineering β€’ ⚑ Incident Response πŸ’‘ Most SOC Analyst interviews focus heavily on log analysis, alert investigations, networking fundamentals, and incident response workflows. Master those four areas and you'll be ahead of most beginners. #SOC #SOCAnalyst #BlueTeam #Splunk #CyberSecurity #InfoSec #ThreatHunting
2
11
580
πŸ›‘οΈβš‘ 50 CYBERSECURITY PROJECT IDEAS FROM BEGINNER TO EXPERT 1.🏠 Home Lab Setup 2.πŸ” Basic Cryptography Implementation 3.πŸ”‘ Password Strength Checker / Cracker 4.πŸ“Ά Wi-Fi Security Analysis 5.🌐 Network Vulnerability Scanner 6.πŸ“‘ Packet Sniffer 7.🎣 Phishing Awareness Simulator 8.⌨️ Keylogger Research Project 9.🍯 Honeypot Deployment 10.πŸ” Digital Forensics Investigation 11.πŸ”₯ Firewall Configuration & Rules 12.🦠 Malware Reverse Engineering 13.πŸ“± Two-Factor Authentication System 14.🌍 Secure Web Application 15.πŸ“ˆ Anomaly Detection System 16.🚨 Snort IDS Deployment 17.πŸ›‘οΈ Signature-Based Antivirus 18.πŸ”Ž Vulnerability Scanner 19.🌐 DNS Spoofing Detection Lab 20.πŸ”’ TLS Mutual Authentication System 21.🦠 Advanced Malware Research 22.πŸ‘€ Anonymous Communication Platform 23.🍯 Threat Intelligence Honeypots 24.⚑ GPU-Based Password Cracking Lab 25.🎯 0-Day Exploit Research 26.πŸ§ͺ Malware Analysis Sandbox 27.πŸ’Ύ Full Disk Encryption System 28.πŸ€– ML-Based IDS/IPS 29.β‚Ώ Secure Cryptocurrency Wallet 30.πŸ•ΈοΈ Anonymous Routing Network 31.πŸ’¬ Secure Messaging Application 32.🧬 Rootkit Analysis Lab 33.πŸŒ‘ Dark Web Intelligence Scraper 34.🌊 DDoS Simulation Environment 35.πŸ›οΈ Public Key Infrastructure (PKI) 36.πŸ”¬ 0-Day Vulnerability Research 37.πŸ› οΈ Custom Security Assessment Tools 38.πŸ“œ Smart Contract Security Auditing 39.🧠 ML-Based Threat Detection 40.βš™οΈ Firmware Reverse Engineering 41.🎭 Nation-State Malware Analysis 42.🏭 Industrial Control System (ICS) Security 43.πŸ“» Side-Channel Attack Research 44.πŸ›‘οΈ Advanced Firewall Development 45.πŸ“‘ IoT Security Assessment Tool 46.🎯 Custom Cyber Range Platform 47.🎭 Malware Obfuscation Techniques 48.πŸ’‰ In-Memory Evasion Research 49.🐧 Linux/Windows Kernel Backdoor Analysis 50.βš”οΈ ARM/x86 Rootkit Research #CyberSecurity #Projects #EthicalHacking #BlueTeam #RedTeam #SOC #ThreatIntelligence #MalwareAnalysis
2
8
380
PiKVM: Build Your Own Open-Source KVM over IP with Raspberry Pi πŸš€ Manage servers remotelyβ€”even when the OS won't boot. PiKVM transforms a Raspberry Pi into a low-latency KVM over IP solution with remote BIOS access, virtual media, power control, and Full HD streaming. πŸ”— github.com/pikvm/pikvm #RaspberryPi #PiKVM #Homelab #SysAdmin #SelfHosted #OpenSource
7
301
Awesome AI Agents: 1,500 Resources for Building the Next Generation of AI Agents πŸ€–πŸ’€ Explore 1,500 curated resources including agent frameworks, LLMs, tools, datasets, benchmarks, workflows, security practices, and learning materials. πŸ”— github.com/e2b-dev/awesome-a… #AIAgents #LLM #AI #MachineLearning #OpenSource #AgenticAI
1
7
341
Awesome Sysadmin: The Ultimate Open-Source Toolbox for SysAdmins & DevOps Engineers πŸ“š One of the best resource collections for SysAdmins and DevOps engineers. Discover hundreds of open-source tools for monitoring, automation, backups, CI/CD, DNS, IAM, networking, containers, and more. πŸ”— github.com/awesome-foss/awes… #DevOps #SysAdmin #Linux #OpenSource #SRE #SelfHosted #Cloud
9
32
813
Beszel: Lightweight Server & Docker Monitoring with Alerts and Historical Metrics πŸš€ Looking for a lightweight alternative to heavy monitoring stacks? Beszel provides server monitoring, Docker statistics, alerts, historical metrics, OAuth support, and automated backupsβ€”all with minimal resource usage. πŸ”— github.com/henrygd/beszel #Monitoring #Docker #DevOps #SelfHosted #OpenSource #Linux #Homelab
1
5
271
πŸš€ CF-Hero: Open-Source Recon Tool for Discovering Potential Cloudflare Origin IPs DNS intelligence, historical records, Shodan, Censys, ZoomEye, SecurityTrails, and validation workflows in a single Go-based tool. πŸ”— github.com/musana/CF-Hero #CyberSecurity #OSINT #Recon #BugBounty #OpenSource
1
4
37
1,181
Bug Bounty & Web Security Course 🐞πŸ’₯ Learn reconnaissance, Burp Suite, SQLi, XSS, SSRF, CORS, File Inclusion, Security Misconfigurations, VAPT Automation, and Vulnerability Reporting. πŸ“₯ Drive Folder: drive.google.com/drive/mobil… #BugBounty #WebSecurity #Pentesting #EthicalHacking #BurpSuite #SQLi #XSS #SSRF #VAPT #CyberSecurity
1
34
128
3,664
Sniffnet: A Modern Open-Source Network Traffic Monitoring Tool for Security Professionals 🌐 Sniffnet β€” Monitor Your Network Traffic with Ease A modern, cross-platform network monitoring tool that lets you visualize real-time traffic, inspect connections, identify applications generating traffic, analyze hosts, and export captures in PCAP format through an intuitive interface. πŸ”— github.com/GyulyVGC/sniffnet #CyberSecurity #Networking #NetworkMonitoring #PacketAnalysis #PCAP #OpenSource #Linux #Windows #Infosec
9
41
1,268