OSINT tool for visualizing relationships between domains, IPs and email addresses.
I wrote a script, which takes domain, IP or email address as input and search it in various services like: Whois, Reverse whois, Historical whois,VirusTotal, Th...
OSINT investigation based on GAO report about firearm sales in Dark Web + Bitcoin tracking with Python
In November, last year, GAO (Government Accountability Office) and ATF (The Bureau of Alcohol, Tobacco, Firear...
Betabot still alive with multi-stage packing.
This analysis was done in cooperation with Thomas (@securityimpacts [https://twitter.com/securityimpacts]). Ch...
Stay up to date
and subscribe
Command and control server in social media (Twitter, Instagram, Youtube + Telegram)
As a proof of concept, I wrote script which abuses social media in order to send commands to infected machines, i.e bots. It uses platforms like Twitt...
OSINT : Chasing Malware + C&C Servers
Looking for malware or command and control servers? I wrote a script named Daily dose of malware, which gather information from OSINT (date, md5 and u...
Couple words about rsync protocol based on leak of 2k emails from Czech university.
I would like to show how misconfigured rsync protocol can lead to data breach or compromise company and how to secure yourself. To prove my point, I f...