OSINT and offensive security field notes
In May 2020 a Brave ad led me to VidLeap, a $999 YouTube course (discounted to $399) led by Vincent Briatore. This investigation walks through the unverified press logos and Mr. Beast endorsement, the TrustPilot and Facebook reviews, the nine-year-old Facebook page renamed from The Allegiant, the Adam West Medium profile, what $400 actually bought, and my Twitter conversation with Vincent, which ended in a refund.
read the Vincent Briatore investigation →This post is part technical deep-dive, part forensic investigation story. I'll walk through how I discovered and analyzed a sophisticated cryptocurrency theft operation that uses advanced JavaScript obfuscation to hide a fee-based scam. The…
Everyone wants to be an OSINT analyst these days. Scraping Shodan, running a few Google dorks, maybe linking a scammer’s Telegram handle to a throwaway Gmail. That’s open-source intelligence, right? Sort of. But mostly not. The truth is, OS…
# WHAT IS WINDOWS SUBSYSTEM FOR LINUX? Most people are either unaware or forget about a wonderful Windows feature called Windows Subsystem for Linux (WSL). WSL gives you access to a full linux kernel right in your Windows installation. This…
Before we dive in, please understand that this is an introductory level post and for the more technically inclined, there may not be much for consumption here. I will not go in depth on many topics surrounding search engines as a whole and…
Vincent Briatore and VidLeap: an OSINT investigation into a $999 YouTube course, its fake reviews, a renamed Facebook page and the Adam West Medium profile.
Recently while conducting some research, I found myself down the path of Google Analytics ID's as well as other analytics services. I was investigating ways to not only identify varying analytics code in sites, but to correlate them with ot…
I was doing some research this week on Facebook Marketplace looking for some... unethically acquired and resold items and the sellers behind them. However, my research was limited to only acquiring data without being logged into a Facebook…
Recently a friend of mine inquired about my opinion on a Sonos (audio) device that was on their network that had been end of life for years. We were deliberating on what the threat landscape was for seemingly harmless devices like this on t…
