Perform a WHOIS lookup to gather domain info
whois target.com
Join Bug Bounty USA Telegram channel for regular tips: t.me/bugbountyusa
@yogsec.bsky.social
@yogsec.bsky.socialPerform a WHOIS lookup to gather domain info
whois target.com
Join Bug Bounty USA Telegram channel for regular tips: t.me/bugbountyusa
@yogsec.bsky.socialGoogle Dork to Find Sensitive Config Files
Example: site:target.com ext:env
finds sensitive config files
For more tips join Telegram channel t.me/bugbountyusa
@yogsec.bsky.socialGoogle Dork to Find Exposed Database Files
Example: site:target.com ext:sql finds exposed database files.
For more tips join Telegram channel t.me/bugbountyusa
@yogsec.bsky.socialEnumerate SMB shares with Enum4linux
enum4linux -a target.com
Join Bug Bounty USA Telegram channel for regular tips: t.me/bugbountyusa
@yogsec.bsky.socialPerform a reverse DNS lookup with DNSRecon
dnsrecon -d target.com
Join Bug Bounty USA Telegram channel for regular tips: t.me/bugbountyusa
@yogsec.bsky.socialGoogle Dork to Find Hidden Login Pages
Example: inurl:login ext:php site:target.com finds hidden login pages.
For more tips join Telegram channel t.me/bugbountyusa
@yogsec.bsky.socialGoogle Dork to Find Open Folders with Secret Files
Example: intitle:"index of" site:target.com finds open folders.
For more tips join Telegram channel t.me/bugbountyusa
@yogsec.bsky.socialGoogle Dork to Find Hidden Admin Panels and Open Folders
Example: site:target.com ext:php inurl:admin finds admin panels.
For more tips join Telegram channel t.me/bugbountyusa
@yogsec.bsky.socialScan for open ports and services quickly with Masscan
masscan -p1-65535 target.com --rate=1000
Join Bug Bounty USA Telegram channel for regular tips: t.me/bugbountyusa
@yogsec.bsky.socialFind live hosts from a list of subdomains with HTTPX
httpx -l subdomains.txt -o live.txt
Join Bug Bounty USA Telegram channel for regular tips: t.me/bugbountyusa
@sempf.infosec.exchange.ap.brid.gySounds like they need @Viss's Orbital.
@yogsec.bsky.socialPhoton is a fast open-source OSINT crawler written in Python.
It extracts URLs, emails, files, and secrets from websites.
Useful for reconnaissance and information gathering.
Lightweight and simple to run.
GitHub: github.com/s0md3v/Photon
@cyanheads.bsky.socialmap a domain's external footprint ā CT-log subdomains, DNS, TLS posture, HTTP headers. passive by design: no scanning, no exploiting, a defensive review plan out the other end. github.com/cyanheads/attack-surface-mcp-server #MCP #infosec #recon
@wratholyte.bsky.socialSniping on Railway
Definitely my top 3 of all time favorite maps from the Battlefield franchise
Where the chaos knows no bounds
ā” Fueled by Rogue Energy ā”
#battlefield #battlefield6 #recon #twitch #wratholyte #rogueenergy #roguenation #roguegaming
@skinnyhatchett.bsky.socialSometimes playing sniper means you're on full recon duty and come away with zero eliminations but 100% intel š #battlefield6 #recon
@maxbet-ultimate.bsky.social+18[EN/SP VTuber] GhostRecon Wildlands! https://twitch.tv/maxbet_ultimate
Too late for aniimo, Let's get this bread and spread some lead!
#tomclancy #ghost #recon #vtuber #streamer
@cl0qsearch.bsky.socialOSINT trick from 26.1M indexed pages: blogspot.com alone carries 1,034,150 subdomains on just 41 IPs. High-fanout apexes are where subdomain recon pays off most. Explore live stats: cl0q.com/explore #OSINT #recon #infosec
@cl0qsearch.bsky.socialOnly 42.7% of pages send ETag or Last-Modified ā the other 57% make conditional requests useless. Stale cache headers hide what's actually live, and for recon that's a blind spot. We fingerprint it across 26.1M pages: cl0q.com/explore #infosec #recon #DFIR
@steamandepic.bsky.socialThe Ghost Recon anniversary bundle has FINALLY arrived for the series' latest game š
@wratholyte.bsky.socialHostiles Eliminated
#battlefield #battlefield6 #FPS #recon #twitch #wratholyte #contentcreator #gaming