Episode 6 - Exploring the Intersection of OSINT and Red Teaming with Rey Bango

Joe and Ray discuss how OSINT is used in offensive security scenarios, focusing on the importance of doing in-depth research. In order to properly use OSINT, Ray explains that it is essential to identify and map out the risks associated with an organization, as well as to do research to understand the company's structure, assets, and resources. He emphasizes that it is important to look at where the information lies, in order to get an idea of who the key people are within an organization. This could include looking for patterns in social media accounts, websites, and other sources to uncover insight on those individuals. Ray also advises that when doing the legwork, it is important to not only look at public sources, but to dig deeper. By using OSINT, companies can better understand their adversaries and develop a more effective security strategy. He further explains that it is important to constantly monitor the situation, as adversaries often change their tactics or target different areas. With the right tools and strategies in place, organizations can stay one step ahead of potential threats and be better prepared to respond.

Links Discussed:

• Dehashed: https://www.dehashed.com
• HaveIBeenPwned: https://www.haveibeenpwned.com
• SecurityTrails: https://www.securitytrails.com
• View DNS: https://www.viewdns.info
• DNS Dumpster: https://www.dnsdumpster.com
• Snapchat Map: https://map.snapchat.com
• Trace Labs Kali: https://www.tracelabs.org/initiatives/osint-vm
• Raspberry Pis: https://www.raspberrypi.com/
• Free Digital Ocean Credit: https://m.do.co/c/ab5f75969c8a
• Phone Infoga: https://github.com/sundowndev/phoneinfoga
• CSI Linux: https://csilinux.com/
• Flare VM: https://github.com/mandiant/flare-vm
• Parrot OS: https://www.parrotsec.org/
• Kali Linux: https://www.kali.org/
• Axiom: https://github.com/pry0cc/axiom
• SANS SIFT: https://www.sans.org/tools/sift-workstation/
• Volatility Framework: https://www.volatilityfoundation.org/
• Shodan: https://www.shodan.io
• Michael Bazzell's Extreme Privacy: https://inteltechniques.com/book7.html
• Michael Bazzell's Website: https://inteltechniques.com/
• Joe's Podcast with Michael Bazzell: https://osint.mobi/michael-bazzell-podcast
• Joe's Podcast with Justin Seitz: https://osint.mobi/justin-seitz-podcast
• Justin Seitz's Hunchly: https://www.hunchly.com
• Justin Seitz's Python for OSINT Training: https://www.automatingosint.com
• Imagga: https://imagga.com/
• Infoga: https://github.com/The404Hacking/Infoga
• Joe's Podcast with Joe Vest: https://osint.mobi/red-team-podcast

Contacting Rey:

• Twitter: https://twitter.com/reybango

The OSINTion Links:

• https://linktr.ee/TheOSINTion
• Twitch: https://twitch.tv/theosintion
• YouTube: https://osint.mobi/youtube

The OSINTion Training:

• On-Demand: https://academy.theosintion.com
• Live Training: https://www.theosintion.com/courses