CVE-2023-23560 flaw exposes 100 Lexmark printer models to hack

https://securityaffairs.com/141428/hacking/lexmark-cve-2023-23560-rce.html

1. haveibeenpwned.com — check in leaked databases
2. emailrep.io — find websites where account has been registered by email
3. dehashed.com — checking mail in leaked databases
4. @Smart_SearchBot — find full name, DoB, address and phone number
5. pwndb2am4tzkvold.onion — search in pwndb, also search by password
6. intelx.io — multifunctional search engine, the search is also carried out on the darknet
7. @mailsearchbot — search in database, gives password partially
8. @shi_ver_bot — breached passwords
9. @info_baza_bot — show from what base mail leaked, 2 free scans
10. leakedsource.ru — show from what base mail leaked
11. mostwantedhf.info — find skype account
12. email2phonenumber (t) — automatically collects data from account recovery pages, and finds the phone number
13. spiderfoot.net (r) — automatic search using a huge number of methods, tool available in the cloud with registration
14. reversegenie.com — find location, first letter of the name and phone numbers
15. @last4mailbot — bot will find the last 4 digits of the Sberbank client’s phone number
16. searchmy.bio — find instagram account with email in description
17. leakprobe.net — it will find nickname and source of leaked database
18. Leakpoint.com - It will give you every thing whatever you wants that's why its in last because it never dehope people

⚙️ GitHub

GitMiner is a powerful and fairly popular OSINT advanced search and automation tool on Github. It is enough to specify what to look for, for example, logins or passwords and in which files.

Demonstrates how easy it is to find confidential information in repositories.

Darkdump — https://github.com/josh0xA/darkdump
Katana — https://github.com/adnane-X-tebbaa/Katana
OnionSearch — https://github.com/megadose/OnionSearch
Ahmia Search Engine — https://github.com/ahmia/ahmia-site
DarkSearch — https://github.com/thehappydinoa/DarkSearch

Инструменты сканирования:

Onioff — https://github.com/k4m4/onioff
Onionscan — https://github.com/s-rah/onionscan
Onion-nmap — https://github.com/milesrichardson/docker-onion-nmap

https://mega.nz/folder/MhkCjLBL#QtBH6zO3ZjaXcnMjJz0V7g

4GB pack of osint

Methodology used by Forensic Investigators :-👆


Anti-Forensic Techniques :- 👇
https://book.hacktricks.xyz/generic-methodologies-and-resources/basic-forensic-methodology/anti-forensic-techniques

Anti-Forensics Tool :-
https://github.com/PaulNorman01/Forensia

https://gptzero.me / is a tool that determines whether the analyzed text is written by the ChatGPT neural network.

https://gptzero.substack.com / — beta login page

However, the software is still far from ideal and its detection can be deliberately bypassed, if you believe the comments on Product Hunt.

#service #software #AI

𝙈𝙚𝙩𝙖𝙊𝙎𝙄𝙉𝙏 is a free and public collection of the "best" tools and resources for OSINT investigations.

Link 🔗:-
https://metaosint.github.io/


𝘼𝙇𝙇-𝙄𝙉-𝙊𝙉𝙀 is combined product of different search engines which show results in new tab (only)

Link 🔗:-
https://all-io.net/

Awesome Telegram Osint:-
https://github.com/ItIsMeCall911/Awesome-Telegram-OSINT

Osint Geolocation Databases Search:-
https://github.com/conflict-investigations/media-search-engine

𝘾𝙍𝙔𝙋𝙏𝙊 𝙊𝙎𝙄𝙉𝙏:

├BTC-ETH-XRP-BCH-LTC-XLM-DASH-ZEC-XMR-TON (Blockchain)
├Google Dorks (Change Wallet)
├blockchair (Explorer) + Chrome
├breadcrumbs (Visualization) + Chrome
├shard (Visualization)
├blockpath (Visualization)
├oxt (Visualization)
├graphsense (Visualization)
├ethtective (Visualization ETH)
├walletexplorer (Grouping)
├bitinfocharts (Grouping)
├bitcoinabuse (Abuse)
├bitcoinwhoswho (Abuse)
├checkbitcoinaddress (Abuse)
├scamalert (Abuse)
├cryptscam (Abuse)
├ransomwhe (Abuse)
├badbitcoin (Abuse)
├bitcoinais (Abuse)
├cryptoblacklist (Abuse)
├bitrankverified (Scoring)
├vivigle (Scoring)
├antinalysis (Scoring TOR)
├cryptocurrencyalerting (Monitoring)
├cryptotxalert (Monitoring)
├kycp (Block Analysis)
├blockstream (Block Analysis)
├fragment (TON market)
└btcrecover (Wallet Brute)

𝙂𝙀𝙊 𝙊𝙎𝙄𝙉𝙏 :-
Large collection of online resources and tools to assist with GEO-INT investigations

CYBER
- DNS
https://dnsdumpster.com/
https://dnschecker.org/
https://securitytrails.com/dns-trails

- IP
https://ipinfo.io

- WHOIS
https://registro.br/tecnologia/ferramentas/whois/

- RDAP
https://rdap-web.lacnic.net
https://client.rdap.org
https://www.openrdap.org

- CYBERINT
https://www.synapsint.com/

- CACHE
https://perma.cc
https://archive.org
https://archive.ph
https://cachedview.com
https://cachedview.nl


EMAIL
-MX
https://dnschecker.org/mx-record-validation.php
https://mxtoolbox.com/MXLookup.aspx

- ANALYZER HEADER
https://king.host/wiki/ferramenta-header/
https://mxtoolbox.com/EmailHeaders.aspx
https://toolbox.googleapps.com/apps/messageheader/?lang=pt-BR
https://mailheader.org

-LEAK
https://haveibeenpwned.com/
https://intelx.io/

IMAGENS
- METADADOS
https://www.thexifer.net/
https://29a.ch/photo-forensics/#forensic-magnifier

- COMPARAÇÃO DE FOTOS
https://www.diffchecker.com/image-diff/
https://www.faceplusplus.com/face-comparing/
https://mxface.ai/face-comparing#Face_Detection_demo_section

GEOLOCALIZAÇÃO
- MAPAS
https://www.openstreetmap.org#map=6/-8.266/-45.934
https://www.mapchannels.com/DualMaps.aspx
https://www.mapillary.com/app/?lat=-9.520245949729002&lng=-51.47094769993544&z=4.724037791247539&menu=false

-KML
https://earth.google.com/web/@-3.72231333,-38.51045013,64.62653144a,2248.94323301d,35y,24.25838207h,60t,0r
https://kmlviewer.nsspot.net

- WAYBACK
https://livingatlas.arcgis.com/wayback/?active=8432&ext=-115.33219,36.04768,-115.26481,36.08032
https://www.google.com.br/maps/@-3.7207519,-38.5099806,3a,75y,86.47h,81.66t/data=!3m6!1e1!3m4!1sVVe9jRaLFcTgoF9c5C5caA!2e0!7i16384!8i8192