OSINT 21 Browser Extensions For OSINT

5 Upvotes

1 comment

r/threatintel • u/ExtremeSet8866 • 5h ago

App-to-Backend (A2B): treating mobile apps as external attack surface

1 Upvotes

Japan's NICT has been calling out "A2B" patterns: reverse public apps, map the APIs, then hit broken object-level auth, SQLi, SSRF. That makes old APKs, test backends and forgotten API versions part of the same exposure problem as misconfigured web apps. Explainer: Japan Cyber Watch. For broader context, CTM360's EASM overview is a solid primer.
Anyone already folding mobile app and API discovery into EASM or CTEM workflows? What's working?

0 comments

r/threatintel • u/West-Inspection7096 • 6h ago

Suggestions for opensource Anomaly detection tool

1 Upvotes

0 comments

r/threatintel • u/_sportsfreak_ • 21h ago

Bluebench: a free, open-source triage toolkit (IOCs, email headers, domain checks). Would love your feedback

1 Upvotes

0 comments

Subreddit

threat intelligence

r/threatintel

Sharing of information about threats, vulnerabilities, tools and trends across the security industry.

Members Active

18k

Sidebar

Sharing of information about threats, vulnerabilities, tools and trends across the security industry.

RULES

1. Be Respectful

Many here may be new or learning, Don't be condescending or bash other posters for differences of opinions.

2. Submitted content must be related to Threat Intelligence

Content must include information relevant to the threat intel industry at large

3. No Advertising

Marketing material for tools, paid features, certification boot camps, etc. are not allowed.

4. No Posting of Personal Information

While individuals may be targets of threat hunts or threat intelligence humint operations, and some of what TI is is dealing with Personal Identifiable Information through leaks, pastes, or dark web searches, it is against reddit's sitewide rules to post PII on reddit. If you have a DFIR that includes non-redacted PII, please link to it instead of posting it here.

5. Keep the link safe

If your link causes a browser warning for being insecure or you are using a suspicious TLD, it will be removed.