Episode 28: Open Source Intelligence (OSINT)

Social media provides a wealth of information for researchers, investigators, activists, and journalists, but identifying relevant information and organizing that information can be a daunting task.  For this episode, Justin Seitz, a leading OSINT practitioner joins Intelligence. Unclassified. to explore the opportunities and challenges of working with social media.




Mr. Seitz is the author of two Python hacking books, creator of the AutomatingOSINT training program, and developer of OSINT tool Hunch.ly. Mr. Seitz has spent the past decade training, and consulting in hacking and OSINT techniques. 

He is also the author of a blog, where readers can find detailed OSINT investigation techniques and training.


Black Hat Python: Python Programming for Hackers and Pentesters

When it comes to creating powerful and effective hacking tools, Python is the language of choice for most security analysts. But just how does the magic happen?

In Black Hat Python, the latest from Justin Seitz (author of the best-selling Gray Hat Python), you'll explore the darker side of Python's capabilities—writing network sniffers, manipulating packets, infecting virtual machines, creating stealthy trojans, and more.

You'll learn how to:

  • Create a trojan command-and-control using GitHub

  • Detect sandboxing and automate common malware tasks, like keylogging and screenshotting

  • Escalate Windows privileges with creative process control

  • Use offensive memory forensics tricks to retrieve password hashes and inject shellcode into a virtual machine

  • Extend the popular Burp Suite web-hacking tool

  • Abuse Windows COM automation to perform a man-in-the-browser attack

  • Exfiltrate data from a network most sneakily

Insider techniques and creative challenges throughout show you how to extend the hacks and how to write your own exploits.

When it comes to offensive security, your ability to create powerful tools on the fly is indispensable. Learn how in Black Hat Python.

Gray Hat Python: Python Programming for Hackers and Reverse Engineers

Python is fast becoming the programming language of choice for hackers, reverse engineers, and software testers because it's easy to write quickly, and it has the low-level support and libraries that make hackers happy. But until now, there has been no real manual on how to use Python for a variety of hacking tasks. You had to dig through forum posts and man pages, endlessly tweaking your own code to get everything working. Not anymore.

Gray Hat Python explains the concepts behind hacking tools and techniques like debuggers, trojans, fuzzers, and emulators. But author Justin Seitz goes beyond theory, showing you how to harness existing Python-based security tools - and how to build your own when the pre-built ones won't cut it.

You'll learn how to:

  • Automate tedious reversing and security tasks

  • Design and program your own debugger

  • Learn how to fuzz Windows drivers and create powerful fuzzers from scratch

  • Have fun with code and library injection, soft and hard hooking techniques, and other software trickery

  • Sniff secure traffic out of an encrypted web browser session

  • Use PyDBG, Immunity Debugger, Sulley, IDAPython, PyEMU, and more

The world's best hackers are using Python to do their handiwork. Shouldn't you?