Vivek | Cybersecurity

OSINT Roadmap: Beginner → Expert 🕵️‍♂️ ├── Phase 1: Foundations (1-2 weeks) │ ├── What is OSINT & Ethics/Legal │ │ ├── OSINT definition, types (SOCMINT, GEOINT, etc.) │ │ ├── Laws (GDPR, Privacy, Ethics) │ │ └── OPSEC for investigators │ ├── Mindset & Critical Thinking │ │ ├── Occam's Razor, Bias avoidance │ │ └── Mind Mapping (GitMind, XMind) │ └── Basic Tools Setup │ ├── Browser (Firefox + containers) │ ├── VPN + Proxies │ └── Note-taking (Notion/Obsidian) ├── Phase 2: Basic Techniques (2-4 weeks) │ ├── Google Dorks & Advanced Search │ │ ├── Operators, site:, intitle:, etc. │ │ └── Custom search engines │ ├── Username & Email Search │ │ ├── WhatsMyName, Namechk, Holehe │ │ └── Email verification tools │ ├── People Search & Background Check │ │ ├── Pipl, Spokeo, TruePeopleSearch (free alternatives) │ │ └── Social Media Profiling │ └── Image & Reverse Search │ ├── Google Lens, TinEye, Yandex │ └── Metadata extraction (ExifTool) ├── Phase 3: Intermediate Skills (4-6 weeks) │ ├── Recon Tools Mastery │ │ ├── Maltego (Community), Recon-ng, SpiderFoot │ │ ├── Shodan, Censys, Zoomeye │ │ └── TheHarvester, Amass │ ├── Social Media OSINT │ │ ├── Twitter/X, Instagram, LinkedIn, Facebook │ │ └── Geolocation from posts │ ├── Domain & IP Intelligence │ │ ├── WHOIS, DNS enumeration │ │ └── Passive DNS (SecurityTrails) │ └── Data Analysis Basics │ ├── Excel/Google Sheets for OSINT │ └── Basic scripting (Python basics) ├── Phase 4: Advanced Techniques (6-8 weeks) │ ├── Geospatial & Imagery OSINT │ │ ├── Google Earth, Sentinel Hub │ │ └── Satellite imagery analysis │ ├── Dark Web & Threat Intel │ │ ├── Tor browsing, Dread │ │ └── Leak sites monitoring │ ├── Automation & Custom Tools │ │ ├── Python scripting for OSINT │ │ └── APIs integration (Hunter.io, etc.) │ └── Adversary Simulation │ ├── Purple Teaming with OSINT │ └── Report Writing & Presentation ├── Phase 5: Professional & Career Level │ ├── Case Studies & Real Projects │ │ ├── Bellingcat style investigations │ │ └── CTFs (Trace Labs, OSINT CTF) │ ├── Certifications │ │ ├── TCM Security Practical OSINT │ │ ├── SANS FOR578 (if possible) │ │ └── Free certs from Basel Institute │ └── Continuous Learning │ ├── Communities (OSINT Curious, Discord) │ ├── Newsletters (My OSINT News) │ └── Tools updates (OSINT Framework)

Geospatial Agent on AWS — AI-Powered Satellite Analysis Platfor 🛰️🌍 An AI agent that uses natural language to analyze Sentinel-2 satellite imagery and generate interactive geospatial insights for environmental monitoring and research. ✨ Features: • Analyzes vegetation, water bodies and wildfire impact from satellite imagery • Supports natural language queries with AI-powered geospatial workflows • Renders interactive maps with React, MapLibre and TiTiler • Integrates Amazon Bedrock, AgentCore and Amazon Location Service • Includes AWS CDK infrastructure for end-to-end cloud deployment 🔗 github.com/aws-samples/sa… #GeoAI #AWS #SatelliteImagery #Python #OpenSource #GIS

🧠 MemSearch — Cross-Platform AI Memory System An open-source semantic memory framework that gives AI coding assistants persistent, searchable context across multiple platforms using Markdown and hybrid retrieval. ✨ Features: • Shares memory across Claude Code, Codex CLI, OpenClaw and OpenCode • Stores memories as human-readable Markdown with live synchronization • Combines vector search, BM25 and reranking for semantic retrieval • Provides both a CLI and Python API for custom AI agent development • Supports procedural memory through reusable, installable agent skills 🔗 github.com/zilliztech/mem… #AI #LLM #Python #OpenSource #DeveloperTools #RAG

Trippy — Cross-Platform Network Diagnostics Tool 🌐🦀 A Rust-based command-line utility that combines traceroute and ping to help analyze network paths, latency and connectivity across multiple operating systems. ✨ Features: • Combines traceroute and ping into a unified diagnostic interface • Provides an interactive terminal UI for real-time network analysis • Supports Linux, macOS, Windows and BSD platforms • Offers flexible configuration, themes and protocol options • Distributed through major package managers with comprehensive documentation 🔗 github.com/fujiapple852/t… #Networking #RustLang #CLI #OpenSource #NetworkDiagnostics #DevOps

Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign thehackernews.com/2026/07/expose…

India says allegedly leaked nuclear plant files pose no safety risk therecord.media/india-nuclear-…

More than 1,000 domains illegally streaming World Cup games seized, DOJ says therecord.media/world-cup-ille…

New HollowGraph malware uses Microsoft Graph for stealthy C2 comms bleepingcomputer.com/news/security/…

KittySploit Framework — Collaborative Offensive Security Framework An open-source exploitation framework that combines modular tooling, AI-assisted workflows and collaborative features for authorized security testing and research. ✨ Features: • Supports AI-assisted reconnaissance and attack planning with local LLMs • Includes an intelligent proxy for analyzing modern web applications and APIs • Offers real-time collaborative editing for team-based engagements • Provides a modular marketplace for extending framework capabilities • Features Python and Zig components with cross-platform support 🔗 github.com/SIA-IOTechnolo… #CyberSecurity #RedTeam #Python #OpenSource #PenetrationTesting #AI

👻 GhostHound — Active Directory Tombstone Analysis Extension A BloodHound OpenGraph extension that analyzes Active Directory deleted objects and visualizes potential reanimation paths for authorized security assessments and research. ✨ Features: • Enumerates deleted Active Directory objects using the LDAP SHOW_DELETED control • Identifies principals with permissions to reanimate tombstoned objects • Exports OpenGraph data for BloodHound CE integration • Includes custom node models, queries and graph bridging utilities • Built with a library-first Rust architecture and security-focused engineering practices 🔗 github.com/JVBotelho/ghos… #ActiveDirectory #BloodHound #CyberSecurity #RedTeam #RustLang #OpenSource

Romania races to restore land registry after cyberattack disrupts property market therecord.media/romania-cybera…

LG Monitors Spotted Installing Adware-Like App on Windows PCs hackread.com/lg-monitors-in…

Hackers were inside South Korea's diplomat training system for 9 months therecord.media/south-korea-cy…

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050 thehackernews.com/2026/07/hollow…

An AI SOC Evaluation Guide for Security Leaders bleepingcomputer.com/news/security/…

A Practical Overview of Essential Penetration Testing Tools

PhoneInfoga — Phone Number OSINT Framework An open-source framework for gathering publicly available intelligence related to international phone numbers to support legitimate investigations and research. ✨ Features: • Collects carrier, country, line type and numbering information • Aggregates OSINT from search engines, public sources and external services • Offers both a web interface and REST API for flexible workflows • Supports modular scanners and programmatic integrations • Built with Go and designed for extensible phone number investigations 🔗 github.com/sundowndev/pho… #OSINT #CyberSecurity #DigitalForensics #OpenSource #Investigation #GoLang

📡 𝗣𝗵𝗼𝗻𝗲 𝗡𝘂𝗺𝗯𝗲𝗿 𝗢𝗦𝗜𝗡𝗧 𝗧𝗼𝗼𝗹𝘀 & 𝗥𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀 🔹 Essential Tools ➊ OSINT Industries — osint.industries ➋ PhoneInfoga — github.com/sundowndev/pho… ➌ Truecaller — truecaller.com ➍ Epieos — epieos.com ➎ SpyDialer — spydialer.com ➏ 800Notes — 800notes.com ➐ NumberingPlans — numberingplans.com ➑ WhatsMyName — whatsmyname.app ➒ Phone Finder — phonefinder.com ➓ PayPhone Directory — payphone-directory.org.uk ⓫ Phone Validator — phonevalidator.com ⓬ Country Codes — countrycode.org ⓭ Phone Search — phonesearch.org ⓮ ZLOOKUP — zlookup.com ⓯ IntelX Phone Search — intelx.io ⓰ Free HLR Lookup — freelookupapi.com ⓱ AIThePhoneBook — aiphonebook.com ⓲ AzixPlm / No-Verify Project — github.com/AzixPlm ⓳ PH0MBER — phomber.com 🔹 Advanced Tools & Lookups ➊ GetContact — getcontact.com ➋ RocketReach — rocketreach.co ➌ GetHuman — gethuman.com ➍ Phunter ➎ IntelTechniques Phone Search — inteltechniques.com/tools/Telephon… ➏ Reverse Phone Lookup ➐ NumVerify — numverify.com ➑ ValidNumber — validnumber.com ➒ Sync.ME — sync.me ➓ OpenCelliD — opencellid.org ⓫ Cell2GPS — cell2gps.com ⓬ PhoneScoop — phonescoop.com ⓭ GSM Arena — gsmarena.com ⓮ FCC ID Search — fccid.io ⓯ OldPhoneBook — oldphonebook.com ⓰ Martinvig Phone Number OSINT — github.com/martinvigo/pho… > ⚠️ Use these tools only for authorized OSINT, investigations, research, or defensive purposes. Respect privacy laws and applicable regulations.

🤖 AiSOC — Open-Source AI Security Operations Platform A self-hostable AI-powered Security Operations Center that combines security telemetry, automated investigations and transparent AI-assisted incident analysis. ✨ Features: • Correlates alerts and automates investigations with replayable decision logs • Integrates dozens of security connectors, detections and playbooks • Supports AI-assisted triage, threat hunting and governed response workflows • Includes detection-as-code, Hunt-as-Code and plugin extensibility • Self-hostable with Docker, Kubernetes and cloud deployment options 🔗 github.com/beenuar/AiSOC #CyberSecurity #SOC #ThreatDetection #IncidentResponse #OpenSource #AI

AiSOC — Open-Source AI Security Operations Platform A self-hostable AI-powered Security Operations Center that combines security telemetry, automated investigations and transparent AI-assisted incident analysis. ✨ Features: • Correlates alerts and automates investigations with replayable decision logs • Integrates dozens of security connectors, detections and playbooks • Supports AI-assisted triage, threat hunting and governed response workflows • Includes detection-as-code, Hunt-as-Code and plugin extensibility • Self-hostable with Docker, Kubernetes and cloud deployment options 🔗 github.com/beenuar/AiSOC #CyberSecurity #SOC #ThreatDetection #IncidentResponse #OpenSource #AI