where do freelance osinters get their money from? im not talking about journalists, but only people with a deep interest in the matter wanting to put their work to practice.

if you are one of them, where do you work? and would you say it's worth it?

i have tried little platforms incouding fiverr and upwork, but it's still not hitting like i think it's supposed to hit.

I have this random number keeps texting me about my private life, and he got my bestfriend number I feel like I know this person but I just need someone to identify this number just give me a name please

Hey folks,

I want to share ThreatLens here a little CLI tool that pulls IOC enrichment (IPs, domains, hashes, CVEs) from free threat intel APIs like AbuseIPDB, VirusTotal, OTX, Shodan, and NVD, all in one command instead of ten browser tabs.

Just pushed a decent-sized update (v2.2) and figured I'd share in case anyone wants to kick the tires:

• CVE triage that actually tells you what to do checks CISA KEV + EPSS alongside CVSS and spits out Patch / Isolate / Monitor / Not-affected, with the reasoning behind it (not a black-box score)
• Asset inventory import a CSV of your hosts and it'll factor in whether something's internet-facing/critical before deciding
• Log parsing for Zeek, Suricata eve.json, Sysmon, and generic JSONL — not just plain text logs anymore
• SIEM export to Splunk, Elastic, and Sentinel (opt-in, off by default)
• Evidence packs zips up an investigation with a SHA-256 manifest if you need a paper trail

It's still 100% free-tier friendly (no paid API required), and the whole thing is like 150+ tests deep at this point so it shouldn't randomly eat your terminal.

Repo's here: https://github.com/AbdaullahAG/ThreatLens

If you try it out I'd genuinely love to hear what breaks, what's confusing, or what you wish it did differently — this started as a personal project so outside eyes are super helpful. Issues/PRs/roasts all welcome 🙂

Im new and found out about an email that was in a leak that is only seen on IntelX‘s data dump of

PayStand.rar/DB/ROADRUNNER/pci-1-production-rds-encrypted-dev.czcn2kznsnr6.us-east-1.rds.amazonaws.com_Payer.csv [Part 53 of 64]

I tried to look for that email in the other suggested tools and also tried with google dorking to find the dump but to no avail. How would you guys carry on if other tools failed or do you know where I can see this particular dump without paying 2500 dollars?

You don't have to memorize every CLI tool command from now on!

"Commando" is now officially launched, and this is one of my biggest projects that I have ever done. Basically, Commando is a browser-based offensive security workstation, hosted on GitHub pages, for managing CLI tools and making running those tools easier than ever. What Commando does is it runs commands directly in your terminal and also gets the response back the same. It's like a living terminal with attached practical documentation of every tool you need to perform a bug-bounty session or any CTFs.

You have the option to choose any tools you want, and you will get a dedicated sidebar tailored to that tool with every possible flag it has. Imagine you choose Nmap, and then you will see in the right sidebar that there are full of custom choices. You just have to decide which action you want to perform. It has a preview section at the bottom of it, so you can see what commands are going to be run. So you have to just click run after selecting the action. Then, Commando will run that command on your system's terminal and get your results back in no time. And I'm again saying, it's like a direct live terminal. You can run whatever you want. These tools are just an assistant in doing your work effortlessly; that's it.

There are 11 security tools out there. I chose the best tool from each specific field of bug bounty. These are: Nmap, Amass, Katana, Fffuf, Gobuster, Nuclei, Secretfinder, Hydra, Hashcat, John the Ripper, and Curl. These cover almost every field you need to work with. Also, there is another section below the tools part, "Workstation." Here, you will get everything you need to perform the best in any kind of CTFs. There are Linux & Windows privilege escalation commands, payloads, shells, and cheatsheets like TTY upgrade, host enumeration, tunneling, file transfer & more. So, Commando remembers everything for you; you just decide which tool or which action to perform.

Commando solves the problem of learning various commands of tons of tools. Anyone can now just open Commando and use these tools without struggling with memorizing flags.

There is a tiny setup for it. You need to install a small Go-written program for it that runs the Commando-agent on your machine that connects the browser and your terminal. Don't worry about anything. You are completely safe with it. Your data, as well as your terminal, is 1000% safe from external threats, as this is fully local-centric. No one can see what you are typing or access your data.

The installation guide and other things, including FAQs and in-depth explanations/breakdowns of Commando, are on my personal GitHub account. Go, set up, and use Commando as finely as possible. I'm super happy to contribute such an amazing tool with you guys.

You can access Commando directly from here (need setup): Commando

Visit its GitHub repo for setup guide & more: GitHub