Listen to this Post
Ready to level up your OSINT cybersecurity skills for FREE while enhancing your OT/ICS knowledge? Mike Holcomb’s comprehensive course, already taken by over 1,000 live students and viewed by tens of thousands on YouTube, is now available at no cost!
Course Breakdown:
1. Course
2. Getting Started with OSINT
3. Social Media Intelligence (SOCMINT)
4. Email Addresses, Usernames, and Passwords
5. Domain Names, IP Addresses, and ASNs
6. Traditional Search Engines
7. Specialized Search Engines for ICS/OT I
8. Specialized Search Engines for ICS/OT II
9. Review Questions (80+ to test knowledge!)
🔗 Access the full course here: youtube.com/@utilsec
You Should Know: Practical OSINT & ICS/OT Commands & Techniques
1. OSINT Tools & Commands
- Harvesting Emails with theHarvester:
theHarvester -d example.com -b google,linkedin
- WHOIS Lookup:
whois example.com
- DNS Recon with Dig:
dig example.com ANY
2. ICS/OT Security Checks
- Nmap for OT Devices:
nmap -sS -Pn -p 502,102,44818 --script modbus-discover <target_IP>
- Shodan for ICS Devices:
shodan search port:502 "PLC"
3. Password & Username OSINT
- Breached Data Check with Have I Been Pwned (HIBP):
curl -s "https://api.pwnedpasswords.com/range/$(echo -n 'password123' | sha1sum | cut -c1-5)" | grep $(echo -n 'password123' | sha1sum | cut -c6-40 | tr '[:lower:]' '[:upper:]')
4. Social Media Intelligence (SOCMINT)
- Twitter OSINT with Twint:
twint -u @targetuser --since 2024-01-01 -o tweets.csv
What Undercode Say
OSINT and ICS/OT security are critical in today’s threat landscape. Mastering tools like theHarvester, Shodan, Nmap, and Twint can significantly enhance your cybersecurity posture. Always verify findings legally and ethically.
🔗 For advanced ICS/OT security, check:
Expected Output:
A structured, actionable guide with verified commands and resources for cybersecurity professionals.
🔗 Course Link: youtube.com/@utilsec
References:
Reported By: Mikeholcomb Ready – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅
