passive DNS

Domain and Infrastructure OSINT: WHOIS, crt.sh, Shodan, Censys

Domain and Infra OSINT: WHOIS, Passive DNS, crt.sh, Shodan, Censys

Cybersecsloth Editorial6 days ago9 hours ago04 mins

certificate transparency leaks the subdomains dns hides, passive dns reverses an ip into everything it ever hosted, and shodan tells you which port someone forgot to close.

Read Full News

Trace Scammer Infrastructure With OSINT: WHOIS, Passive DNS, Wallets

Trace the Scam Back to Its Cheap VPS: Infrastructure OSINT for Fraud Fighters

Cybersecsloth Editorial6 days ago05 mins

One baby domain points at one cheap vps that hosts five other scam fronts. pivot the IP, cluster the wallet, find the abuse inbox, write it up. no hacking required.

Read Full News

meme dump: patch your stuff edition

Mistune’s RST Include Just Read Your .env (CVE-2026-115353)

Incus Backup Import: ../ in a Volume Name, Root on the Host (CVE-2026-115375)

vLLM Will Import Your Attacker’s Processor If You Ask Nicely (CVE-2026-114053)

WebRTC Datachannels: C2 That Looks Like a Call Your Firewall Already Allows

Your C2 Is a WebSocket Upgrade and the Proxy Logged It as Chat

Linux Fileless ELF: memfd_create, fexecve, and a Fake kworker Name

Plex2Shell: Your Home Theater Just Joined CISA KEV and Learned dlopen

PHP2Shell Just Turned Every Unpatched Upload Form Into a Shell Lottery

Verify or Burn a Claim: Chaining Photo, Map, and Public Records

Domain and Infra OSINT: WHOIS, Passive DNS, crt.sh, Shodan, Censys

Trace the Scam Back to Its Cheap VPS: Infrastructure OSINT for Fraud Fighters