Quintius Walker, Grey Hat Developer, Cybersecurity Consultant
7 June 2024
Absolutely everything on this blog pertaining to the term “hacking” is meant for training and educational purposes only. WE DO NOT ENGAGE IN NOR PROMOTE ANY ILLEGAL HACKING ACTIVITY!
“The end of the hiatus is near, they announce.”
They? Yes, they….we, us, it’s all the same. The hiatus has ended that’s for sure. All the while it’s reminiscent of the manner in which the other hiatuses ended; with the explanation of why there was even an hiatus to begin with. It’s simple on the surface. We were literally off looking into other things.
Once they figure out your name
they’ll drop your name into a search;
Since you will never figure out their game,
Watch them work.
Ya see, that’s what you do when you perform OSINT. You look into things. If a little voice just spoke up in your head right now saying, “what’s new, it’s called Recon, Sherlock”. Well, yes and No. It all depends. As a penetration tester, having now focused on OSINT as a separate discipline aside from the phases of an engagement, in hindsight I absolutely would have devoted the initial stages of my training entirely to developing my OSINT skills.
Then they can clock
Your movements like a narc,
Just like the F.B.I do,
In them movies when they chart.
What you do on social media….
In the comments
Since, they acting like they needing ya
You let them put that seed in ya.
Now, I imagine that someone who performs Red Team engagements regularly already sees OSINT “as” Recon, in the sense that the techniques used when conducting an OSINT investigation come with the territory for them. OSINT is probably their native tongue. (Or at the very least, I’m fairly certain that it’s one of the many languages a Red Teamer is fluent in.) Likewise for the investigative journalist, the detectives, the F.B.I, the spy, etc. but you get where I’m going here.
To put your private information
In a post,
That picture that you see
In that new profile ain’t a hoax.
Certainly it’s not a ghost,
You GPS is toast,
You said you’re far away from me
But I see that you’re close.
In any event, going forward it’s a language that I as an Information-Cybersecurity professional, and we, as a company, community, and culture will become fluent in as well. Right along with the Python language; all while strenuously resisting the urge to tackle React simultaneously. With that being said, whenever these hiatuses manifest, please just know that they arise in the spirit of inter-being. In layman’s terms that means our grind hasn’t stopped, it’s just embarking upon a new beginning.
This brings us to the Practical Junior Osint Researcher. The PJOR is an OSINT exam delivered by TCM Security. As with all of the TCM exam engagements, the PJOR is 100% hands-on and offers the candidates an opportunity to apply the skills they developed from the OSINT training course. Each task is like its own separate individual investigation that requires the candidate to use different skills within the overall OSINT methodology.
Of course there’s not a lot I can say due to the NDA in place, but I will say again that if you’re short on real world experience in this domain (or any of the domains covered by TCM Security for that matter), the PJOR does not disappoint. And I’m not sure about others who use TCM Security as part of their training regime but in my experience, the course is only a fraction of the whole. What I mean is, the learning takes place during the engagement. I don’t for a second deem it accidental that their exams are practical and mirror real-world environments and scenarios.
Platforms…. like X and Instagram
Are like the clubs,
They’re fully rich in data,
they’re not just entertainment hubs.
So be careful what you share,
Cause it may work against you,
Get skilled in anonymity
And this won’t be an issue.
Untouched and stay invisible….
Hackers learn by doing and with that, I’ll leave you with a gem that one of my mentors bestowed upon me. It goes, “It ain’t real if you don’t put your hands on it”. So, all aspiring hackers and even veterans in the field who need to sharpen up their axe for researching and investigations….dive into the TCM Academy and get your hands dirty. It’s a truly fun and rewarding experience that will work wonders for your personal and professional life.
You’re awesome and thanks for reading. If you’re able to take away something valuable from anything we say, by all means please share and subscribe to be in the loop whenever we drop a post. Be blessed.
Hack On, Ladz & Gentz!