TryHackMe is an excellent training ground and hobby room  for hackers and pen testers. Best thing: it offers plenty of stuff for free.

And even the paid services are a fair deal for what they offer.

Lets have a look.

John does one thing and does that very well:

It can find the corresponding password for a given hash.

John has different ways to do this – we are looking at the wordlist-mode here.

gobuster is actually quite a multitool: when you look at the help page there are modules to find subdomains, directories, files and more.

Most of the time you will use gobuster to find directories and files on a webserver by using a wordlist.

There is no shortage of OSINT social media tools these days.

We already talked about sherlock and its fork – maigret.

Her is another on: scylla.

scylla is different in that it allows you to do a bunch of different searches:

We talked about sherlock earlier – maigret is quite similar. It is infact a fork of sherlock.

So it searches for a username across a wide range of social media plattforms.

It claims to be a bit more soffisticated than sherlock. Giving you less false positives.