coffeetohack
  • Introduction
  • Methodology
  • Cheatsheet
    • Ports
    • Nmap
    • Directory Bruteforce
    • Password Cracking
    • Web Server
    • Shells
    • TTY Shells
    • File Transfers
    • XSS | SQLi
    • LFI / RFI
    • File Uploads
    • Port Forwarding
  • Framework/Application
    • CMS Made Simple
    • Blundit
    • Wordpress
    • OctoberCMS
    • Tomcat
  • Windows PrivEsc
    • Scheduled Tasks
    • Stored Passwords
    • Installed Apps
    • Unquoted Service Path
    • Binary Paths
    • DLL Hijacking
    • Startup Apps
    • Executable Files
    • Registry
    • Run As
  • Linux PrivEsc
    • Sudo
    • SUID
    • Capabilities
    • Scheduled Tasks
    • NFS Root Squashing
    • Docker
  • Buffer Overflow
    • dostackbufferoverflow
    • BoF 1
    • Vulnserver
    • Brainpan
    • Brainstorm
  • Initial Shell Exploits
  • PrivEsc Exploits
  • Cisco Packet Tracer
  • Active Directory
    • Methodology
    • LLMNR Poisioning
    • Cracking Hashes
    • SMB Relay
    • IPv6 Attacks
    • PowerView
    • Bloodhound
    • Pass The Hash
    • Token Impersonation
    • Kerberoasting
    • GPP Attack
    • URL File Attack
    • PrintNightmare
    • Mimikatz
    • Golden Ticket Attack
  • OSINT
Powered by GitBook
On this page

Was this helpful?

OSINT

Username:

  1. Use tools such as Sherlock, Whatsmyname.

  2. Try to construct an email with the help of the username. Maybe you found an email pattern somewhere which you can use.

Passwords:

  1. Use tools such as scylla.sh.

  2. Note: the passwords can be used throughout the network.

Phone Number:

  1. Tools: phoneinfoga

People:

  1. Websites: whitepages.com, truepeoplesearch.com, webmii.com, thatsthem.com, voterrecords.com

Email:

  1. Tools: hunter.io, phonebook.cz, clearbit connect, theHarvester

  2. Verify email: Email Hippo, email-checker.net

Twitter:

  1. Filters: to:thecybermentor, from:thecybermentor, since:2019-03-02, to:2019-03-02.

  2. Tools: socialbearing.com, mentionmapp, tweetbeaver, spoonbill.io, tweetdeck.twitter.com, twint.

Facebook:

  1. Tool: IntelligenceX

Instagram:

  1. Tools: wopita.com, codeofaninja.com, instadp.com

Snapchat:

  1. Tools: Maps on snapchat

Reddit:

  1. Use google dorks or reddit search bar.

LinkedIn:

  1. Check username and find other instances of the same username online.

  2. Reverse image search the images uploaded.

  3. Check contact info.

  4. Check company info, where it is located, who works for the same company.

  5. Check recommendations.

Website:

  1. Tools: google dorks, builtwith, centralops.net, dnslytics.com, spyonweb, whoisdomaintools, virustotal, visualping.io, backlinkwatch.com, viewdns.info, waybackmachine, Shodan.

  2. Subdomains: pentest-tools, google dorks, spyse.com, crt.sh, gowitness, httprobe, assetfinder, amass.

Business:

  1. Google dorks: site:www.linkedin.com "* at TCM Security”, site:www.linkedin.com/in/ "* at TCM Security”.

  2. Tools: opencorporates.com, aihitdata.com.

Image:

  1. Reverse Image Search: Google, Yandex, Tineye.

  2. Exif data: Jeffery Image Metadata Viewer, exiftool.

Google Dorks:

  2. Find birthdays and resumes.

  3. Find the software, frameworks, tools, languages the company uses.

PreviousGolden Ticket Attack

Last updated 2 years ago

Was this helpful?

site: password, site: password filetype: pdf, site: password filetype: xlsx, site: password filetype: docx, site: tesla.com -www.

tesla.com
tesla.com
tesla.com
tesla.com