OSINT

Username:

  1. Use tools such as Sherlock, Whatsmyname.

  2. Try to construct an email with the help of the username. Maybe you found an email pattern somewhere which you can use.

Passwords:

  1. Use tools such as scylla.sh.

  2. Note: the passwords can be used throughout the network.

Phone Number:

  1. Tools: phoneinfoga

People:

  1. Websites: whitepages.com, truepeoplesearch.com, webmii.com, thatsthem.com, voterrecords.com

Email:

  1. Tools: hunter.io, phonebook.cz, clearbit connect, theHarvester

  2. Verify email: Email Hippo, email-checker.net

Twitter:

  1. Filters: to:thecybermentor, from:thecybermentor, since:2019-03-02, to:2019-03-02.

  2. Tools: socialbearing.com, mentionmapp, tweetbeaver, spoonbill.io, tweetdeck.twitter.com, twint.

Facebook:

  1. Tool: IntelligenceX

Instagram:

  1. Tools: wopita.com, codeofaninja.com, instadp.com

Snapchat:

  1. Tools: Maps on snapchat

Reddit:

  1. Use google dorks or reddit search bar.

LinkedIn:

  1. Check username and find other instances of the same username online.

  2. Reverse image search the images uploaded.

  3. Check contact info.

  4. Check company info, where it is located, who works for the same company.

  5. Check recommendations.

Website:

  1. Tools: google dorks, builtwith, centralops.net, dnslytics.com, spyonweb, whoisdomaintools, virustotal, visualping.io, backlinkwatch.com, viewdns.info, waybackmachine, Shodan.

  2. Subdomains: pentest-tools, google dorks, spyse.com, crt.sh, gowitness, httprobe, assetfinder, amass.

Business:

  1. Google dorks: site:www.linkedin.com "* at TCM Security”, site:www.linkedin.com/in/ "* at TCM Security”.

  2. Tools: opencorporates.com, aihitdata.com.

Image:

  1. Reverse Image Search: Google, Yandex, Tineye.

  2. Exif data: Jeffery Image Metadata Viewer, exiftool.

Google Dorks:

  1. site: tesla.com password, site: tesla.com password filetype: pdf, site: tesla.com password filetype: xlsx, site: tesla.com password filetype: docx, site: tesla.com -www.

  2. Find birthdays and resumes.

  3. Find the software, frameworks, tools, languages the company uses.

PreviousGolden Ticket Attack

Last updated

Was this helpful?