BuiltWith recon-ng module or BuiltWith browser extension information.Registrant Organization information (if hosted by external party).How Discovered (DNS Zone Transfer, DNS reverse lookups, SSL certificates, etc.).Externally Accessible? (port information, status code, etc.).Spreadsheet columns to organize domains found (optional): Employee information revealed on company websites (most of these get scraped using the tools listed above but worth trying if you want to).Other search engines (DuckDuckGo, Bing, AOL, Yahoo, Internet Archive/ Wayback Machine, Baidu, etc.).Many other tools and scrapers can be found here:.Google Dorking (see Google Dorking for more information).Metadata analysis (see Metadata Analysis for more information).Many other recon-ng modules such as the GitHub and twitter modules can help add to this list as well.Jigsaw and pwnlist modules (APIs need to be purchased beforehand).Linkedin_auth module (Bing LinkedIn cache).Have I Been Pwned hibp_breach and hibp_paste credential modules.Recon-ng modules for people (all APIs keys need to be in key list).Scraping Tools for obtaining entire list of employees and contact information : Notes (background, interesting information, physical addresses, etc.) How discovered (scraping tools, web searches, etc.).Active/non-active (the Mailtester module in Recon-ng is one of the many helpful tools available to test if email addresses are still active).Spreadsheet columns to organize people and contacts (optional): Use throttling, obfuscation, and overall detection evasion techniques when performing standard port scanning, and passive observation gathering of externally open ports and services.Private Internet Access (PIA) is a wonderful example.
Geek tools com windows#
Certain tools such as Cain and Search Diggity are only available for Windows OS, so know which tools you would like to use and prepare the operating system VMs accordingly.Kali Linux OS has many OSINT tools installed by default and would only require API setup/ configuration beforehand.Set-up VMs for anonymity and OSINT tools: Note: These categories will be described further in-depth later.Extra sheets can include Dark Web, Passive Observations, or any extra notes that you think deserves its own category.Total External Inventory (save this sheet tab to fill out last).Create an excel spreadsheet with the following sheets tabs across the bottom:.
0 kommentar(er)
