Passively Scanning Your Targets With Smap
Passively scan with Smap and avoid detection while gathering useful information on your targets.
Topic
Reconnaissance
5 articles on this topic.
Automated OSINT for Security Assessments
If you are a red teamer or a penetration tester you got to love automated OSINT tools which will help your security assessments. Here is one of the best ones.
Hunt a Username on Social Media with Sherlock
Many users register themselves on websites using the same username. If you are performing an investigation on a person, and especially if you know a username or handle they are usually using online, you may hunt for usernames on social media platforms with Sherlock.
How To Find Domains Owned by a Company
During a black box, or grey box penetration testing engagement for a company, one of the main things you will need to find domains owned by the company.
Discover Subdomains During A Penetration Testing Engagement
During an external penetration test, and especially if it is a black-box engagement, one of the most important steps is to find subdomains used by the target company.