Publicly Available Information

  • Company web pages: search for documents (with GHDB), review the HTML source code for comments, get local copy with wget
  • Related organizations
  • Location details
  • Employee information
  • Inteltechniques
  • TorScraper (Darknet) – GoSecure

Employee information

  • Apollo – corporate email address (register for free)

Useful search engines

Need to cleanup this section 😉

  • Shodan – Search for devices connected to the internet.
  • Wigle – Database of wireless networks, with statistics.
  • Grep App – Search across a half million git repos.
  • Binary Edge – Scans the internet for threat intelligence.
  • ONYPHE – Collects cyber-threat intelligence data.
  • GreyNoise – Search for devices connected to the internet.
  • Censys – Assessing attack surface for internet connected devices.
  • Hunter – Search for email addresses belonging to a website.
  • Fofa – Search for various threat intelligence.
  • ZoomEye – Gather information about targets.
  • LeakIX – Search publicly indexed information.
  • IntelligenceX – Search Tor, I2P, data leaks, domains, and emails.
  • Netlas – Search and monitor internet connected assets.
  • URL Scan – Free service to scan and analyse websites.
  • PublicWWW – Marketing and affiliate marketing research.
  • FullHunt – Search and discovery attack surfaces.
  • CRT sh – Search for certs that have been logged by CT.
  • Vulners – Search vulnerabilities in a large database.
  • Pulsedive – Search for threat intelligence.
  • Packet Storm Security – Browse latest vulnerabilities and exploits.
  • GrayHatWarefare – Search public S3 buckets.