Overview

Finding publically avaliable details in the early stages of the pen test

• Useful data from publically available sources

• An innocent social media post could give out quite a lot of information

  • Where they live

  • License plate

  • answer to a password reset

  • Information for impersonation

This can be used to find out pets names, football teams etc that can be used later in hacking. This can be used to

• Narrow the focus

• Profile victims

OSINT Results can include

• First name

• Last name

• username

• Email address

• Family members

• birthdates

• Holiday locations

The more time you spend on reconnaissance the less time you need to spend later on down the road.

Reconnaissance = Processes, procedures, and techniques used to discover and gather info about a target.

• Active recon

• Passive