πŸŸ₯
LSWSec - Offensive
  • Introduction
  • File transfer
    • Transferring Files
      • Transferring Files - Linux
      • Transferring Files - Windows
  • Recon
    • Passive information Gathering
      • Website
      • Finding SubDomains
        • DNS
        • DNS Zone Transfer
    • Subdomain Enumeration
    • OSINT
      • Email
      • People
      • Social Media
      • Username and Accounts
      • Passwords
      • Business
      • Image and Location
    • Active Information Gathering
      • Nmap
      • Netcat
      • ss
      • Unknown Port Scanning
      • Footprinting
        • FTP
        • SMB
        • NFS
        • DNS
    • Vulnerability Searching
  • Ports
    • 21 - FTP
    • 22 - SSH
    • 23 - Telnet
    • 25 - SMTP
    • 69 - TFTP
    • 80 - HTTP
    • 88 - Kerberos
    • 110 - Pop3
    • 111 - RPCBind
    • 119 - NNTP
    • 135 - MSRPC
    • 139/445 - SMB
      • PSExec
      • Nmap
      • Other tools
    • 143/993 - IMAP
    • 161/162 - SNMP
    • 389/636 - LDAP
    • 443 - HTTPS
    • 554 - RTSP
    • 587 - Submission
    • 631 - Cups
    • 1433 - MsSQL
    • 2049 - NFS
    • 3306 - MySQL
    • 3389 - RDP
  • Web
    • useful information
    • Web Proxy
      • Burp
    • Web Content Discovery
    • SQL
    • Web Fuzzing with FFUF
      • Directory Fuzzing
      • Domain Fuzzing
      • Paramater fuzzing
    • Local File Inclusion
      • LFI
      • Basic Bypass
    • Authentication Bypass
    • IDOR
  • Priv-esc
    • Windows
      • mimikatz
  • Pivoting
    • Info
    • Locating other machines
    • proxy
    • SSH tunneling/port forwarding
    • plink
    • socat
    • chisel
    • sshuttle
    • connecting to windows environments with a user account
  • Command and Control
    • powershell empire
    • Armitage
  • Active Directory
    • Debugging DNS
    • NTLM Authenticated Services
    • LDAP Bind Credentials
Powered by GitBook
On this page
  • Searching for People
  • Voter Records (USA)
  • Hunting Phone Numbers
  • Phone number tools
  1. Recon
  2. OSINT

People

Searching for People

  • WhitePages – https://www.whitepages.com/

  • TruePeopleSearch – https://www.truepeoplesearch.com/

  • FastPeopleSearch – https://www.fastpeoplesearch.com/

  • FastBackgroundCheck – https://www.fastbackgroundcheck.com/

  • WebMii – https://webmii.com/

  • PeekYou – https://peekyou.com/

  • 411 – https://www.411.com/

  • Spokeo – https://www.spokeo.com/

  • That’sThem – https://thatsthem.com/

Sometimes you can request for your information to be removed

Voter Records (USA)

Voter Records – https://www.voterrecords.com

Some states make voter records public and can leak a lot of information.

Hunting Phone Numbers

  • TrueCaller – https://www.truecaller.com/

  • CallerID Test – https://calleridtest.com/

  • Infobel – https://infobel.com/

Yahoo will bring up a phone number if you try to recover a password. Sometimes it can send a verification code which will notify the person..

Phone number tools

  • Phoneinfoga scan -n 44phonenumber

  • phoneinfoga scan -n 14082492815

  • phoneinfoga serve -p 8080

  • Discovering Birthdates

  • Try different searches.

  • Searching for Resumes

  • Search on google: look for websites like linkedin, images, different file types.

PreviousEmailNextSocial Media

Last updated 5 months ago