‫People who are related to the target company are always one of the most important resources to collect
‫information.
‫Here's a stunning example.
‫In September 2017, The Guardian reported that Deloitte suffered a cyberattack that breached the confidentiality
‫of its clients and 244,000 staff allowing the attackers to access usernames, passwords, IP addresses,
‫architectural diagrams for businesses and health information.
‫A developer working for Deloitte as an outsource put the credentials to GitHub so anyone who visits
‫his GitHub account could see the credential to access the critical systems of Deloitte.
‫And you think this single example is enough to show that searching for people who are related to target
‫company is one of the most important parts of information gathering.
‫In which social network platforms do they have accounts?
‫What do they share?
‫Etc..
‫Why you're collecting the information about the target company.
‫You're going to find the people who work for it.
‫Hey, guess what?
‫So you can find more about those people using web.
‫My Ecom great website with the world's largest people's search engine web.
‫My is a place to find the person behind the email address, Twitter, address, LinkedIn address, whatever
‫you got.
‫Web.
‫Millions of people.
‫Search engine tries to be a little different too.
‫Rather than just go off and hunt for email addresses, actually tries to search through the deep and
‫invisible and hidden, dark, horrible places that no other search engine dares to dread.
‫Anyway.
‫The interface is simple.
‫You type in a name, there's some optional keywords, then send it off, find if it'll bring anything
‫back to you.
‫Might actually be fun to see what it'll find on you.
‫If you find usernames or nicknames while collecting data about the target company, you should investigate
‫if the username or nickname is used in social networks.
‫Instead of trying the social network platforms one by one.
‫You can use check usernames dcoms.
‫Website Check Usernames Dcoms.
‫Searches the given username on 160 social networks.
‫Go to the social network platforms where the username or nickname exists.
‫Look at the profile of the user to learn more about the person from the target company.
‫If you somehow got the password of a person from the target company, you can try the password and social
‫network platforms.
‫If the person used the same username or password in any social network platform most people do, you
‫can compromise that account attention here.
‫Try the username and password values to compromise.
‫The social network platform accounts only if you allow to do it, even though the penetration test agreement
‫between the company and you allow it.
‫In most countries, you're not allowed to do this.