掌握电子邮件开源情报——揭露网络足迹的技巧.pdf

1、SANS OSINT SUMMIT 2025MASTERING EMAIL OSINTPRESENTATIONTechniques for Uncovering Online FootprintsPRESENTED BY JESS BEN AROSHYou will learn these key things1.Advanced techniques for reverse email lookups so that so that youll be able to uncover key data with minimal starting information2.How to leve

2、rage a users Googles ID to identify their Google Reviews and learn about their location and habits3.How to set up a virtual environment that will allow you to take advantage of the“people you may know”algorithm4.OSINT MINDSET!CASE STUDYOswaldo CAn email address is the most valuable data point in OSI

3、NT:Not just for the information that it containsbut for the vast amount of additional intelligence it is connected toSOME WAYS TO FIND AN EMAIL ADDRESS Company website Wayback Machine Google Dorking site:“Oswaldo”site: “filetype:pdf contact Corporate email format email- MediaEMAIL ADDRESS BY WHOIS I

4、NFORMATION Whois ViewDNS.info WhoisXMLAPI.comEMAIL VERIFICATION Email Verifiers Hunter.io Breach Databases HIBP Hackcheck.ioEMAIL VERIFICATION Seon.io SkypeEMAILINTELLIGENCE GAIA ID(Google Accounts and ID Administration ID)Recommended Tools E Ghunt(Python required)?I come here all the time.Great cof

5、fee but the donuts are stale.Bad service.2/5 stars.Well,that was a one-time fluke.So what?1.OSINT Mindset:the importance of playing with tools2.Psychology of an email user:Age,Context,Location(QQ.com,Mail.ru,Web.de)3.Gmail has more than 1.8 billion active users 4.Dots dont matter in Gmail addresses:

6、= 5.How to find partial email clues?Burner phone no more!Password reset Suggested friends/people you may knowRecommended Software NoxPlayer BlueStacks Android StudioANDROIDEMULATORSSync your contacts list with platforms that offer contact d