[NinjaSec Course] Gathering Information

I know that this post is going to be pretty basic, but it was not very detailed in my head so I wanted to write about it to remember it easier.

So, what tools and techniques can someone use to gather information about a certain person or company?

Well, your best friend is Google + Evernote combination. Basically, what you can do is to write down all of the data you think it will be usable in Evernote. Next, look up that company using social sites such as Facebook, Twitter, LinkedIn etc. now, why is that important? Well, it is important because maybe their employees listed that company as their job on their social sites. From there, you can find out a lot about who is working there. Write it down in Evernote and proceed.

Next stop is finding out what their workers do the best. So you’ll use maybe a little social engineering to get to information their employees are posting on their social media. By looking at their resumes, their likes and their tweets, you can find out a lot about a certain person. After you do that, you just match them up to see where do their interests combine.

For an example, if a couple of their employees listed Java as their field of expertize on their LinkedIn profile, there’s a big chance that their site or applications they provide will include some parts of Java code. Your job is to find more that clues and to paint as precise picture of a company as possible.

Does not seem that hard, does it?


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s