Target Acquisition

Where can we aquire targets?

LinkedIn

Pros

• Useful job role information.
• Typically up to date.

Cons

• Most likely violates LinkedIn policy if automated.
• Automation is brittle and requires updates when changes are made.

Breach Dumps

Pros

• Could find valid passwords.
• Confirm email address formatting.
• cool services like dehashed mean you dont have to maintain the data.

Cons

• Outdated.
• Lots of data.

Source Control

Pros

• Easy to get.
• Commit dates give an idea at how recently the information was valid.
• Also acquire personal emails.

Cons

• Sometimes lots of repos.
• Probably more.