Target Acquisition
Where can we acquire targets?
Pros
- Useful job role information.
- Usually up to date.
Cons
- Most likely violates LinkedIn policy if automated.
- Automation is brittle and requires updates when changes are made.
Breach Dumps
Pros
- Could find valid passwords.
- Confirm email address formatting.
- cool services like Dehashed mean you don’t have to maintain the data.
Cons
- Outdated.
- Lots of data.
Source Control
Pros
- Easy to get.
- Commit dates give an idea at how recently the information was valid.
- Also acquire personal emails.
Cons
- Sometimes lots of repos.
- Probably more.