Target Acquisition

Where can we acquire targets?

LinkedIn

Pros

  • Useful job role information.
  • Usually up to date.

Cons

  • Most likely violates LinkedIn policy if automated.
  • Automation is brittle and requires updates when changes are made.

Breach Dumps

Pros

  • Could find valid passwords.
  • Confirm email address formatting.
  • cool services like Dehashed mean you don’t have to maintain the data.

Cons

  • Outdated.
  • Lots of data.

Source Control

Pros

  • Easy to get.
  • Commit dates give an idea at how recently the information was valid.
  • Also acquire personal emails.

Cons

  • Sometimes lots of repos.
  • Probably more.
Last modified August 31, 2024: better spelling. new post (15bc7a8)