What kind of information can we gather from the target?
- Look at OSINT information
- Sometimes this involves guessing in determining the naming convention
- However, names of employees are very common to find on the web
- Especially higher ranked employees
OSINT Email Finder:
{% embed url="https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiy-ZbjnLX6AhUrj4kEHW6_DtkQFnoECAcQAQ&url=https%3A%2F%2Fhunter.io%2F&usg=AOvVaw2FGHtpfGhCqvtI-SLk45G5" %} Email Hunter {% endembed %}
- Input a domain and you will get OSINT information on email addresses pertaining to that domain
- Identify the naming convention
Another fantastic resource:
{% embed url="https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiEooSmnbX6AhWVrYkEHbRVC0AQFnoECA4QAQ&url=https%3A%2F%2Fphonebook.cz%2F&usg=AOvVaw0WREdmla4Pcs0JtWMA7eDu" %} Phonebook Intelligence: email, domains, URLs {% endembed %}
Browser Extension:
Clearbit -- Must use Google Chrome!
Email Verification:
Email Hippo