People who are related to the target company are always one of the most important resources to collect
information.
Here's a stunning example.
In September 2017, The Guardian reported that Deloitte suffered a cyber attack that breached the confidentiality
of its clients and 244 thousand staff, allowing the attackers to access usernames, passwords, IP
addresses, architectural diagrams for businesses and health information.
A developer working for Deloitte as an outsourced put the credentials to GitHub so anyone who visits
his GitHub account could see the credentials to access the critical systems of Deloitte.
And you think this single example is enough to show that searching for people who are related to target
company is one of the most important parts of information gathering?
In which social network platforms do they have accounts, what do they share, etc.?
Why you're collecting the information about the target company, you're going to find the people who
work for it, you can find more about those people using Pippo dot com or Poeppel website with the world's
largest people's search engine people is the place to find the person behind the email address, social
user name or phone number.
Pippo is a people search engine that tries to be a little different rather than just go off and hunt
for email addresses.
This tries to search through the deep, invisible, hidden web to return contents that other search
engines are going to miss.
The interface is simple typing the name, email address, social user name or phone number optionally
city, state and or country.
Then let it go to see what it'll find.
If you find usernames are nicknames while collecting data about the target company, you should investigate
if the user name or nickname is used in social networks, instead of trying the social network platforms
one by one, you can use check usernames, dot coms, website check usernames, dotcom searches.
The given user name on 160 social networks go to the social network platforms where the user name or
nickname exists.
Look at the profile of the user to learn more about the person from the target company.
Now, if you somehow got the password of a person from the target company, you can try the password
and social network platforms.
If the person used the same username or password in any social network platform, most people do.
You can compromise that account now to engineer, try the username and password values to compromise
the social network platform accounts only if you allowed to do it, even though the penetration test
agreement between the company and you allow it in most countries, you're not allowed to do this.