1 hour 56 minutes
in the last video we brushed on social networks and some recommendations for your further studies in the OHS in context. And in this lesson, we will cover the O's in part concerning emails and user names.
Here, you will learn how to find the correct email format. Learn Is the email valid or not? And which email provider is involved concerning user names? I will mention a few of my favorite search websites,
if possible. It is always easier to search for a person when you have their email address. Because if your target has a well known or a common name like John Smith okay, maybe that this is a bad example. But it is possible,
then your research can get very aggravating. One of the tools I like is hunter that I owe. And usually the free search feature will be good enough for your research.
After you have found an email, it would be nice to know, Does it actually work?
Is it valid or not?
There are also a few good sources. Resource is out there, and I have to say that some of them give you false results. If you check a well known free email provider. But I would always recommend one which I like. It's called True Male that I owe. And based on my work, I found that it is reliable. But that can always change.
Sometimes it is good to know which email provider is behind your targets email, because based on that info for an example, you can assume their exposure may be better to say. Are they more prone to phishing attacks?
It is not the same. If your target is using exchange online or a share hosted email with far less protection,
I will show you how you can find out that information in a few steps.
Bring up your terminal and we will use the N s look up command to see the DNS records.
So type anise. Look up,
then to set the configuration
equals M X
and press enter.
After that, type the targets domain that you're interested in. Let's check my domain.
I will type
da bourbon dot net d o b a r d a n. That
This means good day in creation
and presented. And as you can see, I use an Exchange Microsoft Exchange system,
and that's it
regarding the user names. Although there are at least a dozen services out there that provide this feature of checking the user name availability, I will mention two of them named Checker and no one dot com.
This is the thing. When you haven't user name, you will be able to acquire much more data on the target. In the end, there is another perfect model of thinking called assumptions. We all know where they could lead us, but sometimes actually know, since more than often they can lead to a low hanging fruit.
The main reason is because we are human and humans think alike. You can always make an assumption off the email format. Type it up in the search engine. Maybe use some advanced search operators to be more efficient and see where death might take you.
In this video, we went over some of the ocean tools and techniques regarding emails and user names, and in the next lesson, we will go over leaks and data bridges. So see you there
Open Source Intelligence (OSINT) Fundamentals
In this Open Source Intelligence (OSINT) Fundamentals training course, you will gain fundamental knowledge about OSINT, who uses it, and the ethical implications of using it. Upon completion, students will have a solid understanding of OSINT.