Hunting E-mail addresses, usernames, credentials

Hunting email addresses

We want to get a feel for the naming conventions the organization uses, if we can find email address this could be a good indicator

we can utilize google kungfu (Dorking)

intext:"@domin.com" inurl:domain.com

we can hunt them down through the companies public facing websites, particularly the following

• "About us" pages

• "Contact us" pages

Username Harvesting

We can utilize tool such as

• https://github.com/initstring/linkedin2username

that will the companies LinkedIn page and generate various combinations of usernames

Credential Hunting

we can utilize websites like

• http://dehashed.com/

• https://haveibeenpwned.com/