| Mails and credentials |
|
| Hunter |
https://hunter.io |
| Phonebook |
https://phonebook.cz |
| VerifyEmailAddress |
https://www.verifyemailaddress.org |
| Email Checker |
https://email-checker.net |
| HIBP |
https://haveibeenpwned.com/ |
| HIBP (phone numbers) |
https://www.passwordmanager.com/have-i-been-pwned/ |
| leakpeek |
https://leakpeek.com |
| Epieos |
https://epieos.com |
| Shodan |
https://www.shodan.io
for i in $(cat subdomainlist);do host $i | grep "has address" | grep inlanefreight.com | cut -d" " -f4 >> ip-addresses.txt;done
for i in $(cat ip-addresses.txt);do shodan host $i;done |
| Social Searcher |
https://www.social-searcher.com |
| WhatsMyName |
https://whatsmyname.app |
| Censys |
https://search.censys.io |
| Images |
|
| Pimeyes |
https://pimeyes.com |
| Google Images |
https://images.google.com |
| Domains |
|
| Phonebook |
https://phonebook.cz |
| WhoIs |
https://www.dondominio.com/es/whois |
| DNSDumpster |
https://dnsdumpster.com |
| ctfr.py |
https://github.com/UnaPibaGeek/ctfr/blob/master/ctfr.py |
| crt.sh |
https://crt.sh
curl 'https://crt.sh/?q=inlanefreight.com&output=json' | jq . | grep name | cut -d":" -f2 | grep -v "CN=" | cut -d'"' -f2 | awk '{gsub(/\\n/,"\n");}1;' | sort -u
for i in $(cat subdomainlist);do host $i | grep "has address" | grep inlanefreight.com | cut -d" " -f1,4;done |
| Dig |
dig any inlanefreight.com |
| Dorking |
|
| Implemented Search Engine |
https://pentest-tools.com/information-gathering/google-hacking |
| Dorking Manual |
https://www.exploit-db.com/google-hacking-database |
| GrayHatWarfare |
https://buckets.grayhatwarfare.com/ |
| Web Technologies |
|
| Wappalyzer addon for Firefox |
https://addons.mozilla.org/en-US/firefox/addon/wappalyzer/Wappalyzer |
| BuiltWith |
https://builtwith.com |