Interesting Places to Look
Vinny Troia PhD · 2020
This chapter focuses on uncovering hidden information throughout various scattered corners of the Internet. This includes using tools like theHarvester for wide-range information gathering, and more focused tools like Gitrob for gathering information for GitHub. The chapter provides various details and examples to make it clear that even the most random places like forums, paste sites, code repositories, and wiki pages can offer very unexpected results, and sometimes ground-breaking clues in an investigation. Code repositories, like GitHub, Bitbucket, and GitLab, can provide critical clues to finding way into an organization, or learning about a target. Hackers and other threat actors will often use one or more paste sites to post a sample of their goods online. Paste sites will often contain samples of data breaches, messages from threat actors, and various doxes on individuals. Paste sites, like forums, are widely used among threat actors and can often provide pivotal information during an investigation.