Automated Social Engineering Recon Using Rapportive

Introduction

When performing a social engineering engagement, recon is key. In a previous post, I demonstrated a few ways in which we could automate the recon process. However, the methods I showed were simply ways to find the profiles of people that might belong to a particular organization.

During SE engagements, we often either run across email addresses (by, say, simply scraping the main website) or want to enumerate the email address structure in use by an organization (generating possible alternatives using tools like jigsaw.rb). It would be helpful if it were possible to automate the process of validating those email addresses by associating them to additional information or social networking profiles. This is where Rapportive comes in handy.

Read More

Hello World!


``` #!/usr/bin/env python print 'Hello, World!' ```

Hi there! My name is Jordan, and I am a security researcher, developer, and hobbyist.

For the past few years, I created and maintained a blog for an organization I started called Raidersec. While I fully intend to leave the existing content on the Raidersec blog, I thought it would be ideal to create a personal blog on which I can continue writing about my research and projects dealing with not just security, but programming in general.

Read More

Author image Jordan Wright