🔴
Hacking
  • 1. Hacking Infrastructure
    • Infra Planification
      • Infrastructure Diagram & Requirements
    • Infra Configuration
      • Attack Server
      • C2 Server
      • Redirector
      • Payload Server
      • Phishing Server
  • 2. Reconnaissance and Information Gathering
    • OSINT (Open-Source Intelligence)
      • Enviroment
      • Android Virtualization
      • Web Browsers
      • Sock Puppets (Covert Accounts)
      • All-purpose Advanced Tools
      • Search Engines
      • People Search Engines
      • Websites & Domains
      • IP Addresses
      • Users & Emails
      • Social Media
      • Documents
      • Images
      • Videos & Lives
      • Metadata
      • Telephone Numbers
      • Online Maps
      • Virtual Currencies
      • Leaks, Breaches, Logs and Ransomware
      • Government & Business Records
    • Port, Version, Vuln Scanning
      • Nmap
      • Shodan
      • Network Mapping
      • Researching Potential Vulnerabilities
      • Dark Web Scanning
  • 3. Social Engeniering
    • Phising
      • Recycling Domains
      • Header Manipulation
      • Email Creation and Delivery
      • Email Spoofing & Warning Disabling
      • Site Building
      • Evilginx
      • Payload Hosting Obfuscation
      • Diverting the Analysts
      • VBA Macros & RTI
      • HTML Smuggling & HTA Files
      • JS Files
      • Other File Types
    • SMS Spoofing
      • SMSpubli
    • Social Engineering Toolkit (SET)
      • SET Installation
  • 4. Exploitation
    • Password Cracking
      • SetUp
      • Wordlist Building
      • Tools
    • Payloads - File Transfer - Coding - MalDev - ExploitDev
      • Payload Triggering
        • Shell File Transfer
        • PS Execution - Donwload Craddles
      • Normal Shells
        • Reverse Shells vs Bind Shells
        • Direct Reverse Shell Commands
        • Interactive Shell
        • Normal Reverse Shell Tools
        • PHP Webshells
        • ASPX Webshells
        • Kraken Webshell
        • Python Webshells
      • Coding Basics
        • Bash
        • Python
        • C
        • C++
        • C#
        • x86-64 (Intel) Assembly - NASM & MASM
      • Windows MalDev
        • MDLC & Tools
        • Architecture, Memory Management, APIs & Processes
        • PEs & DLLs
        • Malware Binary Signing & Metadata Modification
        • Payload Placement
        • Payload Execution Control
        • Payload Encryption & Obfuscation
        • Malware Optimization: Entropy Reduction & Compile Settings
        • Local Payload Execution
        • Process Enum, Injection & Hollowing
        • Payload Staging
        • Thread Hijacking
        • APC Injection
        • Callback Code Execution
        • Mapping Injection
        • Function Stomping Injection
        • PPID Spoofing
        • Process Argument Spoofing
        • API Hooking
        • String Hashing
        • IAT Hiding, Obfuscation & Camouflage
        • Anti-Debugging
        • Anti-Virtualization
        • Syscalls
        • NTDLL Refreshing
      • Windows ExploitDev
        • Tools
        • x86 Vanilla Stack BOF
      • Linux ExploitDev
        • BOF GNU/Linux 32-bit
    • Active Directory
      • Host and Domain Recon
        • SMB (139,445) Enum
        • RPC (135, 1024-5000) Enum
        • LDAP (389,636,3268,3269) Enum
        • PowerView
        • Other tools / Commands
        • BloodHound
      • Attacks and procedures
        • Password Spraying
        • User Impersonation
        • Lateral Movement
        • Kerberos (88)
        • Certificate Services (AD CS)
        • ACLs/ACEs
        • Group Policy
        • MS SQL Servers
        • LAPS (Local Administrator Password Solution)
        • Microsoft Configuration Manager
        • Domain Dominance
        • Forest & Domain Trusts
        • MiTM & Relaying Attack
    • Cloud
      • Azure
        • Basic Info
        • Initial Access
        • Enumeration
        • Privilege Escalation
        • Lateral Movement
        • Persistence
        • Data Exfiltration
      • AWS
        • Basic Info
        • Initial Access
        • Enumeration
        • Privilege Escalation
        • Lateral Movement
        • Post-Exp & Persistence
        • Data Exfiltration
      • Google Cloud
        • Basic Info
        • Initial Access
        • Enumeration
        • Privilege Escalation & Lateral Movement
        • Credential Access
        • Data Exfiltration
    • Web
      • Fingerprinting
      • Automated Scanners
      • Proxies
        • WAFs & Attack Obfuscation
        • HTTP Request Smuggling
      • CMS's: Content Management Systems
      • Authentication
        • Authentication vulnerabilities
        • OAuth 2.0 Authentication Vulnerabilities
        • Access Control
      • Files
        • File Upload
      • Reflected Values
        • Command Injection
        • HTML & XSS Injection
        • SSRF: Server-Side Request Forgery
        • SSTI: Server-Side Template Injection
        • CRLF Injection
        • CSV Injection
        • Openredirect
        • Prototype Pollution
        • ShellShock Attack
      • Search functionalities
        • LFI - RFI - Path traversal
        • SQL Injection
        • NoSQL injection
        • LDAP Injection
        • XPath Injection
      • Forms, WebSockets and PostMsgs
        • CSRF: Croos-Site Request Forgery
        • WebSocket Attacks
      • HTTP Headers
        • Clickjacking
        • CORS
        • Host Header Injection
      • Structured objects - Specific functionalities
        • XML External Entity (XXE) Injection
        • Deserialization Attacks
        • Padding Oracle Attack
      • Whitebox
        • Source Code Recovery, Analysis & Debugging
        • Python PoC Building
        • File Upload
        • SQL Injection
        • JavaScript Injection
        • SSTI (Server-Side Template Injection)
        • PHP Type Juggling
        • Prototype Pollution
        • Password Reset Attacks
    • Network Services
      • FTP 21
      • SSH 22
      • DNS 53,5353
      • FINGER 79
      • POP3 110,995
      • SNMP 161,162,10161,10162
      • MYSQL 3306
      • VNC 5800,5801,5900,5901
      • Ansible
      • Artifactory (8081)
      • Citrix
    • Wireless Pentesting
      • Wireless Reconnaissance
      • Wifite
      • RogueAP
      • WiFi Pineapple Mark VII
    • Camera Pentesting
      • Identifying Unsecured Web Cams
      • Default Passwords
      • Cameraradar
    • SCADA/ICS
      • Reconnaissance
      • Metasploit Modbus
      • modbus-cli
    • Mobile Pentesting
      • Enviroment SetUp
      • Android Pentest
      • iOS Pentest
  • 5. Privesc and Post-explotation
    • Linux Privilege Escalation
      • Manual Testing Elevation of privileges
      • Enumeration Commands
      • Enumeration Scripts
      • Looting for passwords & Interesting Information
      • Writable Files
      • SUDO
      • SSH Key
      • Scheduled tasks
      • SUID
      • Capbilities
      • NFS Root Squashing (Network File Sharing)
      • Shared Library
      • Docker Breakeout
      • Hijack TMUX session
      • Wildcard
      • Kernel Exploits
    • Linux Post-Explotation
      • SSH Backdoor
      • Manual Backdoors
      • Pillaging/Data Harvesting
    • Windows Privilege Escalation
      • Enumeration Scripts
      • Manual Enumeration
      • Metasploit tools
      • Processes Enumeration and Tasks
      • Incorrect permissions in services
      • Unquoted Service Paths
      • Insecure GUI Apps
      • Autorun
      • AlwaysInstallElevated
      • $PATH Interception
      • Looting for passwords
      • Runas
      • Impersonation Privileges
      • From local administrator to NT SYSTEM
      • Common Vulnerabilities and Exposure (CVE)
      • Kernel Exploitation
      • Named Pipes
      • Vulnerable Drivers
      • Abusing Shadow Copies
    • Windows Post-Explotation
      • Credential Theft
      • RDP Hijacking
      • Session Spying
      • WDigest
      • User backdoor
      • Manual Backdoors
      • SharPersist
      • WMI Event Subscriptions Persistance
      • Hunting for COM Hijacks
      • Mail Harvesting
    • Data Exfiltration
  • 6. Evasion Techniques
    • Linux - Evasion Techniques
    • Windows - Evasion Techniques
      • Detection Mechanisms & Evasion Techniques
      • Microsoft Defender Antivirus
      • AMSI & UAC Bypasses
      • AppLocker and Powershell CLM
      • PowerShell Script Block Logging
      • MDE (Microsoft Defender for Endpoint)
      • Altered scripts & Automations
      • Command Reimplementation C#/C
      • EDR Killing
  • 7. Tunneling
    • Port Forwarding
      • SSH Port Forwarding
      • Chisel Port Forwarding
      • Metasploit SSH Port Forwarding
    • Pivoting
      • Linux Tools & Methedology
      • Windows Tools
      • SSH Pivoting
    • C2 (Command and Control)
      • Cobalt Strike
        • Set Up and Team Server
        • Listeners
        • Payloads
        • Attacks
        • Beacon Commands
        • Session Passing
        • Maleable Profiles
        • Artifact Kit
        • Resource Kit
        • Behavioural Detections
        • Aggressor Scripts
        • Beacon Object Files (BOFs)
        • NTLM Relaying Methodology w/ Cobalt
      • Metasploit
        • Schema Cheat Sheet
        • Staged vs Non-Staged Payloads
        • Metasploit Options
        • Start MSF DB (Kali)
        • Listeners
        • Meterpreter Commands
        • Pivoting
        • Meterpreter Pass a Shell
        • Msfvenom Payloads
        • Meterpreter Pillaging/Data Harvesting
      • Havoc
        • Set Up and Team Server
        • Listeners
        • Payloads
        • Deamon Commands
      • Empire
      • Custom C2s
        • HTTP mini C2
  • 8. Profesional Reports
    • LaTeX
      • Tools
      • Variable Config
      • Template definition & PDF Preview
      • Commands
      • Pentest Report Template
    • Documentation Tools
      • Note-Taking
      • Advanced Text Editors
      • Appendix
      • Quality and Diversity of Sources
      • Document Sanitization
    • Report Anatomy
      • OSINT Report Anatomy
Powered by GitBook
On this page
  • Names
  • Resumes
  • Addresses
  • Gift Registries
  • Non-U.S. Targets
  1. 2. Reconnaissance and Information Gathering
  2. OSINT (Open-Source Intelligence)

People Search Engines

Names

- True People Search (truepeoplesearch.com)

Most comprehensive and consistent free report based on real name.

First stop when trying to locate an individual in the U.S.

- Fast People Search (fastpeoplesearch.com)

If your target removed his or her profile from the previous option, it might still be present here.

https://www.fastpeoplesearch.com/name/michael-bazzell

- Nuwber (nuwber.com)

The results are presented by location.

https://nuwber.com/search?name=michael%20bazzell

- XLEK (xlek.com)

https://xlek.com/search_results.php?fname=michael&ename=bazzell&locations:all

- Family Tree Now (familytreenow.com)

Targeted toward those who want to conduct family history research, and its specialty is connecting a person to his or her relatives.

https://www.familytreenow.com/search/genealogy/resultsPfirst=Michael&last=Bazzell

- Cyber Background Check (cyberbackgroundchecks.com)

https://www.cyberbackgroundchecks.com/people/michael-bazzell

- Intelius (intelius.com)

The information will never be displayed for free. The free preview identifies an exact age, possible aliases, cities lived in, previous employers, universities attended, and relatives.

https://www.intelius.com/people-search/Michael-Bazzell

- Radaris (radaris.com)

Only use the service for the limited free content available in the preview.

https://radaris.com/p/Michael/Bazzell/

- Spytox (spytox.com)

The free option only provides city, state, and phone.

https://www.spytox.com/michael-bazzell

- Search People Free (searchpeoplefree.com

I occasionally locate an individual present here and nowhere else.

httpss/ /wwww.searchpeoplefree.com/find/michael-bazzell

- That's Them (thatsthem.com)

https://thatsthem.com/name/Michael-Bazzell

- Spokeo (spokeo.com)

The most well-known of all the people search engines.

https://www.spokeo.com/Michael-BazzellPloaded=1

- Advanced Background Checks (advancedbackgroundehecks.com)

The majority of their data archive is free without any payment.

Extremely useful for U.S. targets.

https://www.advancedbackgroundchecks.com/names/michael-bazzell

- Yasni (yasni.com)

Yasni is a German site and searching outside of the United States is one of the strengths of the service.

http://www.yasni.com/michael+-bazzell/check+-people?sh

- Zaba Search (zabasearch.com)

https://www.zabasearch.com/people/michael+bazzell/

- People Search Now (peoplesearchnow.com)

https://www.peoplesearchnow.com/person/michael-bazzell

- WebMii (webmii.com)

http:///webmii.com/people?n=%22Michael%20Bazzel1%22

- Social Searcher (social-searcher.com)

This tool explained in usernames section can be usefull to search people too.

https://www.social-searcher.com/search-users/?q6=Michael+-Bazzell

- Truth Finder (truthfinder.com)

https://www.truthfinder.com/results/?firstName=Michael&lastName=Bazzell&state=ALL

- People By Name (peoplebyname.com)

http://www.peoplebyname.com/people/Bazzell/Michael

- White Pages (whitepages.com)

https://www.whitepages.com/name/Michael-Bazzell

- Clustr Maps (clustrmaps.com)

https://clustrmaps.com/persons/Michael-Bazzell

- Find People Search (findpeoplesearch.com)

- Public Records (publicrecords.directory)

- Rocket Reach (rocketreach.co)

site:rocketreach.co "michael bazzell"

- Official USA (officialusa.com)

https://www.officialusa.com/names/michael-bazzell/

- Addresses (addresses.com)

https://www.addresses.com/people/michael-bazzell

- ID Crawl (iderawl.com)

https://www.idcrawl.com/michael-bazzell

- Classmates (classmates.com)

A free account is needed. If you know the school that was attended, the results will be much more accurate.

- Rebate Tracking

Visit to https://rebateinternational.com / RebateInternational/tracking.do. Enter a first initial, last name, numeric portion of an address, and postal code of your target.

We now see the purchased items, purchase dates, rebate amounts, and payment details.

could initiate an email phishing attack focused on a specific purchased item announcing a problem with the rebate.

Google searches to assist with finding companies which offer similar options:

https://www.google.com/search?q=intitle:'rebate+center"

https://www.google.com/search?q="track+my+rebate"

https://www.google.com/search?q="trac+your+rebate"

- Utility Inquiries

If you know your target's telephone number and postal code, you may be able to uncover an entire home address through the troubleshooting section in the different phone companies websites

- IntelTechniques Names Tool

Make easily queries through the services explained.

Code in Name.html.

- Ripoff Report (ripoffreport.com)

If your target conducts any type of business with the public, he or she will likely upset someone at some point.

Ripoff Report is a user-submitted collection of complaints about businesses and individuals.

- Find a Grave (findagrave.com)

For locating proof of deceased individuals. Locate the graves of recently deceased people. You may get better results at People Legacy peoplelegacy.com).

Resumes

The following exact searches are valuable on Google, Bing, and Yandex:

"Michael Bazzell' "Resume"

"Michael Bazzell" "Curriculum Vitae"

"Michael Bazzell" "CV"

"Michael Bazzell' "Resume" filetype:doc

"Michael Bazzell" "Curriculum Vitae" filetype:doc

"Michael Bazzell' "CV" filetype:doc

"Michael Bazzell" "Resume" filetype:pdf

"Michael Bazzell" "Curriculum Vitae" filetype:pdf

"Michael Bazzell" "CV" filetype:pdf

"Michael Bazzell" "Resume" site:docs.google.com

"Michael Bazzell" "Curriculum Vitae" site:docs.google.com

"Michael Bazzell" "CV" site:docs.google.com

While these queries will likely locate any resumes with text, they will fail on many resume images.

Since Google scans images for Optical Character Recognition (OCR), it knows what words are within an image. We can attempt to search them through Google Images (images.google.com). A search of "Maty Johnson" "Resume" on Google Images revealed hundreds of images of resumes.

- CV Maker (cvmkr.com)

site:cvmkr.com "john pratt"

You can also perform searches for telephone numbers and email addresses using the site operator.

- Indeed (resumes.indeed.com)

Entering your target name on Indeed under the "Find Candidates" option may present new results.

Addresses

The target of your investigation may be an address of your suspect. You may want to know who else lives at a residence.

The following websites allow reverse search of a residential address:

https://www.fastpeoplesearch.com/

https://www.whitepages.com/reverse-address

https://www.peoplefinder.com/

https://www.peoplesearchnow.com/

https://www.truepeoplesearch.com/

https://radaris.com

https://www.intelius.com/

https://www.advancedbackgroundchecks.com/address.aspx

https://www.spokeo.com/reverse-address-search

https://thatsthem.com/reverse-address-lookup

https://homemetry.com

https://cyberbackgroundchecks.com

- Unclaimed Property

Every state in the U.S. possesses an unclaimed property website. Common forms of unclaimed property include savings or checking accounts, stocks, uncashed dividends, online payments, refunds, and leftover utility balances.

Collection of these sites at Unclaimed (unclaimed.org).

Gift Registries

The following are the most common wedding, baby, and gift registries, with direct links to the most appropriate search pages. Here we can locate information about partner name, maiden name, date / state, ceremony details, items, children and gifts.

  • The Knot: https://www.theknot.com/registry/couplesearch

  • The Bump: https://registry.thebump.com/babyregistrysearch

  • Amazon Baby: https://www.amazon.com/baby-reg/homepage/

  • Amazon Wedding: https:// www.amazon.com/wedding/

  • Walmart Wedding: https://www.walmart.com/lists/find-wedding-registry

  • Walmart Baby: https://www.walmart.com/registry/baby/search

  • Target Wedding: https://www.target.com/gift-registry/

  • Target Baby: https://www.target.com/gift-registry/baby-registry

  • Kohl's Wedding: https://www.myregistry.com/kohls-wedding-registry.aspx

Non-U.S. Targets

  • Australia: www.peoplesearch.com.au

  • Canada: www.canadapages.com

  • Canada: www.infobel.com/en/Canada

  • France: www.infobel.com/en/France

  • Germany: www.infobel.com/en/Germany

  • Spain: www.infobel.com/en/Spain

  • UK: www.192.com

  • UK: www.peopletraceuk.com

  • UK: www.gov.uk/government

PreviousSearch EnginesNextWebsites & Domains

Last updated 1 year ago