Pick a company you would like to perform some open-source intelligence analysis on. Using the tools listed below, answer the questions at the bottom of this page:

Tool: Tools

• Pastebin
  • https://pastebin.com/links to an external site.
• Google Dorking (Google will throttle your traffic, so tread lightly on this)
  • https://www.imperva.com/learn/application-security/google-dorking-hacking/Links to an external site.
  • https://www.stationx.net/google-dorks-cheat-sheet/Links to an external site.
• X (formerly Twitter)
• LinkedIn
• Shodan
  • https://www.shodan.io/Links to an external site.
• Other options
  • https://www.helpnetsecurity.com/2023/08/22/open-source-osint-tools/Links to an external site.
  • https://www.csoonline.com/article/567859/what-is-osint-top-open-source-intelligence-tools.htmlLinks to an external site.

Questions:

• How many offices does this company have?
• How many employees can you find for that company on LinkedIn (provide a screenshot)?
• Paste the results of three different Google Dorking queries.
• Search for the organization on Shodan, look for the following items, and provide screenshots of the results:
  • Any unsupported servers, such as Windows 2003, Windows 2008, or Windows 2012?
  • Any open ports for this, such as 3389 (RDP), Telnet (21), SSH (22), or other things of that nature?
  • Any login pages?
• Provide screenshots for any other findings as well.
• Lastly, answer the following question:
  • With this information now gathered, what could you do with this as an offensive hacker and a defensive cybersecurity analyst?