Being able to discover subdomains is an essential part of researching an organisation. Behind a company’s main domain there are many other subdomains that can provide useful information about an organisation’s structure, technology, and business practices. Subdomain discovery is a foundational skill for security researchers, but it is a very useful tool to add to […]
OSINT Research And Subdomain Discovery Read More »
After the El Paso shooting this past weekend, it quickly emerged that the shooter had apparently posted his manifesto on 8Chan prior to carrying out the killings. As a result Cloudflare announced that they would no longer permit 8Chan to use their services. Without Cloudflare’s protection, 8Chan is highly vulnerable to DDOS attacks and so
Website Investigation – Where Did 8Chan Move To? Read More »
In my last post on Reverse IP Lookups I wrote about the challenges OSINT investigators face when it comes to attributing a website to someone. Reverse IP lookups show which other domains are hosted at the same IP address, which is often (but not always) an indicator of what other websites your subject controls. This
Website Attribution Without WhoIs – Reverse IP Lookups (Part 2) Read More »
How do you identify the people or group who run a website? Knowing who really owns or controls a domain is an important part of many online investigations, but it can be very hard to do in cases where people do not want to be identified. The quickest and easiest way to find out who
Website Attribution Without WhoIs – Reverse IP Lookup Read More »
