Collecting Contacts from LinkedIn Using linkedin_crawl

NetSPI describes scraping employee contacts from zoominfo.com for OSINT use, and releases a script that converts gathered names into emails and usernames for phishing and password spraying engagements.

Examines security issues in federated Skype for Business, showing how external domains can validate email addresses, read availability and out-of-office status, and deliver phishing messages.

A practical guide to theHarvester: the classic open-source OSINT tool for gathering emails, subdomains and hostnames, its passive and active data sources, and real-world uses.

Introduces Google dorking for OSINT and pentesting: the most valuable search operators for exposing files and pages, practical examples, automation approaches, and alternative search tools.

A social engineering engagement posed as a journalist seeking comment on an anonymous tip about hazardous waste dumping, showing how OSINT-grounded pretexts lower well-trained executives' guard.

Testers hid phishing codes in fortune cookies promising a $50 gift card, luring staff to a promo site that proxied the corporate login via Evilginx — physical media sidesteps email training.