>> Every day we hear about leaks and breaches,
so it no longer a question of if this going to happen,
now it's question of,
when is it going to happen?
Companies may be victims of
successful intrusion or
successful credential stuffing attack.
For example, attack of validation of
certain dump of emails and
passwords against a certain websites.
This attack is based on passwords reuse.
For instance, you can easily verify if an email is
compromised in one or more breaches using tools like,
Have I Been Pwned,
Ghost Project, DeHashed,
but also some of the threat actors may publish
their dumps in Pastebin website or other websites.
Monitoring your accounts through
these platforms can help you stay
alerted so that you can update
your passwords before being abused.
Another example of OSINT that I believe
is worth mentioning is called Google dorks.
Google offers hacks,
or most appropriately are called dorks,
that are very useful to
>> look for specific types of data.
>> We will draw basically our queries that use
advanced search operators to find
information that's not readily available on a website.
As a use case explaining the Google dorks,
I took the example of search term,
site:example.com, file type PDF.
Here we are going to look for PDF files
containing a search term
available on the website called example.com.
You can find a full list of
Google dorks in the link mentioned on this slide.
To explain in more details, the Google dorks,
we are going to search for a term
"password" within a certain website.
We took the example of Trello website,
which is a project management platform
where users can create
boards to organize their projects
and assign tasks to their team members.
To look for password on Trello,
we are using the search passwords, site:Trello.com.
For instance, Trello offers boards that people usually
make open so that they don't have to grant
access each time there is a
>> new member to join the board.
>> This is not a problem as long
as there is nothing sensitive shared there.
However, it turns out that a lot of
people forget that these boards are
open and publicly available
and sometimes they even share passwords,
tokens, email addresses, and other sensitive data.
Following the example, we looked for the term
"password" on the site, trello.com,
and we really found people who are sharing
passwords or credentials on public Trello boards.
Of course, these passwords are hidden
on the slide because this course is made for
educational purpose and we
want to raise awareness about the danger of
publicly sharing sensitive data
just with the assumption that no one is looking there.
This example can summarize
>> how OSINT can be leveraged by
>> threat actors and at
the same time security professionals.
This is how threat actors can
find sensitive information or
confidential information publicly available
through using Greek and simple techniques
like Google dorks,
Shodan, Senses, etc.
This is how companies can also
leverage OSINT in order to find and
identify their weaknesses and
be aware of their attack surface.
Before summarizing this lesson,
I have some recommendations to share with you.
First, just in case you remember
sharing any credentials on a
>> publicly available service,
>> probably Trello, Jira,
even GitHub or something similar,
I highly recommend resetting
your credentials immediately.
The same thing, I highly recommend
visiting websites like Have I Been Pwned or DeHashed,
just to verify if
your credentials were part of a previous breach.
Also, if you are using
>> websites or services like Trello,
>> IMEI's [inaudible], etc.
I highly recommend setting the privacy of
your documents or your boards to
private or only available for certain people to
avoid any sensitive data being leaked on the Internet.
Just don't assume that there is no one looking there.
There are threat actors
look in there with malicious intent.
Also, I highly recommend changing
the default configuration of your routers or
any other device just to avoid them
being used by threat actors in massive campaigns.
There is also a new trending threat which is abuse and
open as exertions databases like MongoDB, etc.
My recommendation here is to
protect your publicly exposed assets.
Don't leave them open with no passwords.
Now let's summarize everything
that we've learned in this lesson.
We started with a quick definition of OSINT,
then we've seen the different advantages
and disadvantages of OSINT.
We've seen the purpose of using OSINT in
cyber threat intelligence and how OSINT
is being leveraged by threat actors.
Also we discovered some OSINT tools
and techniques and we've seen some examples.
Of course, the list of examples
that we've seen is not exhaustive.
There are a plethora of OSINT tools,
but we mentioned only a few of them as a start point.
We close this lesson with
>> a quick use case and I gave you
>> some recommendations why you should use
OSINT and things that you should be aware of.
This is all for this lesson.
I hope you enjoyed this video.
It was the last lesson from the first module.
As a reminder, this module was fully
dedicated to data collection,
which is the second step of the intelligence cycle.
Now it's about time to explore
the third phase about data processing.
I will see you in the next video
about introducing data processing.