Use tools like tineye and Google Reverse Image search to find images (especially user icons from twitter, etc.) on other sites, and test interesting ones for additional image in the EXIF data using online tools like Exif Viewer or commandline tools like exiftool. Recommendation AUTOMATED RECONNAISANCE Summary This component allows the auditor to quickly identify publicly available resources (such as websites, extranets, email servers, but also social media information) connected to the organization and remotely gather information about those resources. Overview Passive Reconnaissance Identify availability of staff, partner, beneficiary, and current project information online. 37 Search "paste-bin" sites for leaked internal information or existing exploitation of their infrastructure. Create API keys for Recon-ng services to be used. 38 Use recon-ng to do automated web-based open source reconnaissance.39 Materials Needed Considerations Use VPNs to do automated searching. The automated process can be misconstrued by various services as malicious and cause your local network to get blocked, filtered, or surveilled. Tor is often blocked by the tools you will be using. Walkthrough Page 39 of 240