Take care, however, to not waste time on this; using image information tools on every photo on an organization's website, or researching every linked social media account may not provide further valuable information - step back and judge the value of digging deeper - are you finding adversaries? Are you finding information that the organization may not want online? Are there other methods which might be more appropriate to apply? Search Engines Google dorking tricks: limit to the target webiste using site: and look for potentially accidentally uploaded file types (e.g. xlsx, you can reference this full list of searchable filetypes) inurl: search for link: to discover partners and projects (add "project of" and similar), removing known, un-interesting and irrelevant sites with -site: Browse Exploit-db for interesting and advanced combinations to consider, e.g. inurl:/wp-en/wpbackitup_backups Social Media / Account Discovery Use tools such as KnowEm, namechk, or namechecklist to find similar or organizationally-linked usernames across other social media accounts. Additional Tools GlassDoor can provide insight (mostly for larger organizations) on whether there might be disgruntled former (or current) employees. Pastebin Searching Search pastebin for keywords about the organization (usually their website address) -- this custom google search by IntelTechniques searches across over 100 pastebinlike sites, including github, at once. Working with Images Page 38 of 240