imperva.com, as data

Open-Source Intelligence (OSINT)* Easy to use search engine interface.* Provides information on devices operating on protocols like HTTP, SSH, FTP, SNMP, Telnet, RTSP, and IMAP.* Results can be filtered and ordered by protocol, network ports, region, and operating system.* Access to a huge range of connected devices, including home appliances and public utilities such as traffic lights and water control systems.### HaveIbeenPwnedHaveIbeenPwned is a service that can be used directly by consumers who were impacted by data breaches. It was developed by security researcher Troy Hunt.* Identifying if an individual email address was compromised in any historical breach.* Checking accounts on popular services like LastFM, Kickstarter, WordPress.com, and LinkedIn for exposure to past data breaches.### Google DorkingGoogle dorking is not exactly a tool – it is a technique commonly used by security professionals and hackers to identify exposed private data or security vulnerabilities via the Google search engine.Google has the world’s largest database of Internet content, and it provides a range of advanced search operators. Using these search operators it is possible to identify content that can be useful to attackers.Here are operators commonly used to perform Google Dorking:* **Filetype** – enables finding exposed files with a file type that can be exploited* **Ext** – similarly, finds exposed files with specific extensions that can be useful in attack (for example .log)* **Intitle/inurl** – looks for sensitive information in a document title or URL. For example, any URL containing the term “admin” could be useful to an attacker.* **Quotes** – the quote operator enables searching for a specific string. Attackers can search for a variety of strings that indicate common server issues or other vulnerabilities.## Open Source Investigation Best PracticesHere are best practices that can help you use OSINT more effectively for cyber defense.