Indexing data
Humans are notorious litter bugs. There is a collossal amount of “interesting stuff” that is just left lying around servers scattered all across the internet and the world.
- Are your SSH keys sat on some server somewhere in the Ukraine, China, Or elsewhere
- Are you backing up for the world to mirror?
- Are your server logs with sensitive information sat freely available to the world on a server somewhere
- Is your favourite TV show on a server free to download
- Are your company accounts sat there for the world to see….
- Do you have documents published available for your competitors to view?
- Passwordless OpenVPN profiles that allow direct access to your network (Check the examples)
- Plus many more
Useful for alot of reasons
- Remove data you are unknowingly publishing but shouldn’t be
- OSINT Investigations
- Triage Poor OPSEC
How are you using the data? Have you found something, contact me I am intresting to hear your usecase. Please see my Twitter where I tweet about the things I find, There are a heck of OVPN profiles out there for which I don’t publish under responsible disclosure rules.
