Emails

Overview

Finding emails that belong to company employees are important for getting a foothold into O365, OWA and other login portals. The more emails the better.

Hunting Emails

Finding emails from companies can be done using Hunter.io. The great thing about it is that it can identify email patterns such as {first_initial}{last_name}@company.com. If we then have the name Bob Jones we could try the email [email protected]

Phonebook.ez is also useful in pulling large amounts of emails down from a organizational domain.

You can take the dumped emails and use them to password spray simple passwords

You can use Clearbit to find much more than the other tools just by visiting the organizations website and opening the extension. Nah this thing crazy for real.

Using the Forgot password feature is also a valid way of verifying emails. Works for Gmail

Verifying Emails

Last updated

Was this helpful?