Get subdomains and email addresses from SSL certificate info:
www.censys.ioarrow-up-right
Certificates -> website name without subdomain
https://transparencyreport.google.com/https/certificatesarrow-up-right
A lot of information about employees and their systems can be found in metadata of files the company has published. Useful tools for finding files on the company's website and extracting the metadata are metagoofil and FOCA.
Last updated 4 years ago
