People Hunting: A Pentester's Perspective
Mishaal Khan shares red team methodologies for gathering target intelligence on executives and employees to craft high-impact social engineering pretexts.
Summary
Mishaal Khan provides a penetration tester's perspective on target profiling, open-source intelligence (OSINT), and human tracking in "People Hunting: A Pentester's Perspective" at the Recon Village.
[06:52] Khan explains why physical penetration tests, executive protection assessments, and social engineering engagements require precise personal reconnaissance. He shares methodologies for locating physical residences, verifying vehicle ownership through street-view imagery and neighborhood observation, and gathering contextual intelligence about a target's daily routines and transit habits.
[13:56] The talk explores digital tracking techniques, showing how to capture, de-anonymize, and correlate public data points. Khan demonstrates using specialized OSINT tools [20:54] to recover partially redacted email addresses, reverse-lookup hidden phone numbers, and cross-reference usernames across platforms like Instagram, LinkedIn, and Strava. He emphasizes the importance of behavioral pattern analysis—determining when a target is at work, commuting, or on vacation—while discussing the operational security (OPSEC) measures security professionals must adopt to protect their own personal information from similar profiling techniques.
(AI summary — Gemini Flash)
Related talks
Adversary Village·30 min
Sanne Maasakkers
Sanne Maasakkers analyzes real-world nation-state phishing strategies, comparing APT psychological pretexts with traditional red team social engineering.
Adversary Village·30 min
Daniel Isler
Daniel Isler recounts an authorized multi-vector physical intrusion and social engineering red team engagement conducted during the COVID-19 pandemic.
Demo Labs·29 min
A demonstration of redlure, an on-premises collaborative phishing framework for managing and executing red team campaigns.