OSINT Techniques for Pwning Fintech
summary
Analysis shows attackers use OSINT to enumerate FinTech assets and exploit weak registrant controls: inventorying Indian firms with Google Custom Search Engine, GitHub, certificate transparency logs, Nmap and BigQuery queries against a massive password dump reveals 40% of domains expose WHOIS, about 6% of discovered admin emails appear in leaked credentials, and 59% enable registrar transfer locks (so many do not). The work produces automated queries, aggregate counts, a checklist of mitigations, and a near-miss where a primary domain briefly lists for $249.
AI-written summary · about
chapters (21)
- 0:00Intro
- 1:54Attackers go after
- 3:17Open Source INTelligence (OSINT) 101
- 8:20If you would like to learn more
- 10:18What we will cover today
- 11:24What we will not cover today in the talk
- 12:21Once upon a time...
- 12:43Twist in the tale
- 13:21Moral of this story is?
- 14:24The great sports twist
- 19:40Domain Admin Email Password Exposed
- 20:39Domain lockdown configuration in place
- 21:53Manage and understand risk
- 22:09Understand risks with examples
- 23:05Does my registrar support 2FA?
- 24:28Does my registrar support whois privacy?
- 26:22Protecting the domain admin email
- 27:21Eating our own dogfood appsecco.in Whois snippet
- 28:36Domain Hijacking
- 33:08Password Reuse
- 35:00Security Questions?
related talks
38mExploits in Wetware
29mOSINT: A Practical Guide to Safe and Effective Threat Investigation.
17mOSINT to Compromise
34mOSINT for Proactive Defense
32mSomething’s Phishy: See the Hook Before the Bait
39mHow to think like a hacker
55mSocial Engineering Overview-How To Prevent Your Co. from Getting Hacked
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively