{"id":5309,"date":"2026-06-08T11:30:01","date_gmt":"2026-06-08T03:30:01","guid":{"rendered":"https:\/\/blog.smallken.site\/?p=5309"},"modified":"2026-06-08T11:30:01","modified_gmt":"2026-06-08T03:30:01","slug":"%e9%96%8b%e6%ba%90%e6%83%85%e5%a0%b1%e5%af%a6%e6%88%b0%e6%8c%87%e5%8d%97%ef%bc%9a%e5%be%9e%e9%9b%b6%e9%96%8b%e5%a7%8b%e6%8e%8c%e6%8f%a1-osint-%e6%a0%b8%e5%bf%83%e6%8a%80%e8%83%bd","status":"publish","type":"post","link":"https:\/\/blog.smallken.site\/?p=5309","title":{"rendered":"\u958b\u6e90\u60c5\u5831\u5be6\u6230\u6307\u5357\uff1a\u5f9e\u96f6\u958b\u59cb\u638c\u63e1 OSINT \u6838\u5fc3\u6280\u80fd"},"content":{"rendered":"<div style=\"font-family: 'Helvetica Neue', Helvetica, Arial, 'Microsoft JhengHei', sans-serif; line-height: 1.8; color: #2d3748; max-width: 850px; margin: 0 auto; font-size: 16px;\">\n<h1 id=\"osint\">\u958b\u6e90\u60c5\u5831\u5be6\u6230\u6307\u5357\uff1a\u5f9e\u96f6\u958b\u59cb\u638c\u63e1 OSINT \u6838\u5fc3\u6280\u80fd<\/h1>\n<div style=\"background-color: #fff5f5; border-left: 5px solid #e53e3e; color: #c53030; padding: 15px 20px; margin: 20px 0; border-radius: 6px; font-family: sans-serif;\"><strong>\u26a0\ufe0f \u91cd\u8981\u514d\u8cac\u8072\u660e\u8207\u6cd5\u5f8b\u898f\u7bc4\uff1a<\/strong><br \/>\n> **\u514d\u8cac\u8072\u660e\u8207\u6cd5\u5f8b\u898f\u7bc4**<br \/>\n> \u672c\u6307\u5357\u6240\u4ecb\u7d39\u4e4b\u958b\u6e90\u60c5\u5831\uff08OSINT\uff09\u5de5\u5177\u8207\u6280\u8853\uff0c\u50c5\u4f9b\u8cc7\u8a0a\u5b89\u5168\u7814\u7a76\u3001\u6f0f\u6d1e\u901a\u5831\u3001\u6578\u4f4d\u9451\u8b58\u3001\u5408\u898f\u8abf\u67e5\u53ca\u500b\u4eba\u96b1\u79c1\u9632\u8b77\u7b49\u5408\u6cd5\u76ee\u7684\u4f7f\u7528\u3002\u8b80\u8005\u5728\u9032\u884c\u4efb\u4f55\u60c5\u5831\u6536\u96c6\u6216\u4e3b\u52d5\u63a2\u6e2c\u6642\uff0c\u61c9\u56b4\u683c\u9075\u5b88\u7576\u5730\u6cd5\u5f8b\u6cd5\u898f\uff0c\u5207\u52ff\u5c07\u6b64\u6280\u8853\u7528\u65bc\u9a37\u64fe\u3001\u6050\u5687\u3001\u672a\u7d93\u6388\u6b0a\u7684\u6ef2\u900f\u6e2c\u8a66\u6216\u4efb\u4f55\u5f62\u5f0f\u7684\u60e1\u610f\u4fb5\u5bb3\u884c\u70ba\u3002<\/div>\n<hr \/>\n<h2 id=\"osint_1\">\u524d\u8a00\uff1a\u4ec0\u9ebc\u662f OSINT\uff1f<\/h2>\n<p><strong>OSINT\uff08Open Source Intelligence\uff0c\u958b\u6e90\u60c5\u5831\uff09<\/strong> \u662f\u6307\u5f9e\u300c\u516c\u958b\u7ba1\u9053\u300d\u6536\u96c6\u3001\u5206\u6790\u4e26\u7522\u51fa\u5177\u5099\u6c7a\u7b56\u50f9\u503c\u4e4b\u60c5\u5831\u7684\u5b78\u79d1\u3002\u9019\u88e1\u7684\u300c\u958b\u6e90\u300d\u4e26\u975e\u6307\u958b\u6e90\u8edf\u9ad4\uff08Open Source Software\uff09\uff0c\u800c\u662f\u6307\u4efb\u4f55\u793e\u6703\u5927\u773e\u53ef\u4ee5\u5408\u6cd5\u3001\u516c\u958b\u53d6\u5f97\u7684\u8cc7\u8a0a\u4f86\u6e90\uff0c\u5305\u62ec\u641c\u5c0b\u5f15\u64ce\u3001\u793e\u7fa4\u5a92\u9ad4\u3001\u653f\u5e9c\u767b\u8a18\u8cc7\u6599\u3001\u65b0\u805e\u5a92\u9ad4\u53ca\u516c\u5171\u8ad6\u58c7\u7b49\u3002<\/p>\n<p>\u5728\u73fe\u4ee3\u8cc7\u8a0a\u5b89\u5168\u4e2d\uff0cOSINT \u626e\u6f14\u8457\u8209\u8db3\u8f15\u91cd\u7684\u89d2\u8272\uff1a<br \/>\n&#8211; <strong>\u7d05\u968a\u6f14\u7df4\/\u6ef2\u900f\u6e2c\u8a66<\/strong>\uff1a\u5728\u4e0d\u89f8\u767c\u8b66\u5831\u7684\u60c5\u6cc1\u4e0b\uff0c\u88ab\u52d5\u5075\u5bdf\u76ee\u6a19\u4f01\u696d\u7684\u8cc7\u7522\u6f0f\u6d1e\u8207\u4eba\u54e1\u8db3\u8de1\u3002<br \/>\n&#8211; <strong>\u85cd\u968a\u9632\u5b88\/\u5a01\u8105\u60c5\u8cc7<\/strong>\uff1a\u8a55\u4f30\u81ea\u8eab\u7d44\u7e54\u5728\u7db2\u8def\u7a7a\u9593\u4e2d\u7684\u66b4\u9732\u9762\uff0c\u4e26\u9810\u9632\u6f5b\u5728\u7684\u793e\u4ea4\u5de5\u7a0b\u653b\u64ca\u3002<br \/>\n&#8211; <strong>\u64cd\u4f5c\u5b89\u5168\uff08OPSEC, Operations Security\uff09<\/strong>\uff1a\u8abf\u67e5\u54e1\u5728\u57f7\u884c\u8abf\u67e5\u6642\uff0c\u5fc5\u9808\u4fdd\u8b77\u597d\u81ea\u5df1\u7684\u865b\u64ec\u8eab\u4efd\uff0c\u907f\u514d\u5728\u5075\u5bdf\u904e\u7a0b\u4e2d\u6253\u8349\u9a5a\u86c7\u6216\u88ab\u76ee\u6a19\u53cd\u5411\u8ffd\u8e64\uff08\u4f8b\u5982\uff1a\u4f7f\u7528\u5c08\u7528\u7684\u8abf\u67e5\u74b0\u5883\u3001\u4e7e\u6de8\u7684\u700f\u89bd\u5668\u3001VPN \u6216 Tor\uff0c\u4ee5\u53ca\u4e0d\u4ee5\u500b\u4eba\u771f\u5be6\u5e33\u865f\u9020\u8a2a\u76ee\u6a19\u6a94\u6848\uff09\u3002<\/p>\n<hr \/>\n<h2 id=\"1-search-engine-dorking\">1. \u641c\u5c0b\u5f15\u64ce\u99ed\u5ba2\u6280\u5de7 (Search Engine Dorking)<\/h2>\n<p>Search Engine Dorking\uff08\u901a\u5e38\u7a31\u70ba Google Dorking \u6216 Google Hacking\uff09\u662f\u4e00\u5207 OSINT \u7684\u57fa\u672c\u529f\u3002\u9019\u9580\u6280\u8853\u7684\u672c\u8cea\u5728\u65bc<strong>\u300c\u7cbe\u6e96\u4e14\u7d50\u69cb\u5316\u5730\u5c0d\u641c\u5c0b\u5f15\u64ce\u63d0\u554f\u300d<\/strong>\uff0c\u6392\u9664\u4e0d\u76f8\u95dc\u7684\u5e72\u64fe\u8cc7\u8a0a\uff0c\u76f4\u63a5\u6488\u53d6\u53ef\u80fd\u88ab\u5ffd\u7565\u7684\u654f\u611f\u6a94\u6848\u8207\u66b4\u9732\u8def\u5f91\u3002<\/p>\n<h3 id=\"11-google-dorks\">1.1 Google Dorks \u9032\u968e\u641c\u5c0b\u904b\u7b97\u5b50<\/h3>\n<p>\u641c\u5c0b\u5f15\u64ce\u9810\u8a2d\u6703\u63d0\u4f9b\u5c0d\u4f7f\u7528\u8005\u6700\u53cb\u597d\u7684\u7d50\u679c\uff0c\u4f46\u5c0d\u8abf\u67e5\u54e1\u800c\u8a00\uff0c\u6211\u5011\u9700\u8981\u66f4\u5e95\u5c64\u7684\u641c\u5c0b\u63a7\u5236\u3002\u4ee5\u4e0b\u662f\u6838\u5fc3\u7684\u9032\u968e\u904b\u7b97\u5b50\uff1a<\/p>\n<table style=\"width: 100%; border-collapse: collapse; margin: 25px 0; font-size: 0.95em; border-radius: 8px; overflow: hidden; box-shadow: 0 4px 6px rgba(0,0,0,0.05);\">\n<thead>\n<tr>\n<th style=\"text-align: left;\">\u904b\u7b97\u5b50<\/th>\n<th style=\"text-align: left;\">\u529f\u80fd\u8aaa\u660e<\/th>\n<th style=\"text-align: left;\">\u5be6\u6230\u7bc4\u4f8b<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"text-align: left;\"><code>site:<\/code><\/td>\n<td style=\"text-align: left;\">\u9650\u5236\u641c\u5c0b\u7d50\u679c\u50c5\u4f86\u81ea\u7279\u5b9a\u57df\u540d\u6216\u7db2\u7ad9<\/td>\n<td style=\"text-align: left;\"><code>site:gov.tw<\/code> (\u50c5\u641c\u5c0b\u53f0\u7063\u653f\u5e9c\u7db2\u7ad9)<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><code>filetype:<\/code> \/ <code>ext:<\/code><\/td>\n<td style=\"text-align: left;\">\u6307\u5b9a\u641c\u5c0b\u7684\u6a94\u6848\u526f\u6a94\u540d\u683c\u5f0f<\/td>\n<td style=\"text-align: left;\"><code>filetype:pdf<\/code> (\u5c0b\u627e PDF \u6587\u4ef6)<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><code>intitle:<\/code><\/td>\n<td style=\"text-align: left;\">\u641c\u5c0b\u7db2\u9801\u6a19\u984c\uff08Title\uff09\u4e2d\u5305\u542b\u7684\u95dc\u9375\u5b57<\/td>\n<td style=\"text-align: left;\"><code>intitle:\"index of\"<\/code> (\u5c0b\u627e\u76ee\u9304\u7d22\u5f15\u9801\u9762)<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><code>intext:<\/code><\/td>\n<td style=\"text-align: left;\">\u641c\u5c0b\u7db2\u9801\u6b63\u6587\uff08Body\uff09\u4e2d\u5fc5\u9808\u5305\u542b\u7684\u6587\u5b57<\/td>\n<td style=\"text-align: left;\"><code>intext:\"confidential\"<\/code> (\u5c0b\u627e\u6b63\u6587\u542b\u6709\u6a5f\u5bc6\u7684\u7db2\u9801)<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><code>inurl:<\/code><\/td>\n<td style=\"text-align: left;\">\u641c\u5c0b\u7db2\u9801 URL \u8def\u5f91\u4e2d\u5305\u542b\u7684\u7279\u5b9a\u5b57\u8a5e<\/td>\n<td style=\"text-align: left;\"><code>inurl:\/wp-content\/uploads\/<\/code> (\u5c0b\u627e WordPress \u4e0a\u50b3\u76ee\u9304)<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><code>cache:<\/code><\/td>\n<td style=\"text-align: left;\">\u6aa2\u8996\u641c\u5c0b\u5f15\u64ce\u66ab\u5b58\u7684\u820a\u7db2\u9801\u5feb\u7167<\/td>\n<td style=\"text-align: left;\"><code>cache:example.com<\/code> (\u67e5\u770b\u8a72\u7ad9\u4e0a\u4e00\u6b21\u88ab\u722c\u87f2\u6293\u53d6\u7684\u72c0\u614b)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4 id=\"_1\">\u908f\u8f2f\u904b\u7b97\u5b50\u7684\u7d44\u5408\u61c9\u7528<\/h4>\n<ul>\n<li><strong>\u96d9\u5f15\u865f <code>\"\"<\/code><\/strong>\uff1a\u5f37\u5236\u9032\u884c\u300c\u7cbe\u78ba\u5339\u914d\u300d\uff08Exact Match\uff09\uff0c\u4e0d\u9032\u884c\u540c\u7fa9\u5b57\u62c6\u5206\u3002<\/li>\n<li><strong>\u6e1b\u865f <code>-<\/code><\/strong>\uff1a\u6392\u9664\u5305\u542b\u7279\u5b9a\u95dc\u9375\u5b57\u6216\u7db2\u7ad9\u7684\u7d50\u679c\u3002\u4f8b\u5982\uff1a<code>site:example.com -site:www.example.com<\/code> \u53ef\u7528\u4f86\u5c0b\u627e\u9664\u4e3b\u7db2\u57df\u4ee5\u5916\u7684\u6240\u6709\u5b50\u7db2\u57df\u3002<\/li>\n<li><strong><code>OR<\/code> \/ <code>|<\/code><\/strong>\uff1a\u7b26\u5408\u591a\u500b\u689d\u4ef6\u4e4b\u4e00\u3002\u6ce8\u610f <code>OR<\/code> \u5fc5\u9808\u70ba\u5927\u5beb\u3002<\/li>\n<\/ul>\n<div style=\"background-color: #f0fff4; border-left: 5px solid #38a169; color: #276749; padding: 15px 20px; margin: 20px 0; border-radius: 6px; font-family: sans-serif;\"><strong>\ud83c\udfaf \u5be6\u6230\u5c0f\u6280\u5de7\uff1a<\/strong><br \/>\n> **\u5be6\u6230\u7d44\u5408\u516c\u5f0f**<br \/>\n> 1. **\u5c0b\u627e\u4f01\u696d\u6d29\u6f0f\u7684\u6a5f\u5bc6\u6216\u8ca1\u52d9\u6587\u4ef6**\uff1a<br \/>\n>    `site:example.com filetype:xlsx OR filetype:pdf &#8220;\u5167\u90e8\u50b3\u95b1&#8221; OR &#8220;\u85aa\u8cc7&#8221; OR &#8220;confidential&#8221;`<br \/>\n> 2. **\u5c0b\u627e\u66b4\u9732\u5728\u7db2\u8def\u4e0a\u7684\u5099\u4efd\u6a94\u8207\u8cc7\u6599\u5eab\u8f49\u5132\u6a94**\uff1a<br \/>\n>    `site:example.com ext:sql OR ext:bak OR ext:old OR ext:zip`<br \/>\n> 3. **\u5c0b\u627e\u672a\u8a2d\u9632\u8b77\u7684 Apache\/Nginx \u76ee\u9304\u5217\u8868\uff08Directory Listing\uff09**\uff1a<br \/>\n>    `intitle:&#8221;index of&#8221; &#8220;parent directory&#8221; &#8220;passwords.txt&#8221; OR &#8220;config&#8221;`<\/div>\n<hr \/>\n<h3 id=\"12\">1.2 \u8de8\u5f15\u64ce\u641c\u7d22\u7b56\u7565<\/h3>\n<p>\u4e0d\u540c\u7684\u641c\u5c0b\u5f15\u64ce\u80cc\u5f8c\u64c1\u6709\u4e0d\u540c\u7684\u722c\u87f2\u7b56\u7565\u3001\u570b\u5bb6\u5408\u898f\u9650\u5236\u4ee5\u53ca\u6280\u8853\u5c08\u9577\u3002\u53ea\u4f9d\u8cf4 Google \u6703\u7522\u751f\u56b4\u91cd\u7684\u76f2\u5340\u3002<\/p>\n<h4 id=\"1-yandex\">1. Yandex (\u4fc4\u7f85\u65af\/\u6771\u6b50)<\/h4>\n<p>Yandex \u662f\u4fc4\u7f85\u65af\u6700\u53d7\u6b61\u8fce\u7684\u641c\u5c0b\u5f15\u64ce\uff0c\u5c0d\u65bc OSINT \u8abf\u67e5\u54e1\u4f86\u8aaa\uff0c\u5b83\u5728\u4ee5\u4e0b\u5169\u500b\u9818\u57df\u88ab\u516c\u8a8d\u70ba\u4e16\u754c\u6700\u5f37\uff1a<br \/>\n&#8211; <strong>\u4ee5\u5716\u641c\u5716 (Reverse Image Search)<\/strong>\uff1aYandex \u7684\u9762\u90e8\u8b58\u5225\u8207\u7279\u5fb5\u6bd4\u5c0d\u6f14\u7b97\u6cd5\u9060\u6bd4 Google \u654f\u92b3\uff0c\u975e\u5e38\u9069\u5408\u8ffd\u67e5\u67d0\u5f35\u982d\u50cf\u662f\u5426\u70ba\u7db2\u8def\u76dc\u5716\u3001\u6216\u8005\u627e\u51fa\u8a72\u4eba\u50cf\u5728\u5176\u4ed6\u6771\u6b50\u793e\u7fa4\uff08\u5982 VKontakte\uff09\u7684\u8db3\u8de1\u3002<br \/>\n&#8211; <strong>\u6771\u6b50\/\u4fc4\u8a9e\u5340\u8cc7\u8a0a<\/strong>\uff1a\u82e5\u8abf\u67e5\u76ee\u6a19\u8207\u6771\u6b50\u3001\u4e2d\u4e9e\u6709\u6d89\uff0cYandex \u722c\u68b3\u7684\u5728\u5730\u8ad6\u58c7\u8207\u6d29\u6f0f\u540d\u518a\u5b8c\u6574\u5ea6\u6975\u9ad8\u3002<\/p>\n<h4 id=\"2-baidu-\">2. Baidu (\u767e\u5ea6 &#8211; \u4e2d\u570b\u5927\u9678)<\/h4>\n<p>\u4e2d\u570b\u5927\u9678\u7684\u7db2\u8def\u751f\u614b\u8207\u897f\u65b9\u6709\u8457\u56b4\u91cd\u7684\u300c\u570d\u7246\u82b1\u5712\u300d\u6548\u61c9\uff08\u5982\u5fae\u4fe1\u3001\u5fae\u535a\u4e0d\u5141\u8a31\u5916\u90e8\u722c\u87f2\u5b8c\u6574\u7d22\u5f15\uff09\u3002\u767e\u5ea6\u96d6\u7136\u53d7\u9650\u65bc\u56b4\u683c\u7684\u5167\u5bb9\u5be9\u67e5\uff0c\u4f46\u5728\u641c\u5c0b\u4ee5\u4e0b\u5167\u5bb9\u6642\u70ba\u5fc5\u5099\u5de5\u5177\uff1a<br \/>\n&#8211; \u7c21\u9ad4\u4e2d\u6587\u793e\u7fa4\u8ad6\u58c7\uff08\u5982\u8cbc\u5427\u3001\u8cbc\u5427\u6b77\u53f2\u6a94\u6848\u3001\u77e5\u4e4e\u3001\u8c46\u74e3\uff09\u3002<br \/>\n&#8211; \u4e2d\u570b\u5927\u9678\u5883\u5167\u7684\u4e2d\u5c0f\u4f01\u696d\u5de5\u5546\u8cc7\u8a0a\u3001\u62db\u6295\u6a19\u6587\u4ef6\u3002<\/p>\n<h4 id=\"3-duckduckgo\">3. DuckDuckGo (\u907f\u958b\u6ce1\u6ce1\u8207\u6307\u4ee4\u8c50\u5bcc)<\/h4>\n<ul>\n<li><strong>\u9003\u96e2\u904e\u6ffe\u6ce1\u6ce1\uff08Filter Bubble\uff09<\/strong>\uff1aGoogle \u6703\u6839\u64da\u4f60\u7684\u641c\u5c0b\u6b77\u53f2\u3001\u5730\u7406\u4f4d\u7f6e\u8207\u500b\u4eba\u504f\u597d\u5be6\u65bd\u300c\u500b\u6027\u5316\u6392\u5e8f\u300d\uff0c\u9019\u6703\u5c0e\u81f4\u4e0d\u540c\u8abf\u67e5\u54e1\u770b\u5230\u4e0d\u540c\u7684\u7d50\u679c\u3002DuckDuckGo \u63d0\u4f9b\u7121\u504f\u898b\u7684\u4e7e\u6de8\u641c\u5c0b\u7d50\u679c\u3002<\/li>\n<li><strong>!bangs \u529f\u80fd<\/strong>\uff1a\u5728 DuckDuckGo \u8f38\u5165 <code>!g site:example.com<\/code> \u6703\u76f4\u63a5\u8df3\u8f49\u5230 Google \u641c\u5c0b\uff0c\u6216 <code>!w<\/code> \u641c\u5c0b\u7dad\u57fa\u767e\u79d1\uff0c\u6975\u5927\u5730\u63d0\u5347\u4e86\u8abf\u67e5\u6548\u7387\u3002<\/li>\n<\/ul>\n<hr \/>\n<h2 id=\"2-people-socmint\">2. \u4eba\u7269\u8207\u793e\u4ea4\u8db3\u8de1\u8ffd\u67e5 (People &amp; SOCMINT)<\/h2>\n<p>\u4eba\u7269\u8abf\u67e5\u662f\u958b\u6e90\u60c5\u5831\u4e2d\u9700\u6c42\u6700\u9f90\u5927\u7684\u9818\u57df\u3002<strong>SOCMINT\uff08Social Media Intelligence\uff0c\u793e\u7fa4\u5a92\u9ad4\u60c5\u5831\uff09<\/strong> \u7684\u6838\u5fc3\u6982\u5ff5\u662f\uff1a<strong>\u6bcf\u500b\u4eba\u5728\u7db2\u8def\u4e0a\u7559\u4e0b\u7684\u6578\u4f4d\u9eb5\u5305\u5c51\uff08Breadcrumbs\uff09\uff0c\u7d42\u5c07\u62fc\u6e4a\u51fa\u5176\u771f\u5be6\u7684\u5be6\u9ad4\u8eab\u4efd\u3002<\/strong><\/p>\n<div style=\"background-color: #f7fafc; border: 1px solid #edf2f7; padding: 20px; border-radius: 8px; margin: 25px 0;\">\n<h4 style=\"margin-top: 0; color: #2d3748;\">\ud83d\udc64 \u4eba\u7269\/\u793e\u7fa4\u60c5\u5831\u95dc\u806f\u8ffd\u8e64\u6d41\u7a0b<\/h4>\n<div style=\"display: flex; flex-direction: column; gap: 10px; font-size: 0.95em;\">\n<div>1\ufe0f\u20e3 <strong>\u8d77\u9ede\u5206\u6790<\/strong>\uff1a\u53d6\u5f97\u76ee\u6a19\u7684 <strong>\u4f7f\u7528\u8005\u540d\u7a31\/ID<\/strong> \u8207 <strong>\u4fe1\u7bb1\/\u96fb\u8a71<\/strong>\u3002<\/div>\n<div>2\ufe0f\u20e3 <strong>\u5e33\u865f\u63a2\u7d22<\/strong>\uff1a\u900f\u904e WhatsMyName \u6216 Sherlock\uff0c\u81ea\u52d5\u5316\u5728\u6578\u767e\u500b\u5e73\u53f0\u9032\u884c\u6a6b\u5411\u5e33\u865f\u5075\u6e2c\uff0c\u9396\u5b9a\u76ee\u6a19\u5728 LinkedIn\u3001Facebook\u3001Instagram \u7b49\u793e\u7fa4\u5e33\u865f\u3002<\/div>\n<div>3\ufe0f\u20e3 <strong>\u6d29\u6f0f\u6bd4\u5c0d<\/strong>\uff1a\u5c07\u4fe1\u7bb1\u8207\u96fb\u8a71\u8f38\u5165 HaveIBeenPwned \u8207\u6b77\u53f2\u5916\u6d29\u8cc7\u6599\u5eab\uff08Breach Compilations\uff09\uff0c\u53d6\u5f97\u5176\u66fe\u66b4\u9732\u7684\u500b\u4eba\u8cc7\u8a0a\u8207\u6b77\u53f2\u5bc6\u78bc\u3002<\/div>\n<div>4\ufe0f\u20e3 <strong>\u7d42\u9ede\u5f59\u6574<\/strong>\uff1a\u7d50\u5408\u793e\u7fa4\u5e73\u53f0\u4e4b\u5b78\u7d93\u6b77\u3001\u540c\u4e8b\u5708\u3001\u6d3b\u52d5\u4f5c\u606f\u8207\u5916\u6d29\u6191\u8b49\uff0c\u91cd\u5851\u76ee\u6a19\u771f\u5be6\u4e16\u754c\u7684\u8eab\u4efd\u7279\u5fb5\u8207\u884c\u70ba\u95dc\u4fc2\u7db2\u7d61\u3002<\/div>\n<\/p><\/div>\n<\/div>\n<h3 id=\"21-id\">2.1 \u5e33\u865f\/\u4f7f\u7528\u8005\u540d\u7a31 (ID) \u8ffd\u67e5<\/h3>\n<p>\u8a31\u591a\u4eba\u5728\u4e0d\u540c\u5e73\u53f0\u8a3b\u518a\u6642\uff0c\u70ba\u4e86\u65b9\u4fbf\u8a18\u61b6\uff0c\u6703\u7fd2\u6163\u4f7f\u7528\u540c\u4e00\u500b\u4f7f\u7528\u8005\u540d\u7a31\uff08Username\uff0c\u5982 <code>alpha_hunter99<\/code>\uff09\u3002\u9019\u5c31\u7d66\u4e86\u8abf\u67e5\u54e1\u4e00\u689d\u6a6b\u5411\u8ffd\u8e64\u7684\u7dda\u7d22\u3002<\/p>\n<h4 id=\"_2\">\u5de5\u5177\u63a8\u85a6\u8207\u539f\u7406<\/h4>\n<ul>\n<li><strong>WhatsMyName.app<\/strong>\uff1a\u4e00\u500b\u57fa\u65bc Web \u7684\u5de5\u5177\uff0c\u80fd\u5feb\u901f\u6bd4\u5c0d\u6578\u767e\u500b\u7db2\u7ad9\uff08\u5305\u542b\u96fb\u5546\u3001\u8ad6\u58c7\u3001\u6280\u8853\u793e\u7fa4\u3001\u4ea4\u53cb\u8edf\u9ad4\uff09\uff0c\u5075\u6e2c\u7279\u5b9a Username \u662f\u5426\u5df2\u88ab\u8a3b\u518a\u3002\u5b83\u900f\u904e\u767c\u9001 HTTP \u8acb\u6c42\u4e26\u5206\u6790\u56de\u61c9\u4ee3\u78bc\uff08\u4f8b\u5982 200 OK \u8207 404 Not Found \u7684\u5dee\u7570\uff09\u4f86\u9032\u884c\u5224\u65b7\u3002<\/li>\n<li><strong>Sherlock (CLI \u5de5\u5177)<\/strong>\uff1a\u82e5\u9700\u8981\u5728\u672c\u6a5f\u9032\u884c\u5927\u898f\u6a21\u81ea\u52d5\u5316\u67e5\u8a62\uff0c\u53ef\u4f7f\u7528 Python \u7de8\u5beb\u7684 Sherlock\u3002<br \/>\n  <code>bash<br \/>\n  # \u5b89\u88dd\u8207\u57f7\u884c\u7bc4\u4f8b<br \/>\n  git clone https:\/\/github.com\/sherlock-project\/sherlock.git<br \/>\n  cd sherlock<br \/>\n  python3 -m pip install -r requirements.txt<br \/>\n  python3 sherlock alpha_hunter99<\/code><br \/>\n  <em>\u57f7\u884c\u5f8c\uff0cSherlock \u6703\u8f38\u51fa\u8a72 ID \u5728 GitHub\u3001Reddit\u3001Steam\u3001Pornhub\u3001Medium \u7b49\u5e73\u53f0\u7684\u5e33\u865f\u9023\u7d50\u3002<\/em><\/li>\n<\/ul>\n<hr \/>\n<h3 id=\"22\">2.2 \u4fe1\u7bb1\u8207\u96fb\u8a71\u53cd\u67e5<\/h3>\n<p>\u96fb\u5b50\u4fe1\u7bb1\u548c\u96fb\u8a71\u865f\u78bc\u662f\u5c07\u865b\u64ec\u5e33\u865f\u5c0d\u61c9\u5230\u771f\u5be6\u4e16\u754c\u8eab\u4efd\u7684\u5f37\u95dc\u806f\u7bc0\u9ede\u3002<\/p>\n<h4 id=\"1-haveibeenpwned-hibp\">1. HaveIBeenPwned (HIBP)<\/h4>\n<ul>\n<li><strong>\u6982\u5ff5<\/strong>\uff1a\u7576\u7db2\u7ad9\u767c\u751f\u5927\u898f\u6a21\u8cc7\u6599\u5916\u6d29\u6642\uff0c\u99ed\u5ba2\u5e38\u5c07\u540d\u518a\u516c\u958b\u3002HIBP \u6536\u96c6\u4e86\u6578\u5341\u5104\u7b46\u5916\u6d29\u5e33\u865f\u3002<\/li>\n<li><strong>\u8abf\u67e5\u6280\u5de7<\/strong>\uff1a\u8f38\u5165\u76ee\u6a19 Email\uff0c\u82e5\u986f\u793a\u66fe\u51fa\u73fe\u5728\u67d0\u6b21\u5916\u6d29\uff08\u4f8b\u5982 2019 \u5e74 Canva \u5916\u6d29\uff09\uff0c\u4ee3\u8868\u8a72\u4fe1\u7bb1\u5728 2019 \u5e74\u524d\u5c31\u5df2\u555f\u7528\u3002\u5982\u679c\u80fd\u62ff\u5230\u539f\u59cb\u7684\u5916\u6d29\u8cc7\u6599\u5eab\uff08Breach Compilations\uff09\uff0c\u8abf\u67e5\u54e1\u751a\u81f3\u80fd\u67e5\u5230\u76ee\u6a19\u7576\u6642\u4f7f\u7528\u7684\u820a\u5bc6\u78bc\u3002\u8a31\u591a\u4eba\u7fd2\u6163\u5728\u591a\u500b\u7db2\u7ad9\u91cd\u8907\u4f7f\u7528\u76f8\u540c\u5bc6\u78bc\u6216\u5bc6\u78bc\u524d\u7db4\uff0c\u9019\u53ef\u4f5c\u70ba\u8ffd\u67e5\u5176\u95dc\u806f\u5e33\u865f\u7684\u91cd\u8981\u4f9d\u64da\u3002<\/li>\n<\/ul>\n<h4 id=\"2\">2. \u96fb\u8a71\u865f\u78bc\u53cd\u67e5\u5de5\u5177<\/h4>\n<ul>\n<li><strong>Truecaller &amp; Sync.me<\/strong>\uff1a\u9019\u985e App \u7684\u904b\u4f5c\u539f\u7406\u662f\u300c\u901a\u8a0a\u9304\u4e92\u52a9\uff08Crowdsourcing\uff09\u300d\u3002\u7576\u6210\u5343\u4e0a\u842c\u7684\u7528\u6236\u5b89\u88dd\u9019\u4e9b App \u4e26\u4e0a\u50b3\u81ea\u5df1\u624b\u6a5f\u7684\u901a\u8a0a\u9304\u5f8c\uff0c\u8cc7\u6599\u5eab\u5c31\u5efa\u7acb\u8d77\u4e86\u96fb\u8a71\u8207\u59d3\u540d\u7684\u5c0d\u61c9\u95dc\u4fc2\u3002\u5373\u4f7f\u76ee\u6a19\u81ea\u5df1\u6c92\u6709\u5b89\u88dd\uff0c\u4ed6\u7684\u670b\u53cb\u4e5f\u53ef\u80fd\u65e9\u5c31\u51fa\u8ce3\u4e86\u4ed6\u7684\u96fb\u8a71\u3002<\/li>\n<li><strong>\u5e73\u53f0\u52a0\u597d\u53cb\u7e5e\u9053\u6cd5<\/strong>\uff1a<\/li>\n<li><strong>LINE \/ WeChat \/ Telegram<\/strong>\uff1a\u5c07\u76ee\u6a19\u96fb\u8a71\u5b58\u5165\u4e7e\u6de8\u7684\u8abf\u67e5\u7528\u624b\u6a5f\u901a\u8a0a\u9304\u4e2d\uff0c\u6253\u958b\u901a\u8a0a\u8edf\u9ad4\u7684\u300c\u81ea\u52d5\u65b0\u589e\u597d\u53cb\u300d\u529f\u80fd\uff0c\u89c0\u5bdf\u8edf\u9ad4\u662f\u5426\u63a8\u85a6\u4e86\u8a72\u7528\u6236\uff0c\u9032\u800c\u7372\u5f97\u5c0d\u65b9\u7684\u771f\u5be6\u66b1\u7a31\u3001\u5927\u982d\u7167\u8207\u500b\u4eba\u7c3d\u540d\u3002<\/li>\n<\/ul>\n<hr \/>\n<h3 id=\"23\">2.3 \u793e\u4ea4\u7db2\u8def\u95dc\u806f\u5206\u6790<\/h3>\n<p>\u4e00\u65e6\u9396\u5b9a\u4e86\u76ee\u6a19\u7684\u793e\u7fa4\u5e33\u865f\uff0c\u4e0b\u4e00\u6b65\u662f\u6df1\u5165\u5206\u6790\u5176\u5167\u5bb9\u8207\u95dc\u4fc2\u93c8\u3002<\/p>\n<h4 id=\"linkedin\">LinkedIn\uff1a\u7e6a\u88fd\u7d44\u7e54\u8207\u5c08\u696d\u7db2\u7d61<\/h4>\n<p>LinkedIn \u662f\u9632\u8b77\u6700\u8584\u5f31\u7684\u5546\u696d OSINT \u4f86\u6e90\uff0c\u4eba\u5011\u70ba\u4e86\u6c42\u8077\u5f80\u5f80\u6703\u5beb\u4e0a\u6700\u771f\u5be6\u7684\u8cc7\u8a0a\u3002<br \/>\n&#8211; <strong>\u516c\u53f8\u67b6\u69cb<\/strong>\uff1a\u641c\u5c0b\u7279\u5b9a\u516c\u53f8\uff0c\u53ef\u4ee5\u770b\u5230\u5176\u6240\u6709\u54e1\u5de5\u540d\u55ae\u3002\u82e5\u8981\u5c0d\u8a72\u516c\u53f8\u9032\u884c\u793e\u4ea4\u5de5\u7a0b\uff0c\u53ef\u5f9e\u4e2d\u6311\u9078 IT \u90e8\u9580\u3001\u8ca1\u52d9\u90e8\u9580\u7684\u65b0\u9032\u54e1\u5de5\u3002<br \/>\n&#8211; <strong>\u6280\u8853\u7d30\u7bc0<\/strong>\uff1a\u958b\u767c\u4eba\u54e1\u5e38\u5728 LinkedIn \u7684\u8077\u8cac\u63cf\u8ff0\u4e2d\u5beb\u51fa\u300c\u8ca0\u8cac\u7dad\u8b77\u516c\u53f8 AWS \u96f2\u7aef\u67b6\u69cb\u3001\u4f7f\u7528 Kubernetes \u8207 Jenkins\u300d\uff0c\u9019\u7121\u610f\u9593\u6d29\u6f0f\u4e86\u8a72\u516c\u53f8\u7684\u6280\u8853\u68e7\uff08Technology Stack\uff09\u3002<\/p>\n<h4 id=\"facebook-instagram\">Facebook &amp; Instagram\uff1a\u751f\u6d3b\u4f5c\u606f\u8207\u95dc\u4fc2\u7db2\u7d61\u5206\u6790<\/h4>\n<ul>\n<li><strong>\u5730\u6a19\u8207\u6253\u5361\uff08GEOINT \u4ea4\u53c9\uff09<\/strong>\uff1a\u6536\u96c6\u76ee\u6a19\u904e\u53bb\u5e7e\u5e74\u7684\u6240\u6709\u6253\u5361\u8a18\u9304\uff0c\u5c07\u5176\u7e6a\u88fd\u5728 Google Maps \u4e0a\uff0c\u53ef\u4ee5\u8f15\u6613\u63a8\u5c0e\u51fa\u76ee\u6a19\u7684\u4f4f\u5bb6\u5340\u57df\u3001\u5e38\u53bb\u7684\u5065\u8eab\u623f\u3001\u5de5\u4f5c\u5730\u9ede\u4ee5\u53ca\u5ea6\u5047\u7fd2\u6163\u3002<\/li>\n<li><strong>\u7559\u8a00\u8207\u6309\u8b9a\u5206\u6790<\/strong>\uff1a\u5229\u7528\u7279\u5b9a\u5e33\u865f\u5728\u76ee\u6a19\u8cbc\u6587\u4e0b\u7684\u4e92\u52d5\u983b\u7387\uff0c\u5206\u6790\u51fa\u5176\u6700\u89aa\u5bc6\u7684\u4f34\u4fb6\u3001\u5bb6\u4eba\u6216\u670b\u53cb\u3002\u5373\u4f7f\u76ee\u6a19\u5c07\u81ea\u5df1\u5e33\u865f\u7684\u96b1\u79c1\u6b0a\u9650\u8a2d\u70ba\u6700\u9ad8\uff0c\u5176\u5bb6\u4eba\u7684\u5e33\u865f\u5f80\u5f80\u662f\u516c\u958b\u7684\uff0c\u8abf\u67e5\u54e1\u53ef\u4ee5\u900f\u904e\u300c\u570d\u9b4f\u6551\u8d99\u300d\u7684\u65b9\u5f0f\u5f9e\u5bb6\u4eba\u7684\u76f8\u7c3f\u4e2d\u627e\u5230\u76ee\u6a19\u7684\u7167\u7247\u8207\u8db3\u8de1\u3002<\/li>\n<\/ul>\n<hr \/>\n<h2 id=\"3-imint-geoint\">3. \u5716\u50cf\u8207\u5730\u7406\u60c5\u5831 (IMINT \/ GEOINT)<\/h2>\n<p><strong>IMINT\uff08Imagery Intelligence\uff0c\u5f71\u50cf\u60c5\u5831\uff09<\/strong> \u8207 <strong>GEOINT\uff08Geospatial Intelligence\uff0c\u5730\u7406\u7a7a\u9593\u60c5\u5831\uff09<\/strong> \u662f OSINT \u4e2d\u6700\u8003\u9a57\u8abf\u67e5\u54e1\u908f\u8f2f\u63a8\u7406\u8207\u89c0\u5bdf\u529b\u7684\u5730\u65b9\u3002\u6211\u5011\u7684\u76ee\u6a19\u662f\uff1a<strong>\u300c\u7d66\u5b9a\u4e00\u5f35\u7167\u7247\uff0c\u627e\u51fa\u5b83\u662f\u5728\u54ea\u88e1\u3001\u5728\u4ec0\u9ebc\u6642\u5019\u3001\u88ab\u8ab0\u62cd\u4e0b\u4f86\u7684\u3002\u300d<\/strong><\/p>\n<h3 id=\"31-reverse-image-search\">3.1 \u9032\u968e\u4ee5\u5716\u641c\u5716 (Reverse Image Search)<\/h3>\n<p>\u7576\u62ff\u5230\u4e00\u5f35\u7167\u7247\u6642\uff0c\u9996\u5148\u8981\u78ba\u8a8d\u5b83\u662f\u5426\u70ba\u7db2\u8def\u820a\u5716\u6216\u76dc\u5716\uff1a<br \/>\n&#8211; <strong>Google Lens<\/strong>\uff1a\u64c5\u9577\u8b58\u5225\u7167\u7247\u4e2d\u7684\u5be6\u9ad4\u7269\u54c1\uff08\u4f8b\u5982\u76ee\u6a19\u7a7f\u7684\u8863\u670d\u54c1\u724c\u3001\u624b\u9336\u578b\u865f\u3001\u773c\u524d\u7684\u7279\u8272\u5730\u6a19\uff09\u3002<br \/>\n&#8211; <strong>Yandex Images<\/strong>\uff1a\u5728\u6bd4\u5c0d\u300c\u76f8\u4f3c\u7684\u4eba\u81c9\u300d\u8207\u300c\u81ea\u7136\u98a8\u666f\u5fae\u5c0f\u7279\u5fb5\u300d\u4e0a\u8868\u73fe\u6700\u597d\u3002<br \/>\n&#8211; <strong>TinEye<\/strong>\uff1a\u5176\u5f37\u5927\u4e4b\u8655\u5728\u65bc\u53ef\u4ee5\u4f9d\u64da <strong>&#8220;Oldest&#8221; (\u6700\u820a)<\/strong> \u9032\u884c\u6392\u5e8f\uff0c\u9019\u80fd\u5354\u52a9\u8abf\u67e5\u54e1\u627e\u51fa\u9019\u5f35\u5716\u7247\u5728\u7db2\u969b\u7db2\u8def\u4e0a\u7b2c\u4e00\u6b21\u88ab\u767c\u4f48\u7684\u65e5\u671f\u8207\u6e90\u982d\u7db2\u9801\u3002<\/p>\n<hr \/>\n<h3 id=\"32-exif\">3.2 EXIF \u8cc7\u8a0a\u63d0\u53d6<\/h3>\n<p>\u539f\u59cb\u7167\u7247\u6a94\u6848\uff08\u7531\u76f8\u6a5f\u6216\u667a\u6167\u578b\u624b\u6a5f\u62cd\u4e0b\u4e26\u76f4\u63a5\u5c0e\u51fa\u7684\u6a94\u6848\uff09\u4e2d\u5305\u542b\u540d\u70ba EXIF (Exchangeable Image File Format) \u7684\u5143\u6578\u64da\u3002<\/p>\n<h4 id=\"exif\">EXIF \u4e2d\u85cf\u6709\u7684\u79d8\u5bc6<\/h4>\n<ul>\n<li>\u76f8\u6a5f\/\u624b\u6a5f\u7684\u578b\u865f\u3001\u93e1\u982d\u53c3\u6578\u3001\u7126\u8ddd\u3002<\/li>\n<li>\u7cbe\u78ba\u7684\u62cd\u651d\u6642\u9593\uff08\u5305\u542b\u6beb\u79d2\u8207\u6642\u5340\u8a2d\u5b9a\uff09\u3002<\/li>\n<li><strong>GPS \u7d93\u7def\u5ea6\u5ea7\u6a19<\/strong>\uff08\u82e5\u7528\u6236\u958b\u555f\u4e86\u76f8\u6a5f\u5b9a\u4f4d\u529f\u80fd\uff09\u3002<\/li>\n<\/ul>\n<div style=\"background-color: #fff5f5; border-left: 5px solid #e53e3e; color: #c53030; padding: 15px 20px; margin: 20px 0; border-radius: 6px; font-family: sans-serif;\"><strong>\u26a0\ufe0f \u91cd\u8981\u514d\u8cac\u8072\u660e\u8207\u6cd5\u5f8b\u898f\u7bc4\uff1a<\/strong><br \/>\n> **\u96b1\u79c1\u9632\u8b77\u9808\u77e5**<br \/>\n> \u4e3b\u6d41\u793e\u7fa4\u5e73\u53f0\uff08\u5982 Facebook, Instagram, Twitter, LINE\uff09\u5728\u7528\u6236\u4e0a\u50b3\u7167\u7247\u6642\uff0c\u70ba\u4e86\u4fdd\u8b77\u96b1\u79c1\u8207\u7bc0\u7701\u983b\u5bec\uff0c\u90fd\u6703\u81ea\u52d5\u62b9\u9664 EXIF \u8cc7\u8a0a\u3002\u4f46\u5728\u500b\u4eba\u90e8\u843d\u683c\u3001\u96fb\u5b50\u90f5\u4ef6\u9644\u4ef6\u3001PDF \u5831\u544a\u66f8\u3001GitHub \u5132\u5b58\u5eab\u6216\u96f2\u7aef\u786c\u789f\u5171\u4eab\u9023\u7d50\u4e2d\uff0c\u5f80\u5f80\u80fd\u627e\u5230\u4fdd\u7559\u5b8c\u6574 EXIF \u7684\u539f\u59cb\u7167\u7247\u3002<\/div>\n<h4 id=\"exiftool\">\u4f7f\u7528 <code>exiftool<\/code> \u9032\u884c\u547d\u4ee4\u884c\u63d0\u53d6<\/h4>\n<p>\u5728 Linux\/macOS\/Windows \u4e2d\uff0c<code>exiftool<\/code> \u662f\u6700\u6b0a\u5a01\u7684\u5143\u6578\u64da\u6aa2\u8996\u5de5\u5177\u3002<\/p>\n<pre><code class=\"language-bash\"># \u6aa2\u8996\u7167\u7247\u7684\u6240\u6709\u5143\u6578\u64da\nexiftool target_photo.jpg\n\n# \u50c5\u7be9\u9078\u8207 GPS \u5ea7\u6a19\u76f8\u95dc\u7684\u8cc7\u8a0a\nexiftool -gps:all target_photo.jpg\n<\/code><\/pre>\n<p><em>\u5982\u679c\u7167\u7247\u542b\u6709 GPS \u8cc7\u8a0a\uff0c\u8f38\u51fa\u6703\u986f\u793a\u5982 <code>GPS Latitude : 25 deg 2' 3.11\" N<\/code>, <code>GPS Longitude : 121 deg 33' 52.42\" E<\/code>\u3002\u8abf\u67e5\u54e1\u53ea\u9700\u5c07\u5176\u8f49\u63db\u70ba\u5341\u9032\u4f4d\uff0825.034197, 121.564561\uff09\u4e26\u8f38\u5165 Google Maps\uff0c\u5373\u53ef\u7cbe\u78ba\u5b9a\u4f4d\u5230\u62cd\u651d\u8005\u7684\u7ad9\u7acb\u9ede\u3002<\/em><\/p>\n<hr \/>\n<h3 id=\"33-geolocation\">3.3 \u5730\u7406\u5b9a\u4f4d (Geolocation) \u63a8\u7406\u6b65\u9a5f<\/h3>\n<p>\u5982\u679c\u7167\u7247\u88ab\u793e\u7fa4\u5e73\u53f0\u62b9\u9664\u4e86 EXIF\uff0c\u8abf\u67e5\u54e1\u5c31\u5fc5\u9808\u4f7f\u7528\u300c\u8996\u89ba\u9451\u8b58\u300d\u9032\u884c\u63a8\u7406\u3002\u9019\u662f\u4e00\u500b\u7d50\u69cb\u5316\u7684\u89e3\u8b0e\u904e\u7a0b\uff1a<\/p>\n<h4 id=\"_3\">\u7b2c\u4e00\u6b65\uff1a\u74b0\u5883\u8207\u6587\u5316\u7dda\u7d22\u5206\u6790<\/h4>\n<ul>\n<li><strong>\u8def\u724c\u8207\u4ea4\u901a<\/strong>\uff1a\u8def\u724c\u7684\u8a9e\u8a00\u3001\u5b57\u9ad4\u3001\u984f\u8272\u3001\u9650\u901f\u6a19\u8a8c\u7684\u5f62\u72c0\u3002\u6ce8\u610f\u8eca\u8f1b\u662f\u5de6\u99d5\u9084\u662f\u53f3\u99d5\u3001\u8eca\u724c\u7684\u5e95\u8272\u8207\u9577\u5bec\u6bd4\u3002<\/li>\n<li><strong>\u57fa\u790e\u8a2d\u65bd<\/strong>\uff1a\u96fb\u7dda\u687f\u7684\u5f62\u72c0\uff08\u65e5\u672c\u7684\u96fb\u7dda\u687f\u6709\u5176\u7368\u7279\u69cb\u9020\uff0c\u53f0\u7063\u7684\u96fb\u7dda\u687f\u5e38\u6709\u5f69\u8272\u6f06\u8207\u7de8\u865f\u724c\uff09\u3001\u5783\u573e\u6876\u5916\u89c0\u3001\u8def\u71c8\u7684\u6a23\u5f0f\u3002<\/li>\n<li><strong>\u690d\u7269\u76f8 (Flora)<\/strong>\uff1a\u7167\u7247\u4e2d\u751f\u9577\u7684\u690d\u7269\u985e\u578b\u3002\u6930\u5b50\u6a39\u9650\u5236\u4e86\u5730\u7406\u4f4d\u7f6e\u5728\u71b1\u5e36\/\u4e9e\u71b1\u5e36\uff1b\u82e5\u6709\u5927\u7247\u767d\u6a3a\u6797\uff0c\u5247\u6975\u53ef\u80fd\u4f4d\u65bc\u9ad8\u7def\u5ea6\u5bd2\u6eab\u5e36\u5730\u5340\u3002<\/li>\n<\/ul>\n<h4 id=\"suncalc\">\u7b2c\u4e8c\u6b65\uff1a\u5929\u6587\u8207\u9670\u5f71\u5206\u6790\uff08\u5229\u7528 SunCalc\uff09<\/h4>\n<p>\u9670\u5f71\u662f\u7167\u7247\u4e2d\u4e0d\u53ef\u78e8\u6ec5\u7684\u6642\u9593\u5370\u8a18\u3002<br \/>\n&#8211; <strong>SunCalc (suncalc.org)<\/strong>\uff1a\u9019\u662f\u4e00\u500b\u514d\u8cbb\u7684\u7db2\u9801\u5de5\u5177\uff0c\u5141\u8a31\u8abf\u67e5\u54e1\u9078\u64c7\u5730\u7403\u4e0a\u4efb\u4f55\u4e00\u500b\u5730\u9ede\u8207\u65e5\u671f\uff0c\u5b83\u6703\u8a08\u7b97\u51fa\u8a72\u5929\u592a\u967d\u5728\u4e0d\u540c\u6642\u9593\u9ede\u7684\u89d2\u5ea6\u8207\u9670\u5f71\u9577\u5ea6\u3002<br \/>\n&#8211; <strong>\u63a8\u7406\u516c\u5f0f<\/strong>\uff1a<br \/>\n  1. \u5728\u7167\u7247\u4e2d\u5c0b\u627e\u4e00\u500b\u5782\u76f4\u65bc\u5730\u9762\u7684\u7269\u9ad4\uff08\u5982\u96fb\u7dda\u687f\u6216\u8def\u71c8\uff09\u53ca\u5176\u6295\u5f71\u3002<br \/>\n  2. \u4f30\u7b97\u7269\u9ad4\u9ad8\u5ea6\u8207\u6295\u5f71\u9577\u5ea6\u7684\u6bd4\u4f8b\uff0c\u9019\u53ef\u4ee5\u63a8\u7b97\u51fa\u592a\u967d\u7684\u4ef0\u89d2\uff08Elevation\uff09\u3002<br \/>\n  3. \u5206\u6790\u9670\u5f71\u6295\u5c04\u7684\u65b9\u5411\uff08\u9700\u8981\u5148\u5728\u7167\u7247\u4e2d\u8fa8\u8b58\u51fa\u5357\u5317\u5411\uff0c\u53ef\u900f\u904e\u885b\u661f\u5929\u7dda\u7684\u671d\u5411\u3001\u6216\u7279\u5b9a\u5730\u6a19\u7684\u4f4d\u7f6e\u4f86\u5224\u65b7\uff09\u3002<br \/>\n  4. \u5c07\u6578\u64da\u8f38\u5165 SunCalc\uff0c\u5728\u5df2\u77e5\u7684\u5730\u7406\u7bc4\u570d\u5167\uff0c\u5373\u53ef\u7cbe\u78ba\u63a8\u7b97\u51fa\u62cd\u651d\u7684\u6708\u4efd\uff0c\u751a\u81f3\u5177\u9ad4\u5230\u5e7e\u9ede\u5e7e\u5206\u3002<\/p>\n<pre><code>     \u592a\u967d \u2600\ufe0f\n      \/ \n     \/  \u4ef0\u89d2 (\u03b8)\n    \/ \\\n   \/   \\ [\u7269\u9ad4] (\u9ad8\u5ea6 H)\n  \/     \\\n \/_______\\_______ \u9670\u5f71 (\u9577\u5ea6 L)\n\n * \u4ef0\u89d2 \u03b8 = arctan(H \/ L)\n * \u5c07 \u03b8 \u8207\u9670\u5f71\u65b9\u4f4d\u89d2 (Azimuth) \u8f38\u5165 SunCalc\uff0c\u53ef\u53cd\u63a8\u62cd\u651d\u6642\u9593\u3002\n<\/code><\/pre>\n<hr \/>\n<h2 id=\"4-network-osint\">4. \u7db2\u969b\u7db2\u8def\u8207\u57fa\u790e\u8a2d\u65bd (Network OSINT)<\/h2>\n<p>Network OSINT \u4e3b\u8981\u95dc\u6ce8\u7d44\u7e54\u6216\u500b\u4eba\u5728\u7db2\u969b\u7db2\u8def\u4e0a\u7684\u6578\u4f4d\u8cc7\u7522\uff0c\u5305\u62ec\u57df\u540d\u3001IP \u4f4d\u5740\u3001\u4f3a\u670d\u5668\u914d\u7f6e\u8207\u5c0d\u5916\u958b\u653e\u7684\u670d\u52d9\u3002\u9019\u5c0d\u65bc\u8a55\u4f30\u4f01\u696d\u7684\u5b89\u5168\u908a\u754c\u81f3\u95dc\u91cd\u8981\u3002<\/p>\n<h3 id=\"41-ip\">4.1 \u7db2\u57df\u8207 IP \u8abf\u67e5<\/h3>\n<p>\u8abf\u67e5\u4e00\u500b\u7db2\u7ad9\u6642\uff0c\u9996\u5148\u8981\u91d0\u6e05\u300c\u9019\u662f\u8ab0\u7684\u8cc7\u7522\u300d\u4ee5\u53ca\u300c\u5b83\u80cc\u5f8c\u9023\u63a5\u5230\u54ea\u88e1\u300d\u3002<\/p>\n<h4 id=\"1-whois\">1. Whois \u6b77\u53f2\u7d00\u9304<\/h4>\n<ul>\n<li><strong>\u73fe\u72c0<\/strong>\uff1a\u56e0\u70ba GDPR \u7b49\u96b1\u79c1\u6cd5\u898f\uff0c\u73fe\u5728\u76f4\u63a5\u67e5\u8a62 Whois \u901a\u5e38\u53ea\u6703\u770b\u5230 <code>Redacted for Privacy<\/code>\u3002<\/li>\n<li><strong>\u61c9\u5c0d\u7b56\u7565<\/strong>\uff1a\u4f7f\u7528 Whois \u6b77\u53f2\u8cc7\u6599\u5eab\uff08\u5982 Whoxy\u3001DomainTools\uff09\u3002\u8a31\u591a\u57df\u540d\u5728\u6578\u5e74\u524d\u8a3b\u518a\u6642\uff0c\u96b1\u79c1\u4fdd\u8b77\u653f\u7b56\u5c1a\u672a\u666e\u53ca\uff0c\u6216\u8005\u8a3b\u518a\u4eba\u4e0d\u5c0f\u5fc3\u586b\u5beb\u4e86\u771f\u5be6\u7684\u59d3\u540d\u8207 Gmail\u3002\u9019\u4e9b\u6b77\u53f2\u7d00\u9304\u6703\u6c38\u9060\u7559\u5728\u5099\u4efd\u8cc7\u6599\u5eab\u4e2d\u3002<\/li>\n<\/ul>\n<h4 id=\"2-dns\">2. DNS \u8a18\u9304\u7684\u6df1\u5ea6\u89e3\u6790<\/h4>\n<p>DNS \u8a18\u9304\u4e2d\u85cf\u6709\u8a31\u591a\u975e\u516c\u958b\u7684\u95dc\u806f\u8cc7\u8a0a\uff1a<br \/>\n&#8211; <strong>MX \u8a18\u9304<\/strong>\uff1a\u90f5\u4ef6\u4ea4\u63db\u8a18\u9304\u3002\u5982\u679c\u76ee\u6a19\u7db2\u57df\u7684 MX \u6307\u5411 <code>mail.protection.outlook.com<\/code>\uff0c\u4ee3\u8868\u4ed6\u5011\u4f7f\u7528 Microsoft 365\uff1b\u5982\u679c\u662f <code>mx.mail.goip.de<\/code>\uff0c\u5247\u53ef\u80fd\u662f\u81ea\u5efa\u7684\u79c1\u4eba\u90f5\u4ef6\u4f3a\u670d\u5668\u3002<br \/>\n&#8211; <strong>TXT \u8a18\u9304<\/strong>\uff1a\u5e38\u7528\u65bc\u5ba3\u544a\u9a57\u8b49\u3002\u4f8b\u5982 SPF \u8a18\u9304\uff08\u5982 <code>v=spf1 include:_spf.google.com include:mailgun.org ~all<\/code>\uff09\uff0c\u9019\u63ed\u793a\u4e86\u8a72\u7db2\u7ad9\u4fe1\u4efb\u54ea\u4e9b\u7b2c\u4e09\u65b9\u767c\u4fe1\u670d\u52d9\uff0c\u4e5f\u53ef\u80fd\u66b4\u9732\u4e86\u5176\u4ed6\u672a\u516c\u958b\u7684\u5b50\u7db2\u57df\u3002<br \/>\n&#8211; <strong>\u5b50\u7db2\u57df\u767c\u73fe (Subdomain Discovery)<\/strong>\uff1a<br \/>\n  &#8211; \u5b50\u7db2\u57df\u901a\u5e38\u4ee3\u8868\u8457\u672a\u516c\u958b\u7684\u6e2c\u8a66\u74b0\u5883\uff08\u5982 <code>dev.example.com<\/code>\u3001<code>staging.example.com<\/code>\uff09\uff0c\u9632\u8b77\u901a\u5e38\u8f03\u5f31\u3002<br \/>\n  &#8211; <strong>crt.sh<\/strong>\uff1a\u6191\u8b49\u900f\u660e\u5ea6\uff08Certificate Transparency, CT\uff09\u65e5\u8a8c\u67e5\u8a62\u3002\u6bcf\u7576\u4e00\u500b\u7db2\u7ad9\u5411 Let&#8217;s Encrypt \u7b49\u6a5f\u69cb\u7533\u8acb SSL \u6191\u8b49\u6642\uff0c\u8a72\u7533\u8acb\u90fd\u6703\u88ab\u8a18\u9304\u5728\u516c\u958b\u7684 CT \u65e5\u8a8c\u4e2d\u3002\u8abf\u67e5\u54e1\u53ef\u5728 crt.sh \u8f38\u5165\u7db2\u57df\uff0c\u53d6\u5f97\u6240\u6709\u6b77\u53f2\u7533\u8acb\u904e\u6191\u8b49\u7684\u5b50\u7db2\u57df\u5217\u8868\u3002<\/p>\n<hr \/>\n<h3 id=\"42-passive-reconnaissance\">4.2 \u88ab\u52d5\u5f0f\u63a2\u6e2c (Passive Reconnaissance)<\/h3>\n<p>\u4e3b\u52d5\u6383\u63cf\uff08\u5982\u4f7f\u7528 Nmap \u76f4\u63a5\u6383\u63cf\u76ee\u6a19 IP\uff09\u6703\u7559\u4e0b\u5927\u91cf\u65e5\u8a8c\uff0c\u751a\u81f3\u89f8\u767c\u9632\u706b\u7246\u9632\u79a6\u3002\u88ab\u52d5\u5f0f\u5075\u5bdf\u5247\u662f<strong>\u900f\u904e\u7b2c\u4e09\u65b9\u5df2\u7d93\u6536\u96c6\u597d\u7684\u8cc7\u6599\u5eab\u4f86\u67e5\u8a62\u76ee\u6a19<\/strong>\uff0c\u5b8c\u5168\u4e0d\u8207\u76ee\u6a19\u4f3a\u670d\u5668\u7522\u751f\u76f4\u63a5\u63a5\u89f8\u3002<\/p>\n<h4 id=\"shodan\">Shodan \u7684\u6838\u5fc3\u6982\u5ff5<\/h4>\n<p>Shodan \u662f\u5c08\u9580\u91dd\u5c0d\u300c\u7269\u806f\u7db2\u8207\u806f\u7db2\u8a2d\u5099\u300d\u7684\u641c\u5c0b\u5f15\u64ce\u3002\u5b83\u4e0d\u505c\u5730\u5411\u5168\u7403 IP \u4f4d\u5740\u767c\u9001\u8acb\u6c42\uff0c\u4e26\u8a18\u9304\u5404\u500b\u9023\u63a5\u57e0\u56de\u50b3\u7684\u300cBanner\u300d\uff08\u6a6b\u5e45\u8cc7\u8a0a\uff09\u3002<\/p>\n<div style=\"background-color: #ebf8ff; border-left: 5px solid #3182ce; color: #2b6cb0; padding: 15px 20px; margin: 20px 0; border-radius: 6px; font-family: sans-serif;\"><strong>\ud83d\udca1 \u95dc\u9375\u5be6\u52d9\u8981\u9ede\uff1a<\/strong><br \/>\n> **Shodan \u5be6\u7528\u67e5\u8a62\u8a9e\u6cd5**<br \/>\n> &#8211; `net:210.61.0.0\/16`\uff1a\u641c\u5c0b\u7279\u5b9a\u7db2\u6bb5\u5167\u7684\u806f\u7db2\u8a2d\u5099\u3002<br \/>\n> &#8211; `port:27017`\uff1a\u5c0b\u627e\u6240\u6709\u958b\u653e MongoDB \u9810\u8a2d\u57e0\u7684\u4f3a\u670d\u5668\u3002<br \/>\n> &#8211; `org:&#8221;Target Corporation&#8221;`\uff1a\u641c\u5c0b\u5c6c\u65bc\u8a72\u7d44\u7e54\u64c1\u6709\u7684 IP \u8cc7\u7522\u3002<br \/>\n> &#8211; `product:&#8221;Apache httpd&#8221;`\uff1a\u641c\u5c0b\u7279\u5b9a\u8edf\u9ad4\u7522\u54c1\u3002<br \/>\n> &#8211; **\u5c0b\u627e\u66b4\u9732\u7684\u76e3\u8996\u5668**\uff1a`webcam xp` \u6216 `server: webcamXP`\u3002<br \/>\n> &#8211; **\u5c0b\u627e\u672a\u6388\u6b0a\u7684\u8cc7\u6599\u5eab\uff08MongoDB\uff09**\uff1a`port:27017 &#8220;MongoDB&#8221; -&#8220;authentication&#8221;` \uff08\u52a0\u4e0a\u6e1b\u865f\u6392\u9664\u9700\u8981\u9a57\u8b49\u7684\u8a2d\u5099\uff0c\u76f4\u63a5\u627e\u51fa\u672a\u8a2d\u5bc6\u78bc\u7684\u8cc7\u6599\u5eab\uff09\u3002<\/div>\n<hr \/>\n<h3 id=\"43-wayback-machine\">4.3 \u7db2\u7ad9\u6642\u5149\u6a5f (Wayback Machine)<\/h3>\n<p>Wayback Machine (archive.org) \u5b9a\u671f\u5099\u4efd\u5168\u7403\u7db2\u9801\u3002\u5728 OSINT \u8abf\u67e5\u4e2d\uff0c\u5b83\u6709\u4ee5\u4e0b\u95dc\u9375\u7528\u9014\uff1a<br \/>\n&#8211; <strong>\u6488\u53d6\u5df2\u522a\u9664\u7684\u8cc7\u8a0a<\/strong>\uff1a\u76ee\u6a19\u4eba\u7269\u5728\u767c\u73fe\u88ab\u8abf\u67e5\u5f8c\uff0c\u53ef\u80fd\u6703\u522a\u9664\u5b98\u7db2\u4e0a\u7684\u300c\u5718\u968a\u4ecb\u7d39\u300d\u6216\u300c\u806f\u7d61\u6211\u5011\u300d\u9801\u9762\u3002\u5229\u7528\u6642\u5149\u6a5f\uff0c\u53ef\u4ee5\u9000\u56de\u5230\u6578\u6708\u524d\uff0c\u53d6\u5f97\u7576\u6642\u516c\u4f48\u7684\u54e1\u5de5 Email\u3001\u79c1\u4eba\u96fb\u8a71\u6216\u5408\u4f5c\u5925\u4f34\u540d\u55ae\u3002<br \/>\n&#8211; <strong>\u5c0b\u627e\u6280\u8853\u6f0f\u6d1e<\/strong>\uff1a\u6aa2\u8996\u820a\u7248\u7db2\u9801\u7684\u539f\u59cb\u78bc\uff0c\u53ef\u80fd\u6703\u767c\u73fe\u7576\u6642\u5beb\u6b7b\u5728 JavaScript \u4e2d\u7684\u6e2c\u8a66\u74b0\u5883 URL\uff0c\u6216\u662f\u672a\u79fb\u9664\u7684\u820a\u7248 API \u7aef\u9ede\u3002<\/p>\n<hr \/>\n<h2 id=\"5-business-osint\">5. \u5546\u696d\u8207\u7d44\u7e54\u60c5\u5831 (Business OSINT)<\/h2>\n<p>Business OSINT \u7528\u65bc\u5c0d\u4f01\u696d\u9032\u884c\u80cc\u666f\u8abf\u67e5\u3001\u80a1\u6b0a\u67b6\u69cb\u5256\u6790\u3001\u9632\u7bc4\u6d17\u9322\u7a7a\u6bbc\u516c\u53f8\uff0c\u6216\u5206\u6790\u7d44\u7e54\u4e4b\u9593\u7684\u96b1\u6027\u95dc\u806f\u3002<\/p>\n<pre><code>[\u653f\u5e9c\u5de5\u5546\u767b\u8a18] \u2500\u2500&gt; \u8ca0\u8cac\u4eba\u8207\u8463\u76e3\u4e8b\u540d\u55ae \u2500\u2500&gt; \u80a1\u6b0a\u4ea4\u53c9\u6bd4\u5c0d \u2500\u2500&gt; \u627e\u51fa\u5be6\u8cea\u63a7\u5236\u4eba\n[\u653f\u5e9c\u63a1\u8cfc\u6a19\u6848] \u2500\u2500&gt; \u5f97\u6a19\u7d00\u9304\u8207\u9810\u7b97\u898f\u6a21 \u2500\u2500&gt; \u5206\u6790\u8cc7\u91d1\u4f86\u6e90\u8207\u696d\u52d9\u91cd\u5fc3\n[\u53f8\u6cd5\u88c1\u5224\u66f8]   \u2500\u2500&gt; \u6b77\u53f2\u8a34\u8a1f\u8207\u9055\u7d04\u7d00\u9304 \u2500\u2500&gt; \u8a55\u4f30\u4fe1\u7528\u8207\u6cd5\u5f8b\u98a8\u96aa\n<\/code><\/pre>\n<h3 id=\"51\">5.1 \u653f\u5e9c\u5de5\u5546\u516c\u958b\u6578\u64da (\u4ee5\u53f0\u7063\u70ba\u4f8b)<\/h3>\n<p>\u5404\u570b\u653f\u5e9c\u5747\u6709\u6cd5\u5b9a\u7684\u516c\u53f8\u767b\u8a18\u516c\u793a\u7cfb\u7d71\u3002<\/p>\n<h4 id=\"1\">1. \u7d93\u6fdf\u90e8\u5546\u696d\u767c\u5c55\u7f72\u5546\u5de5\u767b\u8a18\u67e5\u8a62<\/h4>\n<ul>\n<li><strong>\u67e5\u8a62\u76ee\u6a19<\/strong>\uff1a\u516c\u53f8\u7d71\u4e00\u7de8\u865f\u3001\u516c\u53f8\u540d\u7a31\u3001\u4ee3\u8868\u4eba\u3001\u8cc7\u672c\u984d\u3001\u8a2d\u7acb\u65e5\u671f\u3001\u8463\u76e3\u4e8b\u540d\u55ae\u8207\u6240\u4ee3\u8868\u7684\u80a1\u6b0a\u3002<\/li>\n<li><strong>\u8abf\u67e5\u6280\u5de7<\/strong>\uff1a<\/li>\n<li><strong>\u8ca0\u8cac\u4eba\/\u8463\u76e3\u4e8b\u540d\u55ae\u4ea4\u53c9\u53cd\u67e5<\/strong>\uff1a\u82e5\u767c\u73fe\u67d0\u7a7a\u6bbc\u516c\u53f8 A \u7684\u8463\u4e8b\u9577\u70ba\u300c\u5f35\u4e09\u300d\uff0c\u76e3\u5bdf\u4eba\u70ba\u300c\u674e\u56db\u300d\uff1b\u518d\u67e5\u53e6\u4e00\u5bb6\u516c\u53f8 B\uff0c\u767c\u73fe\u8463\u4e8b\u9577\u662f\u300c\u674e\u56db\u300d\uff0c\u8463\u4e8b\u662f\u300c\u5f35\u4e09\u300d\u3002\u9019\u6975\u53ef\u80fd\u4ee3\u8868\u5169\u5bb6\u516c\u53f8\u70ba\u540c\u4e00\u500b\u5229\u76ca\u96c6\u5718\u63a7\u5236\uff0c\u5e38\u7528\u65bc\u95dc\u4fc2\u4eba\u4ea4\u6613\u6216\u570d\u6a19\u3002<\/li>\n<li><strong>\u5730\u5740\u95dc\u806f<\/strong>\uff1a\u5982\u679c\u5169\u5bb6\u8868\u9762\u4e0a\u6beb\u7121\u95dc\u4fc2\u7684\u79d1\u6280\u516c\u53f8\uff0c\u767b\u8a18\u5730\u5740\u537b\u5728\u540c\u4e00\u500b\u8fa6\u516c\u5ba4\uff0c\u751a\u81f3\u5171\u7528\u540c\u4e00\u652f\u96fb\u8a71\uff08\u900f\u904e Open Data \u6bd4\u5c0d\uff09\uff0c\u9019\u4e5f\u662f\u9ad8\u5ea6\u95dc\u806f\u7684\u8b66\u8a0a\u3002<\/li>\n<\/ul>\n<hr \/>\n<h3 id=\"52\">5.2 \u5c08\u5229\u8207\u5546\u6a19\u8ffd\u67e5<\/h3>\n<p>\u5c08\u5229\u8207\u5546\u6a19\u662f\u4f01\u696d\u672a\u4f86\u7684\u5546\u696d\u85cd\u5716\u3002<br \/>\n&#8211; <strong>Google Patents<\/strong>\uff1a\u641c\u5c0b\u76ee\u6a19\u4f01\u696d\u6240\u64c1\u6709\u7684\u5c08\u5229\u3002\u5c08\u5229\u7533\u8acb\u66f8\u4e2d\u5fc5\u9808\u8a73\u7d30\u63ed\u9732\u6280\u8853\u539f\u7406\u3001\u96fb\u8def\u5716\u6216\u6f14\u7b97\u6cd5\u7d30\u7bc0\u3002\u6b64\u5916\uff0c\u5c08\u5229\u66f8\u4e0a\u5beb\u7684\u300c\u767c\u660e\u4eba\u59d3\u540d\u300d\u901a\u5e38\u662f\u8a72\u516c\u53f8\u7684\u6838\u5fc3\u7814\u767c\u79d1\u5b78\u5bb6\uff0c\u9019\u4e9b\u79d1\u5b78\u5bb6\u5728\u5b78\u8853\u5e73\u53f0\uff08\u5982 ResearchGate\uff09\u6216 GitHub \u4e0a\u7684\u500b\u4eba\u5e33\u865f\uff0c\u5f80\u5f80\u662f\u6280\u8853\u7d30\u7bc0\u6d29\u6f0f\u7684\u6eab\u5e8a\u3002<br \/>\n&#8211; <strong>\u5546\u6a19\u6aa2\u7d22\uff08\u5982\u4e2d\u83ef\u6c11\u570b\u667a\u6167\u8ca1\u7522\u5c40\u5546\u6a19\u6aa2\u7d22\uff09<\/strong>\uff1a\u4f01\u696d\u5728\u63a8\u51fa\u65b0\u7522\u54c1\u6216\u65b0\u5c08\u6848\u524d\uff0c\u901a\u5e38\u6703\u63d0\u524d\u534a\u5e74\u8a3b\u518a\u5546\u6a19\u3002\u900f\u904e\u76e3\u63a7\u5176\u65b0\u7533\u8acb\u7684\u5546\u6a19\u540d\u7a31\uff0c\u53ef\u4ee5\u63d0\u65e9\u5f97\u77e5\u5176\u672a\u4f86\u7684\u54c1\u724c\u4f48\u5c40\u3002<\/p>\n<hr \/>\n<h3 id=\"53\">5.3 \u653f\u5e9c\u63a1\u8cfc\u8207\u6cd5\u9662\u5224\u6c7a\u66f8<\/h3>\n<h4 id=\"1-webpccgovtw\">1. \u653f\u5e9c\u96fb\u5b50\u63a1\u8cfc\u7db2 (web.pcc.gov.tw)<\/h4>\n<ul>\n<li><strong>\u62db\u6a19\u8207\u6c7a\u6a19\u8cc7\u8a0a<\/strong>\uff1a\u641c\u5c0b\u7279\u5b9a\u516c\u53f8\u7684\u540d\u7a31\uff0c\u627e\u51fa\u4ed6\u5011\u5f97\u6a19\u904e\u54ea\u4e9b\u653f\u5e9c\u5c08\u6848\u3002<\/li>\n<li><strong>\u60c5\u5831\u50f9\u503c<\/strong>\uff1a\u6c7a\u6a19\u516c\u544a\u4e2d\u6703\u5beb\u660e\u62db\u6a19\u55ae\u4f4d\u3001\u6c7a\u6a19\u91d1\u984d\u3001\u8a55\u9078\u59d4\u54e1\u540d\u55ae\u4ee5\u53ca\u5171\u540c\u6295\u6a19\u5ee0\u5546\u3002\u9019\u80fd\u8b93\u8abf\u67e5\u54e1\u4e86\u89e3\u8a72\u516c\u53f8\u4e3b\u8981\u7684\u8cc7\u91d1\u4f86\u6e90\u662f\u5426\u9ad8\u5ea6\u4f9d\u8cf4\u653f\u5e9c\u88dc\u52a9\uff0c\u4ee5\u53ca\u4ed6\u5011\u5728\u653f\u5e9c\u5167\u90e8\u7684\u95dc\u4fc2\u7db2\u7d61\u3002<\/li>\n<\/ul>\n<h4 id=\"2-judgmentjudicialgovtw\">2. \u53f8\u6cd5\u9662\u516c\u5831\u8207\u5224\u6c7a\u66f8\u67e5\u8a62\u7cfb\u7d71 (judgment.judicial.gov.tw)<\/h4>\n<p>\u6cd5\u9662\u5224\u6c7a\u66f8\u662f\u6975\u4f73\u7684\u4fe1\u7528\u8207\u80cc\u666f\u8abf\u67e5\u5de5\u5177\u3002<br \/>\n&#8211; <strong>\u8a34\u8a1f\u6aa2\u7d22<\/strong>\uff1a\u8f38\u5165\u516c\u53f8\u540d\u7a31\u6216\u4e3b\u8981\u8ca0\u8cac\u4eba\u59d3\u540d\u3002<br \/>\n&#8211; <strong>\u5be6\u6230\u6536\u7a6b<\/strong>\uff1a<br \/>\n  &#8211; <strong>\u52de\u8cc7\u7cfe\u7d1b<\/strong>\uff1a\u662f\u5426\u6709\u5927\u91cf\u9055\u53cd\u52de\u57fa\u6cd5\u7684\u8a34\u8a1f\uff0c\u8a55\u4f30\u5176\u4f01\u696d\u6587\u5316\u3002<br \/>\n  &#8211; <strong>\u6c11\u4e8b\u5c65\u7d04<\/strong>\uff1a\u662f\u5426\u6709\u62d6\u6b20\u8ca8\u6b3e\u3001\u5de5\u7a0b\u9055\u7d04\u7b49\u7d00\u9304\uff0c\u5224\u65b7\u5176\u8ca1\u52d9\u5065\u5eb7\u5ea6\u3002<br \/>\n  &#8211; <strong>\u5211\u4e8b\u6848\u4ef6<\/strong>\uff1a\u8ca0\u8cac\u4eba\u662f\u5426\u66fe\u6d89\u5165\u8a50\u6b3a\u3001\u80cc\u4fe1\u3001\u6d17\u9322\u6216\u9055\u53cd\u8b49\u5238\u4ea4\u6613\u6cd5\u7b49\u6848\u4ef6\uff0c\u907f\u514d\u5546\u696d\u5408\u4f5c\u8e29\u96f7\u3002<\/p>\n<hr \/>\n<h2 id=\"6-breach-data\">6. \u6d29\u6f0f\u8cc7\u6599\u8207\u6697\u7db2 (Breach Data)<\/h2>\n<p>\u99ed\u5ba2\u653b\u64ca\u4e8b\u4ef6\u983b\u50b3\uff0c\u5916\u6d29\u7684\u8cc7\u6599\u5e38\u5728\u5730\u4e0b\u8ad6\u58c7\u3001Pastebin \u751a\u81f3\u6697\u7db2\uff08Dark Web\uff09\u6d41\u901a\u3002\u5c0d\u65bc OSINT \u8abf\u67e5\u54e1\u800c\u8a00\uff0c\u5982\u4f55\u5728\u5b89\u5168\u4e14\u5408\u6cd5\u7684\u908a\u754c\u5167\u5229\u7528\u9019\u4e9b\u5916\u6d29\u8cc7\u6599\uff0c\u662f\u4e00\u9580\u9032\u968e\u6280\u8853\u3002<\/p>\n<h3 id=\"61-pastebin\">6.1 Pastebin \u8207\u958b\u6e90\u7a0b\u5f0f\u78bc\u8a17\u7ba1\u5e73\u53f0\u641c\u5c0b<\/h3>\n<p>Pastebin \u985e\u7db2\u7ad9\u662f\u81e8\u6642\u6587\u5b57\u5206\u4eab\u5e73\u53f0\uff0c\u7531\u65bc\u5176\u533f\u540d\u6027\uff0c\u5e38\u88ab\u5de5\u7a0b\u5e2b\u62ff\u4f86\u8cbc\u7a0b\u5f0f\u78bc\uff0c\u4e5f\u5e38\u88ab\u99ed\u5ba2\u7528\u4f86\u5b58\u653e\u5916\u6d29\u7684\u6191\u8b49\u3002<\/p>\n<h4 id=\"_4\">\u654f\u611f\u8cc7\u8a0a\u7684\u66b4\u9732<\/h4>\n<ul>\n<li><strong>\u5beb\u6b7b\u7684 API \u91d1\u9470\u8207\u91d1\u9470\u5c0d<\/strong>\uff1a\u5982 AWS Access Key\u3001GitHub Token\u3001Slack Webhook URL\u3001Google Map API \u91d1\u9470\u3002<\/li>\n<li><strong>\u914d\u7f6e\u6a94\u6d29\u6f0f<\/strong>\uff1a\u5305\u542b\u8cc7\u6599\u5eab IP\u3001\u5e33\u865f\u3001\u5bc6\u78bc\u3002<\/li>\n<li><strong>\u5be6\u6230\u641c\u5c0b Dorking<\/strong>\uff1a<br \/>\n  <code>site:pastebin.com OR site:controlc.com \"API_KEY\" OR \"password\" \"example.com\"<\/code><\/li>\n<\/ul>\n<hr \/>\n<h3 id=\"62-breach-compilations\">6.2 \u5916\u6d29\u8cc7\u6599\u5eab (Breach Compilations) \u5728\u7d05\u968a\u6f14\u7df4\u4e2d\u7684\u61c9\u7528<\/h3>\n<p>\u7576\u7d05\u968a\uff08Red Team\uff09\u5c0d\u4f01\u696d\u9032\u884c\u6388\u6b0a\u7684\u6a21\u64ec\u653b\u64ca\u6642\uff0cOSINT \u662f\u6700\u521d\u7684\u300c\u5075\u5bdf\u968e\u6bb5\u300d\u3002<\/p>\n<pre><code>\u5916\u6d29\u8cc7\u6599\u5eab \u2500\u2500&gt; \u63d0\u53d6\u76ee\u6a19\u4f01\u696d\u54e1\u5de5\u7684 Email \u2500\u2500&gt; \u5206\u6790\u5176\u6b77\u53f2\u6d29\u6f0f\u5bc6\u78bc\n                                               \u2502\n                                               \u25bc\n                                      \u5224\u65b7\u5bc6\u78bc\u8a2d\u5b9a\u908f\u8f2f\n                               (\u4f8b\u5982\uff1aCompanyName2026!)\n                                               \u2502\n                                               \u25bc\n                                      \u9032\u884c\u5bc6\u78bc\u5674\u7051\u653b\u64ca\n                                  (Credential Spraying)\n<\/code><\/pre>\n<ul>\n<li><strong>\u5bc6\u78bc\u7fd2\u6163\u5206\u6790<\/strong>\uff1a\u99ed\u5ba2\u5718\u9ad4\u6703\u5c07\u591a\u6b21\u5916\u6d29\u7684\u8cc7\u6599\u6574\u5408\uff0c\u53bb\u91cd\u6574\u5408\u6210\u8d85\u5927\u578b\u8cc7\u6599\u5eab\uff08\u4f8b\u5982 COMB, Compilation of Many Breaches\uff0c\u5167\u542b\u6578\u5341\u5104\u689d\u6191\u8b49\uff09\u3002\u5982\u679c\u7d05\u968a\u4eba\u54e1\u67e5\u5230\u76ee\u6a19\u4f01\u696d\u67d0\u4f4d\u9ad8\u968e\u4e3b\u7ba1\uff0c\u5176\u79c1\u4eba\u7684 Gmail \u66fe\u51fa\u73fe\u5728\u5916\u6d29\u8cc7\u6599\u5eab\u4e2d\uff0c\u4e14\u7576\u6642\u6d29\u6f0f\u7684\u5bc6\u78bc\u662f <code>Peter1985!<\/code>\u3002<\/li>\n<li><strong>\u63a8\u5c0e\u5bc6\u78bc\u908f\u8f2f<\/strong>\uff1a\u7531\u6b64\u53ef\u63a8\u6e2c\u8a72\u4e3b\u7ba1\u7684\u5bc6\u78bc\u8a2d\u5b9a\u908f\u8f2f\u70ba <code>[\u82f1\u6587\u540d][\u897f\u5143\u751f\u65e5][\u7b26\u865f]<\/code>\u3002\u7d05\u968a\u5373\u53ef\u5617\u8a66\u4ee5 <code>Peter2026!<\/code> \u6216 <code>Company2026!<\/code>\uff0c\u5c0d\u8a72\u4f01\u696d\u7684\u4f01\u696d VPN\u3001Outlook Web App (OWA) \u9032\u884c\u5617\u8a66\u3002\u9019\u7a2e\u91dd\u5c0d\u6027\u7684\u5bc6\u78bc\u5674\u7051\uff0c\u6210\u529f\u7387\u6975\u9ad8\u3002<\/li>\n<\/ul>\n<hr \/>\n<h3 id=\"63-maltego\">6.3 \u8996\u89ba\u5316\u95dc\u806f\u5de5\u5177\uff1aMaltego<\/h3>\n<p>\u7576\u8abf\u67e5\u9032\u884c\u5230\u4e2d\u5f8c\u671f\uff0c\u6536\u96c6\u5230\u7684\u8cc7\u6599\u5f80\u5f80\u6975\u70ba\u9f90\u5927\u4e14\u96dc\u4e82\uff08\u5305\u542b\u5e7e\u5341\u500b IP\u3001Email\u3001\u793e\u7fa4\u5e33\u865f\u3001\u96fb\u8a71\u3001\u57df\u540d\uff09\u3002\u50c5\u7528 Excel \u8868\u683c\u5f88\u96e3\u770b\u51fa\u96b1\u85cf\u7684\u95dc\u806f\uff0c\u9019\u6642\u5c31\u9700\u8981 <strong>Maltego<\/strong> \u9019\u985e\u7684\u60c5\u5831\u8996\u89ba\u5316\u5de5\u5177\u3002<\/p>\n<h4 id=\"maltego\">Maltego \u7684\u6838\u5fc3\u6a5f\u5236<\/h4>\n<ol>\n<li><strong>\u5be6\u9ad4 (Entities)<\/strong>\uff1a\u5728 Maltego \u7684\u756b\u5e03\u4e0a\uff0c\u6bcf\u4e00\u500b\u7bc0\u9ede\u90fd\u662f\u4e00\u500b\u5be6\u9ad4\u3002\u5be6\u9ad4\u6709\u4e0d\u540c\u7684\u985e\u578b\uff0c\u4f8b\u5982\uff1a<code>Person<\/code>\uff08\u4eba\uff09\u3001<code>Email Address<\/code>\uff08\u4fe1\u7bb1\uff09\u3001<code>Domain<\/code>\uff08\u57df\u540d\uff09\u3001<code>IPv4 Address<\/code>\uff08IP\uff09\u3002<\/li>\n<li><strong>\u8f49\u63db\u5668 (Transforms)<\/strong>\uff1a\u9019\u662f Maltego \u7684\u9748\u9b42\u3002\u8f49\u63db\u5668\u662f\u5c01\u88dd\u597d\u7684 API \u8173\u672c\uff0c\u80fd\u5c07\u4e00\u500b\u5be6\u9ad4\u4f5c\u70ba\u8f38\u5165\uff0c\u67e5\u8a62\u5916\u90e8\u8cc7\u6599\u5eab\uff0c\u4e26\u5c07\u7d50\u679c\u8f38\u51fa\u70ba\u65b0\u7684\u5be6\u9ad4\u3002<\/li>\n<li><em>\u4f8b\u5982\uff1a\u9078\u64c7\u4e00\u500b <code>Domain<\/code> \u5be6\u9ad4\uff0c\u9ede\u64ca\u57f7\u884c <code>To IP Address [DNS]<\/code> \u8f49\u63db\u5668\uff0cMaltego \u6703\u81ea\u52d5\u89e3\u6790 DNS \u4e26\u5728\u756b\u5e03\u4e0a\u756b\u51fa\u5176\u95dc\u806f\u7684 <code>IPv4 Address<\/code> \u5be6\u9ad4\u3002<\/em><\/li>\n<li><strong>\u60c5\u5831\u5730\u5716 (Intelligence Map)<\/strong>\uff1a\u900f\u904e\u4e0d\u65b7\u57f7\u884c Transforms\uff0c\u756b\u5e03\u4e0a\u6703\u5f62\u6210\u8907\u96dc\u7684\u8718\u86db\u7db2\u5716\u3002\u8abf\u67e5\u54e1\u5e38\u6703\u9a5a\u5947\u5730\u767c\u73fe\uff1a\u5169\u500b\u770b\u4f3c\u7121\u95dc\u7684\u8a50\u9a19\u7db2\u7ad9\uff0c\u80cc\u5f8c\u7adf\u7136\u6307\u5411\u540c\u4e00\u500b\u500b\u4eba\u7684 <code>Email Address<\/code>\uff0c\u6216\u662f\u4f7f\u7528\u540c\u4e00\u500b <code>AdSense<\/code> \u5ee3\u544a\u5e33\u865f ID\uff0c\u9019\u5c31\u662f\u8996\u89ba\u5316\u60c5\u5831\u7684\u529b\u91cf\u3002<\/li>\n<\/ol>\n<hr \/>\n<h2 id=\"osint_2\">\u7d50\u8a9e\uff1aOSINT \u8abf\u67e5\u54e1\u7684\u9ec3\u91d1\u6cd5\u5247<\/h2>\n<ol>\n<li><strong>\u4e0d\u8981\u53ea\u4f9d\u8cf4\u55ae\u4e00\u5de5\u5177<\/strong>\uff1a\u5de5\u5177\u6703\u5931\u6548\u3001\u7db2\u7ad9\u6703\u95dc\u9589\uff0c\u4f46\u8abf\u67e5\u7684<strong>\u63a8\u7406\u908f\u8f2f<\/strong>\u8207<strong>\u601d\u7dad\u6846\u67b6<\/strong>\u662f\u6c38\u6046\u7684\u3002<\/li>\n<li><strong>\u6c38\u9060\u4ea4\u53c9\u9a57\u8b49<\/strong>\uff1a\u958b\u6e90\u60c5\u5831\u4e2d\u5145\u6eff\u4e86\u507d\u9020\u7684\u8cc7\u8a0a\uff08\u4f8b\u5982\u523b\u610f\u5047\u9020\u7684 EXIF\u3001\u5192\u540d\u767b\u8a18\u7684 Whois\uff09\u3002\u81f3\u5c11\u8981\u5f9e\u5169\u500b\u4ee5\u4e0a\u7368\u7acb\u7684\u4f86\u6e90\u8b49\u5be6\u540c\u4e00\u689d\u7dda\u7d22\uff0c\u624d\u80fd\u5c07\u5176\u8996\u70ba\u53ef\u4fe1\u60c5\u5831\u3002<\/li>\n<li><strong>\u6ce8\u610f\u8abf\u67e5\u5b89\u5168 (OPSEC)<\/strong>\uff1a\u5728\u8abf\u67e5\u9ad8\u98a8\u96aa\u76ee\u6a19\u6642\uff0c\u7d55\u5c0d\u4e0d\u8981\u7528\u500b\u4eba\u7684\u771f\u5be6 IP \u76f4\u63a5\u8a2a\u554f\u76ee\u6a19\u7db2\u7ad9\u3002\u6bcf\u4e00\u6b21\u9ede\u64ca\uff0c\u90fd\u53ef\u80fd\u5728\u5c0d\u65b9\u7684\u4f3a\u670d\u5668\u65e5\u8a8c\u4e2d\u7559\u4e0b\u4f60\u7684\u75d5\u8de1\u3002\u4fdd\u8b77\u597d\u81ea\u5df1\uff0c\u624d\u80fd\u8d70\u5f97\u66f4\u9060\u3002<\/li>\n<\/ol>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u958b\u6e90\u60c5\u5831\u5be6\u6230\u6307\u5357\uff1a\u5f9e\u96f6\u958b\u59cb\u638c\u63e1 OSINT \u6838\u5fc3\u6280\u80fd \u26a0\ufe0f \u91cd\u8981\u514d\u8cac\u8072\u660e\u8207\u6cd5\u5f8b\u898f\u7bc4\uff1a > **\u514d\u8cac\u8072\u660e\u8207\u6cd5\u5f8b\u898f&#8230;<\/p>\n","protected":false},"author":1,"featured_media":5308,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23],"tags":[24,27,29,26,25,28],"class_list":["post-5309","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-23","tag-osint","tag-socmint","tag-29","tag-26","tag-25","tag-28"],"_links":{"self":[{"href":"https:\/\/blog.smallken.site\/index.php?rest_route=\/wp\/v2\/posts\/5309","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.smallken.site\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.smallken.site\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.smallken.site\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.smallken.site\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5309"}],"version-history":[{"count":0,"href":"https:\/\/blog.smallken.site\/index.php?rest_route=\/wp\/v2\/posts\/5309\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.smallken.site\/index.php?rest_route=\/wp\/v2\/media\/5308"}],"wp:attachment":[{"href":"https:\/\/blog.smallken.site\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5309"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.smallken.site\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5309"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.smallken.site\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5309"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}