Hunter lets you find professional email addresses in seconds and connect with the people that matter for your business.
Link:https://hunter.io/
Scrapes Linkedin User Data
Link: https://github.com/joeyism/linkedin_scraper
Phonebook lists all domains, email addresses, or URLs for the given input domain. Wildcards such as *.gov.uk are allowed.
Link: https://phonebook.cz
TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts
Link: https://github.com/Flangvik/TeamFiltration
Tools like Foca or PowerMeta can be used to search for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed and be used to extract usernames, brand style and sensitive data.
Tools: