Threat Agent – A must have for penetration testers

Being in the security industry, we are always looking for ways to improve how we do things and automate large portions of our manual tasks. Every once in awhile there’s a great idea that someone in the industry comes up with and Marcus Carey has one of them with threatagent.com. The TrustedSec team was given advanced access to the platform and we were blown away at how fast we could pull information about our customers in a fast and simplistic manner.

As penetration testers, most of our focus relies on the exploitation and post exploitation phase however, a large portion should really focus on the open source intelligence gathering and finding information out about the company. This is where ThreatAgent makes a number of manual tasks much more automated and even better. It’s extremely simple to use, fast, and allows you to gain a wicked amount of data from a company extremely quickly.

The first step, enter the company name, domain name, and hit go. The drone collects all of the information about the company in less than five minutes:

From there, the information is readily available to you in the main dashboard:

It has information about the company, employees of the company, email address schemas, whois information and much more. It provides an entire report that has everything about the company.

Some useful features, it combs common websites such as social media sites, professional sites looking for names, identifies the naming scheme of the company, and uses that information to build large email lists of the company. It also geo locates the areas of IP addresses and where they are located at.

Overall, it’s a great way to learn about your company in a few easy steps and something that we recommend here at TrustedSec. Nice work Marcus on ThreatAgent, extremely impressive.

Head over to https://www.threatagent.com to register for your free account, it’s worth it.

David Kennedy

Author: David Kennedy

Security expert, keynote speaker, avid gamer and the go-to for protecting companies from threats.